last executing test programs:

9.388090386s ago: executing program 1 (id=482):
socket$inet(0x2, 0x0, 0x4)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x360, 0x0, 0x0, 0x148, 0x0, 0x148, 0x2c8, 0x240, 0x240, 0x2c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x38}, 0xff, 0xffffffff, 'veth1\x00', 'ip6gretap0\x00', {0xff}, {}, 0x5e, 0x1, 0x12}, 0x0, 0x198, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}, @common=@addrtype={{0x30}, {0x0, 0x800}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x6, 0x5, 0x2, 0x0, 0x4], 0x1, 0x6}, {0x0, [0x4, 0x1, 0x0, 0x7, 0x6, 0x2], 0x1, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0)
quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0)
mkdir(0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
epoll_create(0x3)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000019b40)=""/102397, 0x18ffd}, {&(0x7f0000000180)=""/61, 0x3d}], 0x2, 0x0, 0xa)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298)
memfd_create(0x0, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r6, &(0x7f00000001c0)={'exec ', ':\x00~\x14-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7gD#\x03\x1c\xee\xaa\xdd\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xabq\xeb\x8b;F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'ej\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\xed\x80\fkt\xed\xdb|\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed['}, 0xb0)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53048c3)
close(r7)
execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000060000002000018014000200766574683100000000000000000000000800030004000000c2cd8a381b8aaf64475e102dd6349d054352236bad4a87be9af8e5461107a7077977056dc58484214e20deb0b2d2f4fe639421804b84074e1bbc4548c669928e27a064001c11fc8af5c815463e4fddef90cba2ab66bbe01ce8d57b478fab720014518981c7adea69e8db95d41e97bd0e2b4c648554445b243bbb5c8e8abe0351faa72390e47a"], 0x34}, 0x1, 0x0, 0x0, 0x4040844}, 0x8000)

9.38765104s ago: executing program 4 (id=483):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x6, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/config', 0x0, 0x0)
lseek(r5, 0x7fb, 0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0)
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000200)=0xa1)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000080))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
io_setup(0xeb0, &(0x7f0000000140)=<r6=>0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
io_submit(r6, 0x1, &(0x7f0000001780)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
io_cancel(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0xac}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})

8.734061201s ago: executing program 4 (id=485):
socket$nl_netfilter(0x10, 0x3, 0xc)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@iter={0x0}}, 0x40)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x22ac81)
r2 = dup3(r0, r1, 0x0)
ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x2})
ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0))
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
mlockall(0x0)
fstat(r3, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000040da074d1048e5000203010902"], &(0x7f0000000440)={0x0, 0x0, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00'], 0x1555571d})
socket(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1}, &(0x7f0000000040), &(0x7f0000000100)='%-5lx  \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='udp_fail_queue_rcv_skb\x00', r3}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
fadvise64(r4, 0x0, 0x0, 0x3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x477e, 0x25)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f0000000300)=0x7c, 0x4)
recvmmsg(r5, &(0x7f00000091c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000007640)=""/23, 0x17}}], 0x1, 0x45833af92e4b39ff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))

7.114075687s ago: executing program 1 (id=487):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x48)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc)
preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0xfa}, {&(0x7f0000000000)=""/183, 0xb7}, {&(0x7f0000001500)=""/208, 0xd0}, {&(0x7f00000010c0)=""/42, 0x2a}, {0x0}, {0x0}], 0x6, 0x4, 0x0)
semget$private(0x0, 0x6, 0x14b)
read$hiddev(r0, &(0x7f0000001100)=""/234, 0xea)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e0501460c1f00c7f641737da8c5df97e629d54f8eef8f4b4c287248623393943b5ba71f4c252077dee7cda5f191af639f6bc9ccce6307303924e47e62deed5d1bb5921eea00000c30f73971da9388b9ec29139dedf9d61d113d31eeef342c9d"], 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700), 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x8, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="00000000e70b00000000000000000008"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000780)=""/4096}, 0x90)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11)
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x4)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x0, 0x0, 0x4000}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r4, 0x5501)
ioctl$UI_DEV_DESTROY(r4, 0x5502)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)

6.970441188s ago: executing program 3 (id=488):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0xf, 0x1, 0x80000000)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
close(r2)
syz_emit_ethernet(0x4e, &(0x7f0000000f80)=ANY=[], 0x0)
io_setup(0x20, 0x0)
io_submit(0x0, 0x0, 0x0)
unshare(0x6a040000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x32, 0x14, 0x0, 0x0, 0x3, 0x0, 0x0, @broadcast, @remote}}}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

6.714400311s ago: executing program 2 (id=489):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0xf, 0x1, 0x80000000)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}}, 0x0)
close(r2)
syz_emit_ethernet(0x4e, &(0x7f0000000f80)=ANY=[], 0x0)
io_setup(0x20, &(0x7f0000001140)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)
unshare(0x6a040000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x32, 0x14, 0x0, 0x0, 0x3, 0x0, 0x0, @broadcast, @remote}}}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

6.48033316s ago: executing program 1 (id=490):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0xf, 0x1, 0x80000000)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}}, 0x0)
close(r2)
syz_emit_ethernet(0x4e, &(0x7f0000000f80)=ANY=[], 0x0)
io_setup(0x20, &(0x7f0000001140)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)
unshare(0x6a040000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x32, 0x14, 0x0, 0x0, 0x3, 0x0, 0x0, @broadcast, @remote}}}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

6.386974045s ago: executing program 4 (id=491):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf988", 0x7e, r0)
r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r1, r2}, &(0x7f00000002c0)=""/250, 0xfa, &(0x7f0000000400)={&(0x7f00000003c0)={'sha224-generic\x00'}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_GET_PIT(r4, 0x400caed0, &(0x7f0000000300))
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="400302000000020a48d89a79c41c37d02086b3a5b5def021c58bb5cc35b9c687c195bd1a236d321b5ef5ec9124b944da4f4ab04d841f079e2bfdec6bb244eb5bd9d2099db31c9beeaa0c01cda23a79248c01f35aa932a177bcc010e44ee98de0c72f139701580b6277ef8cf82247738940bb7d0165becf3b9a845c5bc86bc807cbc8a30a0b55874a0561aa01664f4e75a6e4eff86c859b57a18245e6fe45a8e4608f0b793566632b5ea04615b82d6a0bbf197c6d73b6efdeb89dd86f09a653ac4720ba866183746aad59cd00a356eb29a4b865cf66462c7d971348a37b26a40f0f1bf75c2dbb06262853b60cde75ed43a6af3c823673c91e6898dff4146162ff83953116e95c"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000b80)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = eventfd2(0x1, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080))
read$eventfd(r6, &(0x7f0000000000), 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r8 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
utimensat(r8, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0xffffffffffffffff}}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
r9 = syz_io_uring_setup(0x36dc, &(0x7f0000000140)={0x0, 0xe9da, 0x400, 0x1, 0x255}, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_setup(0x6c81, &(0x7f00000001c0)={0x0, 0xb840, 0x800, 0x3, 0x25a, 0x0, r9})
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042)
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900482f00fc020000000000000000000003ff0000ff020000400000000000000000000001242088a8000000000004000000000800000086dd88a888be08000000100000000100000000000000080022eb00000000200000000200000000000000000100000800655800000000"], 0x0)

5.973096521s ago: executing program 3 (id=493):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000540)='GPL\x00', 0x6, 0xfb, &(0x7f0000000580)=""/251, 0x40f00, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x10, 0x8, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x101}, 0x90)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000800)=r1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x64, 0x65, 0x0, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xf6, 0x5}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6, 0x25, 0xfffe}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}]}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x11, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0xc, 0xffff, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000240), 0x20000000}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000140), &(0x7f0000000240)=""/101}, 0x20)
r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0x19, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000100)={0x28, 0x4, r5, r7, 0x5, 0xa05, 0x1ff})
ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000380)={"740e00", 0x0, 0x6, 0x2, 0x0, 0x0, '\x00', "000000f5", '\x00\x00\x00N', "10004800", ["efc1c7c5ffff7fefff650306", "00431943860000ec0000bdff", "345e417e7fffff31fff200", "0000201b0000000000000f00"]})
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}}, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000040)=0xc, 0x4)
recvmmsg(r9, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000380)=""/252, 0xfc}], 0x1, &(0x7f0000001e40)=""/23, 0x17}}], 0x1, 0x0, 0x0)
r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
sendfile(r10, r10, 0x0, 0x5)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r10, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000000300)=0x2)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0xfffffffffffffe3a, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)

5.658238986s ago: executing program 2 (id=495):
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001)
prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000))
r1 = io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x1, 0x63})
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r2)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xd4a4})
fcntl$lock(r2, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f00000000c0)=0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000300)=[{0x45, 0x0, 0x2}, {}, {0x4}, {}, {0x6, 0x0, 0x0, 0x1}]})
syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x800002)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
close_range(r1, 0xffffffffffffffff, 0x0)

5.429598585s ago: executing program 1 (id=496):
syz_usb_connect$uac1(0x0, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d00004000010203010902780003010000000904000000010100000a2401000000020000000080000001008e78"], 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000200))
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00')
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x200000100000011, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
pipe(&(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2c, 0x803, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRES64=r3])

5.399934708s ago: executing program 3 (id=497):
socket$alg(0x26, 0x5, 0x0)
fsopen(&(0x7f00000003c0)='ext3\x00', 0x0)
r0 = syz_usbip_server_init(0x3)
socket$l2tp6(0xa, 0x2, 0x73)
write(r0, &(0x7f0000000f40)="b410a1e8252ce0a1a3be3d593e8bf96f9615aea940ed08d314cbc50631fb02a0647a3c2ed4c85c8eef57d078ec90823a", 0x30)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
mbind(&(0x7f0000596000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3)
msgget$private(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, &(0x7f0000000100)={0x89, 0x58, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra, @generic={0x0, 0x2b5, "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"}]}, 0x2c8)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=@ethtool_ts_info})
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0)
read$FUSE(r6, &(0x7f000001aa80)={0x2020}, 0x2020)
syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100002ba7b040480b03200174000000010902120001000000000904"], 0x0)

4.548612455s ago: executing program 2 (id=498):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0xb4, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{}, {}, {}, {}, {}, {}, {}]}}, @TCA_BPF_FLAGS={0x8}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x2}}]}}]}, 0xb4}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000140)="2a6964b6e862bbb7ace52f4024afa4a037aa7a2c42a917c9800a8355448b1022eb5829e387283555dbf20602b0befa124cf1", 0x32}], 0x1, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
syz_emit_ethernet(0x11, &(0x7f00000002c0)={@remote, @random="6b8e22dbf1a0", @void, {@llc_tr={0x11, {@llc={0x0, 0x0, "bf"}}}}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0)
r7 = dup(r5)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r10, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
listen(r10, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x10, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @md5sig={0x13, 0x12, "c851616c0500cb080000000000e79490"}, @sack={0x5, 0xa, [0x0, 0x0]}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @mptcp=@capable={0x1e, 0xc}]}}}}}}}, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000606375a857db40d41204b810f7a567d541ff676d498a0f1112d88dc37b045efdee26dd1e7b988d0bf2b4843f45abec9eff072f4441e7f07a2b3c569e69f0fd03189c9dc4cb6bb4c01442f387f0372094ce9cf50c59bf1abab0fd0b0254898f4a470c329eafa76acffdaba9010cae839c06fe3e9fc05bf7149c3d01000080a21b4e023eeb657d9d1610f959960361119827b16e947a8879219eb2a5782503d3044211e43567d08f86106c83da3d53e2954037305cbffe242ab85a00"/204, @ANYRES16=r2, @ANYBLOB="010000000000000000001900000008000300", @ANYRES32=r3, @ANYBLOB="0500a20000000000050060003100000006006d0000000000"], 0x34}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)

4.143879144s ago: executing program 2 (id=500):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x9, 0x0, 0x1}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x3c33)
r3 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1)
ioctl$USBDEVFS_CONTROL(r3, 0x8008551d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000800000000000000007008018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7060000190000008500000005000000bc0900000000000035090100000900009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff000000002f8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000003f9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd000})
write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r8=>0x0})
bind$can_raw(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=@mpls_newroute={0x154, 0x18, 0x400, 0x70bd2c, 0x25dfdbfe, {0x1c, 0x14, 0x0, 0xfc, 0xff, 0x3, 0xc8, 0xa, 0x800}, [@RTA_DST={0x8, 0x1, {0x8}}, @RTA_DST={0x8, 0x1, {0xe79}}, @RTA_DST={0x8, 0x1, {0x2, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x9}, {0x8000, 0x0, 0x1}, {0x84a}, {0x0, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x1b1e, 0x0, 0x1}, {0x6}, {0x6}, {0x1}, {0x2, 0x0, 0x1}, {0x715}, {0x2, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x8}, {0x200, 0x0, 0x1}, {0x7}, {0xeb, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x3f, 0x0, 0x1}, {0x9}, {0xe7}, {0x8}, {0xff, 0x0, 0x1}, {0x9}, {0x9, 0x0, 0x1}, {0x4, 0x0, 0x1}, {}, {0xffcc0, 0x0, 0x1}, {}, {0x2}]}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x10, 0xff, r8}}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x2d, 0x7, r8}}, @RTA_NEWDST={0x84, 0x13, [{0x363}, {0x1f, 0x0, 0x1}, {0xffff}, {0x8}, {0x60, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1f, 0x0, 0x1}, {0x2e79c}, {0x5}, {0x4, 0x0, 0x1}, {0x5}, {0x5, 0x0, 0x1}, {0x2}, {0x6, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x9}, {0x7}, {0x8}, {0x9, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x1}, {0x7, 0x0, 0x1}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x1)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0)
close(r7)
fcntl$lock(r6, 0xb73a099a2ea7f93d, &(0x7f0000000380)={0x1})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2d}]})
r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r10, 0x0, &(0x7f0000000000))

3.9225717s ago: executing program 2 (id=501):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
syz_extract_tcp_res(&(0x7f00000002c0), 0xec, 0x9)
syz_emit_ethernet(0xa5, &(0x7f00000003c0)={@local, @local, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@generic={0x806, "b4c2f82f6b4d412848b6e8a0b0a5a6c454f7c7a9d211a797a922609e1891aca4f450d136017a6ef7547ac617511a19ecd82106fb420bde6ed8b06b4d372013b33a1aa21e2d88add77895380c7024f173fcf9747744d023017a3bfb79e0dc41d00b6d0ef3306cf9bbef154ae9843e6399bcc12453d82e5c441f66e94d7ef05420fcb5c7cd816093adadd215aa4dcec313da001c"}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x1c}}, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='-'], 0x28)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x2, 0x18}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0xffff, 0x2, @empty}, 0x1c)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

3.468535916s ago: executing program 3 (id=502):
ioprio_set$pid(0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet6(0xa, 0x6, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x0, 0x0, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='ext4_sync_fs\x00', r1}, 0x10)
listen(0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001780)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x6, 0x4)
listen(r3, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
accept(r2, 0x0, 0x0)
openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$KDGKBMETA(r6, 0x4b62, &(0x7f0000000040))

3.437889567s ago: executing program 1 (id=503):
socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0xffffffff, 0x0, 0x0, 0x20002, 0x0, "af99799d517effffffb429cdb400007b2364ee"})
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
write$apparmor_exec(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="737461636b200d381cd2a12f2f"], 0xf)
read$FUSE(r0, &(0x7f0000003a80)={0x2020, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc00000010000104000000000000000000480000", @ANYRES32=r6, @ANYRES32=r6], 0xbc}, 0x1, 0x0, 0x0, 0x20048090}, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb90500000001090222000100000000090400000101035100090502fffffffff000072501"], 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1f94, 0x60000000, 0x3, 0x201, r0, 0x3, '\x00', 0x0, r0, 0x3, 0x4, 0x4, 0x4}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000004000004f16cab22fafae71b8db4a6aa69904840fc4f542018b6fd589b6bf13c97cd7d025b9b9ed7ab14b29fd41804c8edbafc67cc430819e3919ed83c62b6b0dde9716a0e30117bca5d416762545a19e29edb06b51c6e05278b983fafbb183c038d3c9505ea18bd2842e5c0c1172c9c325bec3400e99e02953853bf93d952d94a1bcd59abf5eaf01634e719c32a33d5faab371fb6013b359e5015f57d304cf07364ee120fa6050e1b0703a65521599673d584f237a48bf6ef54e079f22562c444bf4b73686994463a0234010462f303ae9606f6eadb995d3c09c22d980b4e5eeac6d7e9667fd375a16ad335cf9f", @ANYRESHEX=r4], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000f0d6166b00e7e4810cf02d8347ae8edafdf14d56273b7f49a2c10a88986d", @ANYRES32=r7, @ANYRES8=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040341d0a000000000000010902240041000000897dde4e32b118000904000001030000810300"/54], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.158441138s ago: executing program 0 (id=504):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0}, 0x90)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x40}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r7, 0x0, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x1)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
epoll_create1(0x0)
syz_io_uring_setup(0x24b5, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0))
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r11, 0x6, 0x1d, &(0x7f0000000200)={0x7}, 0x14)
setsockopt$inet_mreqn(r11, 0x0, 0x23, &(0x7f0000000280)={@local, @private=0xa010100, r10}, 0xc)
r12 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r12, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r12, 0x10e, 0x1, &(0x7f0000000040)=0x12, 0x4)
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0xff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0)
r13 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x25, &(0x7f0000000200)=0x7b35, 0x4)
sendto$inet6(r13, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c)

3.087586184s ago: executing program 4 (id=505):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0xf, 0x1, 0x80000000)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0)
close(r2)
syz_emit_ethernet(0x4e, &(0x7f0000000f80)=ANY=[], 0x0)
io_setup(0x20, &(0x7f0000001140)=<r4=>0x0)
io_submit(r4, 0x0, 0x0)
unshare(0x6a040000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

2.874801372s ago: executing program 0 (id=506):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0xf, 0x1, 0x80000000)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}}, 0x0)
close(r2)
syz_emit_ethernet(0x4e, &(0x7f0000000f80)=ANY=[], 0x0)
io_setup(0x20, &(0x7f0000001140)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)
unshare(0x6a040000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x32, 0x14, 0x0, 0x0, 0x3, 0x0, 0x0, @broadcast, @remote}}}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

2.164048578s ago: executing program 3 (id=507):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000180))
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f00000101c0)={@my=0x1})
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x6a0401)
unshare(0x20040400)
creat(&(0x7f0000000040)='./file0\x00', 0x1de)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x10005)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
getpid()
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x3, 0x30}, 0xc)
sendto$inet(r3, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000280)='p', 0x1, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r4, &(0x7f0000000600)="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", 0xfd1, 0xfff, 0x0)
mq_timedreceive(r4, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000001600)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xc0, 0x148, 0x150, 0x242, 0x240, 0x150, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@icmp={{0x28}, {0x3, "4911"}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x16}, @broadcast, 0xffffffff, 0xff, 'veth1_to_bridge\x00', 'caif0\x00', {0xff}, {}, 0x2f, 0x1, 0x42}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000400)={0x0})

1.911542851s ago: executing program 4 (id=508):
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000180)={0x0, {0x5}})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x20000000)
close(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b793e3401aeb03e3a0010000000109021b0001000000000904000001a1078a00090582020000000000"], 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030009180000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000300000a0000000000000000000000000000000000000000000001000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe880000000000000000000000000001000000000000000002001300000000000000005d9053bc63e22fc8844d4814331abab429a4f23182e50ff88f6a95bd74065831577fcf83574e608aa4c13ea4ce88e7d09f1774134ce9b77cdbb04b607db2cc95477048ade35dbc8649d27da1c2415a9bdc278a2e34226c0000000000"], 0xc0}}, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x2, 0x0, 0x0, &(0x7f0000000100)=""/208, &(0x7f00000002c0)=""/155, 0xf000})
sendmsg$nl_route(r3, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000240), &(0x7f0000000380)=0x4)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000040))
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r6 = open(&(0x7f0000000100)='./file0/file0/file0\x00', 0x123500, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000140)=0x5, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
rt_sigsuspend(0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f00000003c0)={0x2f, 0x1})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

1.641715066s ago: executing program 0 (id=509):
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0x18, 0x0, 0x0, "d569e8e1dd2f1ae97ee8589301f453a0c04b1410b2eafa4496ba216b1e8ac11e"})
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x803, 0x0)
write$binfmt_script(r3, 0x0, 0xfffffe5d)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r4)
r5 = socket(0xa, 0x1, 0x0)
close(r5)
sendmmsg$inet_sctp(r5, &(0x7f00000019c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000802000000000000000000000000000000000000004b1fa6ac"], 0x30}], 0x1, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYRESDEC], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r6, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c884}, 0x0)
socket(0x10, 0x803, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r7, 0x29, 0x33, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4)
vmsplice(r8, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(r8, 0x407, 0x10005)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r9)

1.511951089s ago: executing program 2 (id=510):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000040)={@in, 0x0, 0x0, 0x0, 0x0, "f55f817bc06c88f47480ab5a58b45baf660401c8bc69351dac1f1747678b1958be4f737c06ed8b91cfcb18062bc5832e880319bf07279cd8bb654dd3911a359dbee08f634402630b53fa8ce128836865"}, 0xd8)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000040)={{@my=0x1}, 0xfffffffffffffeec})
r1 = add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r1)
gettid()
r2 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaeaaaaaaaaaaaa07000000cd60e400ff0038"], 0x0)
sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f86dd", 0x5ea}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
open(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x36)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000"], 0x0}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1)
tkill(0x0, 0x0)
keyctl$clear(0x7, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000200)='C', 0x1, r1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800900"], 0x48}}, 0x0)

1.295452463s ago: executing program 0 (id=511):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
close(r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x78}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r8, 0xc99752fbd6bf8f05, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080)
unshare(0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3b, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x8, 0xa, 0x0, 0x1, [@generic="4efeecac"]}]}, 0x20}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)

1.089242012s ago: executing program 3 (id=512):
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@multicast2, 0x0, 0x4}, {@in=@loopback, 0x0, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, {0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x8, {0x0, 0x0, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xe}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x0)
unshare(0x2c020400)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1405, 0x131, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000540))
syz_open_procfs$userns(0x0, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}, "2b23ca5ed9707954c7310801"}}}}}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000500)={@local, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev, @multicast1, @random="e374636d35dc", @multicast1}}}}, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pwritev2(r3, &(0x7f0000000600), 0x0, 0x0, 0xffff, 0x0)
write$sequencer(0xffffffffffffffff, 0x0, 0x0)
write$UHID_CREATE(r3, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, &(0x7f0000001040))

555.01558ms ago: executing program 0 (id=513):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x500}, {}]}})
sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="02060000020000e50000000000000000"], 0x10}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c9935f2bb8007f35e9836832e07e9b571d838b29621252ce5f8cf8388f1840b1442957c8f4e8d4492900dd9645d88454b74a36ebf3b8a4a634f733317480fabd1d833e4d47098b7a74f12149d1bb3ae19d91a12013a417567f187239c3940d5f89c391eb220a9b61d2bf04b5323b079caf3c19d098bf232a4796f0ec7bb8c10474f2eea0199e09363a0ed00dd3e9f759c20ea320feb7e6911d81", @ANYRES16=r3, @ANYBLOB="0500ffffffff000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000b00000060000000cf000e0080000000080211000001080211000001505050505050000000000000000000006400000000060101010101010301010602070005750000007adc21b58f24e0ee963a73f337a51c30819317c95b2bb6a0a870aae8a88f528ea67e7bc956aced2f3c31f8e7c0473cbe05a641f71c705c076ca4b8677b270519a4970295d3adbba2ed2c6f98ee5e162c7f0cb8b5c0c05ba5e5edfe8d13eddef3995dfe1eb15498eb2b1a88ed94412d4af59625030084042a0100720603030303030371070000000000005876060000000000000004000f00080026006c09000008000c006400000004000501"], 0x110}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000dc159217e6e2ec00", @ANYRES16=r5, @ANYBLOB="0106000000000000000045000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044004}, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140))
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x7ff}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r7}, 0x38)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100), &(0x7f00000001c0)=0xffffffffffffff66)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
r10 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x85, 0x0, &(0x7f0000000540))
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000005c0)=@assoc_id=r11, 0x4)
ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000600)={0x4})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)

202.026877ms ago: executing program 1 (id=514):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCCBRK(r0, 0x5428)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
syz_io_uring_setup(0x24f9, &(0x7f0000002ec0), &(0x7f00000000c0), &(0x7f0000000140)=<r4=>0x0)
r5 = memfd_secret(0x0)
ftruncate(r5, 0x3)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xe, 0x2, 0x1, 0x0, 'syzkaller\x00'}, @NFTA_LOG_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x302, 0x0, 0x0, {0x2, 0x0, 0x5}}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}]}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}}], {0x14}}, 0x110}}, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb5, &(0x7f00000002c0), &(0x7f0000000080)=0x4)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000002, 0x11, r5, 0x0)
syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, 0x0})

182.313673ms ago: executing program 4 (id=515):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0xf, 0x1, 0x80000000)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0)
close(r2)
syz_emit_ethernet(0x4e, &(0x7f0000000f80)=ANY=[], 0x0)
io_setup(0x20, &(0x7f0000001140)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)
unshare(0x6a040000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x32, 0x14, 0x0, 0x0, 0x3, 0x0, 0x0, @broadcast, @remote}}}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

0s ago: executing program 0 (id=516):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf988", 0x7e, r0)
r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r1, r2}, &(0x7f00000002c0)=""/250, 0xfa, &(0x7f0000000400)={&(0x7f00000003c0)={'sha224-generic\x00'}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_GET_PIT(r4, 0x400caed0, &(0x7f0000000300))
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000b80)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = eventfd2(0x1, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080))
read$eventfd(r6, &(0x7f0000000000), 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r8 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
utimensat(r8, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0xffffffffffffffff}}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
r9 = syz_io_uring_setup(0x36dc, &(0x7f0000000140)={0x0, 0xe9da, 0x400, 0x1, 0x255}, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_setup(0x6c81, &(0x7f00000001c0)={0x0, 0xb840, 0x800, 0x3, 0x25a, 0x0, r9})
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042)
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900482f00fc020000000000000000000003ff0000ff020000400000000000000000000001242088a8000000000004000000000800000086dd88a888be08000000100000000100000000000000080022eb00000000200000000200000000000000000100000800655800000000"], 0x0)

kernel console output (not intermixed with test programs):

ype 2 family 0 port 6081 - 0
[  150.653412][ T6621] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  150.785189][  T975] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.931239][ T6624] netlink: 'syz.4.205': attribute type 2 has an invalid length.
[  151.110416][  T975] bridge_slave_1: left allmulticast mode
[  151.152816][  T975] bridge_slave_1: left promiscuous mode
[  151.170443][  T975] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.196738][  T975] bridge_slave_0: left allmulticast mode
[  151.210140][  T975] bridge_slave_0: left promiscuous mode
[  151.217098][  T975] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.461977][ T4618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  151.472695][ T4618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  151.482623][ T4618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  151.492041][ T4618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  151.507819][ T4618] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  151.515310][ T4618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  151.647622][ T5297] usb 4-1: USB disconnect, device number 10
[  151.977230][ T6643] dccp_invalid_packet: P.Data Offset(100) too large
[  152.410894][ T5277] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  152.646525][  T975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.678549][  T975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.681265][ T5277] usb 4-1: config 0 has too many interfaces: 87, using maximum allowed: 32
[  152.719400][ T5277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.749609][  T975] bond0 (unregistering): Released all slaves
[  152.758065][ T5277] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 87
[  152.785031][ T5277] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35
[  152.843613][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.902655][ T5277] usb 4-1: config 0 descriptor??
[  153.190606][ T6645] netlink: 40 bytes leftover after parsing attributes in process `syz.3.208'.
[  153.274641][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.326908][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.515826][  T975] hsr_slave_0: left promiscuous mode
[  153.543484][  T975] hsr_slave_1: left promiscuous mode
[  153.566618][  T975] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.603297][  T975] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.619843][ T4618] Bluetooth: hci4: command tx timeout
[  153.640113][  T975] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.648006][  T975] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.766682][  T975] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  153.790075][  T975] veth1_macvtap: left promiscuous mode
[  153.806045][  T975] veth0_macvtap: left promiscuous mode
[  153.825866][  T975] veth1_vlan: left promiscuous mode
[  153.828633][ T6683] fuse: Bad value for 'fd'
[  153.856302][  T975] veth0_vlan: left promiscuous mode
[  154.462332][  T975] team0 (unregistering): Port device macvlan2 removed
[  155.038368][ T5297] usb 4-1: USB disconnect, device number 11
[  155.195935][  T975] team0 (unregistering): Port device team_slave_1 removed
[  155.233946][  T975] team0 (unregistering): Port device team_slave_0 removed
[  155.536915][ T5297] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  155.620087][ T6690] warning: `syz.4.214' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  155.700822][ T4618] Bluetooth: hci4: command tx timeout
[  155.739782][ T5297] usb 4-1: Using ep0 maxpacket: 8
[  155.755258][ T5297] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  155.786049][ T5297] usb 4-1: config 179 has no interface number 0
[  155.811840][ T5297] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  155.851867][ T5297] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  155.895820][ T5297] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  155.913624][ T6632] chnl_net:caif_netlink_parms(): no params data found
[  155.915335][ T5297] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  155.966891][ T5297] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  156.056253][ T5297] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  156.078672][ T5297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.119936][ T6697] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  156.132163][ T5297] xpad 4-1:179.65: probe with driver xpad failed with error -5
[  156.311490][ T6632] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.329285][ T6632] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.352693][ T6632] bridge_slave_0: entered allmulticast mode
[  156.373432][ T6632] bridge_slave_0: entered promiscuous mode
[  156.390542][ T6632] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.414633][ T6632] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.424856][ T6632] bridge_slave_1: entered allmulticast mode
[  156.439788][ T5277] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[  156.462051][ T6632] bridge_slave_1: entered promiscuous mode
[  156.615415][  T975] IPVS: stop unused estimator thread 0...
[  156.619618][ T6697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.641543][ T6632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.672953][ T5277] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[  156.682562][ T6697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.696105][ T5277] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  156.712644][ T6632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.727674][ T5277] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  156.744421][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  156.778273][ T5277] usb 2-1: string descriptor 0 read error: -22
[  156.789723][ T5277] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  156.807940][ T6632] team0: Port device team_slave_0 added
[  156.815250][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.842164][ T5277] usb 2-1: config 0 descriptor??
[  156.847882][ T6710] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  156.857302][ T6632] team0: Port device team_slave_1 added
[  156.890575][ T5277] hub 2-1:0.0: bad descriptor, ignoring hub
[  156.908040][ T5277] hub 2-1:0.0: probe with driver hub failed with error -5
[  156.926995][   T25] usb 4-1: USB disconnect, device number 12
[  156.942696][ T5277] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input23
[  156.980552][ T5280] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  157.008593][ T6632] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.030584][ T6632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.034849][    C1] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1
[  157.108293][ T6632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.109503][ T5279] usb 2-1: USB disconnect, device number 13
[  157.162772][ T6632] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.199778][ T6632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.242557][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  157.260100][ T5280] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  157.276336][ T6632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.289996][ T5280] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice= 1.a0
[  157.299275][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.328705][ T5280] usb 1-1: config 0 descriptor??
[  157.353038][ T5280] em28xx 1-1:0.0: New device   @ 480 Mbps (eb1a:e303, interface 0, class 0)
[  157.366831][ T5280] em28xx 1-1:0.0: Video interface 0 found: bulk
[  157.402240][ T6632] hsr_slave_0: entered promiscuous mode
[  157.409337][ T6632] hsr_slave_1: entered promiscuous mode
[  157.416506][ T6632] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.425601][ T6632] Cannot create hsr debugfs directory
[  157.639950][ T5280] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  157.779744][ T4618] Bluetooth: hci4: command tx timeout
[  157.791115][ T5280] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  157.819924][ T5280] em28xx 1-1:0.0: board has no eeprom
[  157.857065][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'.
[  157.901712][ T5280] em28xx 1-1:0.0: Identified as Kaiomy TVnPC U2 (card=63)
[  157.915744][ T5280] em28xx 1-1:0.0: analog set to bulk mode.
[  157.935036][ T5277] em28xx 1-1:0.0: Registering V4L2 extension
[  157.999064][ T5280] usb 1-1: USB disconnect, device number 14
[  158.024888][ T5280] em28xx 1-1:0.0: Disconnecting em28xx
[  158.106883][ T5277] i2c i2c-1: Invalid 7-bit I2C address 0x00
[  158.247229][ T5277] tuner: 1-0061: Tuner -1 found with type(s) Radio TV.
[  158.260133][ T5279] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  158.395481][ T6757] dccp_invalid_packet: P.Data Offset(100) too large
[  158.429033][ T6756] netlink: 'syz.4.223': attribute type 2 has an invalid length.
[  158.438352][ T5277] DVB: Unable to find symbol xc2028_attach()
[  158.472702][ T6756] netlink: 'syz.4.223': attribute type 8 has an invalid length.
[  158.473303][ T5277] tuner: 1-0061: Tuner has no way to set tv freq
[  158.480615][ T5279] usb 2-1: Using ep0 maxpacket: 16
[  158.507597][ T5277] em28xx 1-1:0.0: Config register raw data: 0xffffffed
[  158.521031][ T6756] netlink: 132 bytes leftover after parsing attributes in process `syz.4.223'.
[  158.539814][ T5277] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  158.557213][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  158.562200][ T5277] em28xx 1-1:0.0: No AC97 audio processor
[  158.590490][ T5279] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  158.608441][ T5277] tuner: 1-0061: Tuner has no way to set tv freq
[  158.641295][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.641468][ T5277] em28xx 1-1:0.0: Registered radio device as radio32
[  158.689948][ T5277] usb 1-1: Decoder not found
[  158.697076][ T5279] usb 2-1: config 0 descriptor??
[  158.715168][ T5277] em28xx 1-1:0.0: failed to create media graph
[  158.745199][ T5277] em28xx 1-1:0.0: V4L2 device radio32 deregistered
[  158.775794][ T5277] em28xx 1-1:0.0: V4L2 device video71 deregistered
[  158.816957][ T5277] em28xx 1-1:0.0: Registering input extension
[  158.845509][ T5280] em28xx 1-1:0.0: Closing input extension
[  158.891121][ T5280] em28xx 1-1:0.0: Freeing device
[  158.981205][ T6632] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  159.004460][ T6632] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  159.048933][ T6632] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  159.072247][ T6632] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  159.153604][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.189269][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.272313][ T5279] hid (null): unknown global tag 0xd
[  159.280257][ T5279] hid (null): unknown global tag 0xe
[  159.295184][ T5279] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1
[  159.310291][ T5279] hid-generic 0003:0158:0100.000A: unexpected long global item
[  159.323519][ T5279] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22
[  159.354456][ T6632] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.447386][ T6632] 8021q: adding VLAN 0 to HW filter on device team0
[  159.530898][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.538087][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.600525][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.607681][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.648500][   T25] usb 2-1: USB disconnect, device number 14
[  159.663406][ T5279] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  159.859705][ T4618] Bluetooth: hci4: command tx timeout
[  159.884019][ T5279] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  159.916882][ T5279] usb 5-1: config 0 has no interface number 0
[  159.943596][ T5279] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  159.987830][ T5279] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  160.009672][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.027495][ T6784] input: syz0 as /devices/virtual/input/input25
[  160.034994][ T5279] usb 5-1: config 0 descriptor??
[  160.078798][ T5279] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  160.284333][ T6772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.302017][ T6772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.310371][ T6632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.373650][ T6772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.418556][ T6772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.603722][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  160.675105][ T6784] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  160.703921][ T6632] veth0_vlan: entered promiscuous mode
[  160.711662][ T6784] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  160.721687][ T6772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.756570][ T6772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.775386][ T6632] veth1_vlan: entered promiscuous mode
[  160.830932][   T25] usb 5-1: USB disconnect, device number 18
[  160.874604][   T25] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected
[  161.116699][ T6784] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  161.159433][ T6632] veth0_macvtap: entered promiscuous mode
[  161.169834][ T6784] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  161.345494][ T6632] veth1_macvtap: entered promiscuous mode
[  161.519339][ T6632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.589194][ T6632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.619056][ T6632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.638962][ T6816] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  161.657122][ T6632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.700968][ T6632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.736064][ T6632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.766305][ T6632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.788158][ T6632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.822503][ T6632] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.857778][ T6632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.883921][ T6632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.898830][ T6632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.913221][ T6632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.924321][ T6632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.027347][ T6632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.057662][ T6632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.092613][ T6632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.125761][ T6632] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.168293][ T6632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.192813][ T6632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.210554][ T6632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.222807][ T6632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.340020][ T5277] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  162.560062][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  162.578045][ T5277] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  162.588420][ T5236] Bluetooth: hci2: Opcode 0x206a failed: -110
[  162.595204][ T4618] Bluetooth: hci2: command 0x206a tx timeout
[  162.603413][ T6784] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  162.609355][ T6784] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  162.625247][ T5277] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice= 1.a0
[  162.635025][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.663158][ T5277] usb 1-1: config 0 descriptor??
[  162.692496][ T5277] em28xx 1-1:0.0: New device   @ 480 Mbps (eb1a:e303, interface 0, class 0)
[  162.711990][ T5277] em28xx 1-1:0.0: Video interface 0 found: bulk
[  162.713231][ T6784] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  162.779613][ T6784] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  162.943060][ T6784] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  162.954219][ T6784] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  162.961629][ T5277] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  163.103316][ T5277] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  163.106589][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.135195][ T5277] em28xx 1-1:0.0: board has no eeprom
[  163.165896][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.216371][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.235477][ T5277] em28xx 1-1:0.0: Identified as Kaiomy TVnPC U2 (card=63)
[  163.265233][ T5277] em28xx 1-1:0.0: analog set to bulk mode.
[  163.272926][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.298684][  T941] em28xx 1-1:0.0: Registering V4L2 extension
[  163.332534][ T5277] usb 1-1: USB disconnect, device number 15
[  163.370230][ T5277] em28xx 1-1:0.0: Disconnecting em28xx
[  163.656308][  T941] i2c i2c-1: Invalid 7-bit I2C address 0x00
[  163.768386][  T941] tuner: 1-0061: Tuner -1 found with type(s) Radio TV.
[  163.859036][   T25] IPVS: starting estimator thread 0...
[  163.909783][ T5280] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  163.942071][  T941] DVB: Unable to find symbol xc2028_attach()
[  163.960004][ T6869] IPVS: using max 32 ests per chain, 76800 per kthread
[  163.980731][  T941] tuner: 1-0061: Tuner has no way to set tv freq
[  164.005952][  T941] em28xx 1-1:0.0: Config register raw data: 0xffffffed
[  164.033376][  T941] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  164.058000][  T941] em28xx 1-1:0.0: No AC97 audio processor
[  164.077853][  T941] tuner: 1-0061: Tuner has no way to set tv freq
[  164.116157][  T941] em28xx 1-1:0.0: Registered radio device as radio32
[  164.133013][ T5280] usb 5-1: Using ep0 maxpacket: 16
[  164.151014][ T5280] usb 5-1: config 7 has too many interfaces: 255, using maximum allowed: 32
[  164.162804][  T941] usb 1-1: Decoder not found
[  164.170838][  T941] em28xx 1-1:0.0: failed to create media graph
[  164.192236][ T5280] usb 5-1: config 7 has an invalid interface descriptor of length 7, skipping
[  164.224779][  T941] em28xx 1-1:0.0: V4L2 device radio32 deregistered
[  164.246779][ T5280] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  164.274698][  T941] em28xx 1-1:0.0: V4L2 device video71 deregistered
[  164.327568][  T941] em28xx 1-1:0.0: Registering input extension
[  164.342586][ T5280] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 255
[  164.368184][ T5277] em28xx 1-1:0.0: Closing input extension
[  164.387986][ T5280] usb 5-1: New USB device found, idVendor=0471, idProduct=07da, bcdDevice= 0.00
[  164.421285][ T5277] em28xx 1-1:0.0: Freeing device
[  164.436418][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.893899][ T6889] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.239'.
[  165.009751][   T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  165.210935][   T25] usb 4-1: Using ep0 maxpacket: 32
[  165.238009][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  165.269270][   T25] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  165.286756][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.297329][   T25] usb 4-1: Product: syz
[  165.305533][   T25] usb 4-1: Manufacturer: syz
[  165.310593][   T25] usb 4-1: SerialNumber: syz
[  165.320391][   T25] usb 4-1: config 0 descriptor??
[  165.346694][   T25] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  165.713459][   T25] usb 5-1: USB disconnect, device number 19
[  166.129800][ T6919] Cannot find add_set index 0 as target
[  166.436889][ T2967] usb 4-1: Failed to submit usb control message: -110
[  166.447602][ T2967] usb 4-1: unable to send the bmi data to the device: -110
[  166.462508][ T2967] usb 4-1: unable to get target info from device
[  166.477346][ T2967] usb 4-1: could not get target info (-110)
[  166.495583][ T2967] usb 4-1: could not probe fw (-110)
[  167.495282][    T8] usb 4-1: USB disconnect, device number 13
[  167.850538][ T5277] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  167.993893][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.071856][ T5277] usb 5-1: config 0 has an invalid interface number: 18 but max is 0
[  168.119576][ T5277] usb 5-1: config 0 has no interface number 0
[  168.147644][ T5277] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.181013][ T5277] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.227544][ T5277] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  168.258200][ T5277] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  168.283485][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.299623][ T5277] usb 5-1: Manufacturer: syz
[  168.321905][ T5277] usb 5-1: config 0 descriptor??
[  168.487690][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.628458][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  168.641518][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  168.649896][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  168.657945][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  168.667661][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  168.675071][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  168.774574][ T5277] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.000B/input/input27
[  168.804867][ T5277] sony 0003:054C:03D5.000B: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18
[  168.835134][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.859685][   T58] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  169.059747][   T58] usb 1-1: Using ep0 maxpacket: 32
[  169.078473][   T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.117345][   T58] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[  169.165707][   T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.239436][   T58] usb 1-1: config 0 descriptor??
[  169.579890][   T11] bridge_slave_1: left allmulticast mode
[  169.595654][   T11] bridge_slave_1: left promiscuous mode
[  169.605184][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.626271][   T11] bridge_slave_0: left allmulticast mode
[  169.636844][   T11] bridge_slave_0: left promiscuous mode
[  169.644114][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.952352][ T6976] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  170.037342][ T5279] usb 5-1: reset high-speed USB device number 20 using dummy_hcd
[  170.462702][   T58] usbhid 1-1:0.0: can't add hid device: -71
[  170.471456][   T58] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  170.512043][   T58] usb 1-1: USB disconnect, device number 16
[  170.703942][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.718950][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.736324][   T11] bond0 (unregistering): Released all slaves
[  170.752564][ T5236] Bluetooth: hci2: command tx timeout
[  171.221266][ T5282] usb 5-1: USB disconnect, device number 20
[  171.588473][   T11] hsr_slave_0: left promiscuous mode
[  171.611757][   T11] hsr_slave_1: left promiscuous mode
[  171.630563][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.644576][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.655603][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.686274][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.823925][   T11] veth1_macvtap: left promiscuous mode
[  171.859783][   T11] veth0_macvtap: left promiscuous mode
[  171.865465][   T11] veth1_vlan: left promiscuous mode
[  171.880962][   T11] veth0_vlan: left promiscuous mode
[  172.224994][ T4618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  172.234921][ T4618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  172.244520][ T4618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  172.257639][ T4618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  172.269389][ T4618] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  172.277838][ T4618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  172.820384][ T5236] Bluetooth: hci2: command tx timeout
[  172.932967][   T29] kauditd_printk_skb: 30 callbacks suppressed
[  172.932988][   T29] audit: type=1326 audit(1724239149.132:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.3.266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2266b79e79 code=0x0
[  173.125414][   T11] team0 (unregistering): Port device team_slave_1 removed
[  173.176671][   T11] team0 (unregistering): Port device team_slave_0 removed
[  173.327009][ T7043] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  173.837258][ T6980] chnl_net:caif_netlink_parms(): no params data found
[  174.180742][    T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  174.246808][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.271458][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.279376][ T6980] bridge_slave_0: entered allmulticast mode
[  174.291001][ T6980] bridge_slave_0: entered promiscuous mode
[  174.302415][ T6980] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.309892][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.319806][ T6980] bridge_slave_1: entered allmulticast mode
[  174.327762][ T6980] bridge_slave_1: entered promiscuous mode
[  174.340076][ T5236] Bluetooth: hci4: command tx timeout
[  174.404904][    T8] usb 4-1: config 0 has an invalid interface number: 18 but max is 0
[  174.419389][    T8] usb 4-1: config 0 has no interface number 0
[  174.430039][    T8] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.444697][    T8] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.496735][    T8] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  174.533186][    T8] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  174.548717][ T6980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.577193][    T8] usb 4-1: Manufacturer: syz
[  174.603526][    T8] usb 4-1: config 0 descriptor??
[  174.632123][ T6980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.773484][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  174.812921][ T6980] team0: Port device team_slave_0 added
[  174.824238][ T6980] team0: Port device team_slave_1 added
[  174.888946][  T975] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.904782][ T5236] Bluetooth: hci2: command tx timeout
[  174.977733][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.999078][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.032576][ T6980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.064473][    T8] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.000C/input/input28
[  175.099137][  T975] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.122598][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.130474][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.173163][    T8] sony 0003:054C:03D5.000C: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18
[  175.175209][ T6980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.204869][ T7036] chnl_net:caif_netlink_parms(): no params data found
[  175.261969][  T975] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.387182][  T975] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.446699][ T6980] hsr_slave_0: entered promiscuous mode
[  175.464881][ T6980] hsr_slave_1: entered promiscuous mode
[  175.475818][ T6980] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.489618][ T6980] Cannot create hsr debugfs directory
[  175.785066][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.805551][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.833017][ T7036] bridge_slave_0: entered allmulticast mode
[  175.849077][ T7036] bridge_slave_0: entered promiscuous mode
[  175.944083][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.976592][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.994484][ T7036] bridge_slave_1: entered allmulticast mode
[  176.011265][ T7036] bridge_slave_1: entered promiscuous mode
[  176.249877][ T5282] usb 4-1: reset high-speed USB device number 14 using dummy_hcd
[  176.419619][ T5236] Bluetooth: hci4: command tx timeout
[  176.419870][  T975] bridge_slave_1: left allmulticast mode
[  176.501777][  T975] bridge_slave_1: left promiscuous mode
[  176.535206][  T975] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.563434][  T975] bridge_slave_0: left allmulticast mode
[  176.577577][  T975] bridge_slave_0: left promiscuous mode
[  176.584856][  T975] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.889574][ T5281] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  176.979750][ T5236] Bluetooth: hci2: command tx timeout
[  177.110555][ T5281] usb 1-1: Using ep0 maxpacket: 8
[  177.120069][ T5281] usb 1-1: config 0 has an invalid interface number: 5 but max is 0
[  177.128273][ T5281] usb 1-1: config 0 has no interface number 0
[  177.152419][ T5281] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff
[  177.179641][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.192247][ T5281] usb 1-1: Product: syz
[  177.198762][ T5281] usb 1-1: Manufacturer: syz
[  177.206862][ T5281] usb 1-1: SerialNumber: syz
[  177.220547][ T5281] usb 1-1: config 0 descriptor??
[  177.460981][ T5279] usb 4-1: USB disconnect, device number 14
[  177.583431][  T975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.598548][  T975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.612945][  T975] bond0 (unregistering): Released all slaves
[  177.630501][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.723462][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.918964][ T7036] team0: Port device team_slave_0 added
[  178.042261][ T7036] team0: Port device team_slave_1 added
[  178.202063][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.214848][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.246321][ T7036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.389660][  T975] hsr_slave_0: left promiscuous mode
[  178.398452][  T975] hsr_slave_1: left promiscuous mode
[  178.409856][  T975] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.421839][  T975] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.437529][  T975] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.446661][  T975] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.487310][  T975] veth1_macvtap: left promiscuous mode
[  178.496380][  T975] veth0_macvtap: left promiscuous mode
[  178.502187][ T5236] Bluetooth: hci4: command tx timeout
[  178.513983][  T975] veth1_vlan: left promiscuous mode
[  178.519796][  T975] veth0_vlan: left promiscuous mode
[  178.710496][ T5297] usb 1-1: USB disconnect, device number 17
[  179.158902][  T975] team0 (unregistering): Port device team_slave_1 removed
[  179.198743][  T975] team0 (unregistering): Port device team_slave_0 removed
[  179.576215][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.586873][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.613821][ T7036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.803238][ T7036] hsr_slave_0: entered promiscuous mode
[  179.810152][ T7036] hsr_slave_1: entered promiscuous mode
[  179.816507][ T7036] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  179.824397][ T7036] Cannot create hsr debugfs directory
[  180.297244][ T6980] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  180.310967][   T29] audit: type=1326 audit(1724239156.502:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  180.317274][ T5297] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  180.370209][ T6980] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  180.433216][   T29] audit: type=1326 audit(1724239156.502:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  180.462461][ T6980] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  180.498568][ T6980] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  180.514165][   T29] audit: type=1326 audit(1724239156.502:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  180.579803][ T5236] Bluetooth: hci4: command tx timeout
[  180.581923][ T5297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.629808][   T29] audit: type=1326 audit(1724239156.502:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  180.666096][   T29] audit: type=1326 audit(1724239156.502:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  180.698746][ T5297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.726048][ T5297] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  180.739736][ T5277] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  180.767071][ T5297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.785153][   T29] audit: type=1326 audit(1724239156.502:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  180.822767][   T29] audit: type=1326 audit(1724239156.502:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  180.848383][ T5297] usb 1-1: config 0 descriptor??
[  180.862466][   T29] audit: type=1326 audit(1724239156.502:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2266b78810 code=0x7ffc0000
[  180.886470][   T29] audit: type=1326 audit(1724239156.502:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  180.928074][   T29] audit: type=1326 audit(1724239156.502:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  180.959791][ T5277] usb 4-1: device descriptor read/64, error -71
[  181.128709][ T6980] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.232193][ T5277] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  181.272776][ T6980] 8021q: adding VLAN 0 to HW filter on device team0
[  181.439790][ T5277] usb 4-1: device descriptor read/64, error -71
[  181.579929][ T5277] usb usb4-port1: attempt power cycle
[  181.653822][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.661030][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.745368][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.752593][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.781091][ T7036] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  181.805409][ T7036] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  181.932816][ T7036] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  181.971763][ T7036] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  182.011209][ T5277] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  182.078135][ T5277] usb 4-1: device descriptor read/8, error -71
[  182.272530][ T6980] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.372011][ T5277] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  182.416803][ T5277] usb 4-1: device descriptor read/8, error -71
[  182.467574][ T7036] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.598356][ T5277] usb usb4-port1: unable to enumerate USB device
[  182.684827][ T7036] 8021q: adding VLAN 0 to HW filter on device team0
[  182.698571][ T6980] veth0_vlan: entered promiscuous mode
[  182.724978][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.732173][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.760347][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.767512][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.787427][ T6980] veth1_vlan: entered promiscuous mode
[  182.966124][ T5297] usbhid 1-1:0.0: can't add hid device: -71
[  182.985615][ T5297] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  183.017083][ T6980] veth0_macvtap: entered promiscuous mode
[  183.032527][ T5297] usb 1-1: USB disconnect, device number 18
[  183.058446][ T6980] veth1_macvtap: entered promiscuous mode
[  183.136605][ T7036] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.176390][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.193121][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.204886][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.216040][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.243729][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.254936][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.292955][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.336809][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.375182][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.400783][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.402339][ T7199] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  183.412309][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.435874][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.453799][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.477203][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.524196][ T6980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.536743][ T6980] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.568336][ T6980] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.592410][ T6980] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.660583][ T5280] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  183.846033][ T7036] veth0_vlan: entered promiscuous mode
[  183.862293][ T5280] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  183.877629][ T5280] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  183.910787][  T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.924892][ T5280] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  183.935365][  T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.963647][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.010640][ T7197] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  184.071092][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.079179][ T7036] veth1_vlan: entered promiscuous mode
[  184.083816][ T5280] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  184.096649][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.231937][ T7036] veth0_macvtap: entered promiscuous mode
[  184.286890][ T7036] veth1_macvtap: entered promiscuous mode
[  184.429065][ T5280] usb 5-1: USB disconnect, device number 21
[  184.446247][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.477815][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.508330][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.542053][    T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  184.573502][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.625008][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.652691][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.687774][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.716587][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.727984][   T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  184.744138][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.752536][    T8] usb 1-1: config 0 has an invalid interface number: 18 but max is 0
[  184.761865][  T941] IPVS: starting estimator thread 0...
[  184.798575][    T8] usb 1-1: config 0 has no interface number 0
[  184.829688][    T8] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.833105][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.847763][    T8] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.867636][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.878619][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.889664][ T7225] IPVS: using max 21 ests per chain, 50400 per kthread
[  184.893433][    T8] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  184.914805][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.934871][    T8] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  184.941740][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.954215][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.967452][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  184.972466][    T8] usb 1-1: Manufacturer: syz
[  184.977574][   T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  185.004868][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.024532][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.034637][   T25] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice= 1.a0
[  185.054024][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.066904][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.069192][    T8] usb 1-1: config 0 descriptor??
[  185.078861][   T25] usb 2-1: config 0 descriptor??
[  185.110983][ T7036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.133258][   T25] em28xx 2-1:0.0: New device   @ 480 Mbps (eb1a:e303, interface 0, class 0)
[  185.152197][ T7036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.168547][   T25] em28xx 2-1:0.0: Video interface 0 found: bulk
[  185.186894][ T7036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.211438][ T7036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.330075][   T58] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  185.422272][   T25] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  185.536981][    T8] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.000D/input/input29
[  185.538084][   T58] usb 5-1: Using ep0 maxpacket: 16
[  185.591944][   T25] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  185.615337][   T25] em28xx 2-1:0.0: board has no eeprom
[  185.636024][   T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  185.658016][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.666408][   T58] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  185.675675][   T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.694275][   T58] usb 5-1: config 0 descriptor??
[  185.718810][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.721765][   T25] em28xx 2-1:0.0: Identified as Kaiomy TVnPC U2 (card=63)
[  185.733736][   T25] em28xx 2-1:0.0: analog set to bulk mode.
[  185.734155][    T8] sony 0003:054C:03D5.000D: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18
[  185.739936][ T5297] em28xx 2-1:0.0: Registering V4L2 extension
[  185.765924][   T25] usb 2-1: USB disconnect, device number 15
[  185.781922][   T25] em28xx 2-1:0.0: Disconnecting em28xx
[  186.008289][ T5297] i2c i2c-1: Invalid 7-bit I2C address 0x00
[  186.050767][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.121077][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.134439][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.197782][ T5297] tuner: 1-0061: Tuner -1 found with type(s) Radio TV.
[  186.221360][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.292981][   T58] hid (null): bogus close delimiter
[  186.348148][   T58] hid-generic 0003:0158:0100.000E: unknown main item tag 0x1
[  186.397885][   T58] hid-generic 0003:0158:0100.000E: unexpected long global item
[  186.421070][ T5297] DVB: Unable to find symbol xc2028_attach()
[  186.427114][ T5297] tuner: 1-0061: Tuner has no way to set tv freq
[  186.444560][   T58] hid-generic 0003:0158:0100.000E: probe with driver hid-generic failed with error -22
[  186.464762][ T5297] em28xx 2-1:0.0: Config register raw data: 0xffffffed
[  186.495423][ T7197] netlink: 'syz.4.280': attribute type 16 has an invalid length.
[  186.510000][ T5297] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  186.536221][ T5297] em28xx 2-1:0.0: No AC97 audio processor
[  186.545224][ T7197] netlink: 'syz.4.280': attribute type 17 has an invalid length.
[  186.563695][ T5297] tuner: 1-0061: Tuner has no way to set tv freq
[  186.616738][ T5297] em28xx 2-1:0.0: Registered radio device as radio32
[  186.639827][ T5297] usb 2-1: Decoder not found
[  186.657022][ T5297] em28xx 2-1:0.0: failed to create media graph
[  186.703346][ T5297] em28xx 2-1:0.0: V4L2 device radio32 deregistered
[  186.735857][ T7267] xt_NFQUEUE: number of total queues is 0
[  186.756467][ T5297] em28xx 2-1:0.0: V4L2 device video71 deregistered
[  186.802967][ T5297] em28xx 2-1:0.0: Registering input extension
[  186.810321][    T8] usb 1-1: reset high-speed USB device number 19 using dummy_hcd
[  186.840889][   T25] em28xx 2-1:0.0: Closing input extension
[  186.867060][   T25] em28xx 2-1:0.0: Freeing device
[  187.070415][ T5297] usb 5-1: USB disconnect, device number 22
[  187.811345][ T5281] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  188.052639][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.064439][    T8] usb 1-1: device descriptor read/64, error -71
[  188.079645][ T5281] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  188.095626][ T5281] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  188.113086][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.151911][ T5281] usb 4-1: config 0 descriptor??
[  188.379818][    T8] usb 1-1: reset high-speed USB device number 19 using dummy_hcd
[  188.559617][    T8] usb 1-1: device descriptor read/64, error -71
[  188.593981][ T5281] plantronics 0003:047F:FFFF.000F: item fetching failed at offset 0/15
[  188.626820][ T5281] plantronics 0003:047F:FFFF.000F: parse failed
[  188.638798][ T5281] plantronics 0003:047F:FFFF.000F: probe with driver plantronics failed with error -22
[  188.832940][    T8] usb 1-1: reset high-speed USB device number 19 using dummy_hcd
[  188.891973][ T5281] usb 4-1: USB disconnect, device number 19
[  188.901578][    T8] usb 1-1: device descriptor read/8, error -71
[  188.919154][ T7289] netlink: 56 bytes leftover after parsing attributes in process `syz.3.291'.
[  189.142402][ T5279] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  189.244798][    T8] usb 1-1: reset high-speed USB device number 19 using dummy_hcd
[  189.293812][    T8] usb 1-1: device descriptor read/8, error -71
[  189.343473][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  189.353785][ T5279] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  189.365681][ T5279] usb 3-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice= 1.a0
[  189.376087][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.388469][ T5279] usb 3-1: config 0 descriptor??
[  189.402284][ T5279] em28xx 3-1:0.0: New device   @ 480 Mbps (eb1a:e303, interface 0, class 0)
[  189.415149][ T5279] em28xx 3-1:0.0: Video interface 0 found: bulk
[  189.430394][  T941] usb 1-1: USB disconnect, device number 19
[  189.583798][   T58] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  189.679761][  T941] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  189.680228][ T5279] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  189.791443][   T58] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  189.808791][   T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.837842][ T5279] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  189.847484][   T58] usb 2-1: config 0 descriptor??
[  189.866309][ T5279] em28xx 3-1:0.0: board has no eeprom
[  189.867515][  T941] usb 1-1: device descriptor read/64, error -71
[  189.949760][ T5279] em28xx 3-1:0.0: Identified as Kaiomy TVnPC U2 (card=63)
[  189.962846][ T5279] em28xx 3-1:0.0: analog set to bulk mode.
[  189.970592][ T5297] em28xx 3-1:0.0: Registering V4L2 extension
[  189.988272][ T5279] usb 3-1: USB disconnect, device number 13
[  190.000943][ T5279] em28xx 3-1:0.0: Disconnecting em28xx
[  190.118171][ T5297] i2c i2c-1: Invalid 7-bit I2C address 0x00
[  190.169595][  T941] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  190.220727][ T5297] tuner: 1-0061: Tuner -1 found with type(s) Radio TV.
[  190.350733][  T941] usb 1-1: device descriptor read/64, error -71
[  190.373667][ T5297] DVB: Unable to find symbol xc2028_attach()
[  190.386265][ T5297] tuner: 1-0061: Tuner has no way to set tv freq
[  190.398500][ T5297] em28xx 3-1:0.0: Config register raw data: 0xffffffed
[  190.416031][ T5297] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  190.442089][ T5297] em28xx 3-1:0.0: No AC97 audio processor
[  190.449392][ T5297] tuner: 1-0061: Tuner has no way to set tv freq
[  190.462083][ T5297] em28xx 3-1:0.0: Registered radio device as radio32
[  190.473792][ T5297] usb 3-1: Decoder not found
[  190.478670][ T5297] em28xx 3-1:0.0: failed to create media graph
[  190.486675][ T5297] em28xx 3-1:0.0: V4L2 device radio32 deregistered
[  190.501265][  T941] usb usb1-port1: attempt power cycle
[  190.524208][ T5297] em28xx 3-1:0.0: V4L2 device video71 deregistered
[  190.578319][ T5297] em28xx 3-1:0.0: Registering input extension
[  190.642508][ T5279] em28xx 3-1:0.0: Closing input extension
[  190.753340][ T5279] em28xx 3-1:0.0: Freeing device
[  190.928805][   T58] usb 2-1: string descriptor 0 read error: -71
[  190.957382][   T58] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  190.988094][ T7338] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  191.007531][   T58] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  191.033115][   T58] usb 2-1: USB disconnect, device number 16
[  191.052477][ T7338] program syz.0.302 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  191.063169][   T58] ftdi_sio 2-1:0.0: device disconnected
[  191.404011][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'.
[  191.793111][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  192.749695][   T58] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  192.951421][   T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  192.981680][   T58] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  193.004996][   T58] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice= 1.a0
[  193.015827][   T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.057902][   T58] usb 1-1: config 0 descriptor??
[  193.075141][   T58] em28xx 1-1:0.0: New device   @ 480 Mbps (eb1a:e303, interface 0, class 0)
[  193.086226][   T58] em28xx 1-1:0.0: Video interface 0 found: bulk
[  193.341058][   T58] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  193.431718][ T5281] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  193.490077][   T58] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  193.498348][   T58] em28xx 1-1:0.0: board has no eeprom
[  193.569602][   T58] em28xx 1-1:0.0: Identified as Kaiomy TVnPC U2 (card=63)
[  193.600495][   T58] em28xx 1-1:0.0: analog set to bulk mode.
[  193.606419][ T5279] em28xx 1-1:0.0: Registering V4L2 extension
[  193.623100][   T58] usb 1-1: USB disconnect, device number 23
[  193.631013][   T58] em28xx 1-1:0.0: Disconnecting em28xx
[  193.651740][ T5281] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  193.671483][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.716075][ T5281] usb 5-1: config 0 descriptor??
[  193.762335][ T5279] i2c i2c-1: Invalid 7-bit I2C address 0x00
[  194.008971][ T5279] tuner: 1-0061: Tuner -1 found with type(s) Radio TV.
[  194.060122][   T46] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  194.198400][ T5279] DVB: Unable to find symbol xc2028_attach()
[  194.208918][ T5279] tuner: 1-0061: Tuner has no way to set tv freq
[  194.220117][ T5279] em28xx 1-1:0.0: Config register raw data: 0xffffffed
[  194.263733][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.289656][ T5279] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  194.297751][ T5279] em28xx 1-1:0.0: No AC97 audio processor
[  194.308028][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.340516][ T5279] tuner: 1-0061: Tuner has no way to set tv freq
[  194.372335][   T46] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  194.405931][ T5279] em28xx 1-1:0.0: Registered radio device as radio32
[  194.434825][ T5279] usb 1-1: Decoder not found
[  194.443199][   T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.462072][ T5279] em28xx 1-1:0.0: failed to create media graph
[  194.477006][   T46] usb 2-1: config 0 descriptor??
[  194.482814][ T5279] em28xx 1-1:0.0: V4L2 device radio32 deregistered
[  194.515874][ T5279] em28xx 1-1:0.0: V4L2 device video71 deregistered
[  194.575364][ T5279] em28xx 1-1:0.0: Registering input extension
[  194.631634][   T58] em28xx 1-1:0.0: Closing input extension
[  194.672449][   T58] em28xx 1-1:0.0: Freeing device
[  194.692107][   T29] kauditd_printk_skb: 663 callbacks suppressed
[  194.692125][   T29] audit: type=1326 audit(1724239170.902:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  194.766652][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  194.775503][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  194.794531][ T7397] vhci_hcd: invalid port number 0
[  194.845599][   T29] audit: type=1326 audit(1724239170.942:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  194.894047][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.317'.
[  194.996113][   T29] audit: type=1326 audit(1724239170.942:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  195.185212][   T29] audit: type=1326 audit(1724239170.942:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  195.281315][   T29] audit: type=1326 audit(1724239170.982:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  195.316163][   T29] audit: type=1326 audit(1724239170.982:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  195.351976][   T29] audit: type=1326 audit(1724239170.982:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  195.394237][   T29] audit: type=1326 audit(1724239171.032:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  195.409690][   T58] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  195.425714][   T29] audit: type=1326 audit(1724239171.032:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  195.533466][ T5281] usb 5-1: string descriptor 0 read error: -71
[  195.565744][   T29] audit: type=1326 audit(1724239171.032:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2266b79e79 code=0x7ffc0000
[  195.617177][ T5281] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  195.652219][ T5281] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  195.693692][ T5281] usb 5-1: USB disconnect, device number 23
[  195.719644][   T58] usb 4-1: Using ep0 maxpacket: 16
[  195.729382][ T5281] ftdi_sio 5-1:0.0: device disconnected
[  195.742766][   T58] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=1b.b2
[  195.815660][   T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.836759][   T58] usb 4-1: Product: syz
[  195.854373][   T58] usb 4-1: Manufacturer: syz
[  195.883847][   T58] usb 4-1: SerialNumber: syz
[  195.908486][   T58] usb 4-1: config 0 descriptor??
[  195.940309][   T58] ati_remote2 4-1:0.0: ati_remote2_probe(): interface 0 must have an endpoint
[  196.079581][  T941] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  196.279635][  T941] usb 3-1: Using ep0 maxpacket: 8
[  196.307398][  T941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.344440][  T941] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  196.394106][  T941] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[  196.418328][  T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.458218][  T941] usb 3-1: config 0 descriptor??
[  196.496037][  T941] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  196.556297][   T25] usb 4-1: USB disconnect, device number 20
[  196.645916][   T46] usbhid 2-1:0.0: can't add hid device: -71
[  196.681043][   T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  196.780364][   T46] usb 2-1: USB disconnect, device number 17
[  197.400740][ T5280] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  197.408497][  T941] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  197.623303][ T5280] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  197.638282][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.667524][ T5280] usb 5-1: config 0 descriptor??
[  197.688357][ T5280] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  198.089673][   T25] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  198.168313][ T5297] usb 3-1: USB disconnect, device number 14
[  198.272590][   T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.284180][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  198.306676][   T25] usb 2-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d
[  198.317657][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.343369][   T25] usb 2-1: Product: syz
[  198.367906][   T25] usb 2-1: Manufacturer: syz
[  198.390745][   T25] usb 2-1: SerialNumber: syz
[  198.405812][   T25] usb 2-1: config 0 descriptor??
[  198.441612][   T25] usb 2-1: Found UVC 0.00 device syz (468c:90ea)
[  198.457244][   T25] usb 2-1: No valid video chain found.
[  199.154978][ T7456] dccp_invalid_packet: P.Data Offset(100) too large
[  200.313111][ T5280] usb 5-1: USB disconnect, device number 24
[  200.319601][  T941] usb 1-1: device descriptor read/64, error -71
[  200.629643][  T941] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  200.841483][  T941] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  200.891909][  T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.919656][ T5280] usb 2-1: USB disconnect, device number 18
[  200.975579][  T941] usb 1-1: config 0 descriptor??
[  201.631197][ T7481] fuse: Bad value for 'fd'
[  201.646098][ T5280] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  201.699754][   T25] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  201.763909][ T7483] tipc: Started in network mode
[  201.764472][  T941] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  201.770175][ T7483] tipc: Node identity 7f000001, cluster identity 4711
[  201.807532][  T941] [drm] Initialized udl on minor 2
[  201.853061][ T7483] tipc: Enabled bearer <udp:syz1>, priority 10
[  201.893690][ T5280] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  201.930422][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.931537][   T25] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  201.959525][   T25] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  201.961855][  T941] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  201.968513][   T25] usb 2-1: config 1 has no interface number 1
[  201.968569][   T25] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  201.999537][   T25] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  202.042256][   T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  202.056166][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.059816][ T5280] usb 3-1: config 0 descriptor??
[  202.079549][   T25] usb 2-1: Product: syz
[  202.087458][   T25] usb 2-1: Manufacturer: syz
[  202.112241][  T941] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  202.126329][   T25] usb 2-1: SerialNumber: syz
[  202.132819][    T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  202.161901][  T941] usb 1-1: USB disconnect, device number 25
[  202.168411][    T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  202.972670][    T8] tipc: Node number set to 2130706433
[  203.183957][ T5280] usb 3-1: string descriptor 0 read error: -71
[  203.209716][ T5280] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  203.245410][ T5280] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  203.283267][ T5280] usb 3-1: USB disconnect, device number 15
[  203.312326][ T5280] ftdi_sio 3-1:0.0: device disconnected
[  203.649784][   T46] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  203.859702][   T46] usb 1-1: Using ep0 maxpacket: 16
[  203.916434][   T46] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  203.930867][   T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.985227][   T46] usb 1-1: Product: syz
[  203.999864][   T46] usb 1-1: Manufacturer: syz
[  204.007988][   T46] usb 1-1: SerialNumber: syz
[  204.025787][   T46] usb 1-1: config 0 descriptor??
[  204.037779][   T46] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  204.329174][   T25] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc
[  204.409961][   T25] usb 2-1: USB disconnect, device number 19
[  204.597998][ T5242] udevd[5242]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  204.722926][ T7516] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  204.780124][   T46] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110
[  204.891871][ T7525] dccp_invalid_packet: P.Data Offset(100) too large
[  204.944053][ T7519] netlink: 64 bytes leftover after parsing attributes in process `syz.0.338'.
[  205.029939][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'.
[  205.043251][ T7526] (unnamed net_device) (uninitialized): peer notification delay (2) is not a multiple of miimon (129), value rounded to 0 ms
[  205.067791][ T7526] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511)
[  205.079596][ T7526] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  205.104837][ T7531] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  205.119605][    T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  205.319655][    T8] usb 2-1: Using ep0 maxpacket: 16
[  205.343473][    T8] usb 2-1: config 1 has an invalid descriptor of length 94, skipping remainder of the config
[  205.372254][    T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  205.384636][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.394906][    T8] usb 2-1: Product: syz
[  205.399217][    T8] usb 2-1: Manufacturer: Џ
[  205.408520][    T8] usb 2-1: SerialNumber: syz
[  205.441397][    T8] cdc_ether 2-1:1.0: skipping garbage
[  205.449055][    T8] usb 2-1: bad CDC descriptors
[  205.631244][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.647182][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.661085][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.670525][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.679220][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.687511][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.695511][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.707942][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.716252][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.724345][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.747550][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.765547][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.786312][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.810202][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.836447][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.857227][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.882954][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.909362][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.925502][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.933243][   T58] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  205.946087][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.954212][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.963159][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  205.985594][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  206.009072][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  206.034007][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  206.043826][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  206.057631][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  206.066832][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  206.075268][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  206.084173][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  206.093554][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  206.103693][   T46] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  206.131704][   T58] usb 3-1: config index 0 descriptor too short (expected 25970, got 36)
[  206.148033][   T58] usb 3-1: config 116 has too many interfaces: 99, using maximum allowed: 32
[  206.159763][   T58] usb 3-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config
[  206.174506][   T46] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  206.187711][   T58] usb 3-1: config 116 has 0 interfaces, different from the descriptor's value: 99
[  206.209682][   T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  206.218554][   T58] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  206.239637][   T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.419747][  T941] usb 1-1: USB disconnect, device number 26
[  206.428512][   T25] usb 4-1: config 0 has an invalid interface number: 18 but max is 0
[  206.437065][   T25] usb 4-1: config 0 has no interface number 0
[  206.444562][   T25] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.456854][   T25] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.475962][   T25] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  206.499862][   T25] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  206.519299][   T58] usb 3-1: USB disconnect, device number 16
[  206.530215][   T25] usb 4-1: Manufacturer: syz
[  206.554878][   T25] usb 4-1: config 0 descriptor??
[  206.989227][   T25] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.0011/input/input34
[  207.160935][   T25] sony 0003:054C:03D5.0011: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18
[  207.684807][   T58] usb 2-1: USB disconnect, device number 20
[  207.890926][   T25] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  207.960293][    T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  208.144970][   T25] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  208.151617][    T8] usb 3-1: Using ep0 maxpacket: 16
[  208.157347][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.166031][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.183666][   T25] usb 1-1: config 0 descriptor??
[  208.224915][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.230012][   T58] usb 4-1: reset high-speed USB device number 21 using dummy_hcd
[  208.239313][    T8] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  208.257478][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.285982][    T8] usb 3-1: config 0 descriptor??
[  208.909664][    T8] usbhid 3-1:0.0: can't add hid device: -71
[  208.956820][    T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  209.020971][    T8] usb 3-1: USB disconnect, device number 17
[  209.138900][ T7580] dccp_invalid_packet: P.Data Offset(100) too large
[  209.297056][   T25] usb 1-1: string descriptor 0 read error: -71
[  209.332228][   T25] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  209.347338][   T25] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  209.368824][   T25] usb 1-1: USB disconnect, device number 27
[  209.393733][   T25] ftdi_sio 1-1:0.0: device disconnected
[  209.432736][ T5297] usb 4-1: USB disconnect, device number 21
[  209.621269][ T5236] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  209.630584][ T5236] Bluetooth: hci4: Injecting HCI hardware error event
[  209.639141][ T5236] Bluetooth: hci4: hardware error 0x00
[  209.778250][   T58] IPVS: starting estimator thread 0...
[  209.871135][ T7590] netlink: 'syz.2.361': attribute type 5 has an invalid length.
[  209.917979][ T7591] IPVS: using max 20 ests per chain, 48000 per kthread
[  210.016966][ T7590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.361'.
[  210.168451][ T7598] netlink: 88 bytes leftover after parsing attributes in process `syz.3.363'.
[  211.079557][ T5297] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  211.279778][ T5297] usb 3-1: Using ep0 maxpacket: 8
[  211.302978][ T5297] usb 3-1: config 1 has an invalid interface number: 65 but max is 1
[  211.364968][ T5297] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  211.378776][ T5297] usb 3-1: config 1 has no interface number 2
[  211.385488][ T5297] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.412088][ T5297] usb 3-1: config 1 interface 1 has no altsetting 0
[  211.447439][ T5297] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  211.465834][ T5297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.482524][ T5297] usb 3-1: Product: syz
[  211.506858][ T5297] usb 3-1: Manufacturer: syz
[  211.517880][ T5297] usb 3-1: SerialNumber: syz
[  211.709839][ T5236] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  211.733380][ T5297] usb 3-1: selecting invalid altsetting 0
[  211.742777][ T5297] usb 3-1: selecting invalid altsetting 0
[  211.748807][ T5297] cdc_ncm 3-1:1.0: bind() failure
[  211.762712][ T5297] cdc_ncm 3-1:1.65: CDC Union missing and no IAD found
[  211.770778][ T5297] cdc_ncm 3-1:1.65: bind() failure
[  211.782261][ T5297] usb 3-1: selecting invalid altsetting 0
[  211.788233][ T5297] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -22
[  211.797895][ T5297] usb 3-1: selecting invalid altsetting 0
[  211.804749][ T5297] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -22
[  211.814248][ T5297] usb 3-1: selecting invalid altsetting 0
[  211.821263][ T5297] usbtest 3-1:1.1: probe with driver usbtest failed with error -22
[  212.758313][ T7643] xt_CONNSECMARK: invalid mode: 0
[  213.197398][ T7649] dccp_invalid_packet: P.Data Offset(100) too large
[  213.369568][  T941] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  213.476438][ T7653] netlink: 40 bytes leftover after parsing attributes in process `syz.4.377'.
[  213.571514][  T941] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  213.581768][  T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.610601][  T941] usb 1-1: config 0 descriptor??
[  214.132428][    T8] usb 3-1: USB disconnect, device number 18
[  214.534971][  T941] usb 1-1: string descriptor 0 read error: -71
[  214.570906][  T941] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  214.603393][  T941] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  214.635663][  T941] usb 1-1: USB disconnect, device number 28
[  214.650177][  T941] ftdi_sio 1-1:0.0: device disconnected
[  216.159765][  T941] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  216.382286][  T941] usb 3-1: Using ep0 maxpacket: 8
[  216.412213][ T7704] netlink: 9 bytes leftover after parsing attributes in process `syz.3.389'.
[  216.436208][  T941] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  216.463767][ T7704] gretap0: entered promiscuous mode
[  216.498939][  T941] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  216.544794][  T941] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  216.598396][  T941] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  216.704451][  T941] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  216.741850][  T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.761600][ T7712] dccp_invalid_packet: P.Data Offset(100) too large
[  217.050043][  T941] usb 3-1: GET_CAPABILITIES returned 0
[  217.092311][  T941] usbtmc 3-1:16.0: can't read capabilities
[  217.316348][ T7698] libceph: resolve '0.0' (ret=-3): failed
[  217.994789][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  217.994801][   T29] audit: type=1326 audit(1724239194.202:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.4.398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2ffd79e79 code=0x0
[  218.644604][   T25] usb 3-1: USB disconnect, device number 19
[  218.825027][ T7753] cannot load conntrack support for proto=3
[  218.845093][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'.
[  219.159682][   T25] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  219.391550][   T25] usb 3-1: config 0 has an invalid interface number: 18 but max is 0
[  219.428765][   T25] usb 3-1: config 0 has no interface number 0
[  219.454102][   T25] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.475920][   T25] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.488894][   T25] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  219.528265][   T25] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  219.551695][   T25] usb 3-1: Manufacturer: syz
[  219.578348][   T25] usb 3-1: config 0 descriptor??
[  220.036018][   T25] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0012/input/input35
[  220.196820][   T25] sony 0003:054C:03D5.0012: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18
[  220.899118][  T975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.102669][  T975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.235597][ T5282] usb 3-1: reset high-speed USB device number 20 using dummy_hcd
[  221.244012][ T4618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  221.264227][ T4618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  221.281864][ T4618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  221.296239][ T4618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  221.328011][  T975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.328312][ T4618] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  221.354496][ T4618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  221.501678][  T975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.787835][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.416'.
[  221.938393][   T29] audit: type=1326 audit(1724239198.142:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.3.416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2266b79e79 code=0x0
[  222.017274][ T7803] veth1_to_hsr: entered promiscuous mode
[  222.563305][   T25] usb 3-1: USB disconnect, device number 20
[  222.984822][  T975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.008106][  T975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.027218][  T975] bond0 (unregistering): Released all slaves
[  223.156268][  T975] ɶƣ0GC�: left promiscuous mode
[  223.262008][  T975] tipc: Disabling bearer <udp:syz1>
[  223.287732][  T975] tipc: Left network mode
[  223.381654][ T5236] Bluetooth: hci3: command tx timeout
[  223.432823][ T7823] netlink: 'syz.2.421': attribute type 1 has an invalid length.
[  223.555542][ T7825] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  223.567810][ T7825] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  223.609393][ T7825] bond1: (slave gre1): making interface the new active one
[  223.627262][ T7825] bond1: (slave gre1): Enslaving as an active interface with an up link
[  223.770117][  T941] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  223.959740][  T941] usb 3-1: Using ep0 maxpacket: 16
[  223.972968][  T975] hsr_slave_0: left promiscuous mode
[  223.986940][  T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  224.000598][  T975] hsr_slave_1: left promiscuous mode
[  224.010977][  T941] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  224.020888][  T975] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.028335][  T975] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.036288][  T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.046564][  T975] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.055904][  T975] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.065698][  T941] usb 3-1: config 0 descriptor??
[  224.100802][  T975] veth1_macvtap: left promiscuous mode
[  224.118106][  T975] veth0_macvtap: left promiscuous mode
[  224.127490][  T975] veth1_vlan: left promiscuous mode
[  224.139770][  T975] veth0_vlan: left promiscuous mode
[  224.622293][ T7825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.664285][ T7825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.708599][  T941] hid (null): invalid report_size 29539
[  224.731458][  T941] hid (null): unknown global tag 0xd
[  224.772773][  T941] hid-generic 0003:0158:0100.0013: unknown main item tag 0x1
[  224.786575][  T941] hid-generic 0003:0158:0100.0013: unexpected long global item
[  224.808038][  T941] hid-generic 0003:0158:0100.0013: probe with driver hid-generic failed with error -22
[  225.092240][ T5280] usb 3-1: USB disconnect, device number 21
[  225.182236][  T975] team0 (unregistering): Port device team_slave_1 removed
[  225.224762][  T975] team0 (unregistering): Port device team_slave_0 removed
[  225.460564][ T5236] Bluetooth: hci3: command tx timeout
[  225.617965][ T7792] chnl_net:caif_netlink_parms(): no params data found
[  226.048246][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.077275][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.112132][ T7792] bridge_slave_0: entered allmulticast mode
[  226.158726][ T7792] bridge_slave_0: entered promiscuous mode
[  226.178573][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.202392][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.214140][ T7792] bridge_slave_1: entered allmulticast mode
[  226.230058][ T7792] bridge_slave_1: entered promiscuous mode
[  226.274211][ T7862] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  226.405416][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.448205][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.600517][ T7792] team0: Port device team_slave_0 added
[  226.638296][ T7792] team0: Port device team_slave_1 added
[  226.903976][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.934207][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.035526][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.105063][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.142198][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.192753][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.531058][   T29] audit: type=1326 audit(1724239203.732:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a7179e79 code=0x7ffc0000
[  227.539800][ T5236] Bluetooth: hci3: command tx timeout
[  227.611321][ T7792] hsr_slave_0: entered promiscuous mode
[  227.649394][ T7792] hsr_slave_1: entered promiscuous mode
[  227.657741][   T29] audit: type=1326 audit(1724239203.732:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f42a7179e79 code=0x7ffc0000
[  227.712192][ T7792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.721196][   T29] audit: type=1326 audit(1724239203.732:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a7179e79 code=0x7ffc0000
[  227.749526][ T7792] Cannot create hsr debugfs directory
[  227.769636][ T5282] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  227.799235][   T29] audit: type=1326 audit(1724239203.732:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a7179e79 code=0x7ffc0000
[  227.908667][   T29] audit: type=1326 audit(1724239203.732:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42a7179e79 code=0x7ffc0000
[  227.953830][ T5282] usb 2-1: device descriptor read/64, error -71
[  228.003828][   T29] audit: type=1326 audit(1724239203.732:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a7179e79 code=0x7ffc0000
[  228.061910][   T29] audit: type=1326 audit(1724239203.732:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42a7179e79 code=0x7ffc0000
[  228.167086][   T29] audit: type=1326 audit(1724239203.742:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a7179e79 code=0x7ffc0000
[  228.270228][   T29] audit: type=1326 audit(1724239203.742:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a7179e79 code=0x7ffc0000
[  228.293682][ T5282] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  228.347290][   T29] audit: type=1326 audit(1724239203.782:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f42a7179e79 code=0x7ffc0000
[  228.489808][ T5282] usb 2-1: device descriptor read/64, error -71
[  228.609969][ T5282] usb usb2-port1: attempt power cycle
[  228.839810][ T5297] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  229.022104][ T5297] usb 1-1: Using ep0 maxpacket: 16
[  229.035200][ T5297] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  229.044558][ T5282] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  229.058082][ T5297] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  229.085959][ T5282] usb 2-1: device descriptor read/8, error -71
[  229.102696][ T5297] usb 1-1: Product: syz
[  229.106916][ T5297] usb 1-1: Manufacturer: syz
[  229.138276][ T5297] usb 1-1: SerialNumber: syz
[  229.155916][ T5297] usb 1-1: config 0 descriptor??
[  229.379813][ T5282] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  229.439256][ T5282] usb 2-1: device descriptor read/8, error -71
[  229.458176][ T7792] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  229.495297][ T7792] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  229.580081][ T5282] usb usb2-port1: unable to enumerate USB device
[  229.610768][ T7792] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  229.619700][ T5236] Bluetooth: hci3: command tx timeout
[  229.703240][ T7792] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  229.771851][  T941] usb 1-1: USB disconnect, device number 29
[  230.126522][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.614392][ T7792] 8021q: adding VLAN 0 to HW filter on device team0
[  230.785816][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.793058][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.028874][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.036180][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.592630][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.786958][ T7973] fuse: Unknown parameter 'fd0x0000000000000004'
[  231.877018][ T7973] netlink: 'syz.0.440': attribute type 11 has an invalid length.
[  231.888029][ T7792] veth0_vlan: entered promiscuous mode
[  231.913694][ T7973] netlink: 211132 bytes leftover after parsing attributes in process `syz.0.440'.
[  231.922216][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.441'.
[  231.951673][ T7792] veth1_vlan: entered promiscuous mode
[  232.035980][ T7792] veth0_macvtap: entered promiscuous mode
[  232.063332][ T7792] veth1_macvtap: entered promiscuous mode
[  232.088348][ T7986] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  232.094916][ T7986] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  232.115553][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.117491][ T7986] vhci_hcd vhci_hcd.0: Device attached
[  232.137117][ T7988] vhci_hcd: connection closed
[  232.138859][ T2967] vhci_hcd: stop threads
[  232.148813][ T2967] vhci_hcd: release socket
[  232.153830][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.153853][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.153871][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.153889][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.153904][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.153919][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.153932][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.155537][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.209606][  T941] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  232.228929][ T2967] vhci_hcd: disconnect device
[  232.254387][ T7990] macvlan0: entered allmulticast mode
[  232.266732][ T7990] veth1_vlan: entered allmulticast mode
[  232.358428][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.382040][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.394523][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.406826][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.417088][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.436989][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.447520][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.468387][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.490694][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.513640][  T941] usb 4-1: unable to get BOS descriptor or descriptor too short
[  232.524669][ T7792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.538704][ T7792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.549762][  T941] usb 4-1: not running at top speed; connect to a high speed hub
[  232.558072][ T7792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.567335][ T7792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.576755][  T941] usb 4-1: config 5 has an invalid interface number: 144 but max is 0
[  232.585456][ T5277] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  232.600055][  T941] usb 4-1: config 5 has no interface number 0
[  232.610017][  T941] usb 4-1: config 5 interface 144 has no altsetting 0
[  232.627123][  T941] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=d0.dd
[  232.643319][  T941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.674252][  T941] usb 4-1: Product: syz
[  232.700330][  T941] usb 4-1: Manufacturer: syz
[  232.712525][  T941] usb 4-1: SerialNumber: syz
[  232.742983][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.757340][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.778554][ T5277] usb 1-1: Using ep0 maxpacket: 16
[  232.804459][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  232.824687][ T5277] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  232.834103][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.843806][ T5277] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  232.853299][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.876830][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.888808][ T5277] usb 1-1: Product: syz
[  232.893473][ T5277] usb 1-1: Manufacturer: syz
[  232.898129][ T5277] usb 1-1: SerialNumber: syz
[  232.910376][ T5277] usb 1-1: config 0 descriptor??
[  232.925612][ T5277] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  232.943260][ T5277] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  233.139225][ T8014] pimreg: entered allmulticast mode
[  233.549131][ T5277] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  234.228956][ T7990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.264595][ T7990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.307790][ T5277] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  234.361379][ T5277] em28xx 1-1:0.0: board has no eeprom
[  234.512633][ T5277] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  234.526741][ T8041] binder: 8040:8041 ioctl 4018620d 0 returned -22
[  234.539047][ T5277] em28xx 1-1:0.0: dvb set to bulk mode.
[  234.566785][ T5281] em28xx 1-1:0.0: Binding DVB extension
[  234.633902][ T5277] usb 1-1: USB disconnect, device number 30
[  234.691087][ T5277] em28xx 1-1:0.0: Disconnecting em28xx
[  234.789127][ T5281] em28xx 1-1:0.0: Registering input extension
[  234.805475][ T5277] em28xx 1-1:0.0: Closing input extension
[  234.863943][ T5277] em28xx 1-1:0.0: Freeing device
[  235.058102][  T941] quatech2 4-1:5.144: Quatech 2nd gen USB to Serial Driver converter detected
[  235.101472][  T941] usb 4-1: qt2_attach - failed to power on unit: -71
[  235.124109][  T941] quatech2 4-1:5.144: probe with driver quatech2 failed with error -71
[  235.176648][  T941] usb 4-1: USB disconnect, device number 22
[  235.289230][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'.
[  235.399363][ T8052] batman_adv: batadv1: Adding interface: netdevsim0
[  235.429798][ T8052] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.507058][ T8052] batman_adv: batadv1: Interface activated: netdevsim0
[  235.584762][ T8062] dccp_invalid_packet: P.Data Offset(100) too large
[  236.020243][  T941] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  236.246246][  T941] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  236.285379][  T941] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  236.355901][  T941] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  236.369121][  T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.412597][ T8066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  236.465945][  T941] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  237.665396][ T5280] usb 3-1: USB disconnect, device number 22
[  238.110412][  T941] usb 5-1: new low-speed USB device number 25 using dummy_hcd
[  238.323308][  T941] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  238.353779][  T941] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  238.371165][  T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.614054][  T941] usb 5-1: string descriptor 0 read error: -71
[  238.635652][  T941] hub 5-1:32.0: USB hub found
[  238.666065][  T941] hub 5-1:32.0: config failed, can't read hub descriptor (err -22)
[  238.800901][  T941] usb 5-1: USB disconnect, device number 25
[  238.929582][ T5297] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  239.120035][ T5297] usb 3-1: Using ep0 maxpacket: 8
[  239.166555][ T5297] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  239.242629][ T5297] usb 3-1: config 0 has no interface number 0
[  239.336976][ T5297] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  239.364848][ T5297] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  239.377717][ T5297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.390049][ T5297] usb 3-1: config 0 descriptor??
[  239.399878][ T5297] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  239.489786][ T8125] dccp_invalid_packet: P.Data Offset(100) too large
[  239.979807][ T5281] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  240.185669][ T5281] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.196493][ T5281] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  240.254300][ T5281] usb 2-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d
[  240.259879][ T5236] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  240.272256][ T5236] Bluetooth: hci3: Injecting HCI hardware error event
[  240.281823][ T4618] Bluetooth: hci3: hardware error 0x00
[  240.317401][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.366432][ T5281] usb 2-1: Product: syz
[  240.386912][ T5281] usb 2-1: Manufacturer: syz
[  240.411457][ T5281] usb 2-1: SerialNumber: syz
[  240.445370][ T5281] usb 2-1: config 0 descriptor??
[  240.473182][ T5281] usb 2-1: Found UVC 0.00 device syz (468c:90ea)
[  240.491014][ T5281] usb 2-1: No valid video chain found.
[  240.655053][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'.
[  241.155383][ T8145] sctp: [Deprecated]: syz.1.470 (pid 8145) Use of struct sctp_assoc_value in delayed_ack socket option.
[  241.155383][ T8145] Use struct sctp_sack_info instead
[  241.467837][  T941] usb 3-1: USB disconnect, device number 23
[  241.590279][  T941] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected
[  242.054641][ T8161] netlink: 60 bytes leftover after parsing attributes in process `syz.3.477'.
[  242.340036][ T4618] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  242.409608][   T25] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  242.611316][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 4
[  242.660954][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25944, setting to 1023
[  242.679102][  T941] usb 2-1: USB disconnect, device number 25
[  242.708534][   T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  242.723247][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.746294][   T25] usb 4-1: config 0 descriptor??
[  242.952059][ T8176] x_tables: ip6_tables: l2tp.0 match: invalid size 16 (kernel) != (user) 56
[  243.388511][ T8181] netlink: 'syz.0.481': attribute type 29 has an invalid length.
[  243.633118][   T25] ath6kl: Failed to submit usb control message: -71
[  243.681508][   T25] ath6kl: unable to send the bmi data to the device: -71
[  243.688628][   T25] ath6kl: Unable to send get target info: -71
[  243.707869][ T5297] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  243.722088][   T25] ath6kl: Failed to init ath6kl core: -71
[  243.739961][   T25] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  243.781852][   T25] usb 4-1: USB disconnect, device number 23
[  243.902953][ T5297] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=69.f5
[  243.949913][ T8196] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.968961][ T5297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.985574][ T5297] usb 1-1: config 0 descriptor??
[  244.001696][ T5297] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state.
[  244.021510][   T29] kauditd_printk_skb: 17 callbacks suppressed
[  244.021525][   T29] audit: type=1326 audit(1724239220.222:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.4.483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcaa6579e79 code=0x0
[  244.049599][ T5297] dvb-usb: bulk message failed: -22 (2/0)
[  244.055359][ T5297] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  244.086955][ T5297] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver)
[  244.109902][ T5297] usb 1-1: media controller created
[  244.139598][ T5282] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  244.163801][ T5297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  244.213869][ T5297] dvb-usb: bulk message failed: -22 (1/0)
[  244.223376][ T8181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.249589][ T5297] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver'
[  244.265547][ T8181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.282087][ T5297] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37
[  244.324711][ T8181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.344491][ T5297] dvb-usb: schedule remote query interval to 50 msecs.
[  244.352204][ T5282] usb 2-1: config 0 has an invalid interface number: 18 but max is 0
[  244.379794][ T5282] usb 2-1: config 0 has no interface number 0
[  244.385960][ T5282] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.397057][ T5297] dvb-usb: bulk message failed: -22 (2/0)
[  244.406511][ T5297] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected.
[  244.430228][ T8181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.440846][ T5282] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.452030][   T25] dvb-usb: bulk message failed: -22 (1/0)
[  244.457803][   T25] dvb-usb: error while querying for an remote control event.
[  244.490841][ T5282] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  244.509645][ T5282] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  244.517695][ T5282] usb 2-1: Manufacturer: syz
[  244.534572][ T5282] usb 2-1: config 0 descriptor??
[  244.549528][   T25] dvb-usb: bulk message failed: -22 (1/0)
[  244.555344][   T25] dvb-usb: error while querying for an remote control event.
[  244.639741][   T25] dvb-usb: bulk message failed: -22 (1/0)
[  244.645575][   T25] dvb-usb: error while querying for an remote control event.
[  244.663914][ T5277] usb 1-1: USB disconnect, device number 31
[  244.680764][  T941] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  244.688417][ T5281] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  244.750491][ T5277] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected.
[  244.893693][  T941] usb 5-1: unable to get BOS descriptor or descriptor too short
[  244.915070][ T5281] usb 3-1: Using ep0 maxpacket: 8
[  244.922749][  T941] usb 5-1: config 0 has no interfaces?
[  244.944482][ T5281] usb 3-1: New USB device found, idVendor=0406, idProduct=0990, bcdDevice=7f.01
[  244.959242][  T941] usb 5-1: string descriptor 0 read error: -22
[  244.970048][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.986808][  T941] usb 5-1: New USB device found, idVendor=07da, idProduct=104d, bcdDevice=e5.48
[  245.001321][ T5281] usb 3-1: config 0 descriptor??
[  245.016078][  T941] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  245.041281][ T5281] usb 3-1: unknown interface protocol 0x3f, assuming v1
[  245.080066][  T941] usb 5-1: config 0 descriptor??
[  245.095819][ T5281] usb 3-1: cannot find UAC_HEADER
[  245.160999][ T5245] udevd[5245]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  245.178401][ T5281] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  245.192537][ T5282] usbhid 2-1:0.18: can't add hid device: -71
[  245.228200][ T5282] usbhid 2-1:0.18: probe with driver usbhid failed with error -71
[  245.248131][ T5282] usb 2-1: USB disconnect, device number 26
[  245.344461][   T29] audit: type=1326 audit(1724239221.552:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa6579e79 code=0x7ffc0000
[  245.387366][   T29] audit: type=1326 audit(1724239221.552:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa6579e79 code=0x7ffc0000
[  245.461915][   T29] audit: type=1326 audit(1724239221.552:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcaa6579e79 code=0x7ffc0000
[  245.512354][ T5277] usb 3-1: USB disconnect, device number 24
[  245.525505][   T29] audit: type=1326 audit(1724239221.552:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa6579e79 code=0x7ffc0000
[  245.589610][   T29] audit: type=1326 audit(1724239221.552:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa6579e79 code=0x7ffc0000
[  245.659612][   T29] audit: type=1326 audit(1724239221.552:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fcaa6579e79 code=0x7ffc0000
[  245.713316][   T29] audit: type=1326 audit(1724239221.552:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa6579e79 code=0x7ffc0000
[  245.778129][   T29] audit: type=1326 audit(1724239221.552:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa6579e79 code=0x7ffc0000
[  245.839604][   T29] audit: type=1326 audit(1724239221.552:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcaa6579e79 code=0x7ffc0000
[  246.073139][ T5297] usb 5-1: USB disconnect, device number 26
[  246.115410][ T8215] input: syz1 as /devices/virtual/input/input38
[  247.119620][  T941] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  247.243397][ T5277] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  247.295356][ T8237] syz.3.493: attempt to access beyond end of device
[  247.295356][ T8237] md102: rw=2048, sector=0, nr_sectors = 8 limit=0
[  247.319671][  T941] usb 1-1: Using ep0 maxpacket: 16
[  247.344485][  T941] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  247.374209][  T941] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  247.384930][  T941] usb 1-1: Product: syz
[  247.390199][  T941] usb 1-1: Manufacturer: syz
[  247.404481][  T941] r8152-cfgselector 1-1: Unknown version 0x0000
[  247.415266][  T941] r8152-cfgselector 1-1: config 0 descriptor??
[  247.452264][ T5277] usb 5-1: config 0 has an invalid interface number: 18 but max is 0
[  247.462126][ T5277] usb 5-1: config 0 has no interface number 0
[  247.468353][ T5277] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.480549][ T5277] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.494649][ T5277] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  247.505503][ T5277] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  247.520985][ T5277] usb 5-1: Manufacturer: syz
[  247.565702][ T5277] usb 5-1: config 0 descriptor??
[  247.626710][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'.
[  247.671603][ T8229] binder: 8227:8229 ioctl c0306201 200003c0 returned -22
[  247.752266][ T8247] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  247.758851][ T8247] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  247.799803][ T8247] vhci_hcd vhci_hcd.0: Device attached
[  247.854532][ T8248] usbip_core: unknown command
[  247.876243][ T8248] vhci_hcd: unknown pdu 3020988904
[  247.903031][ T8248] usbip_core: unknown command
[  247.919599][    T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  247.957733][  T975] vhci_hcd: stop threads
[  247.964805][  T975] vhci_hcd: release socket
[  247.973133][  T975] vhci_hcd: disconnect device
[  248.003092][ T5277] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.0014/input/input39
[  248.029653][  T941] vhci_hcd: vhci_device speed not set
[  248.097793][ T5278] r8152-cfgselector 1-1: USB disconnect, device number 32
[  248.139777][    T8] usb 2-1: Using ep0 maxpacket: 8
[  248.147568][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  248.185050][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  248.217050][    T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 0.40
[  248.227123][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.246306][ T5277] sony 0003:054C:03D5.0014: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18
[  248.257929][    T8] usb 2-1: Product: syz
[  248.263190][    T8] usb 2-1: Manufacturer: syz
[  248.282968][    T8] usb 2-1: SerialNumber: syz
[  248.361981][   T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  248.565617][   T25] usb 4-1: config 0 has an invalid interface number: 15 but max is 0
[  248.584756][   T25] usb 4-1: config 0 has no interface number 0
[  248.599562][   T25] usb 4-1: too many endpoints for config 0 interface 15 altsetting 86: 81, using maximum allowed: 30
[  248.629609][   T25] usb 4-1: config 0 interface 15 altsetting 86 has 0 endpoint descriptors, different from the interface descriptor's value: 81
[  248.672026][   T25] usb 4-1: config 0 interface 15 has no altsetting 0
[  248.689990][   T25] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=74.01
[  248.699138][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.704492][ T8244] program syz.1.496 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  248.746851][   T25] usb 4-1: config 0 descriptor??
[  248.836277][    T8] usb 2-1: skipping empty audio interface (v1)
[  248.893474][    T8] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  248.932302][    T8] usb 2-1: USB disconnect, device number 27
[  248.972601][   T25] usb 4-1: string descriptor 0 read error: -71
[  248.998111][ T5237] udevd[5237]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  248.999616][   T25] ttusbir 4-1:0.15: cannot find expected altsetting
[  249.094678][   T25] usb 4-1: USB disconnect, device number 24
[  249.322421][ T5297] usb 5-1: reset high-speed USB device number 27 using dummy_hcd
[  249.658065][ T8270] PM: Enabling pm_trace changes system date and time during resume.
[  249.658065][ T8270] PM: Correct system time has to be restored manually after resume.
[  249.758466][   T29] kauditd_printk_skb: 15 callbacks suppressed
[  249.758484][   T29] audit: type=1400 audit(1724239225.962:863): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=8273 comm="syz.1.503"
[  249.784151][    C1] vkms_vblank_simulate: vblank timer overrun
[  249.886361][ T8276] netlink: 156 bytes leftover after parsing attributes in process `syz.1.503'.
[  250.191026][   T25] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  250.409014][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11
[  250.444700][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024
[  250.482948][   T25] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  250.519538][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.539340][   T25] usb 2-1: config 0 descriptor??
[  250.563537][ T5282] usb 5-1: USB disconnect, device number 27
[  250.593438][ T8279] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  250.713341][   T25] gspca_main: spca561-2.14.0 probing abcd:cdee
[  250.880016][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.913969][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.282626][   T25] spca561 2-1:0.0: probe with driver spca561 failed with error -22
[  251.323484][   T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  251.342900][   T25] usb 2-1: MIDIStreaming interface descriptor not found
[  251.361186][ T8296] x_tables: ip_tables: icmp match: only valid for protocol 1
[  251.469637][   T58] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  251.526929][ T8299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.509'.
[  251.729924][   T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  251.759012][   T58] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  251.788424][   T58] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice= 1.a0
[  251.800342][   T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.806161][ T8303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'.
[  251.828074][   T58] usb 5-1: config 0 descriptor??
[  251.868046][   T58] em28xx 5-1:0.0: New device   @ 480 Mbps (eb1a:e303, interface 0, class 0)
[  251.877122][   T58] em28xx 5-1:0.0: Video interface 0 found: bulk
[  251.929850][ T5297] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  252.094094][ T8306] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  252.140131][   T58] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  252.150424][ T5297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.170172][ T5297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.183458][ T5297] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  252.202806][ T5297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.216008][ T5297] usb 3-1: config 0 descriptor??
[  252.293112][   T58] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  252.306833][   T58] em28xx 5-1:0.0: board has no eeprom
[  252.399714][   T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  252.407595][   T58] em28xx 5-1:0.0: Identified as Kaiomy TVnPC U2 (card=63)
[  252.419934][   T58] em28xx 5-1:0.0: analog set to bulk mode.
[  252.431981][   T46] em28xx 5-1:0.0: Registering V4L2 extension
[  252.453450][   T58] usb 5-1: USB disconnect, device number 28
[  252.462173][   T58] em28xx 5-1:0.0: Disconnecting em28xx
[  252.623710][   T46] i2c i2c-1: Invalid 7-bit I2C address 0x00
[  252.653749][ T5297] hid-thrustmaster 0003:044F:B65D.0015: item fetching failed at offset 3/5
[  252.667229][   T25] usb 4-1: config 0 has an invalid interface number: 18 but max is 0
[  252.680102][   T25] usb 4-1: config 0 has no interface number 0
[  252.691133][ T5297] hid-thrustmaster 0003:044F:B65D.0015: parse failed with error -22
[  252.711358][   T25] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.732754][ T5297] hid-thrustmaster 0003:044F:B65D.0015: probe with driver hid-thrustmaster failed with error -22
[  252.752532][    T8] usb 2-1: USB disconnect, device number 28
[  252.776916][   T25] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  252.796810][   T46] tuner: 1-0061: Tuner -1 found with type(s) Radio TV.
[  252.821232][   T25] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  252.868678][   T25] usb 4-1: Manufacturer: syz
[  252.894436][ T5279] usb 3-1: USB disconnect, device number 25
[  252.913670][   T25] usb 4-1: config 0 descriptor??
[  252.955307][   T46] DVB: Unable to find symbol xc2028_attach()
[  252.974844][   T46] tuner: 1-0061: Tuner has no way to set tv freq
[  253.008448][   T46] em28xx 5-1:0.0: Config register raw data: 0xffffffed
[  253.045513][   T46] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  253.061602][   T46] em28xx 5-1:0.0: No AC97 audio processor
[  253.084077][   T46] tuner: 1-0061: Tuner has no way to set tv freq
[  253.155729][   T46] em28xx 5-1:0.0: Registered radio device as radio32
[  253.200665][   T46] usb 5-1: Decoder not found
[  253.214840][ T5279] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  253.231539][   T46] em28xx 5-1:0.0: failed to create media graph
[  253.261981][   T46] em28xx 5-1:0.0: V4L2 device radio32 deregistered
[  253.283968][ T5279] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  253.311901][ T8307] QAT: Device 0 not found
[  253.328334][   T46] em28xx 5-1:0.0: V4L2 device video71 deregistered
[  253.364986][   T46] em28xx 5-1:0.0: Registering input extension
[  253.371730][   T58] em28xx 5-1:0.0: Closing input extension
[  253.377698][   T58] ==================================================================
[  253.385819][   T58] BUG: KASAN: slab-use-after-free in media_device_unregister+0x154/0x470
[  253.394244][   T58] Read of size 8 at addr ffff888022fd4210 by task kworker/1:2/58
[  253.401973][   T58] 
[  253.404293][   T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/1:2 Not tainted 6.11.0-rc4-syzkaller-00019-gb311c1b497e5 #0
[  253.414859][   T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  253.424900][   T58] Workqueue: usb_hub_wq hub_event
[  253.429932][   T58] Call Trace:
[  253.433194][   T58]  <TASK>
[  253.436103][   T58]  dump_stack_lvl+0x241/0x360
[  253.440765][   T58]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.445939][   T58]  ? __pfx__printk+0x10/0x10
[  253.450512][   T58]  ? _printk+0xd5/0x120
[  253.454652][   T58]  ? __virt_addr_valid+0x183/0x530
[  253.459745][   T58]  ? __virt_addr_valid+0x183/0x530
[  253.464837][   T58]  print_report+0x169/0x550
[  253.469321][   T58]  ? __virt_addr_valid+0x183/0x530
[  253.474413][   T58]  ? __virt_addr_valid+0x183/0x530
[  253.479506][   T58]  ? __virt_addr_valid+0x45f/0x530
[  253.484593][   T58]  ? __phys_addr+0xba/0x170
[  253.489075][   T58]  ? media_device_unregister+0x154/0x470
[  253.494693][   T58]  kasan_report+0x143/0x180
[  253.499183][   T58]  ? media_device_unregister+0x154/0x470
[  253.504818][   T58]  media_device_unregister+0x154/0x470
[  253.510281][   T58]  em28xx_release_resources+0xa7/0x230
[  253.515722][   T58]  em28xx_usb_disconnect+0x1cc/0x530
[  253.520988][   T58]  usb_unbind_interface+0x25e/0x940
[  253.526180][   T58]  ? kernfs_remove_by_name_ns+0x11b/0x160
[  253.531891][   T58]  ? __pfx_usb_unbind_interface+0x10/0x10
[  253.537594][   T58]  device_release_driver_internal+0x503/0x7c0
[  253.543649][   T58]  bus_remove_device+0x34f/0x420
[  253.548575][   T58]  device_del+0x57a/0x9b0
[  253.552886][   T58]  ? kfree+0x149/0x360
[  253.556932][   T58]  ? __pfx_device_del+0x10/0x10
[  253.561761][   T58]  ? kobject_put+0x44d/0x480
[  253.566332][   T58]  usb_disable_device+0x3bf/0x850
[  253.571340][   T58]  usb_disconnect+0x340/0x950
[  253.576000][   T58]  hub_event+0x1ebc/0x5150
[  253.580405][   T58]  ? debug_object_deactivate+0x2d5/0x390
[  253.586024][   T58]  ? __pfx_hub_event+0x10/0x10
[  253.590769][   T58]  ? __pfx_lock_acquire+0x10/0x10
[  253.595815][   T58]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  253.601784][   T58]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  253.608096][   T58]  ? process_scheduled_works+0x945/0x1830
[  253.613798][   T58]  process_scheduled_works+0xa2c/0x1830
[  253.619334][   T58]  ? __pfx_process_scheduled_works+0x10/0x10
[  253.625306][   T58]  ? assign_work+0x364/0x3d0
[  253.629910][   T58]  worker_thread+0x86d/0xd40
[  253.634494][   T58]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  253.640396][   T58]  ? __kthread_parkme+0x169/0x1d0
[  253.645403][   T58]  ? __pfx_worker_thread+0x10/0x10
[  253.650495][   T58]  kthread+0x2f0/0x390
[  253.654547][   T58]  ? __pfx_worker_thread+0x10/0x10
[  253.659639][   T58]  ? __pfx_kthread+0x10/0x10
[  253.664211][   T58]  ret_from_fork+0x4b/0x80
[  253.668607][   T58]  ? __pfx_kthread+0x10/0x10
[  253.673178][   T58]  ret_from_fork_asm+0x1a/0x30
[  253.677927][   T58]  </TASK>
[  253.680925][   T58] 
[  253.683225][   T58] Allocated by task 46:
[  253.687351][   T58]  kasan_save_track+0x3f/0x80
[  253.692011][   T58]  __kasan_kmalloc+0x98/0xb0
[  253.696589][   T58]  __kmalloc_cache_noprof+0x19c/0x2c0
[  253.701941][   T58]  em28xx_v4l2_init+0xfd/0x2f40
[  253.706773][   T58]  em28xx_init_extension+0x120/0x1c0
[  253.712036][   T58]  process_scheduled_works+0xa2c/0x1830
[  253.717561][   T58]  worker_thread+0x86d/0xd40
[  253.722135][   T58]  kthread+0x2f0/0x390
[  253.726203][   T58]  ret_from_fork+0x4b/0x80
[  253.730604][   T58]  ret_from_fork_asm+0x1a/0x30
[  253.735352][   T58] 
[  253.737656][   T58] Freed by task 46:
[  253.741438][   T58]  kasan_save_track+0x3f/0x80
[  253.746102][   T58]  kasan_save_free_info+0x40/0x50
[  253.751107][   T58]  poison_slab_object+0xe0/0x150
[  253.756025][   T58]  __kasan_slab_free+0x37/0x60
[  253.760767][   T58]  kfree+0x149/0x360
[  253.764637][   T58]  em28xx_v4l2_init+0x16d7/0x2f40
[  253.769641][   T58]  em28xx_init_extension+0x120/0x1c0
[  253.774903][   T58]  process_scheduled_works+0xa2c/0x1830
[  253.780430][   T58]  worker_thread+0x86d/0xd40
[  253.785021][   T58]  kthread+0x2f0/0x390
[  253.789069][   T58]  ret_from_fork+0x4b/0x80
[  253.793470][   T58]  ret_from_fork_asm+0x1a/0x30
[  253.798232][   T58] 
[  253.800558][   T58] The buggy address belongs to the object at ffff888022fd4000
[  253.800558][   T58]  which belongs to the cache kmalloc-8k of size 8192
[  253.814607][   T58] The buggy address is located 528 bytes inside of
[  253.814607][   T58]  freed 8192-byte region [ffff888022fd4000, ffff888022fd6000)
[  253.828471][   T58] 
[  253.830782][   T58] The buggy address belongs to the physical page:
[  253.837193][   T58] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22fd0
[  253.845963][   T58] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  253.854462][   T58] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  253.862001][   T58] page_type: 0xfdffffff(slab)
[  253.866657][   T58] raw: 00fff00000000040 ffff888015842280 ffffea0001c4b000 0000000000000006
[  253.875216][   T58] raw: 0000000000000000 0000000080020002 00000001fdffffff 0000000000000000
[  253.883790][   T58] head: 00fff00000000040 ffff888015842280 ffffea0001c4b000 0000000000000006
[  253.892439][   T58] head: 0000000000000000 0000000080020002 00000001fdffffff 0000000000000000
[  253.901149][   T58] head: 00fff00000000003 ffffea00008bf401 ffffffffffffffff 0000000000000000
[  253.909795][   T58] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  253.918487][   T58] page dumped because: kasan: bad access detected
[  253.924881][   T58] page_owner tracks the page as allocated
[  253.930570][   T58] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4894, tgid 4894 (dhcpcd), ts 229957180461, free_ts 229957129915
[  253.952778][   T58]  post_alloc_hook+0x1f3/0x230
[  253.957527][   T58]  get_page_from_freelist+0x2e4c/0x2f10
[  253.963050][   T58]  __alloc_pages_noprof+0x256/0x6c0
[  253.968231][   T58]  alloc_slab_page+0x5f/0x120
[  253.972907][   T58]  allocate_slab+0x5a/0x2f0
[  253.977389][   T58]  ___slab_alloc+0xcd1/0x14b0
[  253.982065][   T58]  __slab_alloc+0x58/0xa0
[  253.986386][   T58]  __kmalloc_node_track_caller_noprof+0x281/0x440
[  253.992777][   T58]  kmalloc_reserve+0x111/0x2a0
[  253.997519][   T58]  __alloc_skb+0x1f3/0x440
[  254.001914][   T58]  netlink_dump+0x1f7/0xd80
[  254.006397][   T58]  __netlink_dump_start+0x5a2/0x790
[  254.011601][   T58]  rtnetlink_rcv_msg+0xb3d/0xcf0
[  254.016518][   T58]  netlink_rcv_skb+0x1e3/0x430
[  254.021262][   T58]  netlink_unicast+0x7f6/0x990
[  254.026011][   T58]  netlink_sendmsg+0x8e4/0xcb0
[  254.030764][   T58] page last free pid 4894 tgid 4894 stack trace:
[  254.037061][   T58]  free_unref_page+0xd22/0xea0
[  254.041814][   T58]  __slab_free+0x31b/0x3d0
[  254.046231][   T58]  qlist_free_all+0x9e/0x140
[  254.050802][   T58]  kasan_quarantine_reduce+0x14f/0x170
[  254.056238][   T58]  __kasan_slab_alloc+0x23/0x80
[  254.061078][   T58]  kmem_cache_alloc_node_noprof+0x16b/0x320
[  254.066945][   T58]  __alloc_skb+0x1c3/0x440
[  254.071340][   T58]  netlink_sendmsg+0x638/0xcb0
[  254.076079][   T58]  __sock_sendmsg+0x221/0x270
[  254.080851][   T58]  __sys_sendto+0x3a4/0x4f0
[  254.085359][   T58]  __x64_sys_sendto+0xde/0x100
[  254.090126][   T58]  do_syscall_64+0xf3/0x230
[  254.094606][   T58]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.100487][   T58] 
[  254.102805][   T58] Memory state around the buggy address:
[  254.108412][   T58]  ffff888022fd4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  254.116467][   T58]  ffff888022fd4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  254.124509][   T58] >ffff888022fd4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  254.132542][   T58]                          ^
[  254.137123][   T58]  ffff888022fd4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  254.145165][   T58]  ffff888022fd4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  254.153210][   T58] ==================================================================
[  254.161360][    C1] vkms_vblank_simulate: vblank timer overrun
[  254.209618][ T5297] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  254.316783][   T58] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  254.324001][   T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/1:2 Not tainted 6.11.0-rc4-syzkaller-00019-gb311c1b497e5 #0
[  254.334599][   T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  254.344647][   T58] Workqueue: usb_hub_wq hub_event
[  254.349681][   T58] Call Trace:
[  254.352960][   T58]  <TASK>
[  254.355878][   T58]  dump_stack_lvl+0x241/0x360
[  254.360555][   T58]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.365738][   T58]  ? __pfx__printk+0x10/0x10
[  254.370319][   T58]  ? preempt_schedule+0xe1/0xf0
[  254.375164][   T58]  ? vscnprintf+0x5d/0x90
[  254.379484][   T58]  panic+0x349/0x860
[  254.383373][   T58]  ? check_panic_on_warn+0x21/0xb0
[  254.388471][   T58]  ? __pfx_panic+0x10/0x10
[  254.392883][   T58]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  254.398855][   T58]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  254.405174][   T58]  ? print_report+0x502/0x550
[  254.409847][   T58]  check_panic_on_warn+0x86/0xb0
[  254.414860][   T58]  ? media_device_unregister+0x154/0x470
[  254.420487][   T58]  end_report+0x77/0x160
[  254.424727][   T58]  kasan_report+0x154/0x180
[  254.429229][   T58]  ? media_device_unregister+0x154/0x470
[  254.434879][   T58]  media_device_unregister+0x154/0x470
[  254.440362][   T58]  em28xx_release_resources+0xa7/0x230
[  254.445827][   T58]  em28xx_usb_disconnect+0x1cc/0x530
[  254.451111][   T58]  usb_unbind_interface+0x25e/0x940
[  254.456309][   T58]  ? kernfs_remove_by_name_ns+0x11b/0x160
[  254.462058][   T58]  ? __pfx_usb_unbind_interface+0x10/0x10
[  254.467771][   T58]  device_release_driver_internal+0x503/0x7c0
[  254.473861][   T58]  bus_remove_device+0x34f/0x420
[  254.478793][   T58]  device_del+0x57a/0x9b0
[  254.483113][   T58]  ? kfree+0x149/0x360
[  254.487168][   T58]  ? __pfx_device_del+0x10/0x10
[  254.492011][   T58]  ? kobject_put+0x44d/0x480
[  254.496590][   T58]  usb_disable_device+0x3bf/0x850
[  254.501635][   T58]  usb_disconnect+0x340/0x950
[  254.506331][   T58]  hub_event+0x1ebc/0x5150
[  254.510756][   T58]  ? debug_object_deactivate+0x2d5/0x390
[  254.516395][   T58]  ? __pfx_hub_event+0x10/0x10
[  254.521153][   T58]  ? __pfx_lock_acquire+0x10/0x10
[  254.526170][   T58]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  254.532147][   T58]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  254.538470][   T58]  ? process_scheduled_works+0x945/0x1830
[  254.544204][   T58]  process_scheduled_works+0xa2c/0x1830
[  254.549750][   T58]  ? __pfx_process_scheduled_works+0x10/0x10
[  254.555726][   T58]  ? assign_work+0x364/0x3d0
[  254.560312][   T58]  worker_thread+0x86d/0xd40
[  254.564897][   T58]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  254.570787][   T58]  ? __kthread_parkme+0x169/0x1d0
[  254.575831][   T58]  ? __pfx_worker_thread+0x10/0x10
[  254.580951][   T58]  kthread+0x2f0/0x390
[  254.585018][   T58]  ? __pfx_worker_thread+0x10/0x10
[  254.590117][   T58]  ? __pfx_kthread+0x10/0x10
[  254.594713][   T58]  ret_from_fork+0x4b/0x80
[  254.599124][   T58]  ? __pfx_kthread+0x10/0x10
[  254.603708][   T58]  ret_from_fork_asm+0x1a/0x30
[  254.608468][   T58]  </TASK>
[  254.611736][   T58] Kernel Offset: disabled
[  254.616046][   T58] Rebooting in 86400 seconds..