last executing test programs:

16.685449917s ago: executing program 4 (id=570):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', 0x0})
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000001040101000000f910ffffff02000004cbd5cdb4000600000a00020000000009000000000600064000f300000a000200000000040200000008000340000000020800034000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x881, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000d, 0x4008032, 0xffffffffffffffff, 0x0)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000014c0)={0xffff, 0x9, 0xa, 0xf7cf})
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="49483ea3", 0x4}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
memfd_create(&(0x7f0000001980)='\x00', 0x4)
socket$netlink(0x10, 0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='smaps_rollup\x00')
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
readv(r2, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/101, 0x65}, {&(0x7f0000000980)=""/18, 0x12}, {&(0x7f0000000a80)=""/7, 0x7}], 0x3)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES16=r2], 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r4, 0x0, 0x0)
syz_open_dev$dri(&(0x7f00000009c0), 0x200, 0x44102)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x1)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604110, &(0x7f0000000380)={0x0, [[0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0xfbf1a000, 0x8000], [0x7fff]], '\x00', [{0x0, 0x9}, {0x0, 0xa}, {0x0, 0x1efb660a}, {}, {0x1}, {}, {}, {0x0, 0x9}], '\x00', 0x3f9, 0x0, 0x0, 0x0, 0x0, 0x2})

13.468849463s ago: executing program 4 (id=586):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r2, 0x358, 0xffff8880b870dfff)
ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000140)={&(0x7f0000000380)=""/237, 0xed})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000020"], 0x40)
r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x84400)
r7 = socket(0x2, 0x80805, 0x0)
setsockopt(r7, 0x84, 0x80, &(0x7f0000000000)="f89fcfb587a4792b", 0x8)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}})
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r10, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x100000, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r10, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x200a, {0xe, 0xcbff, 0x0, {0x5, 0xfffffffffffffff9, 0x1, 0x1af3, 0x80000000a, 0x80000006, 0x5, 0x8, 0x1003, 0x1000, 0xff, 0xffffffffffffffff, 0x0, 0x800003, 0x1c00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000180), 0x7fff, 0x800)

10.891487083s ago: executing program 4 (id=594):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0x40025b0c, &(0x7f0000000040))
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random="8dffffff0600"})
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r6 = socket(0x80000000000000a, 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="353c2b1db9da5aa11cb5fbc2e660cd43f793b06faf17997d22"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
sendto$inet6(r7, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c14"], 0x30}}, 0x0)
mmap(&(0x7f000090a000/0x4000)=nil, 0x4000, 0x1000006, 0x100010, 0xffffffffffffffff, 0x71fb9000)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r5)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000026000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x68, 0x0, 0x24})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

9.850701639s ago: executing program 0 (id=595):
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1010400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r1, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xe, 0x34}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4801) (async)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000004, 0x20010, r3, 0xda508000) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0)
sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x13c, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1e3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe15e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcd6c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x40810)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x17}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c800}, 0x7c6dec973da4ba1f)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vxcan0\x00', <r6=>0x0})
connect$can_j1939(r0, &(0x7f0000000680)={0x1d, r6, 0x2, {0x0, 0xf0, 0x1}, 0xff}, 0x18)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x48000) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000800), r0)
sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x400080c0}, 0x8000) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000900)={'pimreg1\x00', @multicast}) (async)
r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r3, 0x8000000)
r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x100010, r3, 0x10000000)
syz_io_uring_submit(r9, r10, &(0x7f0000001940)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x42, 0x0, r3, 0x0, &(0x7f0000000940)="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", 0x1000, 0x40000063, 0x1})
r11 = getpgid(0xffffffffffffffff) (async)
fcntl$getownex(r0, 0x10, &(0x7f0000001980)={0x0, <r12=>0x0}) (async)
r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0)
kcmp(r11, r12, 0x3, r13, r3)
ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000003c80)={{}, {0xfffffffffffffffc}, 0x14, 0x0, 0x0, &(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)="d09d4f94cf73358f382b7422047c36bde6d1aa2ca5d3018dc223b6f8327246501f48e4287545e2a56480524ba034b4495385f466ad3b06580cd85a02ac609e4146e7dd40cac08197f8b7a76fc797403a8b6adf30b70de91d913c0eb2fd22b84cb8ae906155dddacbcc947313fc519c86fc33a8eb05f5617fcf358c4ce95343a7356235d0405d225b8ef807ece464cf76fa0505d17cd75c958635b3fe05adc3da4ce8cf02b5da497f7ede85c08df1448c476ae91aa5ca7553ae70a2f68026134bff0e76e80246d6f933d90489548060e46da1794261b456470db232dfe5e0f8", 0xdf, 0x0, &(0x7f0000001b80)={0x2, 0x10d8, {0x1, 0xc, 0x1000, "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", 0xcb, "cf2889dddbf3cd402170d832388684b7c7f67bcae0469c41d9d9702624d6c728b7cfc8747983a6427d5a1342ece1e3b4a193cb5a8e90f53c27fad2de50a39ce5cd412fe2e063492ff2a16d54c6404e2c68ee26bede04ff61570e93c0ea8990527e9ebf7a50d9b8070d933f95825b3bc4a69f09924456406db5d35f4c4d94d4b251c67f50562e98d5df897e571ccbd5ca1d74669dc4068cc4a039ac5910bbdbeeaee671c8a5ce46c06c6752100f2ffbdffc871f211f64c2abda7763446ec12993e45898fffde2fc51678fb9"}, 0x1000, "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"}, 0x20e4})
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000003d00)={0x3, 0x0, [{0x80000000, 0x3, 0x4, 0x9, 0xffffffff, 0x80000000, 0xffffffff}, {0xc0000001, 0x2, 0x6, 0x4c984d42, 0x9, 0x4c3, 0x4}, {0xb, 0x1, 0x6, 0x2, 0x2, 0x8001, 0x7}]}) (async)
r14 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r14, 0x6, 0x1c, &(0x7f0000003d80)=""/106, &(0x7f0000003e00)=0x6a) (async)
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000003e40)) (async)
pwritev(0xffffffffffffffff, &(0x7f0000004200)=[{&(0x7f0000003ec0)="916755e6fd8255a0d31f48849fb18fd1c76db30980b41c59666409286ac62a64f4bce58f0a5ea50a771f899520a1c0d48a2110d4cf63521d19c5246f87feaeb6d50f8e8cd05c802372e33f502abff0f091ad57db473333a0aa1bb2b0d76fb2c5cc2bc976c8bb710dfa95646066f1579e8c35bc65dadcc968756cb9db8ae6a9141af4bc27d101618ea61c470fba5cc080449c7c55ccbf6f5f4f610b1846d294ab2980163afaa14a27e7a45936de0641fb9f65a1741056b05d017c1acb437b1e7e39bc7bad464056da0aef23cf2294e3c1bc6be077bd2a7553dd6d1cb108a7c2240a", 0xe1}, {&(0x7f0000003fc0)="cf4c4d89d66ec77e485f4c39d1e3ece7bebec849f190fde85f194930667ff0232b5e9c735d0c3849f391aa81a5c51222504aea356c055bd0b711f1d5eb1b9cbbe9f3d0e6ad83cea238a250661f884cf66cfc6b046c85969cd2bc518f30536d85ae5730e47c2996344db7217822179156c48e25034da7ba6485daa678b6a275febb3c137275b7dc4c", 0x88}, {&(0x7f0000004080)="292d3ac0dba72f8ba65fbddc8e5086bc12a5d082fbee5a66e3df9e831a8663c2292a70f1708b5785eeff6f771d59ac51de1f8eded118d64c704eb2c96a0f715e5af5ed3178093db7bc7fe000bf37f3fc61fe01a9e724c6fbe65fc9dc6eed", 0x5e}, {&(0x7f0000004100)="2899e406a948f9cfcb498a8c28ca6b693c918908d270627e10c8f967bee1ab4cedd4cb41788f2b403c09512fd56cd387dc4f1ff77c5d499301081172a6fa0807d66d7b0aa515401fc48b4c2bf980f5849d20530005a912ff5278398d47e07b4d145919bd2e3f", 0x66}, {&(0x7f0000004180)="0c2acc9b8261624eaa2ce42e79b1cf408f0a2682d4fcb8c7e8e74d2b523b0c94328b76819b98b3e077fe8fd91a2ff823952b5a1614ab6ee56aabf5b2d7967ad67fe046133d3852e613c9cb394c3903c5e853fd2f115b4734b5a5515e40777fa9040e0a18351a", 0x66}], 0x5, 0x0, 0x5)

9.36388248s ago: executing program 0 (id=597):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0x40025b0c, &(0x7f0000000040))
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random="8dffffff0600"})
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r6 = socket(0x80000000000000a, 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="353c2b1db9da5aa11cb5fbc2e660cd43f793b06faf17997d22"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
sendto$inet6(r7, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c14"], 0x30}}, 0x0)
mmap(&(0x7f000090a000/0x4000)=nil, 0x4000, 0x1000006, 0x100010, 0xffffffffffffffff, 0x71fb9000)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r5)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000026000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x68, 0x0, 0x24})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

6.764964975s ago: executing program 1 (id=603):
syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d5700420fd0b1401be0401020301090224000100000000090459000226a95d000905820240003c081519050a00ff03bf0301"], 0x0)

6.763033248s ago: executing program 4 (id=604):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES8=r2, @ANYRES16=r1, @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0c00990000000000150600000000000000000000060036002b000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x80)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
r5 = syz_io_uring_setup(0x235, &(0x7f0000000580)={0x0, 0x10008cc8, 0x10100, 0x10000002, 0x75}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1})
io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000231a05001c001280f8ff0100626f6e64000000000c00028008001c0009000000d5320bdad8f27937908e4637453445bf39741eb4943930b5b6887c7be4173c241ab5ee68efb619b5d99b249889fa42d595b3ccd83ca11134cece4ea7b1d0c1910e33bbf558b6a3d19f9c3a62fd2f5473950bd88f66f592630784"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073397a5f74756e00df09b505c000000000000000003c0003800400010034000380280001800800010000000000090002005449504300779e0000000100ffff00000800010000bc16922f20b10000000800018004000300"], 0x68}}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r11)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$unix(0x1, 0x1, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000340)={@private2={0xfc, 0x2, '\x00', 0x1}, r15}, 0x14)
sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
shutdown(r3, 0x1)

6.249551403s ago: executing program 3 (id=607):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0xffffffffffffffb4)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64)
recvmmsg(r1, &(0x7f0000000980)=[{{&(0x7f0000000300)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000240), 0x62, &(0x7f0000000680)=""/125, 0x7d}}, {{&(0x7f0000000700)=@ax25={{0x3, @default}, [@null, @remote, @default, @null, @netrom, @default, @remote, @null]}, 0x80, &(0x7f0000000900), 0x0, &(0x7f0000000940)=""/4, 0x4}, 0x4}], 0x2, 0x0, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
sched_setattr(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) (async, rerun: 64)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (rerun: 64)
sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) (async, rerun: 64)
close(0x3) (async, rerun: 64)
r4 = fanotify_init(0x200, 0x0)
r5 = memfd_create(&(0x7f00000003c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00My0:\xc3\xad&\xbe\xa4\xd8\x9b\x96@r\x8c\xdc\xc0/j\x8f\x01(p\xbf\x9f\x8c=Q\x06\xa2\x99\xb7\x03?\xebX\xa6\x9d\x8e\xee\x16\xb7Zg\x87\xa3\x93mrEn\xda\xb7\xa1I#\x9eT\xab;\x16\x86\xed[\f\xf2P\x06\x8cjL\x12_0$ \x97)\xaf\x9b3\x06A\xa6A\xca\xd7\xcd\x02R\x8d\xe7\xcd\xee\x96\xac\x16\x0f\x1a\xfc\xca\x15\xf6`V\xa7\xe2R\x9e\xe3\xb4:\xadr\xd1>>*\xac\xabHt\xe3\xbf', 0x5)
r6 = dup(r5) (async, rerun: 32)
open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) (rerun: 32)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r7, 0x402, 0x36) (async)
fanotify_mark(r4, 0x1, 0x48001059, r6, 0x0) (async)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) (async, rerun: 64)
keyctl$read(0xb, 0x0, &(0x7f0000002300)=""/4101, 0x1005) (async, rerun: 64)
r8 = socket$inet6(0xa, 0x3, 0x0)
r9 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) (async)
setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)

6.125874188s ago: executing program 0 (id=608):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000300)={0x2, @win={{0x5, 0x6, 0x46, 0x1}, 0x5, 0x5, 0x0, 0xfffffeff, 0x0, 0x60}})
munmap(&(0x7f00004e7000/0x1000)=nil, 0x1000)
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r6, 0x0, 0x0)
bind$inet(r6, 0x0, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffff)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x12)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a4, &(0x7f0000000000)={{@any, 0xffffffff}, @hyper, 0x0, 0x0, 0x4000000f8, 0x9, 0x0, 0x4000000, 0x7})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000306b240c50f27128eda0102030109021200010000000009"], 0x0)

6.020096521s ago: executing program 3 (id=609):
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
preadv2(r3, 0x0, 0x0, 0x8, 0x0, 0x31)

5.810540158s ago: executing program 2 (id=610):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0xff7f}}, 0x20}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00a1ff0012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7, @ANYBLOB="e30fd803b3ff1ce920edc2f673037375923f8a53d42de196094d2265e778fb69631a72270d9b1f"], 0x3c}}, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000280)='1', 0x1)
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r9, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
capset(0x0, &(0x7f0000000040)={0x0, 0x6c7, 0x0, 0x8a, 0x7, 0x40})

5.050775261s ago: executing program 1 (id=611):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r2, 0x358, 0xffff8880b870dfff)
ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000140)={&(0x7f0000000380)=""/237, 0xed})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000020"], 0x40)
r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x84400)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="f89fcfb587a4792b", 0x8)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}})
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r9, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x100000, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r9, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x200a, {0xe, 0xcbff, 0x0, {0x5, 0xfffffffffffffff9, 0x1, 0x1af3, 0x80000000a, 0x80000006, 0x5, 0x8, 0x1003, 0x1000, 0xff, 0xffffffffffffffff, 0x0, 0x800003, 0x1c00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000180), 0x7fff, 0x800)

3.842999321s ago: executing program 4 (id=612):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1})
io_uring_enter(r2, 0x47b9, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x480)
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
getresgid(&(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000400), &(0x7f0000000440))
read$FUSE(0xffffffffffffffff, &(0x7f0000001900)={0x2020, 0x0, 0x0, <r8=>0x0}, 0x2020)
write$P9_RSTATu(r5, &(0x7f0000000580)={0x50, 0x7d, 0x1, {{0x0, 0x3a, 0xc8e, 0x3eba, {0x80, 0x0, 0x6}, 0x1000000, 0x6, 0x0, 0x7f, 0x4, '&}%$', 0x1, '\x00', 0x1, ')', 0x1, '-'}, 0x1, '\x00', r6, r7, r8}}, 0x50)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r9, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000380)=r1, 0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async)
eventfd(0xffffffff) (async)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async)
syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080), &(0x7f00000001c0)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) (async)
io_uring_enter(r2, 0x47b9, 0x0, 0x0, 0x0, 0x0) (async)
pipe2$9p(&(0x7f0000000040), 0x480) (async)
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) (async)
getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000001900)={0x2020}, 0x2020) (async)
write$P9_RSTATu(r5, &(0x7f0000000580)={0x50, 0x7d, 0x1, {{0x0, 0x3a, 0xc8e, 0x3eba, {0x80, 0x0, 0x6}, 0x1000000, 0x6, 0x0, 0x7f, 0x4, '&}%$', 0x1, '\x00', 0x1, ')', 0x1, '-'}, 0x1, '\x00', r6, r7, r8}}, 0x50) (async)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async)
ioctl$USBDEVFS_SUBMITURB(r9, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) (async)
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000380)=r1, 0x1) (async)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async)

3.783946721s ago: executing program 3 (id=613):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
r0 = socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
fcntl$getown(r3, 0x9)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
connect$tipc(r4, &(0x7f0000000300)=@name={0x1e, 0x2, 0x3, {{}, 0x44}}, 0x10)
r5 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r5, r6, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3})
r7 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r9 = getpgid(0x0)
kcmp(r9, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0)
syz_io_uring_setup(0x304, 0x0, 0x0, 0x0)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x2b, 0x3}})

3.508742949s ago: executing program 4 (id=614):
syz_open_dev$vim2m(0x0, 0x7, 0x2)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001a00f222000010000400000080000003"], 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESTOP(r4, 0x1275, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0xffffffdd, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa})

3.179700879s ago: executing program 2 (id=615):
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x401, 0x45}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x200400c4)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000400000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000078ef00000000000000000000000000000000000000000000000000000000000084010500ac1414aa0000000000000000000000000000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

3.104005307s ago: executing program 2 (id=616):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0xff7f}}, 0x20}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00efff0012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7, @ANYBLOB="e30fd803b3ff1ce920edc2f673037375923f8a53d42de196094d2265e778fb69631a72270d9b1f"], 0x3c}}, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000280)='1', 0x1)
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r9, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
capset(0x0, &(0x7f0000000040)={0x0, 0x6c7, 0x0, 0x8a, 0x7, 0x40})

2.373026748s ago: executing program 1 (id=617):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x2, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0xfdfe64c632bf9ce0, 0x0, 0x0})
syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140), &(0x7f00000001c0)) (async)
syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket(0x200000000000011, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'sit0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000080)={0x11, 0x17, r4, 0x1, 0x2, 0x6, @remote}, 0x14)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0})
accept4$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x80800) (async)
accept4$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x80800)
syz_usb_connect(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="120101023253262024040899382e0102030109022d0001813c20000904f9f7038803d90109050802000206080709058102200009060709050a7aa4"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
bind$alg(r7, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r8 = accept$alg(r7, 0x0, 0x0)
sendmsg$alg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async)
sendmsg$alg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r8, &(0x7f0000000600), 0xfec8)
recvmmsg(r8, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000b40)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f0000000780)=""/218, 0xda}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/188, 0xbc}, {&(0x7f00000009c0)=""/111, 0x6f}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000000a40)=""/239, 0xef}], 0x4, &(0x7f0000000880)=""/24, 0x18}, 0x4}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})
r9 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc))
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
socket$inet6_sctp(0xa, 0x801, 0x84)

2.150957804s ago: executing program 2 (id=618):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x10000})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/image_size', 0xa000, 0xe0)
getpeername$netlink(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0)

2.015801969s ago: executing program 0 (id=619):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
ppoll(&(0x7f0000000240)=[{r0, 0x2280}], 0x1, 0x0, 0x0, 0x0) (async)
write$P9_RSTATu(r0, &(0x7f0000000280)={0x28c, 0x2, 0x0, {{0x500, 0x14b, 0x0, 0x5, {0x0, 0x2}, 0x3810000, 0x0, 0x0, 0x7, 0x1b, '\x04nod\xff\x01{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, '\xc6GtZ\xc8YR\xbf\xe0\xb0pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4', 0x70, '\n1\x82w\xd8v\x14n[\xdb9r\x13\x8fH\xf7s\xa5\xdfWrq\x149\xf5\xbc|q\xa1rF\xa8\x80\xe9\xc5h\xb0opE\r\xe1Lk\xc7\x7f#\xc1R\xf1\v\xa2\xbe\"W\x10}\x9a\x8b\x1e\xd7Q\x8dx\xc6F\xd9\"\xab\x1dq\"C-;\xb8kN\x80\x9fh+8]\x85G(g\x92\x02l\xb8Y\xba8M\nZ\x9c\x0e\xf0\xb8\xe5U\x19\xa9\xde\x03\xfb\xf2\xf4\x93', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xee01, 0xee01}}, 0x28c)

1.772103058s ago: executing program 3 (id=620):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x8000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.63591411s ago: executing program 3 (id=621):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
socket(0x2b, 0x80801, 0x1)
r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100), 0x1, 0x40, 0x1})
io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRESOCT=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @empty, 0x5}, {0xa, 0x0, 0x2000000, @loopback, 0x20000}}}, 0x48)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)

1.090222229s ago: executing program 0 (id=622):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0xf, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x4000000, 0x6, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000}, 0x0)

917.59325ms ago: executing program 1 (id=623):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180330002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0)

848.387241ms ago: executing program 0 (id=624):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b\xa30\\o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=<r3=>0x0)
capset(&(0x7f0000000100)={0x19980330, r3}, &(0x7f0000000040)={0x3fe, 0x1, 0x0, 0x0, 0x7, 0xfffff2db})
sched_setattr(0x0, 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000a40), 0x6, 0x98000)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000000)={0x0, 0xe1d, &(0x7f0000019600)=""/4096})
syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xffffffeb, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, {[@window={0x3, 0x0, 0xb}, @mss={0x2, 0x4, 0x1}]}}}}}}}, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000340)={0x80})
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(0x0, 0x2000, 0x0)
listen(r5, 0xda90)
accept4(r5, 0x0, 0x0, 0x80000)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
syz_io_uring_setup(0x37ff, &(0x7f00000002c0)={0x0, 0x918d, 0x40, 0x2, 0x20b}, 0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12})
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x2b, @multicast2, 0x0, 0x2, 'wlc\x00', 0x6, 0x1, 0x3}, {@empty, 0x2, 0x2, 0x7, 0x0, 0x2}}, 0x44)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040))
unshare(0x62040200)

772.184667ms ago: executing program 2 (id=625):
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
preadv2(r3, 0x0, 0x0, 0x8, 0x0, 0x31)

616.401114ms ago: executing program 2 (id=626):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x7, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x48, 0x0, 0x100000005}, {0x8f4, 0x0, 0x7fffffffffffffff}]})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x4, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x3b, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x10000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]})
poll(&(0x7f0000000000)=[{r3, 0x8208}, {r1, 0x1000}], 0x2, 0x4b4e)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x7, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) (async)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x48, 0x0, 0x100000005}, {0x8f4, 0x0, 0x7fffffffffffffff}]}) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x4, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x3b, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x10000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) (async)
poll(&(0x7f0000000000)=[{r3, 0x8208}, {r1, 0x1000}], 0x2, 0x4b4e) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) (async)

527.692049ms ago: executing program 1 (id=627):
r0 = socket$kcm(0x2, 0x5, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0)
recvmmsg$unix(r0, &(0x7f0000002e00), 0x0, 0x0, &(0x7f0000002f40)={0x0, 0x989680})
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0xcff}, {0xffffffff, 0x0, 0x100000001, 0x7fff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0xd0)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) (fail_nth: 1)

439.998004ms ago: executing program 3 (id=628):
syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x2, 0x105}, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa3, 0x27, 0x17, 0x20, 0x2040, 0x651b, 0x295a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe8, 0x0, 0x0, 0x7c, 0x57, 0x7a}}]}}]}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0), 0x48)
socket$alg(0x26, 0x5, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f00000006000100000000ef08000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

0s ago: executing program 1 (id=629):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@expire={0x104, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {{{@in6=@loopback, @in=@multicast2, 0x4e21, 0x0, 0x4e24, 0xff, 0xa, 0xa0, 0x80}, {@in=@loopback, 0x4d2, 0x3c}, @in6=@remote, {0x65efe4f1, 0xfb, 0xf, 0x2000000000000000, 0xb2, 0x7fffffff, 0x135e, 0x7f}, {0x800, 0x4, 0xb562, 0x1}, {0x3, 0xfffffffe, 0xffffffff}, 0x70bd2b, 0x3502, 0xa, 0x3, 0x7, 0x9}, 0x79}, [@mark={0xc, 0x15, {0x35075d, 0xee2}}]}, 0x104}}, 0x20000000)
ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000001c0)={0x6, 0x100, "37bb2b39f1154d44375a7009553d8edf0b06fbdc9aa4ed2206d5b00f176c1b53", 0x8, 0x9, 0x8618, 0x8, 0x248})
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x34f9, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0r\x7f\x18X\x05Y\x98\x19\x00\x00\x00\x00@\x00\x00\x97\x97\x9c \xdc\x88u[I%c\xc8\x93\b\x9e\x87\x88\x80\x99\xe8\xaavc\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfbE%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0xdc, 0x0)
mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r5, 0x15b77000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000100)={r2}, 0x1)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0)

kernel console output (not intermixed with test programs):

13] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[   89.637985][  T918] usb 3-1: Using ep0 maxpacket: 32
[   89.718709][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.799639][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.031350][ T6193] openvswitch: netlink: Flow key attr not present in new flow.
[   90.118141][  T918] usb 3-1: unable to get BOS descriptor or descriptor too short
[   90.118162][ T6194] input: syz0 as /devices/virtual/input/input7
[   90.169822][  T918] usb 3-1: unable to read config index 0 descriptor/start: -71
[   90.192754][  T918] usb 3-1: can't read configurations, error -71
[   90.204689][ T5913] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[   90.261337][ T5913] em28xx 1-1:0.0: board has no eeprom
[   90.385220][ T6202] fuse: Unknown parameter 'user_id00000000000000000000'
[   90.800143][ T6210] netlink: 'syz.4.82': attribute type 10 has an invalid length.
[   90.812500][ T6210] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   91.409164][ T5913] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   91.451113][ T5913] em28xx 1-1:0.0: dvb set to bulk mode.
[   91.474948][   T24] em28xx 1-1:0.0: Binding DVB extension
[   91.582004][ T5913] usb 1-1: USB disconnect, device number 9
[   91.601913][ T5913] em28xx 1-1:0.0: Disconnecting em28xx
[   91.789619][   T24] em28xx 1-1:0.0: Registering input extension
[   91.796678][ T5913] em28xx 1-1:0.0: Closing input extension
[   91.831296][ T5913] em28xx 1-1:0.0: Freeing device
[   91.969511][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.85'.
[   93.146950][ T6236] netlink: 'syz.4.90': attribute type 4 has an invalid length.
[   93.207663][ T6237] netlink: 'syz.4.90': attribute type 4 has an invalid length.
[   93.663598][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.692539][ T5913] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   93.719940][ T6245] fuse: Bad value for 'fd'
[   93.781207][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.167961][ T6254] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   94.299086][  T918] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   94.538693][  T918] usb 4-1: Using ep0 maxpacket: 8
[   94.557413][ T5913] usb 2-1: device descriptor read/64, error -71
[   94.574285][  T918] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   94.622969][  T918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   94.662406][  T918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   94.697157][  T918] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   94.726172][  T918] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   94.749427][  T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.807417][ T5913] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   94.971803][ T6219] syz.2.84 (6219): drop_caches: 2
[   95.324928][ T5913] usb 2-1: Using ep0 maxpacket: 16
[   95.410619][  T918] usb 4-1: GET_CAPABILITIES returned 0
[   95.419387][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   95.450051][  T918] usbtmc 4-1:16.0: can't read capabilities
[   95.521656][ T5913] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   95.548426][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.625358][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.94'.
[   95.639643][ T5913] usb 2-1: Product: syz
[   95.648014][ T5913] usb 2-1: Manufacturer: syz
[   95.652636][ T5913] usb 2-1: SerialNumber: syz
[   95.670490][ T5913] usb 2-1: config 0 descriptor??
[   95.697690][ T5913] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   95.745241][ T5913] em28xx 2-1:0.0: DVB interface 0 found: bulk
[   96.081628][ T6272] capability: warning: `syz.0.101' uses 32-bit capabilities (legacy support in use)
[   96.365390][ T5913] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[   96.862470][ T5913] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[   97.223678][ T5913] em28xx 2-1:0.0: board has no eeprom
[   97.241294][ T5906] usb 4-1: USB disconnect, device number 4
[   97.599247][ T5913] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   97.687504][ T5913] em28xx 2-1:0.0: dvb set to bulk mode.
[   97.773193][   T24] em28xx 2-1:0.0: Binding DVB extension
[   97.797738][ T5913] usb 2-1: USB disconnect, device number 3
[   97.830909][ T6290] fuse: Bad value for 'fd'
[   97.844785][ T5913] em28xx 2-1:0.0: Disconnecting em28xx
[   97.952292][   T24] em28xx 2-1:0.0: Registering input extension
[   97.982869][ T5913] em28xx 2-1:0.0: Closing input extension
[   98.059793][ T5913] em28xx 2-1:0.0: Freeing device
[   98.306647][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'.
[   98.372544][ T6297] delete_channel: no stack
[   98.455434][ T6303] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   98.926661][ T6305] syz.2.109 (6305): drop_caches: 2
[   99.030339][ T6287] syz.3.104 (6287): drop_caches: 2
[   99.483764][ T6314] netdevsim netdevsim1: Direct firmware load for x failed with error -2
[   99.597190][ T6314] netdevsim netdevsim1: Falling back to sysfs fallback for: x
[  100.057931][ T5913] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  100.246494][ T5913] usb 5-1: Using ep0 maxpacket: 8
[  100.267524][  T918] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[  100.394119][ T5913] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  100.420431][ T5913] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  100.508007][ T5913] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  100.618909][  T918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  100.629179][ T5913] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  100.635979][  T918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.676251][ T5913] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  100.748502][  T918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  100.766640][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.817421][  T918] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00
[  100.977590][  T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.068064][  T918] usb 3-1: config 0 descriptor??
[  101.093938][ T5913] usb 5-1: GET_CAPABILITIES returned 0
[  101.102860][ T5913] usbtmc 5-1:16.0: can't read capabilities
[  101.182830][  T918] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10
[  101.218030][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  101.305481][ T6323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.113'.
[  101.322368][ T6310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.350245][ T6310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.397465][   T24] usb 4-1: Using ep0 maxpacket: 32
[  101.403937][ T5197] bcm5974 3-1:0.0: could not read from device
[  101.572201][  T918] usb 3-1: USB disconnect, device number 4
[  101.759596][   T24] usb 4-1: config 0 has an invalid interface number: 232 but max is 0
[  101.772127][   T24] usb 4-1: config 0 has no interface number 0
[  101.785835][   T24] usb 4-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a
[  101.801224][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.812773][   T24] usb 4-1: Product: syz
[  101.826965][   T24] usb 4-1: Manufacturer: syz
[  101.832138][   T24] usb 4-1: SerialNumber: syz
[  102.154482][   T24] usb 4-1: config 0 descriptor??
[  102.202139][ T5846] udevd[5846]: Error opening device "/dev/input/event4": No such file or directory
[  102.211673][ T5846] udevd[5846]: Unable to EVIOCGABS device "/dev/input/event4"
[  102.221008][ T5846] udevd[5846]: Unable to EVIOCGABS device "/dev/input/event4"
[  102.231239][ T5846] udevd[5846]: Unable to EVIOCGABS device "/dev/input/event4"
[  102.241859][ T5846] udevd[5846]: Unable to EVIOCGABS device "/dev/input/event4"
[  102.250986][ T5846] udevd[5846]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting.
[  102.339390][ T5212] udevd[5212]: worker [5846] terminated by signal 6 (Aborted)
[  102.347626][ T5212] udevd[5212]: worker [5846] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10/event4'
[  102.387626][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.115'.
[  102.599609][ T6328] vlan2: entered promiscuous mode
[  102.611230][ T6328] team0: entered promiscuous mode
[  102.631134][ T6328] team_slave_0: entered promiscuous mode
[  102.727613][ T6328] team_slave_1: entered promiscuous mode
[  102.836752][ T5906] usb 4-1: USB disconnect, device number 5
[  102.923913][   T24] usb 5-1: USB disconnect, device number 8
[  103.217958][ T5941] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  103.390045][ T5941] usb 1-1: device descriptor read/64, error -71
[  103.590481][ T6360] dummy0: entered promiscuous mode
[  103.601257][ T6360] macsec1: entered promiscuous mode
[  103.619250][ T6360] macsec1: entered allmulticast mode
[  103.637442][ T5941] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  103.641360][ T6360] dummy0: entered allmulticast mode
[  103.697037][ T6360] dummy0: left allmulticast mode
[  103.732237][ T6360] dummy0: left promiscuous mode
[  103.787528][ T5941] usb 1-1: device descriptor read/64, error -71
[  103.891436][ T6368] syz.4.128 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  103.927915][ T5941] usb usb1-port1: attempt power cycle
[  104.279288][  T918] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  104.293280][ T5941] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  104.318062][ T5941] usb 1-1: device descriptor read/8, error -71
[  104.512466][  T918] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  104.522357][ T5843] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  104.534607][  T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.577404][ T5941] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  104.591086][  T918] usb 3-1: config 0 descriptor??
[  104.643675][ T5941] usb 1-1: device descriptor read/8, error -71
[  104.737480][ T5843] usb 2-1: Using ep0 maxpacket: 8
[  104.747213][ T5843] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  104.758794][ T5941] usb usb1-port1: unable to enumerate USB device
[  104.766021][ T5843] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  104.777774][ T5843] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  104.787922][ T5843] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  104.801128][ T5843] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  104.810306][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.090337][  T918] ath6kl: Failed to submit usb control message: -71
[  105.097006][  T918] ath6kl: unable to send the bmi data to the device: -71
[  105.109466][ T5843] usb 2-1: GET_CAPABILITIES returned 0
[  105.140441][ T5843] usbtmc 2-1:16.0: can't read capabilities
[  105.151207][  T918] ath6kl: Unable to send get target info: -71
[  105.214293][  T918] ath6kl: Failed to init ath6kl core: -71
[  105.308935][  T918] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  105.518643][  T918] usb 3-1: USB disconnect, device number 5
[  105.543477][ T6378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.130'.
[  106.012752][  T918] IPVS: starting estimator thread 0...
[  106.189729][ T6400] IPVS: using max 50 ests per chain, 120000 per kthread
[  106.488154][  T918] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  106.548122][ T5941] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  106.710674][  T918] usb 1-1: config 0 has an invalid interface number: 3 but max is 0
[  106.719462][  T918] usb 1-1: config 0 has no interface number 0
[  106.731755][  T918] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0xD has an invalid bInterval 104, changing to 10
[  106.743388][  T918] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  106.760559][ T5941] usb 4-1: Using ep0 maxpacket: 8
[  106.773152][ T5941] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  106.784609][  T918] usb 1-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84
[  106.804792][ T5941] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  106.824235][  T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.838864][  T918] usb 1-1: Product: syz
[  106.843162][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.848552][ T6417] dummy0: entered promiscuous mode
[  106.861881][  T918] usb 1-1: Manufacturer: syz
[  106.871721][  T918] usb 1-1: SerialNumber: syz
[  106.895408][ T6417] macsec1: entered promiscuous mode
[  106.905064][ T6417] macsec1: entered allmulticast mode
[  106.914374][  T918] usb 1-1: config 0 descriptor??
[  106.919296][ T6417] dummy0: entered allmulticast mode
[  106.940668][ T6417] dummy0: left allmulticast mode
[  106.956725][ T6417] dummy0: left promiscuous mode
[  107.166783][  T918] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state.
[  107.176937][  T918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  107.191212][  T918] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB)
[  107.206564][  T918] usb 1-1: media controller created
[  107.249083][  T918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  107.458067][ T5843] usb 2-1: USB disconnect, device number 4
[  107.961997][  T918] DVB: Unable to find symbol dib7000p_attach()
[  107.969890][  T918] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB'
[  108.057508][  T918] rc_core: IR keymap rc-dib0700-rc5 not found
[  108.197276][  T918] Registered IR keymap rc-empty
[  108.218521][  T918] dvb-usb: could not initialize remote control.
[  108.225007][  T918] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected.
[  108.454681][ T6447] netlink: 64 bytes leftover after parsing attributes in process `syz.4.143'.
[  108.464727][ T6447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.143'.
[  109.328712][ T6455] fuse: Unknown parameter '0x0000000000000003'
[  109.336097][   T24] usb 4-1: USB disconnect, device number 6
[  109.416873][  T918] usb 1-1: USB disconnect, device number 14
[  109.592326][  T918] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected.
[  110.117458][  T918] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  110.175850][ T6472] dummy0: entered promiscuous mode
[  110.188822][ T6472] macsec1: entered promiscuous mode
[  110.197637][ T6472] macsec1: entered allmulticast mode
[  110.209375][ T6472] dummy0: entered allmulticast mode
[  110.233465][ T6472] dummy0: left allmulticast mode
[  110.253507][ T6472] dummy0: left promiscuous mode
[  110.292261][  T918] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  110.310047][  T918] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  110.322415][  T918] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  110.336253][  T918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  110.360286][  T918] usb 1-1: SerialNumber: syz
[  110.385561][  T918] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  110.453467][  T918] usb-storage 1-1:1.0: USB Mass Storage device detected
[  110.493279][  T918] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  110.534297][  T918] scsi host1: usb-storage 1-1:1.0
[  110.917665][  T918] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  110.925180][ T6486] usb usb7: usbfs: process 6486 (syz.4.155) did not claim interface 2 before use
[  111.067429][  T918] usb 2-1: Using ep0 maxpacket: 8
[  111.097093][  T918] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  111.107218][  T918] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  111.143561][  T918] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  111.180059][  T918] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  111.212868][  T918] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  111.223657][  T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.281997][ T6496] fuse: Unknown parameter '0x0000000000000003'
[  111.624185][  T918] usb 2-1: GET_CAPABILITIES returned 0
[  111.638103][  T918] usbtmc 2-1:16.0: can't read capabilities
[  111.767482][ T5906] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[  111.831462][ T6488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.154'.
[  111.856429][  T918] usb 1-1: USB disconnect, device number 15
[  111.871849][   T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  111.989499][ T5906] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  112.022626][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.046339][ T5906] usb 5-1: config 0 descriptor??
[  112.117401][   T24] usb 4-1: Using ep0 maxpacket: 8
[  112.128587][   T24] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  112.139166][   T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  112.154910][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.891640][  T918] IPVS: starting estimator thread 0...
[  112.987485][ T6514] IPVS: using max 27 ests per chain, 64800 per kthread
[  113.758846][ T6525] IPv6: addrconf: prefix option has invalid lifetime
[  113.816765][  T918] usb 2-1: USB disconnect, device number 5
[  114.270355][ T6535] fuse: Unknown parameter '0x0000000000000003'
[  114.508125][ T5913] usb 4-1: USB disconnect, device number 7
[  114.747565][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  114.880340][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  114.918940][   T24] usb 3-1: Using ep0 maxpacket: 16
[  114.983950][  T918] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  115.008059][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0
[  115.169145][   T24] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[  115.176054][  T918] usb 1-1: config 0 has no interfaces?
[  115.190455][  T918] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  115.200208][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  115.209218][  T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.210251][   T24] usb 3-1: config 0 has no interface number 0
[  115.239070][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffe0
[  115.317813][   T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2
[  115.327274][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.356143][  T918] usb 1-1: Product: syz
[  115.372430][   T24] usb 3-1: Product: syz
[  115.380498][  T918] usb 1-1: Manufacturer: syz
[  115.385227][   T24] usb 3-1: Manufacturer: syz
[  115.391506][   T24] usb 3-1: SerialNumber: syz
[  115.401313][  T918] usb 1-1: SerialNumber: syz
[  115.409311][   T24] usb 3-1: config 0 descriptor??
[  115.422025][   T24] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.69/input/input13
[  115.541965][  T918] usb 1-1: config 0 descriptor??
[  115.575466][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  115.628167][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  115.712969][ T6531] macvlan0: entered promiscuous mode
[  115.719314][ T6531] macvlan0: entered allmulticast mode
[  115.724976][ T6531] veth1_vlan: entered allmulticast mode
[  115.741883][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.759665][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.779515][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  115.861393][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  115.883202][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  115.916681][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  116.007795][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  116.020684][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  116.052375][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  116.097954][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  116.138847][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  116.159183][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  116.196339][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  116.284551][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  116.490575][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  116.657061][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  116.718704][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  116.820892][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  116.897415][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  116.929064][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  116.964203][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  116.976667][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  116.989251][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  117.003947][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  117.023985][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  117.049738][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  117.337741][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  117.416039][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  117.447004][ T5843] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  117.470833][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  117.500145][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  117.511465][  T918] usb 3-1: USB disconnect, device number 6
[  117.516649][ T5197] bcm5974 3-1:0.69: could not read from device
[  117.526343][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  117.568504][ T6463] bcm5974 3-1:0.69: could not read from device
[  117.584190][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  117.587895][ T5843] usb 2-1: device descriptor read/64, error -71
[  117.641168][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  117.702216][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  117.762801][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  117.814688][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  117.846939][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  117.849323][ T5941] usb 1-1: USB disconnect, device number 16
[  117.893258][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  117.898492][ T5843] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  117.937456][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  117.997049][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  118.067648][ T5843] usb 2-1: device descriptor read/64, error -71
[  118.084286][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  118.098727][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'.
[  118.148983][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  118.176337][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  118.177929][ T5843] usb usb2-port1: attempt power cycle
[  118.192995][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  118.214364][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  118.227532][ T5905] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  118.356355][ T6591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.183'.
[  118.384447][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  118.425439][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  118.438131][ T5905] usb 3-1: Using ep0 maxpacket: 8
[  118.475110][ T5905] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.500529][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  118.510666][   T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  118.520775][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.828426][ T6592] fuse: root generation should be zero
[  118.910482][ T5843] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  119.057576][ T5843] usb 2-1: device descriptor read/8, error -71
[  119.150647][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  119.162771][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.192417][ T5905] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  119.205810][   T24] usb 4-1: Using ep0 maxpacket: 8
[  119.211086][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.227042][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  119.238978][   T36] tipc: Subscription rejected, illegal request
[  119.246511][ T5905] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  119.257845][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.266558][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.280953][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.296913][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  119.307513][ T5843] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  119.317236][   T24] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  119.333281][   T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  119.379018][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.390125][ T5843] usb 2-1: device descriptor read/8, error -71
[  119.425164][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.473377][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.531058][ T5843] usb usb2-port1: unable to enumerate USB device
[  119.556308][ T5905] usb 3-1: GET_CAPABILITIES returned 0
[  119.566375][ T5905] usbtmc 3-1:16.0: can't read capabilities
[  119.598480][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  119.737631][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.784361][ T6604] geneve2: entered allmulticast mode
[  119.832756][ T6575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.177'.
[  119.878112][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.903729][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  119.915582][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.928814][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.943899][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  119.962596][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.976758][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.991359][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.023864][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.034667][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.049766][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.068912][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.104340][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.116096][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.133683][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.152931][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.164765][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.180487][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.196706][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.214252][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.227946][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.238962][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.249684][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.282497][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.298749][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.311676][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.451604][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.493036][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.516963][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.537656][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.595289][   T24] usb 4-1: USB disconnect, device number 8
[  120.875834][ T5906] asix 5-1:0.0 (unnamed net_device) (uninitialized): Could not register MDIO bus (err -5)
[  120.910718][ T5906] asix 5-1:0.0: probe with driver asix failed with error -5
[  120.961802][ T5906] usb 5-1: USB disconnect, device number 9
[  121.296766][ T5843] usb 3-1: USB disconnect, device number 7
[  122.037501][   T30] audit: type=1326 audit(1759220551.349:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6624 comm="syz.0.194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe05758eec9 code=0x0
[  122.281883][ T6632] mmap: syz.4.195 (6632) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  122.431683][ T5906] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  122.449390][ T6636] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  122.552664][ T6635] syz.1.196 (6635): drop_caches: 2
[  122.647396][ T5906] usb 1-1: Using ep0 maxpacket: 16
[  122.660708][ T5906] usb 1-1: config 252 has an invalid interface number: 15 but max is 0
[  122.681557][ T5906] usb 1-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config
[  122.707122][ T5906] usb 1-1: config 252 has no interface number 0
[  122.723659][ T5906] usb 1-1: config 252 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  122.744014][ T6640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.199'.
[  122.765753][ T5906] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  122.777074][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.791412][ T5906] usb 1-1: Product: syz
[  122.811117][ T5906] usb 1-1: Manufacturer: syz
[  122.819112][ T5906] usb 1-1: SerialNumber: syz
[  122.888001][ T6644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.201'.
[  123.277651][ T5941] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  123.589878][ T6664] openvswitch: netlink: Multiple metadata blocks provided
[  123.828122][ T6665] geneve2: entered allmulticast mode
[  124.277524][ T5941] usb 4-1: unable to get BOS descriptor or descriptor too short
[  124.444118][ T5941] usb 4-1: not running at top speed; connect to a high speed hub
[  124.462694][ T5941] usb 4-1: config 129 has an invalid interface number: 28 but max is 0
[  124.487417][ T5941] usb 4-1: config 129 has no interface number 0
[  124.524303][ T5941] usb 4-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  124.550719][ T5941] usb 4-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64
[  124.562219][ T5941] usb 4-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  124.575586][ T5941] usb 4-1: config 129 interface 28 has no altsetting 0
[  124.584814][ T5941] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57
[  124.594163][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.604032][ T5941] usb 4-1: Product: syz
[  124.609409][ T5941] usb 4-1: Manufacturer: syz
[  124.614100][ T5941] usb 4-1: SerialNumber: syz
[  124.623875][ T6648] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  124.883119][ T5941] etas_es58x 4-1:129.28: Starting syz syz (Serial Number syz)
[  124.958529][ T5941] etas_es58x 4-1:129.28: could not retrieve the product info string
[  125.081806][ T5906] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  125.083048][ T1097] usb 1-1: Failed to submit usb control message: -71
[  125.132408][ T5906] usb 1-1: USB disconnect, device number 17
[  125.137113][ T5941] usb 4-1: USB disconnect, device number 9
[  125.151163][ T1097] usb 1-1: unable to send the bmi data to the device: -71
[  125.160653][ T5941] etas_es58x 4-1:129.28: Disconnecting syz syz
[  125.168814][ T1097] usb 1-1: unable to get target info from device
[  125.179545][ T1097] usb 1-1: could not get target info (-71)
[  125.187858][ T1097] usb 1-1: could not probe fw (-71)
[  126.049183][ T6683] netlink: 16 bytes leftover after parsing attributes in process `syz.2.211'.
[  126.274537][ T6689] netlink: 'syz.0.212': attribute type 1 has an invalid length.
[  126.525262][ T6689] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.695503][ T6694] bond1: (slave geneve2): making interface the new active one
[  126.927870][ T6694] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  127.077101][ T6708] geneve2: entered allmulticast mode
[  128.000807][ T6721] netlink: 64 bytes leftover after parsing attributes in process `syz.0.219'.
[  128.009893][ T6721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.219'.
[  129.962984][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'.
[  130.149104][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.224'.
[  131.240381][ T6761] netlink: 'syz.2.223': attribute type 5 has an invalid length.
[  131.657717][   T30] audit: type=1800 audit(1759220560.969:4): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.223" name="file0" dev="fuse" ino=0 res=0 errno=0
[  132.430126][ T6791] netlink: 68 bytes leftover after parsing attributes in process `syz.3.235'.
[  132.836444][ T6798] geneve2: entered allmulticast mode
[  132.875240][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  132.889904][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  133.070239][ T6805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.126935][ T6805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.358818][  T918] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  133.926872][ T6808] syz.2.238 (6808): drop_caches: 2
[  134.135982][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.243'.
[  134.196138][ T6822] vlan2: entered promiscuous mode
[  134.211603][ T6822] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  134.877458][ T5913] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  135.067519][ T5913] usb 1-1: Using ep0 maxpacket: 8
[  135.095067][ T5913] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  135.167481][ T5913] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  135.211132][ T5913] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  135.220329][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  135.287455][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.362326][ T5913] usbtmc 1-1:16.0: bulk endpoints not found
[  135.424427][   T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  135.483867][   T24] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  135.556900][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  135.600339][   T24] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  135.669908][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  135.880586][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  135.957430][ T5913] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  135.969938][   T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  135.996011][   T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  136.006268][   T24] usb 2-1: Product: syz
[  136.012915][   T24] usb 2-1: Manufacturer: syz
[  136.033033][ T6844] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  136.083251][   T24] cdc_wdm 2-1:1.0: skipping garbage
[  136.092321][   T24] cdc_wdm 2-1:1.0: skipping garbage
[  136.102004][   T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  136.114127][   T24] cdc_wdm 2-1:1.0: Unknown control protocol
[  136.149349][ T5913] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  136.172842][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.190729][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.202040][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  136.222064][ T5913] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  136.234533][ T5913] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  136.287458][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  136.294259][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  136.301472][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  136.308085][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  136.314399][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  136.320981][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  136.327934][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  136.334519][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  136.340755][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  136.347336][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  136.353578][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  136.360171][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  136.366461][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  136.373044][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  136.379927][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  136.386515][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  136.392796][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  136.399371][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  136.405591][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  136.412161][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  136.418684][ T5913] usb 3-1: Manufacturer: syz
[  136.429638][ T5913] usb 3-1: config 0 descriptor??
[  136.553145][ T6865] netlink: 'syz.1.249': attribute type 1 has an invalid length.
[  136.612319][  T918] usb 1-1: USB disconnect, device number 18
[  136.882612][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'.
[  136.958577][ T6871] delete_channel: no stack
[  136.969824][ T5913] appleir 0003:05AC:8243.0001: item fetching failed at offset 0/1
[  137.013140][ T5913] appleir 0003:05AC:8243.0001: parse failed
[  137.022440][ T5913] appleir 0003:05AC:8243.0001: probe with driver appleir failed with error -22
[  137.156489][   T24] usb 3-1: USB disconnect, device number 8
[  137.357663][ T5913] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  137.539208][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  137.553363][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.565811][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  137.583165][ T5913] usb 5-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00
[  137.595312][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.627190][ T5913] usb 5-1: config 0 descriptor??
[  137.650813][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14
[  137.840557][ T6875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.851001][ T6875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.871943][ T5197] bcm5974 5-1:0.0: could not read from device
[  137.881852][ T5197] bcm5974 5-1:0.0: could not read from device
[  137.905122][ T5197] bcm5974 5-1:0.0: could not read from device
[  137.924224][ T5913] usb 5-1: USB disconnect, device number 10
[  137.949674][ T5197] bcm5974 5-1:0.0: could not read from device
[  137.964899][ T6889] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  138.007084][ T5856] bcm5974 5-1:0.0: could not read from device
[  138.035087][  T918] usb 2-1: USB disconnect, device number 10
[  138.156566][ T5856] udevd[5856]: Error opening device "/dev/input/event4": No such file or directory
[  138.201484][ T5856] udevd[5856]: Unable to EVIOCGABS device "/dev/input/event4"
[  138.257531][ T5856] udevd[5856]: Unable to EVIOCGABS device "/dev/input/event4"
[  138.362269][ T5856] udevd[5856]: Unable to EVIOCGABS device "/dev/input/event4"
[  138.469684][ T5856] udevd[5856]: Unable to EVIOCGABS device "/dev/input/event4"
[  138.508530][ T5856] udevd[5856]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting.
[  138.797639][ T5212] udevd[5212]: worker [5856] terminated by signal 6 (Aborted)
[  138.868724][ T5212] udevd[5212]: worker [5856] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14/event4'
[  139.024972][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.270'.
[  139.033736][ T6908] geneve2: entered allmulticast mode
[  139.105465][ T6910] delete_channel: no stack
[  139.519882][ T6920] netlink: 'syz.0.271': attribute type 1 has an invalid length.
[  139.577719][ T5906] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  139.693074][ T6922] bond2: entered promiscuous mode
[  139.717378][ T6922] bond2: entered allmulticast mode
[  139.733757][ T6922] 8021q: adding VLAN 0 to HW filter on device bond2
[  139.749243][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.768715][ T5906] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x6 has invalid wMaxPacketSize 0
[  139.808662][ T5906] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 0
[  139.867409][ T5906] usb 2-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  139.877917][ T6920] bridge1: entered promiscuous mode
[  139.906076][ T6920] bridge1: entered allmulticast mode
[  139.915979][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0
[  139.918445][ T6920] bond2: (slave bridge1): Enslaving as a backup interface with an up link
[  139.949670][ T5906] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  139.977422][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.988776][   T49] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  140.036227][ T5906] usb 2-1: Product: syz
[  140.046341][ T5906] usb 2-1: Manufacturer: syz
[  140.061858][ T5906] usb 2-1: SerialNumber: syz
[  140.086138][ T5906] usb 2-1: config 0 descriptor??
[  140.147460][   T36] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  141.057505][   T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  141.187618][   T24] usb 4-1: device descriptor read/64, error -71
[  141.447490][   T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  141.577587][   T24] usb 4-1: device descriptor read/64, error -71
[  141.641280][ T5928] usb 2-1: USB disconnect, device number 11
[  141.698951][   T24] usb usb4-port1: attempt power cycle
[  142.127748][   T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  142.243916][   T24] usb 4-1: device descriptor read/8, error -71
[  142.517488][   T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  142.538622][   T24] usb 4-1: device descriptor read/8, error -71
[  142.680288][   T24] usb usb4-port1: unable to enumerate USB device
[  143.813093][ T6970] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  143.971179][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'.
[  144.019667][ T6977] openvswitch: netlink: Multiple metadata blocks provided
[  144.098363][ T6975] delete_channel: no stack
[  144.877447][ T5928] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  145.688839][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'.
[  145.773306][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'.
[  146.294487][ T6996] syz.1.290 (6996): drop_caches: 2
[  146.356059][ T6996] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  146.590330][ T6999] fuse: Unknown parameter 'group	'
[  146.908055][   T30] audit: type=1326 audit(1759220576.239:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6985 comm="syz.0.288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe05758eec9 code=0x0
[  147.644234][ T7015] geneve2: entered allmulticast mode
[  148.047514][ T5928] usb 4-1: device descriptor read/64, error -71
[  148.337437][ T5928] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  148.679186][ T5928] usb 4-1: Using ep0 maxpacket: 16
[  148.744609][ T5928] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  148.787378][ T5928] usb 4-1: config 0 has no interface number 0
[  148.824383][ T5928] usb 4-1: config 0 interface 1 has no altsetting 0
[  148.856539][ T5928] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e
[  148.868097][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.876078][ T5928] usb 4-1: Product: syz
[  148.924992][ T5928] usb 4-1: Manufacturer: syz
[  148.945153][ T5928] usb 4-1: SerialNumber: syz
[  148.970567][ T7042] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  148.972488][ T5928] usb 4-1: config 0 descriptor??
[  149.354327][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'.
[  149.363639][ T7045] netlink: 52 bytes leftover after parsing attributes in process `syz.3.299'.
[  149.707495][ T5843] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  150.004256][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  150.171731][ T5843] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  150.370201][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  150.470888][ T5843] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  150.531241][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.622883][ T5843] usb 3-1: Product: syz
[  150.627129][ T5843] usb 3-1: Manufacturer: syz
[  150.691216][ T5843] usb 3-1: SerialNumber: syz
[  150.758222][ T5843] usb 3-1: config 0 descriptor??
[  150.771284][ T7047] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  150.791986][ T7047] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  150.819931][ T5843] usb 3-1: ucan: probing device on interface #0
[  151.131883][ T7078] geneve2: entered allmulticast mode
[  151.256046][ T5843] usb 3-1: ucan: failed to retrieve device info
[  151.285880][ T5843] usb 3-1: ucan: probe failed; try to update the device firmware
[  151.338019][ T5843] usb 3-1: USB disconnect, device number 9
[  151.474885][ T5928] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -71
[  151.492323][ T5928] usb 4-1: USB disconnect, device number 16
[  151.935119][ T5913] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  152.150439][ T5913] usb 1-1: Using ep0 maxpacket: 16
[  152.173045][ T5913] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.184236][ T5913] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.205492][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0
[  152.227550][ T5913] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  152.258781][ T7104] process 'syz.1.320' launched './file1' with NULL argv: empty string added
[  152.289792][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.331508][ T5913] usb 1-1: config 0 descriptor??
[  152.824460][ T7089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.833237][ T7089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.917442][ T5928] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  152.921546][ T5913] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  153.071092][ T5913] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  153.080279][ T5913] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  153.089804][ T5928] usb 2-1: Using ep0 maxpacket: 8
[  153.090411][ T5913] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  153.103146][ T5913] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  153.135623][ T5913] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  153.147196][ T5928] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  153.155963][ T5913] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  153.177731][ T5913] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  153.197038][ T5928] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  153.206914][ T5843] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  153.207080][ T5913] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  153.242266][ T5913] cougar 0003:060B:500A.0002: unknown main item tag 0x0
[  153.262655][ T5913] cougar 0003:060B:500A.0002: unexpected long global item
[  153.272899][ T5928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  153.299863][ T5928] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  153.328291][ T5928] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  153.342231][ T5913] cougar 0003:060B:500A.0002: parse failed
[  153.360828][ T5913] cougar 0003:060B:500A.0002: probe with driver cougar failed with error -22
[  153.393070][ T5913] usb 1-1: USB disconnect, device number 19
[  153.417445][ T5843] usb 5-1: Using ep0 maxpacket: 32
[  153.442355][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.458135][ T5843] usb 5-1: config 0 has an invalid interface number: 232 but max is 0
[  153.481176][ T5843] usb 5-1: config 0 has no interface number 0
[  153.503043][ T5928] usbtmc 2-1:16.0: bulk endpoints not found
[  153.517027][ T5843] usb 5-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a
[  153.546359][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.564616][ T5843] usb 5-1: Product: syz
[  153.574290][ T5843] usb 5-1: Manufacturer: syz
[  153.581057][ T5843] usb 5-1: SerialNumber: syz
[  153.590805][ T5843] usb 5-1: config 0 descriptor??
[  153.820228][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.324'.
[  153.844155][ T5913] usb 5-1: USB disconnect, device number 11
[  154.236658][ T5905] usb 2-1: USB disconnect, device number 12
[  154.317136][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'.
[  154.327050][ T7126] delete_channel: no stack
[  154.327544][ T5913] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  154.382254][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'.
[  154.395573][ T7128] delete_channel: no stack
[  154.499359][ T5913] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  154.512755][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.538548][ T5913] usb 3-1: config 0 descriptor??
[  154.565468][ T5913] cp210x 3-1:0.0: cp210x converter detected
[  154.627121][ T7133] ������: renamed from veth1_vlan (while UP)
[  154.790017][ T5928] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[  154.928500][ T5928] usb 2-1: device descriptor read/64, error -71
[  155.187987][ T5928] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[  155.228150][ T5913] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  155.255534][ T5913] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  155.262575][   T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  155.336562][ T5913] usb 3-1: cp210x converter now attached to ttyUSB0
[  155.349042][ T5928] usb 2-1: device descriptor read/64, error -71
[  155.374729][ T5913] usb 3-1: USB disconnect, device number 10
[  155.412903][ T5913] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  155.445457][ T5913] cp210x 3-1:0.0: device disconnected
[  155.470630][   T24] usb 5-1: Using ep0 maxpacket: 8
[  155.488573][ T5928] usb usb2-port1: attempt power cycle
[  155.493366][   T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  155.525063][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  155.548462][   T24] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  155.559914][   T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  155.579419][   T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  155.600342][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.665513][   T24] usbtmc 5-1:16.0: bulk endpoints not found
[  155.848117][ T5928] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  155.945534][ T5928] usb 2-1: device descriptor read/8, error -71
[  156.207856][ T5928] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[  156.259934][ T5928] usb 2-1: device descriptor read/8, error -71
[  156.407913][ T5928] usb usb2-port1: unable to enumerate USB device
[  157.283530][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.343'.
[  157.294591][ T7177] delete_channel: no stack
[  157.674976][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'.
[  157.721979][ T7186] delete_channel: no stack
[  157.738450][ T5906] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  157.918567][ T5906] usb 3-1: Using ep0 maxpacket: 32
[  157.938855][ T5906] usb 3-1: config 0 has an invalid interface number: 232 but max is 0
[  157.975021][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'.
[  157.989014][ T5906] usb 3-1: config 0 has no interface number 0
[  158.027972][ T7190] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  158.045580][ T5906] usb 3-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a
[  158.077176][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.106871][   T24] usb 5-1: USB disconnect, device number 12
[  158.130579][ T7199] netlink: 87 bytes leftover after parsing attributes in process `syz.0.352'.
[  158.143438][ T5906] usb 3-1: Product: syz
[  158.150110][ T5906] usb 3-1: Manufacturer: syz
[  158.173230][ T5906] usb 3-1: SerialNumber: syz
[  158.229854][ T5906] usb 3-1: config 0 descriptor??
[  158.328396][ T5843] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  158.407520][ T5905] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  158.445972][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.346'.
[  158.467703][ T5913] usb 3-1: USB disconnect, device number 11
[  158.499452][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  158.529983][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.550326][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  158.577073][ T5843] usb 2-1: New USB device found, idVendor=05ac, idProduct=02e6, bcdDevice= 0.00
[  158.577613][ T5905] usb 1-1: Using ep0 maxpacket: 16
[  158.590046][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.609617][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.355'.
[  158.611230][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  158.628210][ T5843] usb 2-1: config 0 descriptor??
[  158.640520][ T7209] delete_channel: no stack
[  158.649407][ T5905] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  158.650104][ T5843] usbhid 2-1:0.0: can't add hid device: -22
[  158.659107][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.675127][ T5843] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  158.686234][ T5905] usb 1-1: Product: syz
[  158.710719][ T5905] usb 1-1: Manufacturer: syz
[  158.724310][ T5905] usb 1-1: SerialNumber: syz
[  158.748955][ T5905] usb 1-1: config 0 descriptor??
[  158.760712][ T5905] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  158.771917][ T5905] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  159.356057][ T7227] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  159.422854][ T7224] syz.4.359 (7224): drop_caches: 2
[  159.479545][ T5905] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  159.511375][   T24] usb 2-1: USB disconnect, device number 17
[  159.892528][ T7199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.915366][ T7199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.927623][ T5905] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  159.944801][ T5905] em28xx 1-1:0.0: board has no eeprom
[  160.047653][ T5905] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  160.087826][ T5905] em28xx 1-1:0.0: dvb set to bulk mode.
[  160.093432][ T5913] em28xx 1-1:0.0: Binding DVB extension
[  160.223629][ T5905] usb 1-1: USB disconnect, device number 20
[  160.298517][ T5905] em28xx 1-1:0.0: Disconnecting em28xx
[  160.329025][ T5913] em28xx 1-1:0.0: Registering input extension
[  160.341989][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.360'.
[  160.352332][ T5905] em28xx 1-1:0.0: Closing input extension
[  160.401823][ T7230] delete_channel: no stack
[  160.428923][ T5905] em28xx 1-1:0.0: Freeing device
[  161.047756][ T5928] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  161.261429][ T5928] usb 4-1: Using ep0 maxpacket: 8
[  161.319422][ T5928] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  161.357608][ T5928] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  161.427121][ T5928] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  161.480773][ T5928] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  161.605786][ T5928] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  161.670905][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.712186][ T7256] netlink: 68 bytes leftover after parsing attributes in process `syz.4.370'.
[  161.724154][ T5928] usbtmc 4-1:16.0: bulk endpoints not found
[  161.742635][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'.
[  161.986820][ T7263] netlink: 'syz.2.369': attribute type 1 has an invalid length.
[  162.146993][ T7269] bond1: entered promiscuous mode
[  162.152337][ T7269] bond1: entered allmulticast mode
[  162.158545][ T7269] 8021q: adding VLAN 0 to HW filter on device bond1
[  162.303977][ T7263] bridge1: entered promiscuous mode
[  162.317548][ T3525] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  162.335709][ T7263] bridge1: entered allmulticast mode
[  162.361896][ T7263] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  162.487493][ T3000] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  162.629637][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'.
[  162.638780][ T5905] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  162.655682][ T7279] vlan2: entered promiscuous mode
[  162.686021][ T7279] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  162.802246][ T5905] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  163.016842][ T5905] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  163.218947][ T5905] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  163.294884][ T5905] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  163.308959][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.335297][ T5905] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  163.567824][ T5913] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  163.593777][ T5905] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12
[  163.729102][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  163.743158][  T918] usb 4-1: USB disconnect, device number 17
[  163.887161][ T5913] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  163.900419][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.936361][ T5913] usb 1-1: config 0 descriptor??
[  163.972586][ T7283] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  164.517265][ T5913] hid_parser_main: 178 callbacks suppressed
[  164.517286][ T5913] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  164.570403][ T7304] netlink: 68 bytes leftover after parsing attributes in process `syz.3.383'.
[  164.588371][ T5913] elan 0003:04F3:0755.0003: item fetching failed at offset 3/5
[  164.598880][ T5913] elan 0003:04F3:0755.0003: Hid Parse failed
[  164.607296][ T5913] elan 0003:04F3:0755.0003: probe with driver elan failed with error -22
[  164.780931][ T5905] usb 1-1: USB disconnect, device number 21
[  165.364119][ T5905] usb 5-1: USB disconnect, device number 13
[  165.463526][   T30] audit: type=1326 audit(1759220594.769:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  165.514589][ T7313] fuse: Bad value for 'user_id'
[  165.528476][   T30] audit: type=1326 audit(1759220594.769:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  165.591628][ T7315] FAULT_INJECTION: forcing a failure.
[  165.591628][ T7315] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  165.641431][ T7315] CPU: 0 UID: 0 PID: 7315 Comm: syz.4.387 Not tainted syzkaller #0 PREEMPT(full) 
[  165.641450][ T7315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  165.641462][ T7315] Call Trace:
[  165.641470][ T7315]  <TASK>
[  165.641475][ T7315]  dump_stack_lvl+0x189/0x250
[  165.641497][ T7315]  ? __pfx____ratelimit+0x10/0x10
[  165.641509][ T7315]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.641521][ T7315]  ? __pfx__printk+0x10/0x10
[  165.641529][ T7315]  ? __might_fault+0xb0/0x130
[  165.641549][ T7315]  should_fail_ex+0x414/0x560
[  165.641573][ T7315]  _copy_from_iter+0x1de/0x1790
[  165.641588][ T7315]  ? rcu_is_watching+0x15/0xb0
[  165.641599][ T7315]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  165.641613][ T7315]  ? __pfx__copy_from_iter+0x10/0x10
[  165.641625][ T7315]  ? __build_skb_around+0x257/0x3e0
[  165.641638][ T7315]  ? netlink_sendmsg+0x642/0xb30
[  165.641648][ T7315]  ? skb_put+0x11b/0x210
[  165.641661][ T7315]  netlink_sendmsg+0x6b2/0xb30
[  165.641677][ T7315]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.641689][ T7315]  ? aa_sock_msg_perm+0xf1/0x1d0
[  165.641699][ T7315]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  165.641710][ T7315]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.641721][ T7315]  __sock_sendmsg+0x21c/0x270
[  165.641732][ T7315]  ____sys_sendmsg+0x505/0x830
[  165.641747][ T7315]  ? __pfx_____sys_sendmsg+0x10/0x10
[  165.641764][ T7315]  ? import_iovec+0x74/0xa0
[  165.641778][ T7315]  ___sys_sendmsg+0x21f/0x2a0
[  165.641791][ T7315]  ? __pfx____sys_sendmsg+0x10/0x10
[  165.641821][ T7315]  ? __fget_files+0x2a/0x420
[  165.641832][ T7315]  ? __fget_files+0x3a0/0x420
[  165.641852][ T7315]  __x64_sys_sendmsg+0x19b/0x260
[  165.641873][ T7315]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  165.641898][ T7315]  ? __pfx_ksys_write+0x10/0x10
[  165.641916][ T7315]  ? rcu_is_watching+0x15/0xb0
[  165.641936][ T7315]  ? do_syscall_64+0xbe/0x3b0
[  165.641950][ T7315]  do_syscall_64+0xfa/0x3b0
[  165.641960][ T7315]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.641970][ T7315]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.641979][ T7315]  ? clear_bhb_loop+0x60/0xb0
[  165.641990][ T7315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.641999][ T7315] RIP: 0033:0x7ff07498eec9
[  165.642013][ T7315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.642020][ T7315] RSP: 002b:00007ff075835038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.642038][ T7315] RAX: ffffffffffffffda RBX: 00007ff074be5fa0 RCX: 00007ff07498eec9
[  165.642044][ T7315] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005
[  165.642050][ T7315] RBP: 00007ff075835090 R08: 0000000000000000 R09: 0000000000000000
[  165.642056][ T7315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.642061][ T7315] R13: 00007ff074be6038 R14: 00007ff074be5fa0 R15: 00007ff074d0fa28
[  165.642075][ T7315]  </TASK>
[  165.926044][    C0] vkms_vblank_simulate: vblank timer overrun
[  166.023291][ T7313] fuse: Bad value for 'user_id'
[  166.065610][   T30] audit: type=1326 audit(1759220594.789:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  166.089477][   T30] audit: type=1326 audit(1759220594.789:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  166.111469][    C0] vkms_vblank_simulate: vblank timer overrun
[  166.120802][   T30] audit: type=1326 audit(1759220594.789:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  166.142837][    C0] vkms_vblank_simulate: vblank timer overrun
[  166.149057][   T30] audit: type=1326 audit(1759220594.839:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  166.171635][   T30] audit: type=1326 audit(1759220594.839:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  166.193672][    C0] vkms_vblank_simulate: vblank timer overrun
[  166.199765][   T30] audit: type=1326 audit(1759220594.839:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  166.221921][   T30] audit: type=1326 audit(1759220594.839:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  166.243779][    C0] vkms_vblank_simulate: vblank timer overrun
[  166.255901][   T30] audit: type=1326 audit(1759220594.839:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  166.278020][    C0] vkms_vblank_simulate: vblank timer overrun
[  166.627495][ T5913] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  166.778001][ T5913] usb 1-1: Using ep0 maxpacket: 8
[  166.830936][ T5913] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  166.891749][ T5913] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  166.908061][ T5913] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  166.928324][ T5913] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.941506][ T5913] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  166.951085][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.971150][ T5913] usbtmc 1-1:16.0: bulk endpoints not found
[  167.244985][ T7345] geneve2: entered allmulticast mode
[  167.297852][ T5905] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  167.475509][ T5905] usb 4-1: Using ep0 maxpacket: 16
[  167.528346][ T5905] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  167.553443][ T5905] usb 4-1: config 0 has no interface number 0
[  167.579076][ T5905] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.723961][ T5905] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.740587][ T5905] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  167.753551][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.869325][ T5905] usb 4-1: config 0 descriptor??
[  168.664942][ T5913] usb 1-1: USB disconnect, device number 22
[  168.793274][ T5905] uclogic 0003:28BD:0071.0004: pen parameters not found
[  168.802885][ T5905] uclogic 0003:28BD:0071.0004: interface is invalid, ignoring
[  168.846934][  T918] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  169.010984][ T5913] usb 4-1: USB disconnect, device number 18
[  169.087828][  T918] usb 5-1: Using ep0 maxpacket: 16
[  169.106840][  T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  169.212378][  T918] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  169.235264][ T7375] netlink: 60 bytes leftover after parsing attributes in process `syz.0.399'.
[  169.257618][  T918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.268308][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'.
[  169.277299][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'.
[  169.320276][  T918] usb 5-1: Product: syz
[  169.323241][ T3000] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  169.337414][  T918] usb 5-1: Manufacturer: syz
[  169.342055][  T918] usb 5-1: SerialNumber: syz
[  169.364564][   T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  169.381103][  T918] usb 5-1: config 0 descriptor??
[  169.402921][  T918] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  169.431612][  T918] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  169.500542][ T5928] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  169.630250][   T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  169.639327][   T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  169.667482][ T5928] usb 2-1: Using ep0 maxpacket: 8
[  169.677638][ T5928] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  169.693301][ T5928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  169.720421][ T5928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  169.820251][ T5928] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  169.834302][ T5928] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  169.845315][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.119304][  T918] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  170.161346][ T5928] usb 2-1: GET_CAPABILITIES returned 0
[  170.202313][ T5928] usbtmc 2-1:16.0: can't read capabilities
[  170.351714][ T7374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.401'.
[  170.877564][ T5927] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  170.885998][    C0] raw-gadget.1 gadget.2: ignoring, device is not running
[  171.029961][  T918] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  171.038094][  T918] em28xx 5-1:0.0: board has no eeprom
[  171.069359][ T5927] usb 3-1: device descriptor read/64, error -32
[  171.187404][  T918] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  171.200288][  T918] em28xx 5-1:0.0: dvb set to bulk mode.
[  171.221547][ T5843] em28xx 5-1:0.0: Binding DVB extension
[  171.320635][ T5843] em28xx 5-1:0.0: Registering input extension
[  171.333253][  T918] usb 5-1: USB disconnect, device number 14
[  171.361661][  T918] em28xx 5-1:0.0: Disconnecting em28xx
[  171.367639][ T5927] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  171.414709][  T918] em28xx 5-1:0.0: Closing input extension
[  171.473024][  T918] em28xx 5-1:0.0: Freeing device
[  171.581046][ T5927] usb 3-1: Using ep0 maxpacket: 8
[  171.753491][ T5927] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  171.891615][ T5927] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  171.956928][ T5927] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  172.011287][ T5927] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  172.074037][ T5927] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  172.136071][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.497938][ T5927] usb 3-1: GET_CAPABILITIES returned 0
[  172.558485][ T5927] usbtmc 3-1:16.0: can't read capabilities
[  172.573743][ T5913] usb 2-1: USB disconnect, device number 18
[  172.726629][ T7417] netlink: 'syz.1.410': attribute type 1 has an invalid length.
[  172.847522][ T5927] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  173.005967][ T7417] 8021q: adding VLAN 0 to HW filter on device bond1
[  173.086330][ T7420] bond1: (slave geneve2): making interface the new active one
[  173.104510][ T7420] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  173.122789][ T7424] FAULT_INJECTION: forcing a failure.
[  173.122789][ T7424] name failslab, interval 1, probability 0, space 0, times 1
[  173.124222][ T5927] usb 1-1: Using ep0 maxpacket: 8
[  173.207651][ T7424] CPU: 1 UID: 0 PID: 7424 Comm: syz.3.411 Not tainted syzkaller #0 PREEMPT(full) 
[  173.207675][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  173.207685][ T7424] Call Trace:
[  173.207692][ T7424]  <TASK>
[  173.207699][ T7424]  dump_stack_lvl+0x189/0x250
[  173.207724][ T7424]  ? __pfx____ratelimit+0x10/0x10
[  173.207747][ T7424]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.207767][ T7424]  ? __pfx__printk+0x10/0x10
[  173.207786][ T7424]  ? __pfx___might_resched+0x10/0x10
[  173.207802][ T7424]  ? fs_reclaim_acquire+0x7d/0x100
[  173.207822][ T7424]  should_fail_ex+0x414/0x560
[  173.207850][ T7424]  should_failslab+0xa8/0x100
[  173.207875][ T7424]  __kmalloc_cache_noprof+0x70/0x3d0
[  173.207897][ T7424]  ? tcf_chain_create+0xb0/0x310
[  173.207921][ T7424]  tcf_chain_create+0xb0/0x310
[  173.207946][ T7424]  __tcf_chain_get+0x111/0x3c0
[  173.207967][ T7424]  tc_new_tfilter+0x753/0x15b0
[  173.207998][ T7424]  ? __local_bh_enable_ip+0x12d/0x1c0
[  173.208028][ T7424]  ? __pfx_tc_new_tfilter+0x10/0x10
[  173.208046][ T7424]  ? __dev_queue_xmit+0x1d79/0x3b50
[  173.208102][ T7424]  ? __pfx_tc_new_tfilter+0x10/0x10
[  173.208122][ T7424]  rtnetlink_rcv_msg+0x7cc/0xb70
[  173.208145][ T7424]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  173.208162][ T7424]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  173.208177][ T7424]  ? ref_tracker_free+0x63a/0x7d0
[  173.208193][ T7424]  ? __asan_memcpy+0x40/0x70
[  173.208210][ T7424]  ? __pfx_ref_tracker_free+0x10/0x10
[  173.208225][ T7424]  ? __skb_clone+0x63/0x7a0
[  173.208260][ T7424]  netlink_rcv_skb+0x208/0x470
[  173.208280][ T7424]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  173.208300][ T7424]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  173.208334][ T7424]  ? netlink_deliver_tap+0x2e/0x1b0
[  173.208361][ T7424]  netlink_unicast+0x82c/0x9e0
[  173.208386][ T7424]  ? __pfx_netlink_unicast+0x10/0x10
[  173.208406][ T7424]  ? netlink_sendmsg+0x642/0xb30
[  173.208422][ T7424]  ? skb_put+0x11b/0x210
[  173.208445][ T7424]  netlink_sendmsg+0x805/0xb30
[  173.208479][ T7424]  ? __pfx_netlink_sendmsg+0x10/0x10
[  173.208502][ T7424]  ? aa_sock_msg_perm+0xf1/0x1d0
[  173.208521][ T7424]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  173.208539][ T7424]  ? __pfx_netlink_sendmsg+0x10/0x10
[  173.208558][ T7424]  __sock_sendmsg+0x21c/0x270
[  173.208579][ T7424]  ____sys_sendmsg+0x505/0x830
[  173.208606][ T7424]  ? __pfx_____sys_sendmsg+0x10/0x10
[  173.208636][ T7424]  ? import_iovec+0x74/0xa0
[  173.208660][ T7424]  ___sys_sendmsg+0x21f/0x2a0
[  173.208684][ T7424]  ? __pfx____sys_sendmsg+0x10/0x10
[  173.208739][ T7424]  ? __fget_files+0x2a/0x420
[  173.208755][ T7424]  ? __fget_files+0x3a0/0x420
[  173.208781][ T7424]  __x64_sys_sendmsg+0x19b/0x260
[  173.208805][ T7424]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  173.208835][ T7424]  ? __pfx_ksys_write+0x10/0x10
[  173.208855][ T7424]  ? rcu_is_watching+0x15/0xb0
[  173.208878][ T7424]  ? do_syscall_64+0xbe/0x3b0
[  173.208899][ T7424]  do_syscall_64+0xfa/0x3b0
[  173.208916][ T7424]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.208933][ T7424]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.208949][ T7424]  ? clear_bhb_loop+0x60/0xb0
[  173.208969][ T7424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.208984][ T7424] RIP: 0033:0x7f232038eec9
[  173.208999][ T7424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.209012][ T7424] RSP: 002b:00007f23212e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  173.209030][ T7424] RAX: ffffffffffffffda RBX: 00007f23205e5fa0 RCX: 00007f232038eec9
[  173.209043][ T7424] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005
[  173.209053][ T7424] RBP: 00007f23212e6090 R08: 0000000000000000 R09: 0000000000000000
[  173.209064][ T7424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.209074][ T7424] R13: 00007f23205e6038 R14: 00007f23205e5fa0 R15: 00007f232070fa28
[  173.209102][ T7424]  </TASK>
[  173.620829][ T5927] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  173.787753][ T5927] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  173.944219][ T5913] usb 3-1: USB disconnect, device number 13
[  174.004775][ T5927] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  174.047104][ T5927] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  174.124867][ T5927] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  174.190380][ T5927] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  174.239605][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.313089][ T5927] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22
[  174.797598][ T5905] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  174.992652][ T5905] usb 5-1: Using ep0 maxpacket: 8
[  175.091844][ T5905] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  175.119238][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  175.165026][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  175.180695][ T5905] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  175.195165][ T5905] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  175.206435][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.338842][ T5913] usb 1-1: USB disconnect, device number 23
[  175.821162][ T7470] netlink: 44 bytes leftover after parsing attributes in process `syz.2.423'.
[  175.935847][ T7452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.420'.
[  175.954978][ T5913] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  176.020203][ T7471] Failed to get privilege flags for destination (handle=0x2:0x0)
[  176.065746][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.074029][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.280853][ T5913] usb 1-1: config 0 has no interfaces?
[  176.308946][ T5913] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  176.369534][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.419727][ T5913] usb 1-1: Product: syz
[  176.492445][ T5913] usb 1-1: Manufacturer: syz
[  176.515941][ T5913] usb 1-1: SerialNumber: syz
[  176.545907][ T5913] usb 1-1: config 0 descriptor??
[  177.127791][ T5928] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  177.407655][ T5928] usb 2-1: Using ep0 maxpacket: 8
[  177.419151][ T5928] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  177.431790][ T5928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  177.451413][ T5928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  177.489874][ T5928] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  177.529443][ T5928] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  177.556234][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.761842][ T5905] usb 5-1: usb_control_msg returned -71
[  177.821689][ T5928] usb 2-1: GET_CAPABILITIES returned 0
[  177.830514][ T5928] usbtmc 2-1:16.0: can't read capabilities
[  177.881321][ T5905] usbtmc 5-1:16.0: can't read capabilities
[  178.000356][ T5905] usb 5-1: USB disconnect, device number 15
[  178.022725][ T5928] usb 2-1: USB disconnect, device number 19
[  178.354040][ T7487] syz.2.429 (7487): drop_caches: 2
[  178.390236][ T7487] syz.2.429 (7487): drop_caches: 2
[  178.454154][ T7487] syz.2.429 (7487): drop_caches: 2
[  179.048291][ T5928] usb 1-1: USB disconnect, device number 24
[  179.801167][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.436'.
[  180.003519][ T7513] vlan2: entered promiscuous mode
[  180.050917][ T7513] syz_tun: entered promiscuous mode
[  180.092942][ T7520] netlink: 'syz.0.437': attribute type 1 has an invalid length.
[  180.272921][ T7522] bond3: entered promiscuous mode
[  180.281705][ T7522] bond3: entered allmulticast mode
[  180.292616][ T7522] 8021q: adding VLAN 0 to HW filter on device bond3
[  180.364654][ T7526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'.
[  180.398304][ T7524] delete_channel: no stack
[  180.501454][ T7520] bridge2: entered promiscuous mode
[  180.524091][ T7520] bridge2: entered allmulticast mode
[  180.532510][ T7520] bond3: (slave bridge2): Enslaving as a backup interface with an up link
[  180.569093][   T49] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  180.697567][ T5928] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  180.731247][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.784684][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.804610][   T49] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  181.529190][  T918] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  181.721579][  T918] usb 4-1: Using ep0 maxpacket: 8
[  181.983535][  T918] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  182.082583][  T918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  182.119431][  T918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  182.241307][  T918] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  182.269502][  T918] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  182.290761][  T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.548223][ T7554] dummy0: entered promiscuous mode
[  182.574027][ T7554] macsec1: entered promiscuous mode
[  182.587646][ T7554] macsec1: entered allmulticast mode
[  182.604333][ T7554] dummy0: entered allmulticast mode
[  182.753479][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'.
[  182.829408][ T7554] dummy0: left allmulticast mode
[  182.840899][ T7554] dummy0: left promiscuous mode
[  182.881966][  T918] usb 4-1: GET_CAPABILITIES returned 0
[  182.896462][  T918] usbtmc 4-1:16.0: can't read capabilities
[  183.595631][ T7571] netlink: 'syz.2.450': attribute type 1 has an invalid length.
[  183.731862][ T7571] bond2: entered promiscuous mode
[  183.743636][ T7571] bond2: entered allmulticast mode
[  183.760436][ T7571] 8021q: adding VLAN 0 to HW filter on device bond2
[  183.825577][ T7577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.451'.
[  183.853446][ T7571] bridge2: entered promiscuous mode
[  183.863496][   T49] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  183.911217][ T7571] bridge2: entered allmulticast mode
[  183.972128][ T7571] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  183.997747][  T780] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  184.218971][ T5906] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  184.487631][ T5906] usb 2-1: Using ep0 maxpacket: 8
[  184.509410][ T5906] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  184.531263][ T5906] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  184.543389][ T5906] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  184.553532][ T5906] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  184.573790][ T5906] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  184.597463][ T5906] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  184.655211][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.097666][ T5906] usb 2-1: usb_control_msg returned -32
[  185.203530][ T5928] usb 4-1: USB disconnect, device number 19
[  185.631307][ T5906] usbtmc 2-1:16.0: can't read capabilities
[  186.243579][ T7617] usbtmc 2-1:16.0: usb_control_msg returned -32
[  186.385482][ T7621] syz.0.464 (7621): drop_caches: 2
[  187.007555][  T918] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  187.299618][  T918] usb 1-1: Using ep0 maxpacket: 8
[  187.690452][ T5927] usb 2-1: USB disconnect, device number 21
[  187.767698][ T5843] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  187.847665][  T918] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  187.948022][  T918] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  188.037633][ T5843] usb 4-1: config 0 has no interfaces?
[  188.054052][  T918] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  188.079300][ T5843] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  188.093470][  T918] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  188.112927][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.143774][ T5843] usb 4-1: Product: syz
[  188.173437][  T918] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  188.202545][ T5843] usb 4-1: Manufacturer: syz
[  188.225171][ T5843] usb 4-1: SerialNumber: syz
[  188.231383][  T918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.402540][ T5928] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  188.420160][ T5843] usb 4-1: config 0 descriptor??
[  188.796648][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.932903][ T5928] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  189.064599][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.082541][ T7643] FAULT_INJECTION: forcing a failure.
[  189.082541][ T7643] name failslab, interval 1, probability 0, space 0, times 0
[  189.099291][ T5928] usb 2-1: config 0 descriptor??
[  189.104526][ T7643] CPU: 0 UID: 0 PID: 7643 Comm: syz.4.470 Not tainted syzkaller #0 PREEMPT(full) 
[  189.104552][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  189.104562][ T7643] Call Trace:
[  189.104569][ T7643]  <TASK>
[  189.104577][ T7643]  dump_stack_lvl+0x189/0x250
[  189.104603][ T7643]  ? __pfx____ratelimit+0x10/0x10
[  189.104622][ T7643]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.104642][ T7643]  ? __pfx__printk+0x10/0x10
[  189.104661][ T7643]  ? __pfx___might_resched+0x10/0x10
[  189.104678][ T7643]  ? fs_reclaim_acquire+0x7d/0x100
[  189.104700][ T7643]  should_fail_ex+0x414/0x560
[  189.104730][ T7643]  should_failslab+0xa8/0x100
[  189.104755][ T7643]  __kmalloc_noprof+0xcb/0x4f0
[  189.104776][ T7643]  ? tomoyo_encode+0x28b/0x550
[  189.104798][ T7643]  tomoyo_encode+0x28b/0x550
[  189.104820][ T7643]  tomoyo_realpath_from_path+0x58d/0x5d0
[  189.104846][ T7643]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  189.104866][ T7643]  tomoyo_path_number_perm+0x1e8/0x5a0
[  189.104889][ T7643]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  189.104915][ T7643]  ? d_splice_alias_ops+0x117/0x360
[  189.104967][ T7643]  ? _raw_spin_unlock+0x28/0x50
[  189.104984][ T7643]  ? __pfx_current_check_access_path+0x10/0x10
[  189.105004][ T7643]  ? lookup_one_qstr_excl+0x1d8/0x360
[  189.105029][ T7643]  tomoyo_path_mkdir+0xa8/0xe0
[  189.105048][ T7643]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[  189.105077][ T7643]  ? __pfx_filename_create+0x10/0x10
[  189.105106][ T7643]  security_path_mkdir+0x171/0x380
[  189.105128][ T7643]  do_mkdirat+0x1bd/0x590
[  189.105152][ T7643]  ? __pfx_do_mkdirat+0x10/0x10
[  189.105171][ T7643]  ? strncpy_from_user+0x150/0x290
[  189.105199][ T7643]  ? getname_flags+0x1e5/0x540
[  189.105220][ T7643]  __x64_sys_mkdir+0x6c/0x80
[  189.105243][ T7643]  do_syscall_64+0xfa/0x3b0
[  189.105260][ T7643]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.105278][ T7643]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.105295][ T7643]  ? clear_bhb_loop+0x60/0xb0
[  189.105315][ T7643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.105331][ T7643] RIP: 0033:0x7ff07498eec9
[  189.105347][ T7643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.105361][ T7643] RSP: 002b:00007ff075835038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  189.105379][ T7643] RAX: ffffffffffffffda RBX: 00007ff074be5fa0 RCX: 00007ff07498eec9
[  189.105392][ T7643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[  189.105402][ T7643] RBP: 00007ff075835090 R08: 0000000000000000 R09: 0000000000000000
[  189.105413][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.105423][ T7643] R13: 00007ff074be6038 R14: 00007ff074be5fa0 R15: 00007ff074d0fa28
[  189.105451][ T7643]  </TASK>
[  189.105627][ T7643] ERROR: Out of memory at tomoyo_realpath_from_path.
[  189.330409][    C0] vkms_vblank_simulate: vblank timer overrun
[  189.716266][ T7627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.465'.
[  189.925957][ T5928] nintendo 0003:057E:200E.0005: unbalanced delimiter at end of report description
[  189.965308][ T5928] nintendo 0003:057E:200E.0005: HID parse failed
[  190.167232][  T918] usb 1-1: usb_control_msg returned -71
[  190.183324][ T5928] nintendo 0003:057E:200E.0005: probe - fail = -22
[  190.196272][  T918] usbtmc 1-1:16.0: can't read capabilities
[  190.216765][ T5928] nintendo 0003:057E:200E.0005: probe with driver nintendo failed with error -22
[  190.260374][  T918] usb 1-1: USB disconnect, device number 25
[  190.544485][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'.
[  190.577534][ T7657] netlink: 'syz.1.469': attribute type 30 has an invalid length.
[  190.717620][  T780] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  190.736645][ T3000] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  190.777261][  T918] usb 4-1: USB disconnect, device number 20
[  190.862566][ T3000] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.954656][ T3000] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  191.089058][ T7665] syz.2.475 (7665): drop_caches: 2
[  191.339873][ T5848] Bluetooth: hci0: command 0x0406 tx timeout
[  191.346191][ T5848] Bluetooth: hci3: command 0x0406 tx timeout
[  191.417738][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  191.423880][ T5852] Bluetooth: hci2: command 0x0406 tx timeout
[  191.423892][ T5849] Bluetooth: hci4: command 0x0406 tx timeout
[  191.470937][ T7681] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present
[  191.576621][  T918] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  191.632062][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'.
[  191.712606][ T7684] delete_channel: no stack
[  191.809729][  T918] usb 1-1: Using ep0 maxpacket: 8
[  191.850559][  T918] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  191.916376][  T918] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  192.009861][  T918] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  192.073848][  T918] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  192.120417][  T918] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  192.149722][  T918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.249784][ T7687] tmpfs: Unknown parameter '
'
[  192.806264][  T918] usb 1-1: GET_CAPABILITIES returned 0
[  192.858153][  T918] usbtmc 1-1:16.0: can't read capabilities
[  193.197407][ T5928] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  193.464980][ T5928] usb 4-1: config 0 has no interfaces?
[  193.647455][ T5928] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  193.702373][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.777713][ T5928] usb 4-1: Product: syz
[  193.782124][ T5928] usb 4-1: Manufacturer: syz
[  193.811071][ T5928] usb 4-1: SerialNumber: syz
[  193.874206][ T5928] usb 4-1: config 0 descriptor??
[  194.139833][ T7713] fuse: Invalid gid '00000000000000000003'
[  194.307347][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  194.313680][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  194.375918][ T5906] usb 1-1: USB disconnect, device number 26
[  194.895815][ T7728] syz.0.494 (7728): drop_caches: 2
[  195.069193][ T7737] dummy0: entered promiscuous mode
[  195.091910][ T7737] macsec1: entered promiscuous mode
[  195.122697][ T7737] macsec1: entered allmulticast mode
[  195.134051][ T7737] dummy0: entered allmulticast mode
[  195.146502][ T7737] dummy0: left allmulticast mode
[  195.154861][ T7737] dummy0: left promiscuous mode
[  195.163599][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.498'.
[  195.207303][ T7739] delete_channel: no stack
[  195.289193][ T7742] batadv_slave_0: entered promiscuous mode
[  195.326833][ T7742] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  195.411159][ T5906] usb 2-1: USB disconnect, device number 22
[  195.541849][ T7741] batadv_slave_0: left promiscuous mode
[  195.947499][ T5928] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  195.996559][ T7763] syz.0.509 (7763): drop_caches: 2
[  196.157453][ T5928] usb 2-1: Using ep0 maxpacket: 8
[  196.221063][ T5928] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  196.255644][ T5928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  196.285944][ T5928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  196.342248][ T5928] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  196.377141][ T5928] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  196.425350][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.819914][ T5928] usb 2-1: GET_CAPABILITIES returned 0
[  196.825531][ T5928] usbtmc 2-1:16.0: can't read capabilities
[  197.077213][  T918] usb 4-1: USB disconnect, device number 21
[  197.230741][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.512'.
[  197.275000][ T7777] delete_channel: no stack
[  197.347693][   T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  197.508236][   T24] usb 5-1: Using ep0 maxpacket: 16
[  197.537815][   T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  197.567299][   T24] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  197.590400][ T7784] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.599692][   T24] usb 5-1: config 0 has no interface number 0
[  197.616158][   T24] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  197.693940][   T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  197.716337][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.515'.
[  197.724560][   T24] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  197.753725][   T24] usb 5-1: Product: syz
[  197.766862][   T24] usb 5-1: SerialNumber: syz
[  197.782959][   T24] usb 5-1: config 0 descriptor??
[  197.834940][   T24] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  198.045487][ T7776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.069814][ T5928] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  198.123337][ T7776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.160003][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'.
[  198.201504][   T24] usb 5-1: USB disconnect, device number 16
[  198.217263][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'.
[  198.227534][ T5928] usb 3-1: Using ep0 maxpacket: 8
[  198.236187][ T5928] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  198.258778][ T5928] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  198.288470][ T5928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  198.307083][ T7802] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  198.335961][ T5928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  198.358872][ T5928] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  198.376893][ T5928] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  198.405069][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.642451][ T5928] usb 3-1: usb_control_msg returned -32
[  198.670655][   T24] usb 2-1: USB disconnect, device number 23
[  198.774666][ T5928] usbtmc 3-1:16.0: can't read capabilities
[  198.834053][ T7806] syz.0.520 (7806): drop_caches: 2
[  199.297645][   T24] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  199.538373][ T7818] usbtmc 3-1:16.0: usb_control_msg returned -32
[  199.695606][   T24] usb 5-1: config 0 has no interfaces?
[  200.220282][   T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  200.230075][ T7823] netlink: 68 bytes leftover after parsing attributes in process `syz.3.525'.
[  200.384689][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.464105][   T24] usb 5-1: Product: syz
[  200.475821][   T24] usb 5-1: Manufacturer: syz
[  200.485483][   T24] usb 5-1: SerialNumber: syz
[  200.524248][   T24] usb 5-1: config 0 descriptor??
[  200.715754][ T7838] dummy0: entered promiscuous mode
[  200.724078][ T7838] macsec1: entered promiscuous mode
[  200.731844][ T7838] macsec1: entered allmulticast mode
[  200.737259][ T7838] dummy0: entered allmulticast mode
[  200.745709][ T7838] dummy0: left allmulticast mode
[  200.752421][ T7838] dummy0: left promiscuous mode
[  201.549040][ T5913] usb 3-1: USB disconnect, device number 14
[  201.845555][ T7868] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  202.243873][ T5928] usb 5-1: USB disconnect, device number 17
[  203.823546][ T7897] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present
[  204.508721][ T7909] syz.1.546 (7909): drop_caches: 2
[  204.648943][ T7909] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  205.563728][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'.
[  205.593688][ T7918] delete_channel: no stack
[  206.144433][ T7934] dummy0: entered promiscuous mode
[  206.166158][ T7934] macsec1: entered promiscuous mode
[  206.185429][ T7934] macsec1: entered allmulticast mode
[  206.190917][ T7934] dummy0: entered allmulticast mode
[  206.221838][ T7934] dummy0: left allmulticast mode
[  206.233208][ T7934] dummy0: left promiscuous mode
[  206.323482][ T7932] netlink: 'syz.2.553': attribute type 12 has an invalid length.
[  206.347435][ T7932] netlink: 'syz.2.553': attribute type 29 has an invalid length.
[  206.381769][ T7932] netlink: 148 bytes leftover after parsing attributes in process `syz.2.553'.
[  206.401915][ T7932] netlink: 23 bytes leftover after parsing attributes in process `syz.2.553'.
[  206.537508][ T5928] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  206.727419][ T5928] usb 3-1: Using ep0 maxpacket: 16
[  206.739330][ T5928] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  206.772199][ T5928] usb 3-1: config 0 has no interface number 0
[  206.799790][ T5928] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  206.849518][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.885939][ T5928] usb 3-1: Product: syz
[  206.906895][ T5928] usb 3-1: Manufacturer: syz
[  206.932898][ T5928] usb 3-1: SerialNumber: syz
[  206.987074][ T5928] usb 3-1: config 0 descriptor??
[  207.002309][ T5928] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  207.041483][ T5928] usb 3-1: No valid video chain found.
[  207.109013][ T7958] loop6: detected capacity change from 0 to 7
[  207.205547][ T6463] Dev loop6: unable to read RDB block 7
[  207.288834][ T6463]  loop6: unable to read partition table
[  207.294817][ T6463] loop6: partition table beyond EOD, truncated
[  207.565143][ T7958] Dev loop6: unable to read RDB block 7
[  207.579882][ T7958]  loop6: unable to read partition table
[  207.627579][ T7958] loop6: partition table beyond EOD, truncated
[  207.653898][ T7958] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  208.622194][  T918] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  208.883000][  T918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.920034][  T918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.972680][  T918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  209.045276][  T918] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  209.089474][  T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.123465][   T24] usb 3-1: USB disconnect, device number 15
[  209.149019][  T918] usb 4-1: config 0 descriptor??
[  209.644176][  T918] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  210.895161][ T7987] netlink: 88 bytes leftover after parsing attributes in process `syz.0.567'.
[  210.926745][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'.
[  211.553687][ T8009] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0)
[  211.652105][ T5905] usb 4-1: USB disconnect, device number 22
[  211.787498][  T918] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  211.939437][  T918] usb 5-1: device descriptor read/64, error -71
[  212.197560][  T918] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  212.379867][  T918] usb 5-1: device descriptor read/64, error -71
[  212.422456][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.575'.
[  212.441240][ T8028] vlan2: entered promiscuous mode
[  212.467013][ T8028] netdevsim netdevsim0 netdevsim3: entered promiscuous mode
[  212.500909][  T918] usb usb5-port1: attempt power cycle
[  212.877643][  T918] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  212.901897][ T8039] netlink: 'syz.1.578': attribute type 2 has an invalid length.
[  212.920533][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'.
[  212.980240][  T918] usb 5-1: device descriptor read/8, error -71
[  212.996669][ T8039] : entered promiscuous mode
[  213.331574][ T8050] netem: change failed
[  213.356355][  T918] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  213.380552][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'.
[  213.490951][  T918] usb 5-1: device descriptor read/8, error -71
[  213.607843][  T918] usb usb5-port1: unable to enumerate USB device
[  214.213635][   T30] kauditd_printk_skb: 35 callbacks suppressed
[  214.213652][   T30] audit: type=1326 audit(1759220643.539:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  214.455883][ T8053] block device autoloading is deprecated and will be removed.
[  214.500261][   T30] audit: type=1326 audit(1759220643.539:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  214.655802][   T30] audit: type=1326 audit(1759220643.539:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  214.748938][   T30] audit: type=1326 audit(1759220643.539:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  214.840450][ T8076] syz.3.585 (8076): drop_caches: 2
[  214.875695][   T30] audit: type=1326 audit(1759220643.539:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  214.955412][   T30] audit: type=1326 audit(1759220643.539:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  215.021312][   T30] audit: type=1326 audit(1759220643.609:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f232038d8dc code=0x7ffc0000
[  215.063118][ T8079] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0)
[  215.105099][   T30] audit: type=1326 audit(1759220643.609:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  215.209611][   T30] audit: type=1326 audit(1759220643.609:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232038eec9 code=0x7ffc0000
[  218.457548][ T5905] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  218.685486][ T5905] usb 5-1: Using ep0 maxpacket: 8
[  218.774157][ T8120] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0)
[  218.876847][ T5905] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  218.902425][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  218.933451][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  218.964249][ T5905] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  219.114014][ T5905] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  219.147401][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.153723][ T8130] input: syz0 as /devices/virtual/input/input17
[  219.167423][ T5913] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  219.367471][ T5913] usb 1-1: Using ep0 maxpacket: 8
[  219.421569][ T5913] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  219.492305][ T5905] usb 5-1: GET_CAPABILITIES returned 0
[  219.504377][ T5913] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  219.516018][ T5905] usbtmc 5-1:16.0: can't read capabilities
[  219.537441][ T5913] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  219.666662][ T5913] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  219.692697][ T5913] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  219.724918][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.781964][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'.
[  219.820395][ T8135] vlan3: entered promiscuous mode
[  219.838524][ T8135] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  219.975814][ T5913] usb 1-1: GET_CAPABILITIES returned 0
[  220.000560][ T5913] usbtmc 1-1:16.0: can't read capabilities
[  220.023709][ T8138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.594'.
[  220.361868][ T8127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.597'.
[  221.283585][   T24] usb 5-1: USB disconnect, device number 22
[  221.411838][ T8157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.604'.
[  221.511888][ T8161] netlink: 60 bytes leftover after parsing attributes in process `syz.4.604'.
[  221.637428][ T5913] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  221.835974][ T5913] usb 2-1: Using ep0 maxpacket: 32
[  221.850946][ T5913] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  221.878098][ T5913] usb 2-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config
[  221.924393][ T5906] usb 1-1: USB disconnect, device number 27
[  221.941595][ T5913] usb 2-1: config 0 has no interface number 0
[  221.968259][ T5913] usb 2-1: config 0 interface 89 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  222.025001][ T5913] usb 2-1: config 0 interface 89 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  222.081652][ T5913] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice= 4.be
[  222.094826][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.113255][ T5913] usb 2-1: Product: syz
[  222.129378][ T5913] usb 2-1: Manufacturer: syz
[  222.150429][ T5913] usb 2-1: SerialNumber: syz
[  222.166118][ T5913] usb 2-1: config 0 descriptor??
[  222.174121][ T8154] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  222.189599][ T5913] kvaser_usb 2-1:0.89: error -ENODEV: Cannot get usb endpoint(s)
[  222.484294][ T5913] usb 2-1: USB disconnect, device number 24
[  222.689262][ T8188] netlink: 'syz.2.610': attribute type 1 has an invalid length.
[  223.526543][ T8191] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0)
[  224.002745][  T918] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  224.051884][ T8157] syzkaller0: entered promiscuous mode
[  224.059821][ T8157] syzkaller0: entered allmulticast mode
[  224.073012][ T8181] dummy0: entered promiscuous mode
[  224.080406][ T8181] macsec1: entered promiscuous mode
[  224.085749][ T8181] macsec1: entered allmulticast mode
[  224.092377][ T8181] dummy0: entered allmulticast mode
[  224.102753][ T8181] dummy0: left allmulticast mode
[  224.126339][ T8181] dummy0: left promiscuous mode
[  224.178980][  T918] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e
[  224.200964][  T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.253042][  T918] usb 1-1: Product: syz
[  224.280867][  T918] usb 1-1: Manufacturer: syz
[  224.302545][  T918] usb 1-1: SerialNumber: syz
[  224.315262][ T8205] usb usb8: usbfs: process 8205 (syz.4.612) did not claim interface 0 before use
[  224.331524][  T918] usb 1-1: config 0 descriptor??
[  224.380069][ T8189] bond3: entered promiscuous mode
[  224.387156][  T918] hub 1-1:0.0: bad descriptor, ignoring hub
[  224.407716][ T8189] bond3: entered allmulticast mode
[  224.416478][ T8189] 8021q: adding VLAN 0 to HW filter on device bond3
[  224.423023][  T918] hub 1-1:0.0: probe with driver hub failed with error -5
[  224.439797][ T8194] bridge3: entered promiscuous mode
[  224.445338][ T8194] bridge3: entered allmulticast mode
[  224.451715][ T8194] bond3: (slave bridge3): Enslaving as a backup interface with an up link
[  224.473363][  T918] usbsevseg 1-1:0.0: USB 7 Segment device now attached
[  224.510365][   T49] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  224.657435][   T49] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  225.122186][ T8222] netlink: 'syz.2.616': attribute type 1 has an invalid length.
[  225.467204][ T8225] bond4: (slave bridge4): Enslaving as a backup interface with an up link
[  225.517423][ T5928] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  225.766135][ T5928] usb 5-1: config 0 has no interfaces?
[  225.786112][ T5928] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  225.964245][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.990314][ T5928] usb 5-1: Product: syz
[  225.994515][ T5928] usb 5-1: Manufacturer: syz
[  226.014972][ T5928] usb 5-1: SerialNumber: syz
[  226.032417][ T5928] usb 5-1: config 0 descriptor??
[  226.147751][ T5927] usb 1-1: USB disconnect, device number 28
[  226.158148][ T5927] usbsevseg 1-1:0.0: USB 7 Segment now disconnected
[  226.267538][  T918] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  226.328627][ T5927] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  226.419513][  T918] usb 2-1: Using ep0 maxpacket: 32
[  226.421803][  T918] usb 2-1: unable to get BOS descriptor or descriptor too short
[  226.422941][  T918] usb 2-1: config 129 has an invalid interface number: 249 but max is 0
[  226.422957][  T918] usb 2-1: config 129 has no interface number 0
[  226.422982][  T918] usb 2-1: config 129 interface 249 altsetting 247 bulk endpoint 0x81 has invalid maxpacket 32
[  226.422994][  T918] usb 2-1: config 129 interface 249 altsetting 247 bulk endpoint 0xA has invalid maxpacket 164
[  226.423006][  T918] usb 2-1: config 129 interface 249 has no altsetting 0
[  226.424621][  T918] usb 2-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38
[  226.424637][  T918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.424647][  T918] usb 2-1: Product: syz
[  226.424655][  T918] usb 2-1: Manufacturer: syz
[  226.424662][  T918] usb 2-1: SerialNumber: syz
[  226.427021][ T8229] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  226.427090][ T8229] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  226.510861][ T5927] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  226.510884][ T5927] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  226.510896][ T5927] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  226.510919][ T5927] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  226.510931][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.518258][ T5927] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22
[  226.712121][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'.
[  226.712197][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.621'.
[  226.729313][ T5913] usb 3-1: USB disconnect, device number 16
[  226.936841][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'.
[  226.983310][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.621'.
[  227.307238][ T8253] dummy0: entered promiscuous mode
[  227.312851][ T8253] macsec1: entered promiscuous mode
[  227.320409][ T8253] macsec1: entered allmulticast mode
[  227.325833][ T8253] dummy0: entered allmulticast mode
[  227.334230][ T8253] dummy0: left allmulticast mode
[  227.348101][ T8253] dummy0: left promiscuous mode
[  227.351050][  T918] smsc95xx v2.0.0
[  227.393640][  T918] smsc95xx 2-1:129.249 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  227.428002][  T918] smsc95xx 2-1:129.249: probe with driver smsc95xx failed with error -71
[  227.548944][ T8260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  227.556434][ T8260] IPv6: NLM_F_CREATE should be set when creating new route
[  227.563679][ T8260] IPv6: NLM_F_CREATE should be set when creating new route
[  227.607266][  T918] usb 2-1: USB disconnect, device number 25
[  227.674307][ T8262] FAULT_INJECTION: forcing a failure.
[  227.674307][ T8262] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  227.702948][ T8262] CPU: 0 UID: 0 PID: 8262 Comm: syz.1.627 Not tainted syzkaller #0 PREEMPT(full) 
[  227.702987][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  227.702998][ T8262] Call Trace:
[  227.703004][ T8262]  <TASK>
[  227.703010][ T8262]  dump_stack_lvl+0x189/0x250
[  227.703035][ T8262]  ? __pfx____ratelimit+0x10/0x10
[  227.703051][ T8262]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.703068][ T8262]  ? __pfx__printk+0x10/0x10
[  227.703083][ T8262]  ? __might_fault+0xb0/0x130
[  227.703117][ T8262]  should_fail_ex+0x414/0x560
[  227.703145][ T8262]  _copy_from_user+0x2d/0xb0
[  227.703165][ T8262]  ___sys_sendmsg+0x158/0x2a0
[  227.703191][ T8262]  ? __pfx____sys_sendmsg+0x10/0x10
[  227.703241][ T8262]  ? __fget_files+0x2a/0x420
[  227.703255][ T8262]  ? __fget_files+0x3a0/0x420
[  227.703279][ T8262]  __x64_sys_sendmsg+0x19b/0x260
[  227.703301][ T8262]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  227.703330][ T8262]  ? __pfx_ksys_write+0x10/0x10
[  227.703345][ T8262]  ? rcu_is_watching+0x15/0xb0
[  227.703366][ T8262]  ? do_syscall_64+0xbe/0x3b0
[  227.703387][ T8262]  do_syscall_64+0xfa/0x3b0
[  227.703401][ T8262]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.703415][ T8262]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.703431][ T8262]  ? clear_bhb_loop+0x60/0xb0
[  227.703450][ T8262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.703463][ T8262] RIP: 0033:0x7f51ad58eec9
[  227.703478][ T8262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.703492][ T8262] RSP: 002b:00007f51ae4b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  227.703508][ T8262] RAX: ffffffffffffffda RBX: 00007f51ad7e5fa0 RCX: 00007f51ad58eec9
[  227.703520][ T8262] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000003
[  227.703530][ T8262] RBP: 00007f51ae4b0090 R08: 0000000000000000 R09: 0000000000000000
[  227.703539][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.703548][ T8262] R13: 00007f51ad7e6038 R14: 00007f51ad7e5fa0 R15: 00007f51ad90fa28
[  227.703575][ T8262]  </TASK>
[  227.911025][    C0] vkms_vblank_simulate: vblank timer overrun
[  228.035311][ T8260] ------------[ cut here ]------------
[  228.041244][ T8260] WARNING: CPU: 0 PID: 8260 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xed8/0x1080
[  228.052021][ T8260] Modules linked in:
[  228.056169][ T8260] CPU: 0 UID: 0 PID: 8260 Comm: syz.2.626 Not tainted syzkaller #0 PREEMPT(full) 
[  228.065979][ T8260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  228.076358][ T8260] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080
[  228.082538][ T8260] Code: fa be 02 00 00 00 eb 0a e8 15 8b ea fa be 01 00 00 00 4c 89 f7 e8 d8 62 af fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 f9 8a ea fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35
[  228.102485][ T8260] RSP: 0018:ffffc9001bf47008 EFLAGS: 00010293
[  228.108917][ T8260] RAX: ffffffff86d38b27 RBX: 0000000000000002 RCX: ffff88807f091e00
[  228.117102][ T8260] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[  228.125614][ T8260] RBP: dffffc0000000000 R08: ffff888057888c2f R09: 1ffff1100af11185
[  228.133929][ T8260] R10: dffffc0000000000 R11: ffffed100af11186 R12: ffff88807db61000
[  228.141952][ T8260] R13: ffffc9001bf47180 R14: 0000000000000001 R15: ffffc9001bf47198
[  228.149986][ T8260] FS:  00007f4dda7b36c0(0000) GS:ffff88812637e000(0000) knlGS:0000000000000000
[  228.158943][ T8260] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  228.165534][ T8260] CR2: 00007fe058450f98 CR3: 000000002ca90000 CR4: 00000000003526f0
[  228.173550][ T8260] DR0: 0000000000006842 DR1: 0000000000000000 DR2: 0000000000000000
[  228.181546][ T8260] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  228.189573][ T8260] Call Trace:
[  228.192854][ T8260]  <TASK>
[  228.195788][ T8260]  notifier_call_chain+0x1b6/0x3e0
[  228.200994][ T8260]  ? atomic_notifier_call_chain+0x26/0x180
[  228.206791][ T8260]  atomic_notifier_call_chain+0xda/0x180
[  228.212452][ T8260]  call_fib_notifiers+0x31/0x60
[  228.217570][ T8260]  call_fib6_multipath_entry_notifiers+0xe6/0x150
[  228.224018][ T8260]  ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10
[  228.231752][ T8260]  ? inet6_rtm_newroute+0xe8b/0x18c0
[  228.237072][ T8260]  inet6_rtm_newroute+0x12f5/0x18c0
[  228.239580][ T8272] kernel read not supported for file / 
�7���âW)�s���!Q���fs�l{T�r�)r��O���2:"��T+͟v|�ղDvc���֠rXY� (pid: 8272 comm: syz.1.629)
[  228.242828][ T8260]  ? nlmon_xmit+0xb0/0x100
[  228.258195][   T30] audit: type=1800 audit(1759220657.589:60): pid=8272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.629" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0727F185805599819 dev="mqueue" ino=19748 res=0 errno=0
[  228.261119][ T8260]  ? kmem_cache_free+0x18f/0x400
[  228.292642][    C0] vkms_vblank_simulate: vblank timer overrun
[  228.293212][   T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  228.297767][ T8260]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  228.297802][ T8260]  ? __local_bh_enable_ip+0x12d/0x1c0
[  228.297833][ T8260]  ? __dev_queue_xmit+0x27b/0x3b50
[  228.327764][ T8260]  ? __dev_queue_xmit+0x1d79/0x3b50
[  228.333309][ T8260]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  228.338893][ T8260]  rtnetlink_rcv_msg+0x7cc/0xb70
[  228.343846][ T8260]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  228.348979][ T8260]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  228.354422][ T8260]  ? ref_tracker_free+0x63a/0x7d0
[  228.359464][ T8260]  ? __asan_memcpy+0x40/0x70
[  228.364080][ T8260]  ? __pfx_ref_tracker_free+0x10/0x10
[  228.369458][ T8260]  ? __skb_clone+0x63/0x7a0
[  228.373950][ T8260]  netlink_rcv_skb+0x208/0x470
[  228.378777][ T8260]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  228.384260][ T8260]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  228.389574][ T8260]  ? netlink_deliver_tap+0x2e/0x1b0
[  228.394759][ T8260]  netlink_unicast+0x82c/0x9e0
[  228.399559][ T8260]  ? __pfx_netlink_unicast+0x10/0x10
[  228.404839][ T8260]  ? netlink_sendmsg+0x642/0xb30
[  228.409816][ T8260]  ? skb_put+0x11b/0x210
[  228.414063][ T8260]  netlink_sendmsg+0x805/0xb30
[  228.418850][ T8260]  ? __pfx_netlink_sendmsg+0x10/0x10
[  228.424120][ T8260]  ? aa_sock_msg_perm+0xf1/0x1d0
[  228.429077][ T8260]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  228.434713][ T8260]  ? __pfx_netlink_sendmsg+0x10/0x10
[  228.440333][ T8260]  __sock_sendmsg+0x21c/0x270
[  228.444999][ T8260]  ____sys_sendmsg+0x505/0x830
[  228.449797][ T8260]  ? __pfx_____sys_sendmsg+0x10/0x10
[  228.455072][ T8260]  ? import_iovec+0x74/0xa0
[  228.459609][ T8260]  ___sys_sendmsg+0x21f/0x2a0
[  228.464296][ T8260]  ? __pfx____sys_sendmsg+0x10/0x10
[  228.469533][ T8260]  ? __fget_files+0x2a/0x420
[  228.474107][ T8260]  ? __fget_files+0x3a0/0x420
[  228.478799][ T8260]  __x64_sys_sendmsg+0x19b/0x260
[  228.483745][ T8260]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  228.489236][ T8260]  ? rcu_is_watching+0x15/0xb0
[  228.493991][ T8260]  ? do_syscall_64+0xbe/0x3b0
[  228.498706][ T8260]  do_syscall_64+0xfa/0x3b0
[  228.503199][ T8260]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.508421][ T8260]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.514484][ T8260]  ? clear_bhb_loop+0x60/0xb0
[  228.519180][ T8260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.525063][ T8260] RIP: 0033:0x7f4dd998eec9
[  228.529488][ T8260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  228.549084][    C0] vkms_vblank_simulate: vblank timer overrun
[  228.555499][ T8260] RSP: 002b:00007f4dda7b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  228.564245][ T8260] RAX: ffffffffffffffda RBX: 00007f4dd9be5fa0 RCX: 00007f4dd998eec9
[  228.572238][ T8260] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  228.580263][ T8260] RBP: 00007f4dd9a11f91 R08: 0000000000000000 R09: 0000000000000000
[  228.588260][ T8260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.596219][ T8260] R13: 00007f4dd9be6038 R14: 00007f4dd9be5fa0 R15: 00007f4dd9d0fa28
[  228.604217][ T8260]  </TASK>
[  228.607226][ T8260] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  228.614488][ T8260] CPU: 0 UID: 0 PID: 8260 Comm: syz.2.626 Not tainted syzkaller #0 PREEMPT(full) 
[  228.623663][ T8260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  228.633702][ T8260] Call Trace:
[  228.636965][ T8260]  <TASK>
[  228.639884][ T8260]  dump_stack_lvl+0x99/0x250
[  228.644460][ T8260]  ? __asan_memcpy+0x40/0x70
[  228.649032][ T8260]  ? __pfx_dump_stack_lvl+0x10/0x10
[  228.654212][ T8260]  ? __pfx__printk+0x10/0x10
[  228.658783][ T8260]  vpanic+0x281/0x750
[  228.662745][ T8260]  ? __pfx__printk+0x10/0x10
[  228.667311][ T8260]  ? __pfx_vpanic+0x10/0x10
[  228.671805][ T8260]  ? is_bpf_text_address+0x26/0x2b0
[  228.676985][ T8260]  panic+0xb9/0xc0
[  228.680686][ T8260]  ? __pfx_panic+0x10/0x10
[  228.685088][ T8260]  __warn+0x31b/0x4b0
[  228.689050][ T8260]  ? nsim_fib_event_nb+0xed8/0x1080
[  228.694233][ T8260]  ? nsim_fib_event_nb+0xed8/0x1080
[  228.699409][ T8260]  report_bug+0x2be/0x4f0
[  228.703718][ T8260]  ? nsim_fib_event_nb+0xed8/0x1080
[  228.708897][ T8260]  ? nsim_fib_event_nb+0xed8/0x1080
[  228.714095][ T8260]  ? nsim_fib_event_nb+0xeda/0x1080
[  228.719292][ T8260]  handle_bug+0x84/0x160
[  228.723517][ T8260]  exc_invalid_op+0x1a/0x50
[  228.727999][ T8260]  asm_exc_invalid_op+0x1a/0x20
[  228.732828][ T8260] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080
[  228.738620][ T8260] Code: fa be 02 00 00 00 eb 0a e8 15 8b ea fa be 01 00 00 00 4c 89 f7 e8 d8 62 af fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 f9 8a ea fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35
[  228.758207][ T8260] RSP: 0018:ffffc9001bf47008 EFLAGS: 00010293
[  228.764265][ T8260] RAX: ffffffff86d38b27 RBX: 0000000000000002 RCX: ffff88807f091e00
[  228.772228][ T8260] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[  228.780186][ T8260] RBP: dffffc0000000000 R08: ffff888057888c2f R09: 1ffff1100af11185
[  228.788141][ T8260] R10: dffffc0000000000 R11: ffffed100af11186 R12: ffff88807db61000
[  228.796118][ T8260] R13: ffffc9001bf47180 R14: 0000000000000001 R15: ffffc9001bf47198
[  228.804076][ T8260]  ? nsim_fib_event_nb+0xed7/0x1080
[  228.809267][ T8260]  ? nsim_fib_event_nb+0xed7/0x1080
[  228.814455][ T8260]  notifier_call_chain+0x1b6/0x3e0
[  228.819547][ T8260]  ? atomic_notifier_call_chain+0x26/0x180
[  228.825332][ T8260]  atomic_notifier_call_chain+0xda/0x180
[  228.830956][ T8260]  call_fib_notifiers+0x31/0x60
[  228.835803][ T8260]  call_fib6_multipath_entry_notifiers+0xe6/0x150
[  228.842210][ T8260]  ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10
[  228.849228][ T8260]  ? inet6_rtm_newroute+0xe8b/0x18c0
[  228.854502][ T8260]  inet6_rtm_newroute+0x12f5/0x18c0
[  228.859685][ T8260]  ? nlmon_xmit+0xb0/0x100
[  228.864081][ T8260]  ? kmem_cache_free+0x18f/0x400
[  228.869010][ T8260]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  228.874536][ T8260]  ? __local_bh_enable_ip+0x12d/0x1c0
[  228.879891][ T8260]  ? __dev_queue_xmit+0x27b/0x3b50
[  228.884984][ T8260]  ? __dev_queue_xmit+0x1d79/0x3b50
[  228.890196][ T8260]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  228.895727][ T8260]  rtnetlink_rcv_msg+0x7cc/0xb70
[  228.900646][ T8260]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  228.905733][ T8260]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  228.911167][ T8260]  ? ref_tracker_free+0x63a/0x7d0
[  228.916170][ T8260]  ? __asan_memcpy+0x40/0x70
[  228.920738][ T8260]  ? __pfx_ref_tracker_free+0x10/0x10
[  228.926085][ T8260]  ? __skb_clone+0x63/0x7a0
[  228.930577][ T8260]  netlink_rcv_skb+0x208/0x470
[  228.935323][ T8260]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  228.940759][ T8260]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  228.946030][ T8260]  ? netlink_deliver_tap+0x2e/0x1b0
[  228.951216][ T8260]  netlink_unicast+0x82c/0x9e0
[  228.955964][ T8260]  ? __pfx_netlink_unicast+0x10/0x10
[  228.961227][ T8260]  ? netlink_sendmsg+0x642/0xb30
[  228.966141][ T8260]  ? skb_put+0x11b/0x210
[  228.970368][ T8260]  netlink_sendmsg+0x805/0xb30
[  228.975115][ T8260]  ? __pfx_netlink_sendmsg+0x10/0x10
[  228.980378][ T8260]  ? aa_sock_msg_perm+0xf1/0x1d0
[  228.985295][ T8260]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  228.990554][ T8260]  ? __pfx_netlink_sendmsg+0x10/0x10
[  228.995824][ T8260]  __sock_sendmsg+0x21c/0x270
[  229.000481][ T8260]  ____sys_sendmsg+0x505/0x830
[  229.005226][ T8260]  ? __pfx_____sys_sendmsg+0x10/0x10
[  229.010494][ T8260]  ? import_iovec+0x74/0xa0
[  229.014978][ T8260]  ___sys_sendmsg+0x21f/0x2a0
[  229.019636][ T8260]  ? __pfx____sys_sendmsg+0x10/0x10
[  229.024833][ T8260]  ? __fget_files+0x2a/0x420
[  229.029402][ T8260]  ? __fget_files+0x3a0/0x420
[  229.034059][ T8260]  __x64_sys_sendmsg+0x19b/0x260
[  229.038979][ T8260]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  229.044434][ T8260]  ? rcu_is_watching+0x15/0xb0
[  229.049201][ T8260]  ? do_syscall_64+0xbe/0x3b0
[  229.053862][ T8260]  do_syscall_64+0xfa/0x3b0
[  229.058345][ T8260]  ? lockdep_hardirqs_on+0x9c/0x150
[  229.063540][ T8260]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.069591][ T8260]  ? clear_bhb_loop+0x60/0xb0
[  229.074245][ T8260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.080118][ T8260] RIP: 0033:0x7f4dd998eec9
[  229.084520][ T8260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.104109][ T8260] RSP: 002b:00007f4dda7b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.112508][ T8260] RAX: ffffffffffffffda RBX: 00007f4dd9be5fa0 RCX: 00007f4dd998eec9
[  229.120462][ T8260] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  229.128411][ T8260] RBP: 00007f4dd9a11f91 R08: 0000000000000000 R09: 0000000000000000
[  229.136361][ T8260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  229.144309][ T8260] R13: 00007f4dd9be6038 R14: 00007f4dd9be5fa0 R15: 00007f4dd9d0fa28
[  229.152272][ T8260]  </TASK>
[  229.155544][ T8260] Kernel Offset: disabled
[  229.159853][ T8260] Rebooting in 86400 seconds..