last executing test programs:

19m2.530131874s ago: executing program 4 (id=431):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100))
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19m2.440586615s ago: executing program 4 (id=432):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0xff7f}}, 0x20}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0)
r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$6lowpan_enable(r8, &(0x7f0000000280)='1', 0x1)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r10, &(0x7f0000000000), 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_open_dev$sndctrl(0x0, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)

19m0.752782037s ago: executing program 4 (id=441):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000045c0)=0x40)
syz_usb_connect(0x2, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x40, 0xd0, 0x7d, 0x40, 0x1286, 0x1fa4, 0xfb16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0x0, 0x0, 0xee, 0x67, 0x8}}]}}]}}, 0x0)

18m58.85249516s ago: executing program 4 (id=453):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r7, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
setsockopt$packet_int(r6, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000020601010000005e127a74ef19b7964f00000000000000000005000400000000000900020073797a31000000000500010007000000050005000a000000140007800800114000000000050015004000000015000300686173683a69702c706f72742c6e657400000000"], 0x64}}, 0x0)
r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r9, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r9, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r9, 0x800c5012, &(0x7f0000000200))
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc0000000000000000000000000000002001000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000a00000001ffffffff000000000063e004ada6000000990000120000000000000000000a0000000000000004cd0598d512549f42dbaccea9b94b1cf7c2bce916d62d8d9735d1648c3f82f54329e3365e25486f6f96ce53c873136dcb98d5f86a1a221440b5ce66900ad58165f4f5571257640100000097bbd6a02a315bb1e11ab775de0f71d9b01bdcfec1f318278ea838e8f419c2bdc4f9ee"], 0x174}}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000200)={0x3, 0x0, [{0xffff1000, 0x1000, &(0x7f0000000740)=""/4096}, {0x80a0000, 0xf7, &(0x7f0000000100)=""/247}, {0x1, 0x61, &(0x7f0000000000)=""/97}]})
syz_open_dev$tty1(0xc, 0x4, 0x3)

18m50.322853379s ago: executing program 4 (id=503):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, 0xffffffffffffffff, 0x2000)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) (async)
read(r1, 0x0, 0x0) (async)
r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0xfffffffffffffc82, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x10}, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async)
recvmmsg(r4, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x2) (async)
accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c) (async)
ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) (async)
setuid(0x0) (async)
r5 = openat$mixer(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0x82, 0x0, &(0x7f0000000440)) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) (async)
add_key(&(0x7f0000002100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)

18m50.025480774s ago: executing program 4 (id=506):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000020603000000000000000000f446b06953aa8a376179e9ec2ff51b6a0500000705000100070000000900020073797a31000000000c0007"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0)=0x7df8, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'lo\x00', 0x4})
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x41}, 0x7ffffffe}], 0x1, 0x40002000, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c00018006000600843b00004c150280081514"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800)

18m48.876167462s ago: executing program 32 (id=506):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000020603000000000000000000f446b06953aa8a376179e9ec2ff51b6a0500000705000100070000000900020073797a31000000000c0007"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0)=0x7df8, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'lo\x00', 0x4})
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x41}, 0x7ffffffe}], 0x1, 0x40002000, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c00018006000600843b00004c150280081514"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800)

7m8.351898898s ago: executing program 0 (id=3361):
symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000001000e0000001000000000000000000000000e00000010000000000000000000000000000000000000000020000102000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/101], 0xb8}}, 0x0)

7m7.991315358s ago: executing program 0 (id=3362):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa8}}, 0x0) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x3, 0x8, 0x101, 0x0, 0x0, {0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x47b6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000884}, 0x4009090) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000200)=0x4) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000001c0))

7m7.806747096s ago: executing program 0 (id=3365):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000280)=0x14)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$igmp6(0xa, 0x3, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000500)=[{{}, {<r7=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000300)={r7, 0x0, &(0x7f0000000480)=[{{}, {<r8=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={r8, 0x0, &(0x7f0000000200)})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000140)=[{0x80000000, <r9=>0x0}], &(0x7f00000002c0)})
r10 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r10, 0xc0487c04, &(0x7f0000000540)={0x0, 0x3, 0x0, &(0x7f00000009c0)=[{}, {<r11=>0x80000000}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$MEDIA_IOC_SETUP_LINK(r10, 0xc0347c03, &(0x7f0000000e80)={{r11, 0x0, 0x2, [0x2]}})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000400)={0x80000000, &(0x7f0000000340)=[{}, {0x80000000, <r12=>0x0}], &(0x7f0000000380)})
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000440)={{r8, r9, 0x4, [0x7, 0x579c395d]}, {r11, r12, 0x1, [0x0, 0x1]}, 0x10000000, [0x4, 0x200]})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
userfaultfd(0x1)
r13 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r14=>0x0, &(0x7f00000001c0)=<r15=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r14, r15, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r13, 0x847ba, 0x0, 0xe, 0x0, 0x0)

7m6.591549864s ago: executing program 0 (id=3375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140000006a0063c4"], 0x14}], 0x1, 0x0, 0x0, 0x48000}, 0x0)
syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x4c}}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x3c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53})
ioctl$UI_DEV_CREATE(r6, 0x5501)
sendmsg$nl_route(r0, 0x0, 0x24040040)
socket$nl_netfilter(0x10, 0x3, 0xc)

7m4.633613778s ago: executing program 0 (id=3382):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000000009042902abda66830009050402100000fa000905820240"], 0x0) (async)
r1 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r4=>0x0})
sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async)
setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x56) (async, rerun: 32)
syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (rerun: 64)
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0x6, 0x2})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000580)={0x40, 0x15, 0x7, "da5ae6c3b868b6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008060100ac141400080005000a0101021800168014000300fc0000000000000000000000000000000600150002000000d46d0d6b1b0a85ad44e7c9862d0edca190903e488698aee5602e1962b65822c7a0c6df5c2ae2b51c7055df51a36cce0c553ebeae417be662d07c719c145c6bbbad000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

7m4.392054622s ago: executing program 0 (id=3385):
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000300)={'erspan0\x00', <r3=>0x0, 0x80, 0x8000, 0x6, 0x10000, {{0x28, 0x4, 0x0, 0x1b, 0xa0, 0x68, 0x0, 0xf6, 0x2f, 0x0, @loopback, @empty, {[@lsrr={0x83, 0xf, 0xb1, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}]}, @cipso={0x86, 0x34, 0x1, [{0x1, 0xe, "2168f3c6d416bfbf684a0438"}, {0x2, 0x11, "4000339423e63aa1f82946b2655559"}, {0x1, 0x2}, {0x0, 0x3, "fc"}, {0x5, 0xa, "048814648444dd0c"}]}, @timestamp_addr={0x44, 0x44, 0x9a, 0x1, 0x9, [{@loopback, 0x7}, {@private=0xa010101, 0x540c}, {@remote, 0x3}, {@private=0xa010100}, {@loopback, 0x1}, {@multicast1, 0x5}, {@loopback, 0x5}, {@loopback, 0xffff8000}]}, @ra={0x94, 0x4}, @noop]}}}}})
bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) (async)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) (async)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1], &(0x7f0000000280)='GPL\x00', 0x6, 0x25, &(0x7f0000000080)=""/37, 0x41000, 0x8, '\x00', r3, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x1, &(0x7f0000000640)=[0xffffffffffffffff, r5], &(0x7f0000000680)=[{0x1, 0x1, 0xb, 0x2}], 0x10, 0xab}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1], &(0x7f0000000280)='GPL\x00', 0x6, 0x25, &(0x7f0000000080)=""/37, 0x41000, 0x8, '\x00', r3, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x1, &(0x7f0000000640)=[0xffffffffffffffff, r5], &(0x7f0000000680)=[{0x1, 0x1, 0xb, 0x2}], 0x10, 0xab}, 0x94)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, r1)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71)
fsopen(0x0, 0x0) (async)
r6 = fsopen(0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
socketpair$unix(0x1, 0x1, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
readlinkat(r7, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa)
fsmount(r6, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
close_range(r8, r8, 0x0)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0)
close_range(r9, 0xffffffffffffffff, 0x200000000000000)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})

6m49.0705056s ago: executing program 33 (id=3385):
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000300)={'erspan0\x00', <r3=>0x0, 0x80, 0x8000, 0x6, 0x10000, {{0x28, 0x4, 0x0, 0x1b, 0xa0, 0x68, 0x0, 0xf6, 0x2f, 0x0, @loopback, @empty, {[@lsrr={0x83, 0xf, 0xb1, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}]}, @cipso={0x86, 0x34, 0x1, [{0x1, 0xe, "2168f3c6d416bfbf684a0438"}, {0x2, 0x11, "4000339423e63aa1f82946b2655559"}, {0x1, 0x2}, {0x0, 0x3, "fc"}, {0x5, 0xa, "048814648444dd0c"}]}, @timestamp_addr={0x44, 0x44, 0x9a, 0x1, 0x9, [{@loopback, 0x7}, {@private=0xa010101, 0x540c}, {@remote, 0x3}, {@private=0xa010100}, {@loopback, 0x1}, {@multicast1, 0x5}, {@loopback, 0x5}, {@loopback, 0xffff8000}]}, @ra={0x94, 0x4}, @noop]}}}}})
bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) (async)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) (async)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1], &(0x7f0000000280)='GPL\x00', 0x6, 0x25, &(0x7f0000000080)=""/37, 0x41000, 0x8, '\x00', r3, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x1, &(0x7f0000000640)=[0xffffffffffffffff, r5], &(0x7f0000000680)=[{0x1, 0x1, 0xb, 0x2}], 0x10, 0xab}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1], &(0x7f0000000280)='GPL\x00', 0x6, 0x25, &(0x7f0000000080)=""/37, 0x41000, 0x8, '\x00', r3, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x1, &(0x7f0000000640)=[0xffffffffffffffff, r5], &(0x7f0000000680)=[{0x1, 0x1, 0xb, 0x2}], 0x10, 0xab}, 0x94)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, r1)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71)
fsopen(0x0, 0x0) (async)
r6 = fsopen(0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
socketpair$unix(0x1, 0x1, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
readlinkat(r7, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa)
fsmount(r6, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
close_range(r8, r8, 0x0)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0)
close_range(r9, 0xffffffffffffffff, 0x200000000000000)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})

5m57.902015956s ago: executing program 1 (id=3650):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000001c0)=0x401, 0x4)
sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e24, 0x404400a, @empty, 0x5}, 0x1c, 0x0}, 0x4048804)
io_submit(0x0, 0x1, &(0x7f00000007c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x101, r1, 0x0, 0x0, 0x8}])
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0)
syz_clone(0x90c0000, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

5m57.006428046s ago: executing program 1 (id=3653):
pselect6(0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
rt_sigaction(0x0, &(0x7f0000000080)={&(0x7f0000000000)="c4019710f641236300673e660f381c3a660f3a411100660f383cfcc4219dfb650066f0428123559066470f381e9904000000c4c15172f60066af", 0x2, &(0x7f0000000040)="65f30f581942c04e090cf246afc42219376731c481b1e37c23cdc4a185e14cdfef0f98cc2e35e670a222c422b5295b01660f3838de", {[0x7fffffff]}}, &(0x7f0000000140)={&(0x7f00000000c0)="65360f54e1de3c9e360f0d0500000000c403f96205c30000000dc4e1b1d10f64f20f33c402f1969cc6000000000f8133a200000f5f4004c4a2a92b7202", 0x0, &(0x7f0000000100)="e3000f72e400c461f016db47d87fac666626f3a7c44221a6194622dc3e46d9e9c4410df4fdf383fd31"}, 0x8, &(0x7f0000000180))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)

5m56.647211003s ago: executing program 1 (id=3655):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x600000000000000)

5m56.392403199s ago: executing program 1 (id=3657):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2)

5m55.415000762s ago: executing program 1 (id=3668):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000104000000000000efffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0)

5m55.181677024s ago: executing program 1 (id=3669):
r0 = io_uring_setup(0x758c, &(0x7f0000000180)={0x0, 0xf1fa, 0x2000, 0x0, 0x305})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x810, r0, 0x0) (async)
r1 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xc6b, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0)
readv(r3, &(0x7f00000005c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}], 0x1)
r4 = dup(r2)
r5 = syz_io_uring_setup(0x94e, &(0x7f0000000340)={0x0, 0x8d2dc, 0x0, 0x1}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) (async)
io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async, rerun: 64)
bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) (rerun: 64)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})

5m54.793966015s ago: executing program 34 (id=3669):
r0 = io_uring_setup(0x758c, &(0x7f0000000180)={0x0, 0xf1fa, 0x2000, 0x0, 0x305})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x810, r0, 0x0) (async)
r1 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xc6b, &(0x7f0000001c00)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000c5d0002000000119078000000000000000000004e200c4990780400000007740002fdffffffffffffff9c67524ed6ed152d4f775bbc411126513b67ab2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71633a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b89a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222a12ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183134d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5"], 0x0)
readv(r3, &(0x7f00000005c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}], 0x1)
r4 = dup(r2)
r5 = syz_io_uring_setup(0x94e, &(0x7f0000000340)={0x0, 0x8d2dc, 0x0, 0x1}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) (async)
io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async, rerun: 64)
bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) (rerun: 64)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})

16.461739589s ago: executing program 2 (id=5060):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x40000, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0xa9, 0x0, 0x0, 0x8, 0x12}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x40)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(r2, &(0x7f0000002280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f00000001c0)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7030000200000007910300000000000070000000100000095000000000000001cc56fbad4e5756058a081283654fcf115029232109ea547f4b0410749548298a8cd7890378780df4c4971c84e179ab11776f5aeb9a95f37c063b126f28dee87354090ab8c3587d88e940857236bcf8e48257f60fe82b47dbdd05670ab671007f819798539cb7eadfe9772113755ab5461d067e14d881a9ea0c2c66e7b80693b07e80f7b318a"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r6], 0x20)
sendmsg$SMC_PNETID_GET(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
mremap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil)

15.129018236s ago: executing program 2 (id=5072):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x1086, 0x1000, 0x4, 0x162}, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
write$UHID_DESTROY(r6, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
io_uring_enter(r3, 0x3517, 0x173d, 0x6e, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0})
r7 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x20, 0x72, 0x333, 0x6, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}}, 0x20000010)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x0, 0x0)
unlinkat(r8, &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

13.294993948s ago: executing program 7 (id=5079):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket(0x28, 0x1, 0x0)
r3 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000400)={0x20, 0x470419c7af495291}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f0000000540)={0x20, 0x85, 0x4, 0x2}, 0x0, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000600)={0x20, 0x89, 0x2}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}})
io_uring_enter(r3, 0x47f6, 0xb277, 0x20000000, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)

11.653883836s ago: executing program 2 (id=5082):
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x501, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x6, 0x4e20, 0x0, 0x2}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xf11a1ca4a7462dde, 0x0, 0x1, 0x2}}, 0xb8}}, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001fe0100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd000000e6ff00"}})

11.313036015s ago: executing program 7 (id=5083):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x4082c1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000080, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101})
r4 = socket$alg(0x26, 0x5, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1c0, &(0x7f0000001140)={[{0xad, 0x4e00, "82fc1a4c6e2d1a562ef844a2463456adc7a9750e2507994c67971731f264af19f77d719a4f2b89b98bebd08556f58de6c6767cefccbef0e1c502f2c0e6cdd9d6bff86668d861fcea37a2d89bed9952ff056a360f3bf9f199c75b14808cacb6d4fae8661aad6d24a15a0ab2c3bda7af6993159f9423007407e89166d60a3835c8fa948fa7dc20c35c8cc8283023c109994aacdee5efe6e277230e108d9d294fbfaf0f1ba5f49b200f62dce04435"}, {0x92, 0x4e00, "6900c098aa0fb6e80137846e32b6af5258726cf70953055c782bfe39bf56c1b0af76f5c67bc26f8c92ca835461a229a95e1daf40f23714f4208bc713dd7d47678b826a4c9f61e890e7c8131d0ffbddf977206de384623dd73dfdf8530bccbc71b90b78485e3b9638ee24f2582e7da570ac0a0480df9cd68cad7787a81ab3ec46e612f4143982e19489e2a6ffedcc37ce3867"}, {0x6f, 0x4e00, "d19a9a2e22193dade5fdc784869e79f161cf22a255e52480814f4579604118d4e04e457db29d55a5ce93aba4ca183e0527ef687d9d181fc6434b420b01d01538e758065ce519bdf736a216333443cf36eddc8d5f2755309b7c24f176e8388ebe37c3959b92feae7f7049164cd80e97"}]})
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000006fc0), 0x0, 0x40012001, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r7, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8)
recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x7, 0x26040885}, 0x4810)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000e80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000001f03000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000017ffffff2500000017ffffffce040000000000007b0a00fe000000002d04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c79f9f7bfae7ebe09e441745c592ce69c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf902126ca2ec1589f1423ae3a655121"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

10.854777219s ago: executing program 2 (id=5085):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')
syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00')
sendmsg$nl_route(r4, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = fsmount(0xffffffffffffffff, 0x1, 0x8)
write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000000100)={0x23, 0x3, 0x0, {0x5, 0x2, 0x0, '\xff\xff'}}, 0x23)
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x2, @empty, 0x3}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x80}, @in6={0xa, 0x4e22, 0xfffffffc, @private0, 0x8}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x84)
sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000010)
recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x1100}, 0x2062)

9.093367877s ago: executing program 7 (id=5089):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000a10000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0)

8.127003107s ago: executing program 2 (id=5091):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
write$cgroup_devices(r0, 0x0, 0xffdd)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000640)={0x796, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="1c0000001d000100"], 0x1c}}, 0x0)

8.126587882s ago: executing program 7 (id=5092):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x1086, 0x1000, 0x4, 0x162}, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
write$UHID_DESTROY(r6, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
io_uring_enter(r3, 0x3517, 0x173d, 0x6e, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0})
r7 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x20, 0x72, 0x333, 0x6, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}}, 0x20000010)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x0, 0x0)
unlinkat(r8, &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

7.976401998s ago: executing program 5 (id=5094):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) (async)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r1, &(0x7f0000000300)="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", 0x10e) (async)
recvmmsg$unix(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

7.418711516s ago: executing program 6 (id=5095):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000d04000000000000000000010000", @ANYRES32=0x0, @ANYBLOB="00000000080000002c0012800c0001006d6163766c616e001c0002800800f9ff0400000008000900e5ffffff0800070004000000140035006d6163766c616e3000"], 0x60}}, 0x8000)

6.802814813s ago: executing program 5 (id=5096):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf4}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1555555555555633, [{0x50, &(0x7f00000000c0)=@string={0x50, 0x3, "3c45aa15d9c62098a9dfda6838fd2b168a587947c01924468939b97987242ae161b1cb1969e032d782f98daaa1318c67b87e5e303d5cff418f228ef21fe27d2b0bef3029b9cacb6aa0d5a699a002"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2c09}}]})
syz_io_uring_setup(0x7440, &(0x7f00000004c0)={0x0, 0xa6e9, 0x10100, 0x2, 0x26}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce, 0x0, 0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1})
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x2, 0x6, 0xa03, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x80}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x30}}, 0x40000)

6.758179786s ago: executing program 6 (id=5097):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r3 = syz_io_uring_setup(0x7a70, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x3, 0xbfdffffd}, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000380)=0xd, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000300)={r7, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddff, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = accept$alg(r9, 0x0, 0x0)
sendmsg$alg(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r10, &(0x7f0000000600), 0xfec8)
recvmmsg(r10, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x2, 0xcb, 0x0)

5.532492603s ago: executing program 3 (id=5099):
syz_open_dev$vim2m(&(0x7f0000000540), 0x0, 0x2)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = userfaultfd(0x801)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000002c0)={0x1, 0x10000, 0x1, 0xffffffffffffffff, 0x6})
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1000)
mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x20088, &(0x7f0000000640)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@allow_other}, {@default_permissions}, {@allow_other}, {@blksize}], [{@uid_eq={'uid', 0x3d, r1}}, {@subj_user={'subj_user', 0x3d, '\xf1,#&'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}})
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xf)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25)
ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000200)={0xb6, 0x0, 0x8})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
preadv2(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f00000001c0)=""/255, 0xff}, {&(0x7f0000002040)=""/4091, 0xffb}], 0x2, 0x4, 0x401, 0x5)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

5.399155614s ago: executing program 5 (id=5100):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200d0ff00001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

5.26780862s ago: executing program 5 (id=5101):
socket$netlink(0x10, 0x3, 0x8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0xfffffd83, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x5, &(0x7f0000000040)=[{0x0, 0x1, 0x2}, {0x68fc, 0x0, 0xfd, 0x7a1f}, {0x4, 0x0, 0x7, 0xffff}, {0x81, 0x0, 0x2, 0x4d9}, {0x9, 0x6, 0xf, 0x1}]})
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x0)
close(0x3)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP(r7, 0x3b86, &(0x7f0000000900)={0x18, r8, 0xfffffffffffffffa, 0x1003ffc})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x5a00, 0xbc03, 0x6, &(0x7f00000000c0)={[0x10000]}, 0x8)
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

5.230281744s ago: executing program 6 (id=5102):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60110000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2)
preadv2(r4, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/45, 0x2d}], 0x1, 0xfff, 0x2, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0xf0f041})
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000010)
recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x1100}, 0x2062)

5.182681182s ago: executing program 3 (id=5103):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x104011, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = syz_open_dev$video(0x0, 0xd, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0)
r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd})
r6 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2})
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000000000000000000000000000800000000000000", @ANYBLOB="000000000200"/28, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r8, @ANYBLOB="000000000600"/27, @ANYRES32=r1, @ANYBLOB="0000000e237d25de82d8b12015", @ANYRES32=r3, @ANYBLOB="00000000000000400200"/28, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r9, @ANYBLOB="000000006f0300"/28, @ANYRES32=r5, @ANYBLOB="000000000100ffffffffffff0000"])
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$P9_RGETLOCK(r10, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r10, 0x407, 0x100000)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r11, 0xffffffffffffffff, 0x0)
move_pages(r0, 0x1, &(0x7f00000002c0)=[&(0x7f000008c000/0x3000)=nil], &(0x7f0000002640), &(0x7f0000000200), 0x0)

5.022609681s ago: executing program 6 (id=5104):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r2)
close(r2)
rmdir(&(0x7f0000000100)='./control\x00')
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010c00000000fddbdf2526000000080001007063690011000200303030303a30303a31302e300000000008008e00030000000c008f0005000000000000000c0090007f000000000000ff"], 0x50}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000d010000a016000000f8b50d307d74af37e4da9707f653e812f340ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80f07000000000000001dd4586f5d99cbaaf8b332233f"], 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4094)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
dup3(r5, r6, 0x0)
mknod$loop(&(0x7f0000000680)='./file0\x00', 0x10, 0x0)
link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

4.815050305s ago: executing program 3 (id=5105):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x20, 0x0, {0x0, 0x2000}, {0x0, 0x3}, {0x0, 0x0, 0xfffffffd}, {0x6}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa})

4.689222114s ago: executing program 7 (id=5106):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0)
syz_open_procfs(0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
pread64(r3, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)
recvmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f00000003c0)=""/182, 0xb6}, {&(0x7f0000000480)=""/244, 0xf4}], 0x3, &(0x7f0000000580)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x1)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc})
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000640)={0x3, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
syz_usb_connect(0x0, 0x12, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)

4.43907494s ago: executing program 3 (id=5107):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r2, @ANYBLOB="05000600010005d6050007000000000005000300df00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x68}}, 0x0)

4.22425228s ago: executing program 3 (id=5108):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket(0x28, 0x1, 0x0)
r3 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000400)={0x20, 0x470419c7af495291}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f0000000540)={0x20, 0x85, 0x4, 0x2}, 0x0, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000600)={0x20, 0x89, 0x2}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}})
io_uring_enter(r3, 0x47f6, 0xb277, 0xf5ffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)

3.25434696s ago: executing program 2 (id=5109):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000004"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009003610ef171e7206de010203010902120001000000000904"], 0x0)
close(0x3)
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xf5, 0xee, 0x40, 0xff, 0x2100, 0x9001, 0x47e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x2, 0x70, 0x8, [{{0x9, 0x4, 0x93, 0x4, 0x0, 0xd7, 0x50, 0x8a, 0x5}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f00000005c0)={&(0x7f0000000180)={{@host, 0x4}, {@host, 0x3}, 0x400, "3a724537e9dcf5850da317e584ab4ba55e18e76c598260bf7ccf80756a65ca6c851b39e6e245d7d7b5835677a587972c103265a77ecd8c45ac414962b2f606d8cc5553cca48dfdbad54f84e753ea8d7e16ffb5c5ddbbce36d5d070b9fd8aaf848e50f3308740b313e81bbcccc6d3dcd83e9f16d873983cf1b795b0e22655f7f4fe465b2663e1f9cf0fa0d32c50ac155cad10319e67a682f479c4c2d8c902ed21b43e34b9a84816146ebd1b52b67990e4a282d9655e1511fb264d7bcd0482ceb675fdf81f8342a7b387303653102c266cc3685c4f1c363a324ba41177e6c9f03e8ead2aaa8e2c8f561756cfcb12c970ce1db0b46f16b915f6a0de6734e07396ff71072299a2a55c5c3d80c6366c1e17c5562c6964344f1d6f569f943a7400d289d422eb87a22349b731c066da952dec702d88e67499fae544b3e8bdd5a7f2fdfd55631cea62112efd7b442beec79e53a5c6ce7f5393ae5a801b9d296de2892f000327f9740b422c97d38b0c3e2bdbb89f09d097304d277abcd77d11003cd90db34c79c71acaa5e7bcddddfbe2e37b5763fc3dd81d38b5b4b143d7308c52e3db49af295f16673dbcdf7d4b9c0513efda080bf87aa164f67bb0f7fcc42b3aaa19852c0aaeac1d557922b8eedc8544d9ff9fc13cbec0c2eb96f48d780e7e4700a7e3639a70a28aa17d13e860cb93b2975237495b204ccc67d0de74969f14a5b3e292dc70e0fdfedcf07ee17a76bce90bbd4c4964fbcce662e965eecd26c952bfcf0aaa74c5622a016b3c2be41cbc289955f210ca855b50d4f913c36496493577a924a0568c3e42962b01c6aee41ea6b8419651541771bec0a45b2c2f8a7ea203328d170c066930883367233282ae182e2e8d19ea9352f76c01a966530177a4f6473ebb42b77a7525ff2f402ef5b788d4061de6b12146e856eb93fd2740add8e95423b94f0a7daa366f8a00c8bf8376e062f14865ef3cd2357392b0ed04998fc2746858ff2902e2170964cbb3c98bfe1683582442e22144594631b869d103da3ccefde61d6322a2bbbba59561a45e2a5c5d55f49538d8490d95f6d7ab3895969fb806757d14c895e37b3f9b8fe8558e35978415b6d63e120fd816cb5c477b3fb8c1324941837f0e8e167196252136f5792b927206c3e2996533b7e13c5b028618d8e49f3a751488df2b1069922fa812a645c6d554c5a3f8578dcce02de3c4913cb7b39d73eeba161b1ce1dcf266f69cbac989b981713ab84df88a07b86df7aeebb703af057236764024326acd2e96a5906774c7a2b651745b69b317fd039caa85d15b81029c8357175466d72916074c2b8f1af238a29d2b04b68b272a35a20da5e1661941dafb7efecd471ebc2b307548627e39f02f76295cd4e1e2ddb405640cc9cfd1eb5dacc62c15240fb34bb47e31a0ca3bbe3a9bd7566dff7dc5edf74205a50d"}, 0x418, 0xfffffffd})

3.082783474s ago: executing program 5 (id=5110):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="40150600000012b6aafd6b01058f1d73365c3ec5c045dda2b5bffa755499f6a859"], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
capset(&(0x7f0000000000)={0x20071026}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_setup(0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r5 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x24, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x140, 0x0, {0x3}})
io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x19}, 0x20)
getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0xdc, 0x10, 0x403, 0x70fd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88adfd8d}, [@IFLA_PORT_SELF={0xa0, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x99, 0x2, '\'~\xff}\xc3%\xa2\xbbL\xc1\xf0Ar\x888b\xeesA*\x9d\xbb\xee\xc41\xc1\x02\xfa \xc39l\xf9\xd1\xadi\xbcB\xd8Kc\xf9N\x04/q\xf5_~\x82gS\a\xa1\x14J\xd7G\x94P\xa5F\xd5\x81\x91\xc4T\xc9\x0fhy\xa6B\x0fzon\'`s\x9a\xbd\xcc\xbf\xf6\xa6I\x18\xabJ\x17O\"\x10\xd8\x02\x04H\xa5\xbf\xed\xb6!\x96z\xf0\xfe\x87cf\xce\tY\xf6\xc3\xc5\x9d\xd6j\x97\xe3\x9a;?0E\xac0B\xae\xf7\xe5L\x05\xad\a\xe4;\r\xea\xcb\xb3\xcbI\x9d9Wfe'}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1a6a7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_bridge\x00'}]}, 0xdc}}, 0x0)

2.276452465s ago: executing program 6 (id=5111):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

2.01782095s ago: executing program 6 (id=5112):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r3 = syz_io_uring_setup(0x7a70, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x3, 0xbfdffffd}, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000380)=0xd, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000300)={r7, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdd, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = accept$alg(r9, 0x0, 0x0)
sendmsg$alg(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r10, &(0x7f0000000600), 0xfec8)
recvmmsg(r10, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x2, 0xcb, 0x0)

1.379058784s ago: executing program 3 (id=5113):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
unshare(0x28000600)
syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000280)={0x1011c2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x43)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0)
r5 = socket(0x10, 0x800, 0x0)
futex(&(0x7f0000004000)=0x2, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xba01ffff)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r6=>r2, {0x1}}, './file0\x00'})
ioctl$SOUND_PCM_READ_BITS(r6, 0x80045005, &(0x7f0000000180))
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x4c, r8, 0x1, 0x70bd2d, 0x4, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}}]}, 0x4c}}, 0x4040)
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x33, 0x57, 0xc0, 0x40, 0xeb1, 0x7007, 0x208, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0x0, 0x30, [{{0x9, 0x4, 0xa1, 0xd2, 0x0, 0xc5, 0x4c, 0xa0, 0x54}}]}}]}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x108}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc}]}]}]}, 0x50}}, 0x800)

1.352686323s ago: executing program 7 (id=5114):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x4082c1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000080, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101})
r4 = socket$alg(0x26, 0x5, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1c0, &(0x7f0000001140)={[{0xad, 0x4e00, "82fc1a4c6e2d1a562ef844a2463456adc7a9750e2507994c67971731f264af19f77d719a4f2b89b98bebd08556f58de6c6767cefccbef0e1c502f2c0e6cdd9d6bff86668d861fcea37a2d89bed9952ff056a360f3bf9f199c75b14808cacb6d4fae8661aad6d24a15a0ab2c3bda7af6993159f9423007407e89166d60a3835c8fa948fa7dc20c35c8cc8283023c109994aacdee5efe6e277230e108d9d294fbfaf0f1ba5f49b200f62dce04435"}, {0x92, 0x4e00, "6900c098aa0fb6e80137846e32b6af5258726cf70953055c782bfe39bf56c1b0af76f5c67bc26f8c92ca835461a229a95e1daf40f23714f4208bc713dd7d47678b826a4c9f61e890e7c8131d0ffbddf977206de384623dd73dfdf8530bccbc71b90b78485e3b9638ee24f2582e7da570ac0a0480df9cd68cad7787a81ab3ec46e612f4143982e19489e2a6ffedcc37ce3867"}, {0x6f, 0x4e00, "d19a9a2e22193dade5fdc784869e79f161cf22a255e52480814f4579604118d4e04e457db29d55a5ce93aba4ca183e0527ef687d9d181fc6434b420b01d01538e758065ce519bdf736a216333443cf36eddc8d5f2755309b7c24f176e8388ebe37c3959b92feae7f7049164cd80e97"}]})
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000006fc0), 0x0, 0x40012001, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r7, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8)
recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x7, 0x26040885}, 0x4810)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000e80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

0s ago: executing program 5 (id=5115):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)={0x50, r3, 0xc01, 0x0, 0x25dfdbfd, {0x26}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x7f}}]}, 0x50}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000d010000a016000000f8b50d307d74af37e4da9707f653e812f340ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80f07000000000000001dd4586f5d99cbaaf8b332233f"], 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
dup3(r4, r5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
socket(0x10, 0x3, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
write$apparmor_exec(0xffffffffffffffff, 0x0, 0x149)
socket(0x22, 0x80001, 0x81)
mknod$loop(&(0x7f0000000680)='./file0\x00', 0x10, 0x0)
semtimedop(0x0, &(0x7f0000000580), 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={0x0}}, 0x20)

kernel console output (not intermixed with test programs):

[T29393]  do_syscall_64+0xfa/0x3b0
[ 1145.335594][T29393]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1145.335621][T29393]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1145.335640][T29393]  ? clear_bhb_loop+0x60/0xb0
[ 1145.335670][T29393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1145.335690][T29393] RIP: 0033:0x7fd858d8eec9
[ 1145.335709][T29393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1145.335728][T29393] RSP: 002b:00007fd856fee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1145.335750][T29393] RAX: ffffffffffffffda RBX: 00007fd858fe5fa0 RCX: 00007fd858d8eec9
[ 1145.335766][T29393] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003
[ 1145.335780][T29393] RBP: 00007fd856fee090 R08: 0000000000000000 R09: 0000000000000000
[ 1145.335793][T29393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1145.335806][T29393] R13: 00007fd858fe6038 R14: 00007fd858fe5fa0 R15: 00007fd85910fa28
[ 1145.335837][T29393]  </TASK>
[ 1146.077033][T29401] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4398'.
[ 1146.086185][T29401] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1146.105216][T29400] loop6: detected capacity change from 0 to 7
[ 1146.156073][T29400] Dev loop6: unable to read RDB block 7
[ 1146.234228][T29400]  loop6: unable to read partition table
[ 1146.333495][T29400] loop6: partition table beyond EOD, truncated
[ 1146.341073][T29400] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1146.528534][ T5208] Dev loop6: unable to read RDB block 7
[ 1146.538456][ T5208]  loop6: unable to read partition table
[ 1146.544336][ T5208] loop6: partition table beyond EOD, truncated
[ 1146.956785][ T5917] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1147.008664][T29434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4409'.
[ 1147.117006][ T5917] usb 7-1: Using ep0 maxpacket: 8
[ 1147.128578][ T5917] usb 7-1: config index 0 descriptor too short (expected 5924, got 36)
[ 1147.149200][ T5917] usb 7-1: config 250 has an invalid interface number: 228 but max is -1
[ 1147.175970][ T5917] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0
[ 1147.220275][ T5917] usb 7-1: config 250 has no interface number 0
[ 1147.257860][ T5917] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[ 1147.314805][ T5917] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1147.345022][ T5917] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1147.364560][ T5917] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[ 1147.387761][ T5917] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[ 1147.449064][ T5917] usb 7-1: config 250 interface 228 has no altsetting 0
[ 1147.465989][ T5917] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[ 1147.476360][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[ 1147.492019][ T5917] usb 7-1: Product: syz
[ 1147.501753][ T5917] usb 7-1: SerialNumber: syz
[ 1147.548444][ T5917] hub 7-1:250.228: bad descriptor, ignoring hub
[ 1147.559775][ T5917] hub 7-1:250.228: probe with driver hub failed with error -5
[ 1147.762345][ T5917] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 23 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[ 1148.124478][T29451] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4415'.
[ 1148.169297][T17109] usb 7-1: USB disconnect, device number 23
[ 1148.204670][T17109] usblp0: removed
[ 1148.575976][T29451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1148.598398][T29451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1148.612220][T29451] bond0 (unregistering): Released all slaves
[ 1149.249516][T29460] bridge: RTM_NEWNEIGH with invalid ether address
[ 1149.291054][   T30] audit: type=1326 audit(1759643405.214:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29459 comm="syz.3.4418" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd858d8eec9 code=0x0
[ 1149.628388][T24301] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1149.869232][T24301] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1149.928808][T24301] usb 7-1: config 0 has no interface number 0
[ 1150.126630][T24301] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1150.155218][T24301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.180635][T29467] loop6: detected capacity change from 0 to 7
[ 1150.188431][T24301] usb 7-1: Product: syz
[ 1150.223622][T24301] usb 7-1: Manufacturer: syz
[ 1150.237867][T29467] Dev loop6: unable to read RDB block 7
[ 1150.276892][T24301] usb 7-1: SerialNumber: syz
[ 1150.286925][T29467]  loop6: AHDI p2 p3
[ 1150.299110][T24301] usb 7-1: config 0 descriptor??
[ 1150.337097][T29467] loop6: partition table partially beyond EOD, truncated
[ 1150.375106][T29467] loop6: p2 size 116 extends beyond EOD, truncated
[ 1150.444855][T29469] fuse: Bad value for 'fd'
[ 1150.496405][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1150.523287][T29462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1150.554145][T29462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1150.621544][ T5917] usb 7-1: USB disconnect, device number 24
[ 1151.898470][T29496] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4428'.
[ 1152.399786][T29510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4431'.
[ 1152.504910][T29513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1152.531406][T29513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1152.585088][T29513] sit1: entered allmulticast mode
[ 1156.082482][T29564] loop6: detected capacity change from 0 to 7
[ 1156.121798][T27320] Dev loop6: unable to read RDB block 7
[ 1156.150796][T27320]  loop6: AHDI p2 p3
[ 1156.166133][T27320] loop6: partition table partially beyond EOD, truncated
[ 1156.186330][T27320] loop6: p2 size 116 extends beyond EOD, truncated
[ 1156.254989][T29564] Dev loop6: unable to read RDB block 7
[ 1156.299481][T29564]  loop6: AHDI p2 p3
[ 1156.303459][T29564] loop6: partition table partially beyond EOD, truncated
[ 1156.364475][T29564] loop6: p2 size 116 extends beyond EOD, truncated
[ 1156.421138][ T5208] Dev loop6: unable to read RDB block 7
[ 1156.478087][ T5208]  loop6: AHDI p2 p3
[ 1156.482044][ T5208] loop6: partition table partially beyond EOD, truncated
[ 1156.519909][ T5208] loop6: p2 size 116 extends beyond EOD, truncated
[ 1156.556900][ T5849] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 1156.746777][ T5849] usb 4-1: Using ep0 maxpacket: 32
[ 1156.761536][ T5849] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1156.806227][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1156.809015][ T5849] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1156.909695][T24301] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1156.911984][ T5849] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1156.928239][ T5849] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1156.937030][ T5849] usb 4-1: Product: syz
[ 1156.945899][ T5849] usb 4-1: Manufacturer: syz
[ 1157.062492][ T5849] hub 4-1:4.0: USB hub found
[ 1157.067985][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1157.145453][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1157.161660][T24301] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1157.371224][ T5849] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[ 1157.404928][T24301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1157.473669][T24301] usb 7-1: Product: syz
[ 1157.473693][T24301] usb 7-1: Manufacturer: syz
[ 1157.473711][T24301] usb 7-1: SerialNumber: syz
[ 1157.490781][ T5849] usb 4-1: USB disconnect, device number 84
[ 1157.840717][T24301] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1158.229019][T24660] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1158.861646][T29574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1158.871712][T29574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1159.356809][T24660] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 1159.357001][ T5917] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 1159.364386][T24660] ath9k_htc: Failed to initialize the device
[ 1159.462493][T24660] usb 7-1: ath9k_htc: USB layer deinitialized
[ 1159.579805][ T5917] usb 4-1: Using ep0 maxpacket: 16
[ 1159.591956][ T5917] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1159.602390][ T5849] usb 7-1: USB disconnect, device number 25
[ 1159.637083][ T5917] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1159.687129][ T5917] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1159.755984][ T5917] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1159.786831][ T5917] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1159.853658][T29607] netlink: 'syz.6.4455': attribute type 1 has an invalid length.
[ 1159.941330][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1160.109249][T29611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4457'.
[ 1160.116853][ T5917] usb 4-1: Product: syz
[ 1160.162933][ T5917] usb 4-1: Manufacturer: syz
[ 1160.166913][T29611] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 1160.197977][T29611] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[ 1160.284002][ T5917] usb 4-1: SerialNumber: syz
[ 1160.677385][T29617] loop6: detected capacity change from 0 to 7
[ 1160.699527][ T5917] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 85 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[ 1160.713444][T18945] Dev loop6: unable to read RDB block 7
[ 1160.740553][T18945]  loop6: AHDI p2 p3
[ 1160.761528][T18945] loop6: partition table partially beyond EOD, truncated
[ 1160.814237][T18945] loop6: p2 size 116 extends beyond EOD, truncated
[ 1160.876519][T29617] Dev loop6: unable to read RDB block 7
[ 1160.882215][T29617]  loop6: AHDI p2 p3
[ 1160.886195][T29617] loop6: partition table partially beyond EOD, truncated
[ 1160.893740][T29617] loop6: p2 size 116 extends beyond EOD, truncated
[ 1160.930620][ T5917] usb 4-1: USB disconnect, device number 85
[ 1160.943855][ T5917] usblp0: removed
[ 1161.056435][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1161.490028][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1161.572185][T29628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1161.596199][T29628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1161.614879][T29628] ip6gretap0: entered promiscuous mode
[ 1161.623477][T29628] ip6gretap0: left promiscuous mode
[ 1161.669727][T29630] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1161.678155][T29630] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1164.363884][T29654] netlink: 'syz.2.4469': attribute type 1 has an invalid length.
[ 1164.563399][T29656] bond8: entered promiscuous mode
[ 1164.706730][T29656] bond8: entered allmulticast mode
[ 1164.715818][T29656] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1164.944432][T29654] bridge6: entered promiscuous mode
[ 1164.986118][T29654] bridge6: entered allmulticast mode
[ 1165.058464][ T7084] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1165.158155][T29663] netlink: 'syz.3.4470': attribute type 13 has an invalid length.
[ 1165.270622][T29654] bond8: (slave bridge6): Enslaving as an active interface with an up link
[ 1165.296862][ T7084] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1166.060195][T29663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1166.645515][T29678] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4474'.
[ 1167.286851][T17109] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 1167.427646][T17109] usb 3-1: device descriptor read/64, error -71
[ 1167.728488][T17109] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 1167.907711][T17109] usb 3-1: device descriptor read/64, error -71
[ 1168.055194][T17109] usb usb3-port1: attempt power cycle
[ 1168.447279][T17109] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 1168.510655][T17109] usb 3-1: device descriptor read/8, error -71
[ 1168.612180][T29710] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4484'.
[ 1168.747051][T29710] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4484'.
[ 1168.923060][T17109] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 1169.064909][T17109] usb 3-1: device descriptor read/8, error -71
[ 1169.170938][T17109] usb usb3-port1: unable to enumerate USB device
[ 1170.887913][T29751] netlink: 'syz.7.4494': attribute type 1 has an invalid length.
[ 1170.958061][T29754] bond0: entered promiscuous mode
[ 1170.977310][T29754] bond0: entered allmulticast mode
[ 1170.985059][T29754] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1171.256286][T29758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1171.302239][T29758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1171.409070][T29751] bridge2: entered promiscuous mode
[ 1171.409228][T29751] bridge2: entered allmulticast mode
[ 1171.409995][T29751] bond0: (slave bridge2): Enslaving as a backup interface with an up link
[ 1171.747512][ T7084] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1171.867027][ T7084] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1173.601530][T29776] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1173.921117][T29781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4501'.
[ 1176.806531][T29816] batadv_slave_0: entered promiscuous mode
[ 1176.846709][T29816] batadv_slave_0: left promiscuous mode
[ 1177.004529][T29820] netlink: 'syz.7.4512': attribute type 5 has an invalid length.
[ 1177.161227][T29824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1177.187318][T29824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1177.506819][T17109] usb 7-1: new full-speed USB device number 26 using dummy_hcd
[ 1177.563398][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.569850][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.596769][T24660] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 1177.699628][T17109] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1177.712111][T17109] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1177.721557][T17109] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1177.734712][T17109] usb 7-1: Product: syz
[ 1177.754274][T24660] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1177.763813][T24660] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1177.773757][T24660] usb 4-1: config 0 descriptor??
[ 1177.785273][T24660] cp210x 4-1:0.0: cp210x converter detected
[ 1177.806175][T17109] usb 7-1: Manufacturer: syz
[ 1177.812709][T17109] usb 7-1: SerialNumber: syz
[ 1177.985489][T17109] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1178.207278][T24660] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1178.249132][T29849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1178.259081][T29849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1178.307500][T17109] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[ 1181.092889][T24660] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71
[ 1181.177138][T24660] cp210x 4-1:0.0: GPIO initialisation failed: -71
[ 1181.177717][T29881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4531'.
[ 1181.193871][T29881] netlink: 31 bytes leftover after parsing attributes in process `syz.5.4531'.
[ 1181.260464][T29881] netlink: 'syz.5.4531': attribute type 3 has an invalid length.
[ 1181.270210][T29881] netlink: 'syz.5.4531': attribute type 2 has an invalid length.
[ 1181.284612][T29885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1181.305784][T29885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1181.322311][T29881] netlink: 31 bytes leftover after parsing attributes in process `syz.5.4531'.
[ 1181.372562][T24660] usb 4-1: cp210x converter now attached to ttyUSB0
[ 1181.424947][T24660] usb 4-1: USB disconnect, device number 86
[ 1181.472048][T22529] usb 7-1: USB disconnect, device number 26
[ 1181.507915][T24660] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1181.570071][T24660] cp210x 4-1:0.0: device disconnected
[ 1181.681698][T29890] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4534'.
[ 1182.006812][T24660] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 1182.488431][T24660] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1182.507994][T24660] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1182.592608][T24660] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1182.611003][T24660] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1182.629367][T29906] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4538'.
[ 1182.641892][T24660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1182.657022][T29906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4538'.
[ 1182.666104][T24660] usb 4-1: Product: syz
[ 1182.676118][T24660] usb 4-1: Manufacturer: syz
[ 1182.695796][T24660] usb 4-1: SerialNumber: syz
[ 1182.769270][T24660] usb 4-1: bad CDC descriptors
[ 1183.110821][T24660] usb 4-1: USB disconnect, device number 87
[ 1183.516606][T29912] loop6: detected capacity change from 0 to 7
[ 1183.535882][T29912] Dev loop6: unable to read RDB block 7
[ 1183.574249][T29912]  loop6: AHDI p2 p3
[ 1183.594355][T29912] loop6: partition table partially beyond EOD, truncated
[ 1183.607222][T29912] loop6: p2 size 116 extends beyond EOD, truncated
[ 1183.764858][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1183.868495][T29922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1183.924108][T29923] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1183.943820][T29922] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1184.341667][T29933] netlink: 'syz.7.4547': attribute type 21 has an invalid length.
[ 1184.416870][T29933] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4547'.
[ 1184.451951][T29933] netlink: 'syz.7.4547': attribute type 4 has an invalid length.
[ 1184.461052][T29933] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4547'.
[ 1185.436827][T17109] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 1185.594292][T29945] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1185.641990][T17109] usb 7-1: Using ep0 maxpacket: 16
[ 1185.660853][T17109] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1185.692591][T17109] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1185.746892][T17109] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1185.784978][T17109] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1185.810481][T17109] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[ 1185.836752][T17109] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1185.853681][T17109] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1185.873168][T17109] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1185.920738][T17109] ums-sddr09 7-1:1.0: USB Mass Storage device detected
[ 1186.169942][T17109] scsi host1: usb-storage 7-1:1.0
[ 1186.296423][T29969] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4555'.
[ 1186.330081][T29969] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1186.353386][T17109] usb 7-1: USB disconnect, device number 27
[ 1188.249902][T27317] Bluetooth: hci1: ACL packet for unknown connection handle 201
[ 1188.295951][T29984] FAULT_INJECTION: forcing a failure.
[ 1188.295951][T29984] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1188.387696][T29984] CPU: 0 UID: 0 PID: 29984 Comm: syz.5.4559 Not tainted syzkaller #0 PREEMPT(full) 
[ 1188.387714][T29984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1188.387722][T29984] Call Trace:
[ 1188.387727][T29984]  <TASK>
[ 1188.387733][T29984]  dump_stack_lvl+0x189/0x250
[ 1188.387752][T29984]  ? __pfx____ratelimit+0x10/0x10
[ 1188.387770][T29984]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1188.387783][T29984]  ? __pfx__printk+0x10/0x10
[ 1188.387806][T29984]  should_fail_ex+0x414/0x560
[ 1188.387823][T29984]  _copy_to_user+0x31/0xb0
[ 1188.387835][T29984]  simple_read_from_buffer+0xe1/0x170
[ 1188.387854][T29984]  proc_fail_nth_read+0x1b3/0x220
[ 1188.387869][T29984]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1188.387883][T29984]  ? rw_verify_area+0x2a6/0x4d0
[ 1188.387896][T29984]  ? __lock_acquire+0xab9/0xd20
[ 1188.387907][T29984]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1188.387920][T29984]  vfs_read+0x1fd/0xa30
[ 1188.387933][T29984]  ? fdget_pos+0x247/0x320
[ 1188.387952][T29984]  ? __pfx___mutex_lock+0x10/0x10
[ 1188.387969][T29984]  ? __pfx_vfs_read+0x10/0x10
[ 1188.387983][T29984]  ? __fget_files+0x2a/0x420
[ 1188.388002][T29984]  ? __fget_files+0x3a0/0x420
[ 1188.388016][T29984]  ? __fget_files+0x2a/0x420
[ 1188.388037][T29984]  ksys_read+0x145/0x250
[ 1188.388052][T29984]  ? __pfx_ksys_read+0x10/0x10
[ 1188.388066][T29984]  ? __secure_computing+0xe2/0x2a0
[ 1188.388084][T29984]  do_syscall_64+0xfa/0x3b0
[ 1188.388093][T29984]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1188.388117][T29984]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1188.388128][T29984]  ? clear_bhb_loop+0x60/0xb0
[ 1188.388141][T29984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1188.388152][T29984] RIP: 0033:0x7f9a0938d8dc
[ 1188.388162][T29984] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1188.388173][T29984] RSP: 002b:00007f9a0a2a0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1188.388191][T29984] RAX: ffffffffffffffda RBX: 00007f9a095e5fa0 RCX: 00007f9a0938d8dc
[ 1188.388199][T29984] RDX: 000000000000000f RSI: 00007f9a0a2a00a0 RDI: 0000000000000003
[ 1188.388207][T29984] RBP: 00007f9a0a2a0090 R08: 0000000000000000 R09: 0000000000000000
[ 1188.388214][T29984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1188.388221][T29984] R13: 00007f9a095e6038 R14: 00007f9a095e5fa0 R15: 00007f9a0970fa28
[ 1188.388238][T29984]  </TASK>
[ 1188.629771][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1188.786814][T24660] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 1188.936729][T24660] usb 7-1: Using ep0 maxpacket: 8
[ 1188.943534][T24660] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15
[ 1188.985435][T24660] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1189.016129][T24660] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1189.037934][T24660] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[ 1189.048234][T24660] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1189.059206][T24660] usb 7-1: Product: syz
[ 1189.063419][T24660] usb 7-1: Manufacturer: syz
[ 1189.077607][T24660] usb 7-1: SerialNumber: syz
[ 1189.103827][T24660] usb 7-1: config 0 descriptor??
[ 1189.146709][T24660] powermate 7-1:0.0: probe with driver powermate failed with error -5
[ 1189.344515][T29983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1189.372874][T29983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1189.395297][T29983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1189.421802][T29983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1189.444807][ T5917] usb 7-1: USB disconnect, device number 28
[ 1189.479087][T30012] netlink: 'syz.3.4568': attribute type 5 has an invalid length.
[ 1191.051544][T30049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4578'.
[ 1191.066054][T30049] netlink: 'syz.2.4578': attribute type 10 has an invalid length.
[ 1191.088927][T30049] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1191.235232][T30051] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4579'.
[ 1191.806433][T30064] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4583'.
[ 1191.951952][T30064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1191.971036][T30064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1192.107922][T30070] ALSA: mixer_oss: invalid OSS volume 'nl0'
[ 1192.114029][T30070] ALSA: mixer_oss: invalid OSS volume '010000E0'
[ 1192.122994][T30070] ALSA: mixer_oss: invalid OSS volume '3'
[ 1192.132582][T30070] ALSA: mixer_oss: invalid OSS volume '5'
[ 1192.139018][T30070] ALSA: mixer_oss: invalid OSS volume '010000E0'
[ 1194.307654][T30101] netlink: 'syz.6.4591': attribute type 1 has an invalid length.
[ 1194.423274][T30105] loop6: detected capacity change from 0 to 7
[ 1194.432998][T30105] Dev loop6: unable to read RDB block 7
[ 1194.439779][T30105]  loop6: AHDI p3
[ 1194.444382][T30105] loop6: partition table partially beyond EOD, truncated
[ 1194.503960][T17109] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 1194.543918][T30108] bond3: entered promiscuous mode
[ 1194.572891][T30108] bond3: entered allmulticast mode
[ 1194.602832][T30108] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1194.664278][T30109] bridge4: entered promiscuous mode
[ 1194.671767][T30109] bridge4: entered allmulticast mode
[ 1194.679999][T30109] bond3: (slave bridge4): Enslaving as a backup interface with an up link
[ 1194.726779][T17109] usb 4-1: Using ep0 maxpacket: 8
[ 1194.735839][T17109] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1194.744528][T17109] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1194.754401][T17109] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1194.764489][T17109] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1194.774724][T17109] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1194.853773][T17109] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1194.857462][   T78] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1194.886791][T17109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.007657][   T36] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1195.289433][T17109] usb 4-1: usb_control_msg returned -32
[ 1195.304789][T30118] netlink: 'syz.3.4595': attribute type 5 has an invalid length.
[ 1195.343398][T17109] usbtmc 4-1:16.0: can't read capabilities
[ 1195.378643][T17109] usb 4-1: USB disconnect, device number 88
[ 1195.547589][T30121] netlink: 'syz.3.4596': attribute type 24 has an invalid length.
[ 1197.078647][T30155] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4604'.
[ 1197.513591][T30159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4606'.
[ 1197.583054][T30159] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 1197.604935][T30159] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[ 1197.858082][T30162] netlink: 'syz.3.4607': attribute type 24 has an invalid length.
[ 1200.751417][ T5917] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 1200.947400][ T5917] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1200.958198][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1200.974876][ T5917] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1200.995259][ T5917] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1201.006887][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1201.029518][ T5917] usb 4-1: Product: syz
[ 1201.043774][ T5917] usb 4-1: Manufacturer: syz
[ 1201.056456][ T5917] usb 4-1: SerialNumber: syz
[ 1201.076004][ T5917] usb 4-1: config 0 descriptor??
[ 1201.087937][T30204] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1201.101765][T30204] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1201.134910][ T5917] usb 4-1: ucan: probing device on interface #0
[ 1201.586852][ T5917] usb 4-1: ucan: device reported invalid tx-fifo size
[ 1201.616738][ T5917] usb 4-1: ucan: probe failed; try to update the device firmware
[ 1201.707494][T17109] usb 6-1: USB disconnect, device number 44
[ 1201.786978][ T5917] usb 4-1: USB disconnect, device number 89
[ 1202.214932][T30222] loop6: detected capacity change from 0 to 7
[ 1202.225625][T18945] Dev loop6: unable to read RDB block 7
[ 1202.234445][T18945]  loop6: unable to read partition table
[ 1202.241562][T18945] loop6: partition table beyond EOD, truncated
[ 1202.264203][T30222] Dev loop6: unable to read RDB block 7
[ 1202.315261][T30222]  loop6: unable to read partition table
[ 1202.339776][T30222] loop6: partition table beyond EOD, truncated
[ 1202.366994][T30222] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1202.434761][T23574] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1202.496943][T23574] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1202.510937][T23574] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1202.541410][T23574] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1202.549350][T23574] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1203.048449][T24660] usb 3-1: new full-speed USB device number 98 using dummy_hcd
[ 1203.072349][T19974] team0: Port device syz_tun removed
[ 1203.147120][T22529] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[ 1203.227257][T24660] usb 3-1: device descriptor read/64, error -71
[ 1203.272228][T30230] openvswitch: netlink: Key type 31 is not supported
[ 1203.324142][   T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1203.340916][   T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1203.370591][T22529] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1203.383328][T22529] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 1203.402949][T22529] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1203.446293][T22529] usb 7-1: config 0 descriptor??
[ 1203.487910][T24660] usb 3-1: new full-speed USB device number 99 using dummy_hcd
[ 1203.523315][   T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1203.536234][   T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1203.565018][T30224] chnl_net:caif_netlink_parms(): no params data found
[ 1203.641848][T24660] usb 3-1: device descriptor read/64, error -71
[ 1203.668690][   T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1203.692368][   T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1203.744983][T30246] FAULT_INJECTION: forcing a failure.
[ 1203.744983][T30246] name failslab, interval 1, probability 0, space 0, times 0
[ 1203.779125][T30246] CPU: 1 UID: 0 PID: 30246 Comm: syz.3.4629 Not tainted syzkaller #0 PREEMPT(full) 
[ 1203.779153][T30246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1203.779166][T30246] Call Trace:
[ 1203.779175][T30246]  <TASK>
[ 1203.779185][T30246]  dump_stack_lvl+0x189/0x250
[ 1203.779214][T30246]  ? __pfx____ratelimit+0x10/0x10
[ 1203.779243][T30246]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1203.779267][T30246]  ? __pfx__printk+0x10/0x10
[ 1203.779301][T30246]  ? __lock_acquire+0xab9/0xd20
[ 1203.779318][T30246]  should_fail_ex+0x414/0x560
[ 1203.779335][T30246]  should_failslab+0xa8/0x100
[ 1203.779353][T30246]  kmem_cache_alloc_noprof+0x74/0x6e0
[ 1203.779374][T30246]  ? skb_clone+0x212/0x3a0
[ 1203.779402][T30246]  skb_clone+0x212/0x3a0
[ 1203.779429][T30246]  __netlink_deliver_tap+0x404/0x850
[ 1203.779459][T30246]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1203.779470][T30246]  netlink_deliver_tap+0x19c/0x1b0
[ 1203.779481][T30246]  netlink_unicast+0x7fa/0x9e0
[ 1203.779502][T30246]  ? __pfx_netlink_unicast+0x10/0x10
[ 1203.779522][T30246]  ? netlink_sendmsg+0x642/0xb30
[ 1203.779539][T30246]  ? skb_put+0x11b/0x210
[ 1203.779563][T30246]  netlink_sendmsg+0x805/0xb30
[ 1203.779594][T30246]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1203.779611][T30246]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1203.779626][T30246]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1203.779643][T30246]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1203.779654][T30246]  __sock_sendmsg+0x21c/0x270
[ 1203.779677][T30246]  ____sys_sendmsg+0x505/0x830
[ 1203.779706][T30246]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1203.779738][T30246]  ? import_iovec+0x74/0xa0
[ 1203.779758][T30246]  ___sys_sendmsg+0x21f/0x2a0
[ 1203.779778][T30246]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1203.779810][T30246]  ? __fget_files+0x2a/0x420
[ 1203.779835][T30246]  ? __fget_files+0x3a0/0x420
[ 1203.779875][T30246]  __x64_sys_sendmsg+0x19b/0x260
[ 1203.779900][T30246]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1203.779918][T30246]  ? __pfx_ksys_write+0x10/0x10
[ 1203.779931][T30246]  ? rcu_is_watching+0x15/0xb0
[ 1203.779947][T30246]  ? do_syscall_64+0xbe/0x3b0
[ 1203.779961][T30246]  do_syscall_64+0xfa/0x3b0
[ 1203.779977][T30246]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1203.780004][T30246]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1203.780023][T30246]  ? clear_bhb_loop+0x60/0xb0
[ 1203.780048][T30246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1203.780066][T30246] RIP: 0033:0x7fd858d8eec9
[ 1203.780077][T30246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1203.780087][T30246] RSP: 002b:00007fd856fee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1203.780100][T30246] RAX: ffffffffffffffda RBX: 00007fd858fe5fa0 RCX: 00007fd858d8eec9
[ 1203.780109][T30246] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000003
[ 1203.780118][T30246] RBP: 00007fd856fee090 R08: 0000000000000000 R09: 0000000000000000
[ 1203.780130][T30246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1203.780142][T30246] R13: 00007fd858fe6038 R14: 00007fd858fe5fa0 R15: 00007fd85910fa28
[ 1203.780174][T30246]  </TASK>
[ 1203.780298][T30246] openvswitch: netlink: Key type 31 is not supported
[ 1203.822828][T24660] usb usb3-port1: attempt power cycle
[ 1203.886972][T30248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4630'.
[ 1204.183613][T30231] ip6gretap0: entered promiscuous mode
[ 1204.192562][T30231] ip6gretap0: left promiscuous mode
[ 1204.260662][   T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1204.283583][   T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1204.422582][T30224] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1204.434130][T30224] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1204.442076][T30224] bridge_slave_0: entered allmulticast mode
[ 1204.463346][T30224] bridge_slave_0: entered promiscuous mode
[ 1204.496901][T30224] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1204.507877][T30224] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1204.515932][T30224] bridge_slave_1: entered allmulticast mode
[ 1204.522106][T24660] usb 3-1: new full-speed USB device number 100 using dummy_hcd
[ 1204.558682][T30224] bridge_slave_1: entered promiscuous mode
[ 1204.564707][T24660] usb 3-1: device descriptor read/8, error -71
[ 1204.599473][T23574] Bluetooth: hci3: command tx timeout
[ 1204.846918][T24660] usb 3-1: new full-speed USB device number 101 using dummy_hcd
[ 1204.868232][T24660] usb 3-1: device descriptor read/8, error -71
[ 1204.914153][T30224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1204.971217][T30224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1204.987287][T24660] usb usb3-port1: unable to enumerate USB device
[ 1205.232266][T22529] usbhid 7-1:0.0: can't add hid device: -71
[ 1205.336001][T22529] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1205.432397][T22529] usb 7-1: USB disconnect, device number 29
[ 1205.617539][T30224] team0: Port device team_slave_0 added
[ 1205.629283][   T36] bridge_slave_1: left allmulticast mode
[ 1205.642781][   T36] bridge_slave_1: left promiscuous mode
[ 1205.654341][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1205.831782][   T36] bridge_slave_0: left allmulticast mode
[ 1205.842019][   T36] bridge_slave_0: left promiscuous mode
[ 1205.849837][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1206.686870][T23574] Bluetooth: hci3: command tx timeout
[ 1207.142275][T24301] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 1207.336782][T24301] usb 4-1: Using ep0 maxpacket: 16
[ 1207.344047][T24301] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1207.383688][T24301] usb 4-1: config 0 has no interfaces?
[ 1207.419742][T24301] usb 4-1: New USB device found, idVendor=110a, idProduct=0553, bcdDevice=5e.00
[ 1207.446842][T24301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1207.454901][T24301] usb 4-1: Product: syz
[ 1207.483190][T24301] usb 4-1: Manufacturer: syz
[ 1207.502593][T24301] usb 4-1: SerialNumber: syz
[ 1207.650576][T24301] usb 4-1: config 0 descriptor??
[ 1207.725985][T30300] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4641'.
[ 1208.117761][   T36] bond2 (unregistering): (slave bridge2): Releasing backup interface
[ 1208.126302][   T36] bridge2 (unregistering): left promiscuous mode
[ 1208.142723][   T36] bridge2 (unregistering): left allmulticast mode
[ 1208.349727][   T36] bond3 (unregistering): (slave bridge3): Releasing backup interface
[ 1208.443768][   T36] bond5 (unregistering): (slave bridge4): Releasing backup interface
[ 1208.448095][T30305] openvswitch: netlink: Key type 31 is not supported
[ 1208.535880][   T36] bond10 (unregistering): (slave bridge5): Removing an active aggregator
[ 1208.550544][   T36] bond10 (unregistering): (slave bridge5): Releasing backup interface
[ 1208.563978][   T36] bridge5 (unregistering): left promiscuous mode
[ 1208.570768][   T36] bridge5 (unregistering): left allmulticast mode
[ 1208.766906][T23574] Bluetooth: hci3: command tx timeout
[ 1208.889940][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1208.900637][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1208.910877][   T36] bond0 (unregistering): Released all slaves
[ 1208.926114][   T36] bond1 (unregistering): Released all slaves
[ 1209.072955][   T36] bond2 (unregistering): Released all slaves
[ 1209.085709][   T36] bond3 (unregistering): Released all slaves
[ 1209.098824][   T36] bond4 (unregistering): Released all slaves
[ 1209.112832][   T36] bond5 (unregistering): Released all slaves
[ 1209.128386][   T36] bond6 (unregistering): Released all slaves
[ 1209.151309][   T36] bond7 (unregistering): Released all slaves
[ 1209.166912][   T36] bond8 (unregistering): Released all slaves
[ 1209.329031][   T36] bond9 (unregistering): Released all slaves
[ 1209.489864][   T36] bond10 (unregistering): Released all slaves
[ 1209.642198][   T36] bond11 (unregistering): Released all slaves
[ 1209.659668][T30224] team0: Port device team_slave_1 added
[ 1209.678061][T30301] nicvf0: renamed from team0 (while UP)
[ 1209.689183][T30301] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[ 1209.924614][T24660] usb 4-1: USB disconnect, device number 90
[ 1210.155032][   T36] tipc: Left network mode
[ 1210.185361][T30224] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1210.221240][T30224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1210.307562][T30224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1210.343870][T30224] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1210.359631][T30224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1210.397177][T30224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1210.845772][T23574] Bluetooth: hci3: command tx timeout
[ 1211.350525][T30224] hsr_slave_0: entered promiscuous mode
[ 1211.382374][T30224] hsr_slave_1: entered promiscuous mode
[ 1211.532101][T30224] debugfs: 'hsr0' already exists in 'hsr'
[ 1211.538193][T30224] Cannot create hsr debugfs directory
[ 1211.806114][   T36] hsr_slave_0: left promiscuous mode
[ 1211.883062][   T36] hsr_slave_1: left promiscuous mode
[ 1211.967843][   T36] veth1_macvtap: left promiscuous mode
[ 1212.025625][   T36] veth0_macvtap: left promiscuous mode
[ 1212.494827][   T36] team0 (unregistering): Port device batadv0 removed
[ 1212.569599][   T36] pim6reg (unregistering): left allmulticast mode
[ 1213.096855][T24660] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[ 1213.276761][T24660] usb 3-1: Using ep0 maxpacket: 32
[ 1213.284189][T24660] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[ 1213.292909][T24660] usb 3-1: config 0 has no interface number 0
[ 1213.302760][T24660] usb 3-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 126, changing to 10
[ 1213.368906][T24660] usb 3-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid maxpacket 1867, setting to 1024
[ 1213.401317][T24660] usb 3-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1213.455901][T24660] usb 3-1: config 0 interface 2 has no altsetting 0
[ 1213.462636][T24660] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[ 1213.472075][T24660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1213.496835][T24660] usb 3-1: config 0 descriptor??
[ 1213.503188][T30354] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1213.660858][   T36] team0 (unregistering): Port device team_slave_1 removed
[ 1213.684615][T30360] netlink: 'syz.3.4654': attribute type 1 has an invalid length.
[ 1213.734785][T30362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4654'.
[ 1213.783354][   T36] team0 (unregistering): Port device team_slave_0 removed
[ 1213.987251][T30354] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4719810 (302067840 ns) > initial count (1184064 ns). Using initial count to start timer.
[ 1214.059344][T30365] misc userio: Invalid payload size
[ 1214.773726][T30360] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1215.544999][   T36] IPVS: stop unused estimator thread 0...
[ 1215.879621][T24660] usbhid 3-1:0.2: can't add hid device: -71
[ 1215.886842][T24660] usbhid 3-1:0.2: probe with driver usbhid failed with error -71
[ 1215.903794][T24660] usb 3-1: USB disconnect, device number 102
[ 1216.087867][T30395] loop6: detected capacity change from 0 to 7
[ 1216.102709][T30395] Dev loop6: unable to read RDB block 7
[ 1216.112805][T30395]  loop6: AHDI p3
[ 1216.116495][T30395] loop6: partition table partially beyond EOD, truncated
[ 1216.967396][T30224] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1217.180297][T30224] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1217.264538][T30224] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1217.284288][T30224] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1217.566585][T30224] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1217.638080][T30224] 8021q: adding VLAN 0 to HW filter on device team0
[ 1217.654511][ T7084] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1217.661693][ T7084] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1217.703549][ T7084] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1217.710746][ T7084] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1217.746846][T24660] usb 4-1: new full-speed USB device number 91 using dummy_hcd
[ 1217.760279][T30224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1217.841016][T30224] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1217.913520][T24660] usb 4-1: config 0 has no interfaces?
[ 1217.933977][T24660] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1217.943251][T24660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1217.953340][T24660] usb 4-1: Product: syz
[ 1217.961278][T24660] usb 4-1: Manufacturer: syz
[ 1218.004750][T24660] usb 4-1: SerialNumber: syz
[ 1218.032172][T30224] veth0_vlan: entered promiscuous mode
[ 1218.067411][T24660] usb 4-1: config 0 descriptor??
[ 1218.133848][T30224] veth1_vlan: entered promiscuous mode
[ 1218.285903][T30425] program syz.3.4664 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1218.332882][T30224] veth0_macvtap: entered promiscuous mode
[ 1218.335972][T30224] veth1_macvtap: entered promiscuous mode
[ 1218.407607][T30435] input: syz1 as /devices/virtual/input/input77
[ 1218.527748][T30224] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1218.558209][T30224] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1218.643518][ T7084] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1218.743647][ T7084] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1218.850150][ T7084] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1218.891711][ T7084] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1219.373548][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1219.418071][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1219.510310][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1219.539399][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1219.566755][T17109] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 1219.682180][T30455] loop6: detected capacity change from 0 to 7
[ 1219.695316][T30455] Dev loop6: unable to read RDB block 7
[ 1219.727123][T17109] usb 3-1: Using ep0 maxpacket: 8
[ 1219.729508][T30455]  loop6: AHDI p2 p3
[ 1219.734320][T17109] usb 3-1: config 0 has no interfaces?
[ 1219.744362][T30455] loop6: partition table partially beyond EOD, truncated
[ 1219.744631][T17109] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 1219.762080][T30455] loop6: p2 size 116 extends beyond EOD, truncated
[ 1219.819947][T17109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.875262][T17109] usb 3-1: Product: syz
[ 1219.895212][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1219.897854][T17109] usb 3-1: Manufacturer: syz
[ 1219.964938][T17109] usb 3-1: SerialNumber: syz
[ 1220.099411][T17109] usb 3-1: config 0 descriptor??
[ 1220.226125][T30462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4672'.
[ 1220.263763][T30462] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[ 1220.321491][T30462] netdevsim netdevsim7 netdevsim0: left promiscuous mode
[ 1220.775455][ T5849] usb 4-1: USB disconnect, device number 91
[ 1220.979472][T30483] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4674'.
[ 1221.066793][T30487] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1222.461229][T24301] usb 3-1: USB disconnect, device number 103
[ 1223.128724][T24301] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 1223.319487][T24301] usb 3-1: Using ep0 maxpacket: 32
[ 1223.368046][T24301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1223.386914][T24301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1223.414963][T24301] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1223.438814][T24301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1223.485192][T24301] usb 3-1: config 0 descriptor??
[ 1223.560861][T24301] hub 3-1:0.0: USB hub found
[ 1223.740931][T24301] hub 3-1:0.0: 2 ports detected
[ 1223.900468][T17109] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[ 1224.064617][T17109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1224.091972][T17109] usb 6-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00
[ 1224.117761][T17109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1224.149647][T17109] usb 6-1: config 0 descriptor??
[ 1224.537354][T24301] hub 3-1:0.0: hub_hub_status failed (err = -71)
[ 1224.543764][T24301] hub 3-1:0.0: config failed, can't get hub status (err -71)
[ 1224.705946][T24301] usbhid 3-1:0.0: can't add hid device: -71
[ 1224.721772][T24301] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1224.770253][T17109] usbhid 6-1:0.0: can't add hid device: -71
[ 1224.782007][T24301] usb 3-1: USB disconnect, device number 104
[ 1224.788393][T30568] loop6: detected capacity change from 0 to 7
[ 1224.799439][T17109] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1224.818531][T30568] Dev loop6: unable to read RDB block 7
[ 1224.835251][T30568]  loop6: AHDI p2 p3
[ 1224.851662][T30568] loop6: partition table partially beyond EOD, truncated
[ 1224.861133][T17109] usb 6-1: USB disconnect, device number 45
[ 1224.880301][T30568] loop6: p2 size 116 extends beyond EOD, truncated
[ 1224.942500][ T5208] Dev loop6: unable to read RDB block 7
[ 1224.960548][ T5208]  loop6: AHDI p2 p3
[ 1224.972013][ T5208] loop6: partition table partially beyond EOD, truncated
[ 1224.997135][ T5208] loop6: p2 size 116 extends beyond EOD, truncated
[ 1225.215367][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1225.309688][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1225.521625][T30581] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4700'.
[ 1225.563322][T30582] netlink: 'syz.5.4699': attribute type 1 has an invalid length.
[ 1225.574191][T30582] veth0_to_bridge: entered promiscuous mode
[ 1225.580456][T30582] veth0_to_bridge: entered allmulticast mode
[ 1227.366856][ T5895] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[ 1227.536765][ T5895] usb 7-1: Using ep0 maxpacket: 32
[ 1227.547432][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1227.556000][ T5895] usb 7-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00
[ 1227.566590][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1227.585990][ T5895] usb 7-1: config 0 descriptor??
[ 1227.692647][T30612] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1228.140758][ T5895] nzxt-smart2 0003:1E71:2011.0011: collection stack underflow
[ 1228.149430][ T5895] nzxt-smart2 0003:1E71:2011.0011: item 0 0 0 12 parsing failed
[ 1228.168507][ T5895] nzxt-smart2 0003:1E71:2011.0011: probe with driver nzxt-smart2 failed with error -22
[ 1228.401458][T30619] nicvf0: renamed from team0 (while UP)
[ 1228.460215][T30619] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[ 1228.487814][ T5895] usb 7-1: USB disconnect, device number 30
[ 1228.708820][T30622] loop6: detected capacity change from 0 to 7
[ 1228.738720][T18945] Dev loop6: unable to read RDB block 7
[ 1228.744305][T18945]  loop6: AHDI p2 p3
[ 1228.748962][T18945] loop6: partition table partially beyond EOD, truncated
[ 1228.788282][T18945] loop6: p2 size 116 extends beyond EOD, truncated
[ 1228.826793][T30622] Dev loop6: unable to read RDB block 7
[ 1228.832777][T30622]  loop6: AHDI p2 p3
[ 1228.842141][T30622] loop6: partition table partially beyond EOD, truncated
[ 1228.930109][T30622] loop6: p2 size 116 extends beyond EOD, truncated
[ 1229.064257][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1229.151852][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1229.157223][T30626] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4711'.
[ 1229.232742][T30628] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4712'.
[ 1229.452171][T30639] program syz.6.4713 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1229.704661][T30641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4717'.
[ 1230.119703][T30656] loop6: detected capacity change from 0 to 7
[ 1230.130084][T30656] Dev loop6: unable to read RDB block 7
[ 1230.135855][T30656]  loop6: AHDI p2 p3
[ 1230.140973][T30656] loop6: partition table partially beyond EOD, truncated
[ 1230.149645][T30656] loop6: p2 size 116 extends beyond EOD, truncated
[ 1230.186836][ T5849] usb 6-1: new full-speed USB device number 46 using dummy_hcd
[ 1230.387168][T24301] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 1230.444977][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1230.464052][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1230.570412][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1230.601437][ T5849] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[ 1230.637803][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1230.639342][T24301] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[ 1230.659276][T24301] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1230.673530][T24301] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1230.686593][T24301] usb 3-1: config 220 has no interface number 2
[ 1230.693707][T24301] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1230.708094][T24301] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1230.715625][T24301] usb 3-1: config 220 interface 76 has no altsetting 0
[ 1230.723334][T24301] usb 3-1: config 220 interface 1 has no altsetting 0
[ 1230.724278][ T5849] usb 6-1: config 0 descriptor??
[ 1230.755917][T24301] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1230.765715][T24301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1230.776400][T24301] usb 3-1: Product: syz
[ 1230.787731][T24301] usb 3-1: Manufacturer: syz
[ 1230.792946][T24301] usb 3-1: SerialNumber: syz
[ 1231.312625][ T5849] samsung 0003:0419:0001.0012: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.5-1/input0
[ 1231.646418][T30671] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4725'.
[ 1231.668262][ T5849] usb 6-1: USB disconnect, device number 46
[ 1231.832519][T30669] fido_id[30669]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1232.095159][T30673] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4727'.
[ 1232.304795][T30677] openvswitch: netlink: Key type 31 is not supported
[ 1232.492215][T17105] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1232.645397][T30684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4731'.
[ 1232.658432][T17105] usb 6-1: Using ep0 maxpacket: 16
[ 1232.665775][T17105] usb 6-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30
[ 1232.695828][T17105] usb 6-1: config 0 interface 0 altsetting 109 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1232.727149][T17105] usb 6-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[ 1232.764734][T17105] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1232.785746][T17105] usb 6-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[ 1232.815452][ T5895] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 1232.815471][T17105] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1232.833008][T17105] usb 6-1: config 0 descriptor??
[ 1233.003893][T30690] netlink: 'syz.3.4733': attribute type 1 has an invalid length.
[ 1233.068609][ T5895] usb 7-1: config 0 has an invalid interface number: 99 but max is 0
[ 1233.085868][ T5895] usb 7-1: config 0 has no interface number 0
[ 1233.110518][ T5895] usb 7-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[ 1233.123963][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1233.158623][T30692] bond2: entered promiscuous mode
[ 1233.176875][T30692] bond2: entered allmulticast mode
[ 1233.184414][T30692] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1233.204516][ T5895] usb 7-1: Product: syz
[ 1233.214534][ T5895] usb 7-1: Manufacturer: syz
[ 1233.246032][ T5895] usb 7-1: SerialNumber: syz
[ 1233.258793][T30690] bridge1: entered promiscuous mode
[ 1233.264335][T30690] bridge1: entered allmulticast mode
[ 1233.273248][T17105] waltop 0003:172F:0500.0013: unknown main item tag 0x0
[ 1233.295803][   T36] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1233.314274][T24301] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1233.321758][T24301] uvcvideo 3-1:220.0: No valid video chain found.
[ 1233.328610][T24301] usb 3-1: selecting invalid altsetting 0
[ 1233.345838][T30690] bond2: (slave bridge1): Enslaving as an active interface with an up link
[ 1233.355702][T17105] waltop 0003:172F:0500.0013: unknown main item tag 0x0
[ 1233.360624][ T5895] usb 7-1: config 0 descriptor??
[ 1233.381320][T17105] waltop 0003:172F:0500.0013: unknown main item tag 0x0
[ 1233.389968][ T5895] peak_usb 7-1:0.99: probe with driver peak_usb failed with error 99
[ 1233.399080][T17105] waltop 0003:172F:0500.0013: unknown main item tag 0x0
[ 1233.408077][T24301] usb 3-1: selecting invalid altsetting 0
[ 1233.425649][T24301] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[ 1233.426995][T17105] waltop 0003:172F:0500.0013: unknown main item tag 0x0
[ 1233.499323][T24301] usb 3-1: USB disconnect, device number 105
[ 1233.507785][ T7084] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1233.601371][T30696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1233.610578][T17105] waltop 0003:172F:0500.0013: hidraw0: USB HID v0.05 Device [HID 172f:0500] on usb-dummy_hcd.5-1/input0
[ 1233.677050][T30696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1233.823762][T30702] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4736'.
[ 1234.049335][T30706] batadv_slave_0: entered promiscuous mode
[ 1234.061261][T30706] batadv_slave_0: left promiscuous mode
[ 1234.345714][T30715] openvswitch: netlink: Key type 31 is not supported
[ 1234.582675][T30722] input: syz0 as /devices/virtual/input/input78
[ 1234.788217][T30728] netlink: 'syz.2.4745': attribute type 1 has an invalid length.
[ 1234.871645][T30728] bond9: entered promiscuous mode
[ 1234.880178][T30728] bond9: entered allmulticast mode
[ 1234.888780][T30728] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1234.962051][T30728] bridge7: entered promiscuous mode
[ 1234.967605][T30728] bridge7: entered allmulticast mode
[ 1234.980083][T30732] netlink: 'syz.3.4746': attribute type 1 has an invalid length.
[ 1234.988935][   T36] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1235.000933][T30728] bond9: (slave bridge7): Enslaving as an active interface with an up link
[ 1235.194447][T24301] usb 6-1: USB disconnect, device number 47
[ 1235.266908][ T7084] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1235.447469][T30734] bond3: entered promiscuous mode
[ 1235.455756][T30734] bond3: entered allmulticast mode
[ 1235.464106][T30734] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1235.515619][ T5917] usb 7-1: USB disconnect, device number 31
[ 1235.583111][T30738] bridge2: entered promiscuous mode
[ 1235.648479][T30738] bridge2: entered allmulticast mode
[ 1235.673797][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1235.694438][T30738] bond3: (slave bridge2): Enslaving as an active interface with an up link
[ 1235.830438][T30745] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4749'.
[ 1236.027650][   T50] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1236.292399][T30755] batadv_slave_0: entered promiscuous mode
[ 1236.314040][T30755] batadv_slave_0: left promiscuous mode
[ 1236.606684][T30757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4753'.
[ 1236.869070][T30762] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1236.985728][T30762] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1237.266886][T24660] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[ 1237.320956][T30774] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4760'.
[ 1237.436957][T24660] usb 7-1: Using ep0 maxpacket: 16
[ 1237.445081][T24660] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[ 1237.466795][T24660] usb 7-1: can't read configurations, error -22
[ 1237.531592][T30780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4762'.
[ 1237.543862][ T5849] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 1237.717258][ T5917] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1237.717431][T24660] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 1237.738518][ T5849] usb 3-1: Using ep0 maxpacket: 8
[ 1237.751528][ T5849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1237.768197][ T5849] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1237.778046][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1237.797210][ T5849] usb 3-1: Product: syz
[ 1237.807797][ T5849] usb 3-1: Manufacturer: syz
[ 1237.820670][ T5849] usb 3-1: SerialNumber: syz
[ 1237.849289][ T5849] usb 3-1: config 0 descriptor??
[ 1237.866824][ T5917] usb 4-1: Using ep0 maxpacket: 32
[ 1237.889478][ T5849] imon_raw 3-1:0.0: IR endpoint missing
[ 1237.904602][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1237.917010][T24660] usb 7-1: Using ep0 maxpacket: 16
[ 1237.937224][T24660] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[ 1237.946531][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1237.971925][T24660] usb 7-1: can't read configurations, error -22
[ 1237.986894][ T5917] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 1237.990609][T24660] usb usb7-port1: attempt power cycle
[ 1238.009394][ T5917] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26
[ 1238.045400][ T5917] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1238.057992][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1238.077084][ T5917] usb 4-1: SerialNumber: syz
[ 1238.108181][T17105] usb 3-1: USB disconnect, device number 106
[ 1238.339772][T30778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1238.362138][T30778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1238.370557][T24660] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 1238.397464][T24660] usb 7-1: Using ep0 maxpacket: 16
[ 1238.405205][T24660] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[ 1238.414135][T24660] usb 7-1: can't read configurations, error -22
[ 1238.436964][T30778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1238.449456][T30778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1238.529194][T30778] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1238.545666][T30778] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1238.553372][T24660] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 1238.577626][T24660] usb 7-1: Using ep0 maxpacket: 16
[ 1238.585443][T24660] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[ 1238.601696][T24660] usb 7-1: can't read configurations, error -22
[ 1238.611058][T24660] usb usb7-port1: unable to enumerate USB device
[ 1238.618071][T30778] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1238.628562][T30778] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1238.781824][T30778] batadv0 (unregistering): left promiscuous mode
[ 1239.012854][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.019600][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.089591][T24660] usb 3-1: new full-speed USB device number 107 using dummy_hcd
[ 1239.112851][ T5917] usb 4-1: USB disconnect, device number 92
[ 1239.262993][T24660] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[ 1239.275906][T24660] usb 3-1: config 1 has no interface number 0
[ 1239.286428][T24660] usb 3-1: config 1 interface 105 has no altsetting 0
[ 1239.296406][T24660] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1239.306361][T24660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1239.314846][T24660] usb 3-1: Product: syz
[ 1239.322220][T24660] usb 3-1: Manufacturer: syz
[ 1239.327576][T24660] usb 3-1: SerialNumber: syz
[ 1239.740808][T24660] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[ 1239.875300][T24660] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[ 1239.892490][T24660] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[ 1239.895314][T30789] loop6: detected capacity change from 0 to 7
[ 1239.938366][T30789] Dev loop6: unable to read RDB block 7
[ 1239.954079][T24660] aqc111 3-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f
[ 1239.970505][T30789]  loop6: AHDI p3
[ 1239.982127][T30789] loop6: partition table partially beyond EOD, truncated
[ 1240.771500][ T5849] usb 3-1: USB disconnect, device number 107
[ 1240.778934][ T5849] aqc111 3-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[ 1240.890529][T30803] loop6: detected capacity change from 0 to 7
[ 1240.949548][ T5849] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1240.960467][ T5849] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1240.971905][T30803] Dev loop6: unable to read RDB block 7
[ 1240.977736][T30803]  loop6: AHDI p2 p3
[ 1240.981967][T30803] loop6: partition table partially beyond EOD, truncated
[ 1240.989671][ T5849] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[ 1241.003228][T30803] loop6: p2 size 116 extends beyond EOD, truncated
[ 1241.131402][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1241.379260][T30810] openvswitch: netlink: Key type 31 is not supported
[ 1245.285259][T30893] @: renamed from vlan0 (while UP)
[ 1245.803258][T30910] loop6: detected capacity change from 0 to 7
[ 1245.833479][T30910] Dev loop6: unable to read RDB block 7
[ 1245.855200][T30910]  loop6: AHDI p3
[ 1246.002408][T30910] loop6: partition table partially beyond EOD, truncated
[ 1249.743985][T30958] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1250.116230][T30962] loop6: detected capacity change from 0 to 7
[ 1250.165881][T30962] Dev loop6: unable to read RDB block 7
[ 1250.191836][T30962]  loop6: AHDI p2 p3
[ 1250.199083][T30962] loop6: partition table partially beyond EOD, truncated
[ 1250.210453][T30962] loop6: p2 size 116 extends beyond EOD, truncated
[ 1250.332394][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1251.822973][T30995] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4809'.
[ 1251.847162][T30995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1252.448972][T31007] loop6: detected capacity change from 0 to 7
[ 1252.476428][T31007] Dev loop6: unable to read RDB block 7
[ 1252.494758][T31007]  loop6: AHDI p2 p3
[ 1252.504842][T31007] loop6: partition table partially beyond EOD, truncated
[ 1252.572348][T31007] loop6: p2 size 116 extends beyond EOD, truncated
[ 1252.731620][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1252.779330][T31010] loop6: detected capacity change from 0 to 7
[ 1252.828899][T18945] Dev loop6: unable to read RDB block 7
[ 1252.834575][T18945]  loop6: AHDI p3
[ 1252.846452][T18945] loop6: partition table partially beyond EOD, truncated
[ 1252.868455][T31010] Dev loop6: unable to read RDB block 7
[ 1252.894432][T31010]  loop6: AHDI p3
[ 1252.894470][T31010] loop6: partition table partially beyond EOD, truncated
[ 1252.954574][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1253.266500][T31021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4817'.
[ 1253.277983][T31021] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[ 1253.282296][T31021] netdevsim netdevsim6 netdevsim0: left promiscuous mode
[ 1253.919387][T24301] usb 7-1: new full-speed USB device number 36 using dummy_hcd
[ 1254.083266][T24301] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1254.094818][T24301] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1254.107846][T24301] usb 7-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00
[ 1254.121938][T24301] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1254.152010][T24301] usb 7-1: config 0 descriptor??
[ 1254.162984][T31031] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1254.714733][T24301] glorious 0003:22D4:1503.0014: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.6-1/input0
[ 1255.005762][T31768] netlink: 'syz.5.4823': attribute type 1 has an invalid length.
[ 1255.145782][T31768] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[ 1255.574785][T24301] usb 7-1: USB disconnect, device number 36
[ 1256.025158][T31776] loop6: detected capacity change from 0 to 7
[ 1256.032928][T31776] Dev loop6: unable to read RDB block 7
[ 1256.052031][T31776]  loop6: AHDI p3
[ 1256.076808][T31776] loop6: partition table partially beyond EOD, truncated
[ 1256.432218][T31783] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1257.656781][ T5849] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 1257.808217][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1257.827341][ T5849] usb 7-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00
[ 1257.907306][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1257.943671][ T5849] usb 7-1: config 0 descriptor??
[ 1258.159503][ T5849] logitech 0003:046D:C295.0015: ignoring exceeding usage max
[ 1258.211211][ T5849] logitech 0003:046D:C295.0015: ignoring exceeding usage max
[ 1258.224517][ T5849] logitech 0003:046D:C295.0015: usage index exceeded
[ 1258.403414][ T5849] logitech 0003:046D:C295.0015: item 0 0 2 2 parsing failed
[ 1258.418001][T31805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1258.430270][T31805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1258.775381][ T5849] logitech 0003:046D:C295.0015: parse failed
[ 1258.784330][ T5849] logitech 0003:046D:C295.0015: probe with driver logitech failed with error -22
[ 1258.821553][ T5849] usb 7-1: USB disconnect, device number 37
[ 1259.608927][ T5849] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 1259.796547][ T5849] usb 7-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config
[ 1259.824225][ T5849] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1259.835575][ T5849] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1259.855924][ T5849] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1259.867368][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1259.875464][ T5849] usb 7-1: Product: syz
[ 1259.884375][ T5849] usb 7-1: Manufacturer: syz
[ 1259.890319][ T5849] usb 7-1: SerialNumber: syz
[ 1260.076248][T31834] netlink: 'syz.5.4839': attribute type 1 has an invalid length.
[ 1260.205428][T31837] loop6: detected capacity change from 0 to 7
[ 1260.205686][ T5849] usb 7-1: 0:2 : does not exist
[ 1260.240623][T31836] bond2: entered promiscuous mode
[ 1260.245959][ T5849] usb 7-1: USB disconnect, device number 38
[ 1260.252343][T31836] bond2: entered allmulticast mode
[ 1260.270164][T31836] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1260.304103][T31837] Dev loop6: unable to read RDB block 7
[ 1260.318069][T31837]  loop6: AHDI p3
[ 1260.325510][T31837] loop6: partition table partially beyond EOD, truncated
[ 1260.358801][T18945] udevd[18945]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1260.383122][T31834] bridge2: entered promiscuous mode
[ 1260.392813][T31834] bridge2: entered allmulticast mode
[ 1260.401131][T31834] bond2: (slave bridge2): Enslaving as a backup interface with an up link
[ 1260.509219][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1260.646806][ T7084] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1260.945723][T31845] openvswitch: netlink: Key type 31 is not supported
[ 1261.076071][T31851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1261.147229][T31851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1261.157983][T31854] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4847'.
[ 1261.281162][T31858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4848'.
[ 1261.317670][T24301] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[ 1261.459198][T31865] batadv_slave_0: entered promiscuous mode
[ 1261.465441][T31865] batadv_slave_0: left promiscuous mode
[ 1261.471333][T24301] usb 3-1: device descriptor read/64, error -71
[ 1261.782973][T24301] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[ 1261.926884][T24301] usb 3-1: device descriptor read/64, error -71
[ 1262.043648][T24301] usb usb3-port1: attempt power cycle
[ 1262.438680][T24301] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[ 1262.607071][T24301] usb 3-1: device descriptor read/8, error -71
[ 1262.906763][T24301] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[ 1262.929546][T24301] usb 3-1: device descriptor read/8, error -71
[ 1263.065875][T24301] usb usb3-port1: unable to enumerate USB device
[ 1264.299491][T31899] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4860'.
[ 1264.747045][T31899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4860'.
[ 1264.945232][T31907] netlink: 'syz.7.4861': attribute type 1 has an invalid length.
[ 1265.138674][T31911] bond3: entered promiscuous mode
[ 1265.144046][T31911] bond3: entered allmulticast mode
[ 1265.150238][T31911] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1265.296554][T31907] bridge3: entered promiscuous mode
[ 1265.327660][ T1029] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1265.349172][T31907] bridge3: entered allmulticast mode
[ 1265.357502][T31907] bond3: (slave bridge3): Enslaving as an active interface with an up link
[ 1265.459388][ T1029] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1265.532309][T31917] batadv_slave_1: entered promiscuous mode
[ 1265.641082][T31919] ALSA: mixer_oss: invalid OSS volume 'u'
[ 1265.778326][T31922] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4864'.
[ 1266.090059][T31915] batadv_slave_1: left promiscuous mode
[ 1266.401975][T31937] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4872'.
[ 1266.567212][T31937] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4872'.
[ 1266.724586][T31944] loop6: detected capacity change from 0 to 7
[ 1266.759370][T31944] Dev loop6: unable to read RDB block 7
[ 1266.806926][T31944]  loop6: AHDI p2 p3
[ 1266.811375][T31944] loop6: partition table partially beyond EOD, truncated
[ 1266.838074][T31944] loop6: p2 size 116 extends beyond EOD, truncated
[ 1267.206776][T17105] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1267.365456][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1267.441487][T31962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4877'.
[ 1267.459352][T31962] bridge3: port 1(macvlan2) entered blocking state
[ 1267.466844][T31962] bridge3: port 1(macvlan2) entered disabled state
[ 1267.486793][T17105] usb 4-1: Using ep0 maxpacket: 8
[ 1267.885157][T31962] macvlan2: entered allmulticast mode
[ 1267.891112][T17105] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1267.900533][T17105] usb 4-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 16
[ 1267.910959][T17105] usb 4-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 1023
[ 1267.921412][T17105] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1267.931880][T31962] macvlan2: entered promiscuous mode
[ 1267.932838][T17105] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1267.947067][T17105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1267.995010][T17105] usb 4-1: Product: syz
[ 1268.001560][T17105] usb 4-1: Manufacturer: syz
[ 1268.013949][T17105] usb 4-1: SerialNumber: syz
[ 1268.057181][T31948] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1268.064870][T31948] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1268.371266][T17105] usb 4-1: bad CDC descriptors
[ 1268.473944][T17105] usb 4-1: USB disconnect, device number 93
[ 1268.516751][T24660] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[ 1268.841822][T31984] netlink: 'syz.7.4883': attribute type 1 has an invalid length.
[ 1268.858175][T24660] usb 3-1: Using ep0 maxpacket: 8
[ 1268.876414][T24660] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1268.920098][T24660] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 15124, setting to 1024
[ 1268.934918][T31983] bond4: entered promiscuous mode
[ 1268.943770][T31983] bond4: entered allmulticast mode
[ 1268.987799][T31983] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1269.038314][T24660] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[ 1269.061673][T24660] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1269.213238][T24660] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1269.222656][T24660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1269.251561][T24660] usb 3-1: Product: syz
[ 1269.276758][T24660] usb 3-1: Manufacturer: syz
[ 1269.293055][T24660] usb 3-1: SerialNumber: syz
[ 1269.331765][T31984] bridge4: entered promiscuous mode
[ 1269.342710][T31984] bridge4: entered allmulticast mode
[ 1269.358280][T31984] bond4: (slave bridge4): Enslaving as a backup interface with an up link
[ 1269.819854][T31970] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1269.849493][   T50] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1269.920431][T31970] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1270.076972][   T50] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1270.190597][T31970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4879'.
[ 1270.205974][T31970] loop2: detected capacity change from 0 to 7
[ 1270.325122][T24660] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[ 1270.370143][T31992] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4886'.
[ 1270.416789][T24660] usbtest 3-1:1.0: Linux user mode ISO test driver
[ 1270.778852][T32001] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4887'.
[ 1270.879636][T24660] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[ 1270.952142][T24660] usb 3-1: USB disconnect, device number 112
[ 1271.417097][T24660] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1271.606366][T24660] usb 4-1: Using ep0 maxpacket: 16
[ 1271.662058][T24660] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1271.754838][T24660] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1271.768130][T24660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1271.776523][T24660] usb 4-1: Product: syz
[ 1271.783511][T24660] usb 4-1: Manufacturer: syz
[ 1271.788401][T24660] usb 4-1: SerialNumber: syz
[ 1271.801660][T24660] usb 4-1: config 0 descriptor??
[ 1271.813417][T24660] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1271.833863][T24660] em28xx 4-1:0.0: DVB interface 0 found: bulk
[ 1272.430947][T24660] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 1273.600666][T24660] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[ 1273.617735][T24660] em28xx 4-1:0.0: board has no eeprom
[ 1273.686826][T24660] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1273.694811][T24660] em28xx 4-1:0.0: dvb set to bulk mode.
[ 1273.701261][T24301] em28xx 4-1:0.0: Binding DVB extension
[ 1273.731254][T24660] usb 4-1: USB disconnect, device number 94
[ 1273.755495][T24660] em28xx 4-1:0.0: Disconnecting em28xx
[ 1273.851573][T24301] em28xx 4-1:0.0: Registering input extension
[ 1273.887219][T24660] em28xx 4-1:0.0: Closing input extension
[ 1274.013136][T24660] em28xx 4-1:0.0: Freeing device
[ 1274.275261][T32036] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4898'.
[ 1274.446769][T24301] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 1274.597281][T24301] usb 7-1: Using ep0 maxpacket: 16
[ 1274.608460][T24301] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1274.618834][T24301] usb 7-1: config 13 has an invalid interface number: 50 but max is 0
[ 1274.627344][T24301] usb 7-1: config 13 has no interface number 0
[ 1274.633759][T24301] usb 7-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16
[ 1274.644132][T24301] usb 7-1: config 13 interface 50 has no altsetting 0
[ 1274.655366][T24301] usb 7-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[ 1274.664912][T24301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1274.680395][T24301] usb 7-1: Product: syz
[ 1274.692414][T24301] usb 7-1: Manufacturer: syz
[ 1274.702875][T24301] usb 7-1: SerialNumber: syz
[ 1274.737078][T32033] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1275.136830][T32033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1275.156014][T32033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1275.377331][T32052] loop6: detected capacity change from 0 to 7
[ 1275.420425][T19103] Dev loop6: unable to read RDB block 7
[ 1275.429365][T19103]  loop6: AHDI p2 p3
[ 1275.440219][T19103] loop6: partition table partially beyond EOD, truncated
[ 1275.475530][T19103] loop6: p2 size 116 extends beyond EOD, truncated
[ 1275.505275][T32052] Dev loop6: unable to read RDB block 7
[ 1275.516301][T32052]  loop6: AHDI p2 p3
[ 1275.532857][T32052] loop6: partition table partially beyond EOD, truncated
[ 1275.557336][T32052] loop6: p2 size 116 extends beyond EOD, truncated
[ 1275.813575][T19103] udevd[19103]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1276.085300][T19103] udevd[19103]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1276.192098][T32059] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4904'.
[ 1276.325241][T32059] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4904'.
[ 1276.395718][T32061] batadv_slave_0: entered promiscuous mode
[ 1276.422297][T32061] batadv_slave_0: left promiscuous mode
[ 1276.847696][T32071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4907'.
[ 1277.695714][T24301] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 1277.702849][T24301] usb 7-1: MIDIStreaming interface descriptor not found
[ 1277.741300][T24301] usb 7-1: USB disconnect, device number 39
[ 1277.804644][T18980] udevd[18980]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1278.322578][T32078] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4909'.
[ 1281.006940][T32120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4921'.
[ 1282.806907][ T5895] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 1282.952975][T32152] loop6: detected capacity change from 0 to 7
[ 1282.960775][T32152] Dev loop6: unable to read RDB block 7
[ 1282.967138][T32152]  loop6: AHDI p3
[ 1282.971731][T32152] loop6: partition table partially beyond EOD, truncated
[ 1282.986989][ T5895] usb 3-1: Using ep0 maxpacket: 8
[ 1282.994093][ T5895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1283.009740][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1283.051547][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1283.116598][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1283.145724][ T5895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1283.156393][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1283.387672][ T5895] usb 3-1: GET_CAPABILITIES returned 0
[ 1283.402649][ T5895] usbtmc 3-1:16.0: can't read capabilities
[ 1284.257206][ T5849] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1284.290435][T24301] usb 3-1: USB disconnect, device number 113
[ 1284.467036][ T5849] usb 4-1: Using ep0 maxpacket: 16
[ 1284.495972][T32181] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4934'.
[ 1284.507267][ T1209] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 1284.518365][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1284.528676][ T5849] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[ 1284.604271][ T5849] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[ 1284.630330][ T5849] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1284.721084][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1284.739128][ T5849] usb 4-1: Product: syz
[ 1284.747566][ T5849] usb 4-1: Manufacturer: syz
[ 1284.753471][ T1209] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1284.771444][ T5849] usb 4-1: SerialNumber: syz
[ 1284.776594][ T1209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1284.784734][ T1209] usb 7-1: Product: syz
[ 1284.929065][ T5849] usb 4-1: config 0 descriptor??
[ 1284.937404][T32175] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1284.947068][ T1209] usb 7-1: Manufacturer: syz
[ 1284.952376][ T1209] usb 7-1: SerialNumber: syz
[ 1285.008898][ T5849] mcba_usb 4-1:0.0 can0: failed tx_urb -90
[ 1285.064084][ T5849] mcba_usb 4-1:0.0 can0: Failed to send cmd (169)
[ 1285.116860][ T5849] mcba_usb 4-1:0.0 can0: failed tx_urb -90
[ 1285.122801][ T5849] mcba_usb 4-1:0.0 can0: Failed to send cmd (169)
[ 1285.146723][ T5849] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected
[ 1285.417791][T32172] netlink: 'syz.3.4932': attribute type 1 has an invalid length.
[ 1286.762694][T32176] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4933'.
[ 1286.771894][T32176] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4933'.
[ 1286.781055][T32176] tc_dump_action: action bad kind
[ 1286.828601][ T1209] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO
[ 1286.848815][ T1209] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1286.877438][ T1209] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1286.910247][ T1209] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[ 1286.954643][ T1209] usb 7-1: USB disconnect, device number 40
[ 1287.219618][ T1209] usb 4-1: USB disconnect, device number 95
[ 1287.245191][ T1209] mcba_usb 4-1:0.0 can0: device disconnected
[ 1289.418074][T32268] FAULT_INJECTION: forcing a failure.
[ 1289.418074][T32268] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1289.446749][T32268] CPU: 1 UID: 0 PID: 32268 Comm: syz.7.4950 Not tainted syzkaller #0 PREEMPT(full) 
[ 1289.446777][T32268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1289.446790][T32268] Call Trace:
[ 1289.446799][T32268]  <TASK>
[ 1289.446809][T32268]  dump_stack_lvl+0x189/0x250
[ 1289.446841][T32268]  ? __pfx____ratelimit+0x10/0x10
[ 1289.446870][T32268]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1289.446895][T32268]  ? __pfx__printk+0x10/0x10
[ 1289.446924][T32268]  ? __might_fault+0xb0/0x130
[ 1289.446961][T32268]  should_fail_ex+0x414/0x560
[ 1289.446990][T32268]  _copy_from_user+0x2d/0xb0
[ 1289.447012][T32268]  ___sys_sendmsg+0x158/0x2a0
[ 1289.447038][T32268]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1289.447095][T32268]  ? __fget_files+0x2a/0x420
[ 1289.447123][T32268]  ? __fget_files+0x3a0/0x420
[ 1289.447161][T32268]  __x64_sys_sendmsg+0x19b/0x260
[ 1289.447187][T32268]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1289.447218][T32268]  ? __pfx_ksys_write+0x10/0x10
[ 1289.447240][T32268]  ? rcu_is_watching+0x15/0xb0
[ 1289.447267][T32268]  ? do_syscall_64+0xbe/0x3b0
[ 1289.447281][T32268]  do_syscall_64+0xfa/0x3b0
[ 1289.447292][T32268]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1289.447308][T32268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1289.447319][T32268]  ? clear_bhb_loop+0x60/0xb0
[ 1289.447332][T32268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1289.447342][T32268] RIP: 0033:0x7f3a5098eec9
[ 1289.447354][T32268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1289.447364][T32268] RSP: 002b:00007f3a51847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1289.447377][T32268] RAX: ffffffffffffffda RBX: 00007f3a50be5fa0 RCX: 00007f3a5098eec9
[ 1289.447386][T32268] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000003
[ 1289.447393][T32268] RBP: 00007f3a51847090 R08: 0000000000000000 R09: 0000000000000000
[ 1289.447400][T32268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1289.447407][T32268] R13: 00007f3a50be6038 R14: 00007f3a50be5fa0 R15: 00007f3a50d0fa28
[ 1289.447424][T32268]  </TASK>
[ 1292.485548][T32707] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1292.548278][T32709] loop6: detected capacity change from 0 to 7
[ 1292.598239][T32709] Dev loop6: unable to read RDB block 7
[ 1292.646963][T32709]  loop6: AHDI p2 p3
[ 1292.651404][T32709] loop6: partition table partially beyond EOD, truncated
[ 1292.699798][T32709] loop6: p2 size 116 extends beyond EOD, truncated
[ 1293.025123][T32712] FAULT_INJECTION: forcing a failure.
[ 1293.025123][T32712] name failslab, interval 1, probability 0, space 0, times 0
[ 1293.077104][T32712] CPU: 1 UID: 0 PID: 32712 Comm: syz.7.4963 Not tainted syzkaller #0 PREEMPT(full) 
[ 1293.077131][T32712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1293.077144][T32712] Call Trace:
[ 1293.077152][T32712]  <TASK>
[ 1293.077161][T32712]  dump_stack_lvl+0x189/0x250
[ 1293.077200][T32712]  ? __pfx____ratelimit+0x10/0x10
[ 1293.077229][T32712]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1293.077254][T32712]  ? __pfx__printk+0x10/0x10
[ 1293.077285][T32712]  ? __pfx___might_resched+0x10/0x10
[ 1293.077306][T32712]  ? fs_reclaim_acquire+0x7d/0x100
[ 1293.077336][T32712]  should_fail_ex+0x414/0x560
[ 1293.077366][T32712]  should_failslab+0xa8/0x100
[ 1293.077397][T32712]  kmem_cache_alloc_node_noprof+0x77/0x710
[ 1293.077423][T32712]  ? __alloc_skb+0x112/0x2d0
[ 1293.077441][T32712]  ? netlink_autobind+0xdb/0x300
[ 1293.077467][T32712]  __alloc_skb+0x112/0x2d0
[ 1293.077490][T32712]  netlink_sendmsg+0x5c6/0xb30
[ 1293.077518][T32712]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1293.077541][T32712]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1293.077565][T32712]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1293.077595][T32712]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1293.077616][T32712]  __sock_sendmsg+0x21c/0x270
[ 1293.077645][T32712]  ____sys_sendmsg+0x505/0x830
[ 1293.077671][T32712]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1293.077701][T32712]  ? import_iovec+0x74/0xa0
[ 1293.077723][T32712]  ___sys_sendmsg+0x21f/0x2a0
[ 1293.077745][T32712]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1293.077800][T32712]  ? __fget_files+0x2a/0x420
[ 1293.077831][T32712]  ? __fget_files+0x3a0/0x420
[ 1293.077869][T32712]  __x64_sys_sendmsg+0x19b/0x260
[ 1293.077894][T32712]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1293.077926][T32712]  ? __pfx_ksys_write+0x10/0x10
[ 1293.077949][T32712]  ? rcu_is_watching+0x15/0xb0
[ 1293.077976][T32712]  ? do_syscall_64+0xbe/0x3b0
[ 1293.077999][T32712]  do_syscall_64+0xfa/0x3b0
[ 1293.078015][T32712]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1293.078043][T32712]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1293.078061][T32712]  ? clear_bhb_loop+0x60/0xb0
[ 1293.078084][T32712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1293.078103][T32712] RIP: 0033:0x7f3a5098eec9
[ 1293.078122][T32712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1293.078143][T32712] RSP: 002b:00007f3a51847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1293.078163][T32712] RAX: ffffffffffffffda RBX: 00007f3a50be5fa0 RCX: 00007f3a5098eec9
[ 1293.078177][T32712] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000003
[ 1293.078189][T32712] RBP: 00007f3a51847090 R08: 0000000000000000 R09: 0000000000000000
[ 1293.078207][T32712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1293.078219][T32712] R13: 00007f3a50be6038 R14: 00007f3a50be5fa0 R15: 00007f3a50d0fa28
[ 1293.078248][T32712]  </TASK>
[ 1293.413334][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1294.699942][T32750] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1295.195310][T32766] loop2: detected capacity change from 0 to 6
[ 1295.214975][T18945] Dev loop2: unable to read RDB block 6
[ 1295.224176][T18945]  loop2: unable to read partition table
[ 1295.233647][T18945] loop2: partition table beyond EOD, truncated
[ 1295.246945][T32766] Dev loop2: unable to read RDB block 6
[ 1295.254696][T32766]  loop2: unable to read partition table
[ 1295.262121][T32766] loop2: partition table beyond EOD, truncated
[ 1295.802008][T32766] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1296.016979][ T5849] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1296.166737][ T5849] usb 4-1: Using ep0 maxpacket: 16
[ 1296.198545][ T5849] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1296.228178][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1296.274923][ T5849] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1296.298869][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1296.317059][ T5849] usb 4-1: Product: syz
[ 1296.323808][ T5849] usb 4-1: Manufacturer: syz
[ 1296.336737][ T5849] usb 4-1: SerialNumber: syz
[ 1296.353724][ T5849] usb 4-1: config 0 descriptor??
[ 1296.364031][ T5849] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1296.434111][ T5849] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[ 1297.001216][ T5849] em28xx 4-1:0.0: unknown em28xx chip ID (39)
[ 1297.228143][ T5849] em28xx 4-1:0.0: Config register raw data: 0x05
[ 1297.572272][  T334] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1297.792089][  T337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1297.849051][  T337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1298.443726][  T353] FAULT_INJECTION: forcing a failure.
[ 1298.443726][  T353] name failslab, interval 1, probability 0, space 0, times 0
[ 1298.457078][  T353] CPU: 0 UID: 0 PID: 353 Comm: syz.6.4989 Not tainted syzkaller #0 PREEMPT(full) 
[ 1298.457104][  T353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1298.457118][  T353] Call Trace:
[ 1298.457127][  T353]  <TASK>
[ 1298.457136][  T353]  dump_stack_lvl+0x189/0x250
[ 1298.457165][  T353]  ? __pfx____ratelimit+0x10/0x10
[ 1298.457195][  T353]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1298.457220][  T353]  ? __pfx__printk+0x10/0x10
[ 1298.457245][  T353]  ? netlink_sendmsg+0x805/0xb30
[ 1298.457266][  T353]  ? __x64_sys_sendmsg+0x19b/0x260
[ 1298.457288][  T353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1298.457318][  T353]  should_fail_ex+0x414/0x560
[ 1298.457347][  T353]  should_failslab+0xa8/0x100
[ 1298.457378][  T353]  kmem_cache_alloc_noprof+0x74/0x6e0
[ 1298.457402][  T353]  ? skb_clone+0x212/0x3a0
[ 1298.457428][  T353]  skb_clone+0x212/0x3a0
[ 1298.457451][  T353]  __netlink_deliver_tap+0x404/0x850
[ 1298.457478][  T353]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1298.457496][  T353]  netlink_deliver_tap+0x19c/0x1b0
[ 1298.457514][  T353]  netlink_sendskb+0x68/0x140
[ 1298.457540][  T353]  netlink_unicast+0x397/0x9e0
[ 1298.457561][  T353]  ? __asan_memcpy+0x40/0x70
[ 1298.457589][  T353]  ? __pfx_netlink_unicast+0x10/0x10
[ 1298.457622][  T353]  netlink_rcv_skb+0x28c/0x470
[ 1298.457645][  T353]  ? __lock_acquire+0xab9/0xd20
[ 1298.457662][  T353]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1298.457684][  T353]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1298.457726][  T353]  ? down_read+0x1ad/0x2e0
[ 1298.457752][  T353]  genl_rcv+0x28/0x40
[ 1298.457770][  T353]  netlink_unicast+0x82f/0x9e0
[ 1298.457801][  T353]  ? __pfx_netlink_unicast+0x10/0x10
[ 1298.457827][  T353]  ? netlink_sendmsg+0x642/0xb30
[ 1298.457841][  T353]  ? skb_put+0x11b/0x210
[ 1298.457861][  T353]  netlink_sendmsg+0x805/0xb30
[ 1298.457885][  T353]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1298.457905][  T353]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1298.457929][  T353]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1298.457954][  T353]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1298.457971][  T353]  __sock_sendmsg+0x21c/0x270
[ 1298.457997][  T353]  ____sys_sendmsg+0x505/0x830
[ 1298.458024][  T353]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1298.458051][  T353]  ? import_iovec+0x74/0xa0
[ 1298.458071][  T353]  ___sys_sendmsg+0x21f/0x2a0
[ 1298.458091][  T353]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1298.458141][  T353]  ? __fget_files+0x2a/0x420
[ 1298.458165][  T353]  ? __fget_files+0x3a0/0x420
[ 1298.458198][  T353]  __x64_sys_sendmsg+0x19b/0x260
[ 1298.458219][  T353]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1298.458246][  T353]  ? __pfx_ksys_write+0x10/0x10
[ 1298.458266][  T353]  ? rcu_is_watching+0x15/0xb0
[ 1298.458290][  T353]  ? do_syscall_64+0xbe/0x3b0
[ 1298.458309][  T353]  do_syscall_64+0xfa/0x3b0
[ 1298.458326][  T353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1298.458342][  T353]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1298.458358][  T353]  ? clear_bhb_loop+0x60/0xb0
[ 1298.458379][  T353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1298.458400][  T353] RIP: 0033:0x7fb4ec78eec9
[ 1298.458416][  T353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1298.458431][  T353] RSP: 002b:00007fb4ed6ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1298.458454][  T353] RAX: ffffffffffffffda RBX: 00007fb4ec9e6180 RCX: 00007fb4ec78eec9
[ 1298.458467][  T353] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[ 1298.458478][  T353] RBP: 00007fb4ed6ca090 R08: 0000000000000000 R09: 0000000000000000
[ 1298.458490][  T353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1298.458501][  T353] R13: 00007fb4ec9e6218 R14: 00007fb4ec9e6180 R15: 00007fb4ecb0fa28
[ 1298.458528][  T353]  </TASK>
[ 1298.823669][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1299.233262][ T5849] usb 4-1: USB disconnect, device number 96
[ 1299.247104][ T5849] em28xx 4-1:0.0: Disconnecting em28xx
[ 1299.295590][ T5849] em28xx 4-1:0.0: Freeing device
[ 1299.376547][  T365] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1299.556876][  T367] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[ 1300.238263][  T381] netdevsim netdevsim2: Direct firmware load for nel/config failed with error -2
[ 1300.267201][  T378] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[ 1300.273763][  T378] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1300.370248][  T381] netdevsim netdevsim2: Falling back to sysfs fallback for: nel/config
[ 1300.455119][  T378] vhci_hcd vhci_hcd.0: Device attached
[ 1300.471269][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.486736][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.746770][ T5849] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[ 1300.884016][  T379] vhci_hcd: connection reset by peer
[ 1300.920482][ T1029] vhci_hcd: stop threads
[ 1300.935509][ T1029] vhci_hcd: release socket
[ 1300.957008][ T1029] vhci_hcd: disconnect device
[ 1301.494877][  T392] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[ 1303.077594][  T412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5004'.
[ 1304.202947][  T424] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5006'.
[ 1304.225199][  T422] netlink: 'syz.6.5007': attribute type 24 has an invalid length.
[ 1304.457337][T24660] usb 6-1: new full-speed USB device number 48 using dummy_hcd
[ 1304.618924][T24660] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1304.629118][T24660] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1304.646770][T24660] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1304.659491][T24660] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[ 1304.669090][T24660] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1304.731280][T24660] usb 6-1: Product: syz
[ 1304.735589][T24660] usb 6-1: Manufacturer: syz
[ 1304.741930][T24660] usb 6-1: SerialNumber: syz
[ 1304.758000][T24660] usb 6-1: config 0 descriptor??
[ 1304.796409][  T432] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5009'.
[ 1305.255925][ T5917] usb 6-1: USB disconnect, device number 48
[ 1305.382917][  T426] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5008'.
[ 1305.788227][  T440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5010'.
[ 1305.906840][ T5849] vhci_hcd: vhci_device speed not set
[ 1306.120730][  T449] netlink: 'syz.5.5013': attribute type 1 has an invalid length.
[ 1306.296772][  T454] loop6: detected capacity change from 0 to 7
[ 1306.398177][  T454] Dev loop6: unable to read RDB block 7
[ 1306.431093][  T454]  loop6: unable to read partition table
[ 1306.437794][  T454] loop6: partition table beyond EOD, truncated
[ 1306.444376][  T454] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1306.852897][  T472] sch_tbf: burst 19872 is lower than device lo mtu (65499) !
[ 1306.864137][   T30] audit: type=1326 audit(1759643562.754:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=460 comm="syz.3.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1307.129751][   T30] audit: type=1326 audit(1759643562.754:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=460 comm="syz.3.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1307.168867][   T30] audit: type=1326 audit(1759643562.754:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=460 comm="syz.3.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1307.207428][   T30] audit: type=1326 audit(1759643562.754:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=460 comm="syz.3.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1307.330783][   T30] audit: type=1326 audit(1759643562.754:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=460 comm="syz.3.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1307.419634][   T30] audit: type=1326 audit(1759643562.754:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=460 comm="syz.3.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1307.546796][ T1209] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 1307.683045][  T484] netlink: 'syz.3.5025': attribute type 1 has an invalid length.
[ 1307.746521][  T484] bond4: entered promiscuous mode
[ 1307.751815][  T484] bond4: entered allmulticast mode
[ 1307.757810][  T484] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1307.807286][  T484] bridge3: entered promiscuous mode
[ 1307.807370][ T1209] usb 3-1: config 0 has an invalid interface number: 95 but max is 0
[ 1307.821120][  T484] bridge3: entered allmulticast mode
[ 1307.828004][  T484] bond4: (slave bridge3): Enslaving as a backup interface with an up link
[ 1308.261981][   T36] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1308.276309][ T1209] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1308.302247][ T1209] usb 3-1: config 0 has no interface number 0
[ 1308.309739][ T1209] usb 3-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1308.329294][ T1209] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[ 1308.338639][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1308.355393][ T1209] usb 3-1: Product: syz
[ 1308.365281][ T1209] usb 3-1: Manufacturer: syz
[ 1308.382723][ T1209] usb 3-1: SerialNumber: syz
[ 1308.516838][   T36] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1308.563230][ T1209] usb 3-1: config 0 descriptor??
[ 1308.986059][ T1209] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1308.999281][ T1209] usb 3-1: MIDIStreaming interface descriptor not found
[ 1309.069818][ T1209] usb 3-1: USB disconnect, device number 114
[ 1309.778161][  T513] loop6: detected capacity change from 0 to 7
[ 1310.148109][  T518] random: crng reseeded on system resumption
[ 1310.191211][  T513] Dev loop6: unable to read RDB block 7
[ 1310.198277][  T519] macsec1: entered promiscuous mode
[ 1310.203667][  T513]  loop6: AHDI p2 p3
[ 1310.210275][  T519] bridge0: port 3(macsec1) entered blocking state
[ 1310.243668][  T513] loop6: partition table partially beyond EOD, truncated
[ 1310.255711][  T513] loop6: p2 size 116 extends beyond EOD, truncated
[ 1310.262780][  T519] bridge0: port 3(macsec1) entered disabled state
[ 1310.287777][  T519] macsec1: entered allmulticast mode
[ 1310.294126][  T519] bridge0: entered allmulticast mode
[ 1310.344950][  T519] macsec1: left allmulticast mode
[ 1310.350348][  T519] bridge0: left allmulticast mode
[ 1310.449443][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1311.652161][  T544] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[ 1312.467014][  T558] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5046'.
[ 1312.726372][  T560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5048'.
[ 1312.811744][  T560] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[ 1312.887973][  T560] netdevsim netdevsim6 netdevsim0: left promiscuous mode
[ 1314.705503][  T586] netlink: 'syz.3.5054': attribute type 1 has an invalid length.
[ 1314.805203][  T593] bond5: entered promiscuous mode
[ 1314.823136][  T593] bond5: entered allmulticast mode
[ 1314.837128][  T593] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1314.912454][  T586] bridge4: entered promiscuous mode
[ 1314.929556][  T586] bridge4: entered allmulticast mode
[ 1314.935895][  T586] bond5: (slave bridge4): Enslaving as a backup interface with an up link
[ 1314.944637][   T12] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1314.983414][  T595] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5057'.
[ 1315.086810][   T36] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1315.215693][  T599] batadv_slave_0: entered promiscuous mode
[ 1315.253930][  T599] batadv_slave_0: left promiscuous mode
[ 1315.587301][  T607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5061'.
[ 1315.642090][  T607] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 1315.669834][  T607] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[ 1315.908620][  T617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5064'.
[ 1316.588210][ T5895] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1316.749135][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1316.760429][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1316.794344][ T5895] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1316.825129][  T635] netlink: 'syz.7.5071': attribute type 24 has an invalid length.
[ 1316.836716][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1316.876539][ T5895] usb 4-1: config 0 descriptor??
[ 1317.121724][ T5895] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[ 1317.200270][ T5895] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[ 1317.221953][ T5895] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[ 1317.233129][ T5895] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[ 1317.242502][ T5895] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[ 1317.250527][ T5895] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[ 1317.258053][ T5895] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[ 1317.280228][ T5895] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[ 1317.313035][  T648] IPv6: addrconf: prefix option has invalid lifetime
[ 1317.319834][  T648] IPv6: addrconf: prefix option has invalid lifetime
[ 1317.374074][ T5895] cp2112 0003:10C4:EA90.0016: error requesting version
[ 1317.414040][ T5895] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -71
[ 1317.440822][ T5895] usb 4-1: USB disconnect, device number 97
[ 1317.506977][   T30] audit: type=1326 audit(1759643573.434:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=645 comm="syz.6.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb4ec78eec9 code=0x7ffc0000
[ 1317.606784][   T30] audit: type=1326 audit(1759643573.434:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=645 comm="syz.6.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb4ec78eec9 code=0x7ffc0000
[ 1319.786857][ T1209] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 1319.972004][ T1209] usb 7-1: too many configurations: 9, using maximum allowed: 8
[ 1319.983984][ T1209] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1319.993241][ T1209] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1320.066150][ T1209] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1320.128583][ T1209] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1320.139634][ T1209] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1320.277362][ T1209] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1320.321541][  T690] loop6: detected capacity change from 0 to 7
[ 1320.347778][ T1209] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1320.356896][ T1209] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1320.399101][ T1209] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1320.407569][T18945] Dev loop6: unable to read RDB block 7
[ 1320.413763][T18945]  loop6: AHDI p2 p3
[ 1320.418616][T18945] loop6: partition table partially beyond EOD, truncated
[ 1320.426942][ T1209] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1320.436509][ T1209] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1320.460435][T18945] loop6: p2 size 116 extends beyond EOD, truncated
[ 1320.471652][ T1209] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1320.490092][ T1209] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1320.501043][  T690] Dev loop6: unable to read RDB block 7
[ 1320.511497][ T1209] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1320.523193][  T690]  loop6: AHDI p2 p3
[ 1320.532496][  T690] loop6: partition table partially beyond EOD, truncated
[ 1320.541688][ T1209] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1320.554346][  T690] loop6: p2 size 116 extends beyond EOD, truncated
[ 1320.565021][ T1209] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1320.574304][ T1209] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1320.586918][ T1209] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1320.595514][ T1209] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1320.604554][ T1209] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1320.677300][ T1209] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1320.702624][ T1209] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1320.717657][ T1209] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1320.732253][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1320.773885][ T1209] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1320.859128][ T1209] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1320.875522][T18945] udevd[18945]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 1320.885912][ T1209] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1320.922747][ T1209] usb 7-1: Product: syz
[ 1320.950358][ T1209] usb 7-1: Manufacturer: syz
[ 1320.967834][ T1209] usb 7-1: SerialNumber: syz
[ 1320.988676][ T1209] usb 7-1: config 0 descriptor??
[ 1321.008212][ T1209] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[ 1321.941770][    C1] usb 7-1: yurex_control_callback - control failed: -71
[ 1321.943100][T24660] usb 7-1: USB disconnect, device number 41
[ 1321.955863][  T688] yurex 7-1:0.0: yurex_write - failed to send bulk msg, error -19
[ 1321.968570][T24660] yurex 7-1:0.0: USB YUREX #0 now disconnected
[ 1322.864710][  T722] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5089'.
[ 1324.058753][  T736] pimreg: entered allmulticast mode
[ 1324.076278][  T737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5091'.
[ 1324.177124][  T740] pimreg: left allmulticast mode
[ 1325.325869][ T5849] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1325.477089][ T5849] usb 6-1: Using ep0 maxpacket: 8
[ 1325.484970][ T5849] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1325.495478][ T5849] usb 6-1: config 0 has an invalid interface number: 88 but max is 0
[ 1325.505440][ T5849] usb 6-1: config 0 has no interface number 0
[ 1325.515174][ T5849] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1325.606203][ T5849] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1325.667620][ T5849] usb 6-1: config 0 interface 88 has no altsetting 0
[ 1325.791514][ T5849] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[ 1325.818723][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[ 1325.881804][ T5849] usb 6-1: Manufacturer: ဉ
[ 1325.933766][ T5849] usb 6-1: config 0 descriptor??
[ 1325.939399][ T5849] usb 6-1: can't set config #0, error -71
[ 1325.964736][ T5849] usb 6-1: USB disconnect, device number 50
[ 1326.221218][  T757] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5098'.
[ 1326.672399][  T766] vivid-003: disconnect
[ 1326.696871][  T766] vivid-003: reconnect
[ 1327.299925][  T785] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5106'.
[ 1327.364184][  T789] batadv_slave_0: entered promiscuous mode
[ 1327.415974][  T789] batadv_slave_0: left promiscuous mode
[ 1327.881733][  T772] bridge3: entered promiscuous mode
[ 1328.161865][T27317] Bluetooth: hci3: command 0x0406 tx timeout
[ 1329.017604][ T5849] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1329.086901][T24660] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 1329.187521][ T5849] usb 6-1: Using ep0 maxpacket: 32
[ 1329.209571][ T5849] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 1329.228059][ T5849] usb 6-1: config 0 has no interface number 0
[ 1329.266776][T24660] usb 3-1: Using ep0 maxpacket: 16
[ 1329.272477][ T5849] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1329.288980][T24660] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1329.298354][T24660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1329.310173][ T5849] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1329.322372][T24660] usb 3-1: Product: syz
[ 1329.328013][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1329.328016][T24660] usb 3-1: Manufacturer: syz
[ 1329.328040][ T5849] usb 6-1: Product: syz
[ 1329.356572][T24660] usb 3-1: SerialNumber: syz
[ 1329.370905][ T5849] usb 6-1: Manufacturer: syz
[ 1329.384697][ T5849] usb 6-1: SerialNumber: syz
[ 1329.409244][ T5849] usb 6-1: config 0 descriptor??
[ 1329.425092][ T5849] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 1329.442444][T24660] usb 3-1: config 0 descriptor??
[ 1329.449503][ T5849] em28xx 6-1:0.132: Video interface 132 found:
[ 1329.467623][T24660] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1329.841073][ T5849] em28xx 6-1:0.132: chip ID is em2710/2820
[ 1329.894891][  T796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1329.919551][  T796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1329.950808][T24660] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71
[ 1329.969838][T24660] usb 3-1: USB disconnect, device number 115
[ 1330.123376][  T806] veth0_to_bridge: left allmulticast mode
[ 1330.296506][  T806] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[ 1330.456901][T24660] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 1330.670861][T24660] usb 3-1: Using ep0 maxpacket: 16
[ 1330.697229][T24660] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1330.726888][T24660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1330.755993][T24660] usb 3-1: Product: syz
[ 1330.762177][T24660] usb 3-1: Manufacturer: syz
[ 1330.822173][T24660] usb 3-1: SerialNumber: syz
[ 1330.847727][T24660] usb 3-1: config 0 descriptor??
[ 1330.874197][T24660] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1330.990744][ T5849] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 1331.000164][ T5849] em28xx 6-1:0.132: board has no eeprom
[ 1331.066906][ T5849] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 1331.078373][ T5849] em28xx 6-1:0.132: analog set to bulk mode.
[ 1331.079573][T24660] ssu100 3-1:0.0: probe with driver ssu100 failed with error -32
[ 1331.091389][ T1209] em28xx 6-1:0.132: Registering V4L2 extension
[ 1331.208443][ T1209] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[ 1331.231011][ T1209] em28xx 6-1:0.132: failed to trigger read from i2c address 0x48 (error=-5)
[ 1331.240785][ T1209] em28xx 6-1:0.132: failed to trigger read from i2c address 0x42 (error=-5)
[ 1331.251534][ T1209] em28xx 6-1:0.132: failed to trigger read from i2c address 0x40 (error=-5)
[ 1331.289859][ T1209] em28xx 6-1:0.132: failed to trigger read from i2c address 0x84 (error=-5)
[ 1331.299751][ T1209] em28xx 6-1:0.132: failed to trigger read from i2c address 0x86 (error=-5)
[ 1331.346464][ T1209] em28xx 6-1:0.132: failed to trigger read from i2c address 0x94 (error=-5)
[ 1331.358113][ T1209] em28xx 6-1:0.132: failed to trigger read from i2c address 0x96 (error=-5)
[ 1331.454545][   T30] audit: type=1326 audit(1759643587.314:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=808 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1331.514575][   T30] audit: type=1326 audit(1759643587.314:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=808 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1331.537435][ T1209] em28xx 6-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5)
[ 1331.551344][ T1209] em28xx 6-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5)
[ 1331.569792][ T1209] em28xx 6-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5)
[ 1331.581697][   T30] audit: type=1326 audit(1759643587.314:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=808 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1331.619999][ T1209] em28xx 6-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5)
[ 1331.643996][ T1209] em28xx 6-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5)
[ 1331.663407][   T30] audit: type=1326 audit(1759643587.314:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=808 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1331.698425][ T1209] em28xx 6-1:0.132: Config register raw data: 0xfffffffb
[ 1331.750158][ T1209] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[ 1331.792169][T24301] usb 6-1: USB disconnect, device number 51
[ 1331.799751][T24301] em28xx 6-1:0.132: Disconnecting em28xx
[ 1331.840861][ T1209] em28xx 6-1:0.132: No AC97 audio processor
[ 1331.871178][   T30] audit: type=1326 audit(1759643587.314:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=808 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1331.908963][ T1209] usb 6-1: Decoder not found
[ 1331.949813][ T1209] em28xx 6-1:0.132: failed to create media graph
[ 1332.036347][ T1209] em28xx 6-1:0.132: V4L2 device video103 deregistered
[ 1332.097869][   T30] audit: type=1326 audit(1759643587.324:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=808 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1332.131696][ T1209] em28xx 6-1:0.132: Remote control support is not available for this card.
[ 1332.133637][  T827] ==================================================================
[ 1332.148379][  T827] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[ 1332.155756][  T827] Read of size 8 at addr ffff88806b528740 by task v4l_id/827
[ 1332.163104][  T827] 
[ 1332.165410][  T827] CPU: 0 UID: 0 PID: 827 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[ 1332.165424][  T827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1332.165433][  T827] Call Trace:
[ 1332.165439][  T827]  <TASK>
[ 1332.165445][  T827]  dump_stack_lvl+0x189/0x250
[ 1332.165461][  T827]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1332.165477][  T827]  ? rcu_is_watching+0x15/0xb0
[ 1332.165490][  T827]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1332.165502][  T827]  ? rcu_is_watching+0x15/0xb0
[ 1332.165513][  T827]  ? lock_release+0x4b/0x3e0
[ 1332.165529][  T827]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 1332.165544][  T827]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1332.165559][  T827]  ? __virt_addr_valid+0x4a5/0x5c0
[ 1332.165573][  T827]  print_report+0xca/0x240
[ 1332.165584][  T827]  ? v4l2_fh_open+0xac/0x420
[ 1332.165596][  T827]  kasan_report+0x118/0x150
[ 1332.165614][  T827]  ? v4l2_fh_open+0xac/0x420
[ 1332.165627][  T827]  v4l2_fh_open+0xac/0x420
[ 1332.165639][  T827]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1332.165657][  T827]  em28xx_v4l2_open+0x157/0x9a0
[ 1332.165671][  T827]  v4l2_open+0x1bf/0x3a0
[ 1332.165685][  T827]  chrdev_open+0x4c9/0x5e0
[ 1332.165702][  T827]  ? __pfx_chrdev_open+0x10/0x10
[ 1332.165717][  T827]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 1332.165736][  T827]  ? __pfx_chrdev_open+0x10/0x10
[ 1332.165750][  T827]  do_dentry_open+0x950/0x13f0
[ 1332.165764][  T827]  vfs_open+0x3b/0x340
[ 1332.165774][  T827]  ? path_openat+0x2ecd/0x3830
[ 1332.165794][  T827]  path_openat+0x2ee5/0x3830
[ 1332.165813][  T827]  ? __pfx_path_openat+0x10/0x10
[ 1332.165830][  T827]  do_filp_open+0x1fa/0x410
[ 1332.165842][  T827]  ? __lock_acquire+0xab9/0xd20
[ 1332.165852][  T827]  ? __pfx_do_filp_open+0x10/0x10
[ 1332.165872][  T827]  ? _raw_spin_unlock+0x28/0x50
[ 1332.165885][  T827]  ? alloc_fd+0x64c/0x6c0
[ 1332.165902][  T827]  do_sys_openat2+0x121/0x1c0
[ 1332.165914][  T827]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1332.165925][  T827]  ? exc_page_fault+0x76/0xf0
[ 1332.165941][  T827]  ? do_user_addr_fault+0xc85/0x1380
[ 1332.165952][  T827]  __x64_sys_openat+0x138/0x170
[ 1332.165964][  T827]  do_syscall_64+0xfa/0x3b0
[ 1332.165974][  T827]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1332.165988][  T827]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1332.165999][  T827]  ? clear_bhb_loop+0x60/0xb0
[ 1332.166011][  T827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1332.166022][  T827] RIP: 0033:0x7eff597d0407
[ 1332.166033][  T827] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1332.166043][  T827] RSP: 002b:00007ffc35c5d460 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1332.166056][  T827] RAX: ffffffffffffffda RBX: 00007eff59744880 RCX: 00007eff597d0407
[ 1332.166065][  T827] RDX: 0000000000000000 RSI: 00007ffc35c5df1a RDI: ffffffffffffff9c
[ 1332.166073][  T827] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 1332.166080][  T827] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1332.166087][  T827] R13: 00007ffc35c5d6b0 R14: 00007eff59a29000 R15: 000055784980f4d8
[ 1332.166099][  T827]  </TASK>
[ 1332.166103][  T827] 
[ 1332.197389][   T30] audit: type=1326 audit(1759643587.324:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=808 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1332.201391][  T827] Allocated by task 1209:
[ 1332.201403][  T827]  kasan_save_track+0x3e/0x80
[ 1332.201429][  T827]  __kasan_kmalloc+0x93/0xb0
[ 1332.201453][  T827]  __kmalloc_cache_noprof+0x3d5/0x6f0
[ 1332.201474][  T827]  em28xx_v4l2_init+0x10b/0x2e70
[ 1332.201499][  T827]  em28xx_init_extension+0x11d/0x1c0
[ 1332.201525][  T827]  process_scheduled_works+0xade/0x17b0
[ 1332.201542][  T827]  worker_thread+0x8a0/0xda0
[ 1332.201560][  T827]  kthread+0x70e/0x8a0
[ 1332.206507][   T30] audit: type=1326 audit(1759643587.324:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=808 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1332.211470][  T827]  ret_from_fork+0x436/0x7d0
[ 1332.211491][  T827]  ret_from_fork_asm+0x1a/0x30
[ 1332.211519][  T827] 
[ 1332.211525][  T827] Freed by task 1209:
[ 1332.216344][   T30] audit: type=1326 audit(1759643587.324:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=808 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1332.220816][  T827]  kasan_save_track+0x3e/0x80
[ 1332.220842][  T827]  __kasan_save_free_info+0x46/0x50
[ 1332.227252][   T30] audit: type=1326 audit(1759643587.324:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=808 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd858d8eec9 code=0x7ffc0000
[ 1332.231283][  T827]  __kasan_slab_free+0x5c/0x80
[ 1332.631456][  T827]  kfree+0x19a/0x6d0
[ 1332.635379][  T827]  em28xx_v4l2_init+0x1683/0x2e70
[ 1332.640420][  T827]  em28xx_init_extension+0x11d/0x1c0
[ 1332.645721][  T827]  process_scheduled_works+0xade/0x17b0
[ 1332.651275][  T827]  worker_thread+0x8a0/0xda0
[ 1332.655873][  T827]  kthread+0x70e/0x8a0
[ 1332.659959][  T827]  ret_from_fork+0x436/0x7d0
[ 1332.664553][  T827]  ret_from_fork_asm+0x1a/0x30
[ 1332.669327][  T827] 
[ 1332.671651][  T827] The buggy address belongs to the object at ffff88806b528000
[ 1332.671651][  T827]  which belongs to the cache kmalloc-8k of size 8192
[ 1332.685843][  T827] The buggy address is located 1856 bytes inside of
[ 1332.685843][  T827]  freed 8192-byte region [ffff88806b528000, ffff88806b52a000)
[ 1332.700258][  T827] 
[ 1332.702588][  T827] The buggy address belongs to the physical page:
[ 1332.709016][  T827] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6b528
[ 1332.717822][  T827] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1332.726323][  T827] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1332.734309][  T827] page_type: f5(slab)
[ 1332.738306][  T827] raw: 00fff00000000040 ffff88813fe27280 0000000000000000 dead000000000001
[ 1332.746896][  T827] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 1332.755503][  T827] head: 00fff00000000040 ffff88813fe27280 0000000000000000 dead000000000001
[ 1332.764178][  T827] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 1332.772850][  T827] head: 00fff00000000003 ffffea0001ad4a01 00000000ffffffff 00000000ffffffff
[ 1332.781514][  T827] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1332.790172][  T827] page dumped because: kasan: bad access detected
[ 1332.796574][  T827] page_owner tracks the page as allocated
[ 1332.802277][  T827] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 22324, tgid 22324 (kworker/u8:6), ts 993622074373, free_ts 992103077762
[ 1332.823987][  T827]  post_alloc_hook+0x240/0x2a0
[ 1332.828757][  T827]  get_page_from_freelist+0x2365/0x2440
[ 1332.834301][  T827]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1332.840101][  T827]  alloc_pages_mpol+0x232/0x4a0
[ 1332.844948][  T827]  allocate_slab+0x96/0x3a0
[ 1332.849497][  T827]  ___slab_alloc+0xe94/0x1920
[ 1332.854162][  T827]  __slab_alloc+0x65/0x100
[ 1332.858563][  T827]  __kmalloc_noprof+0x471/0x7f0
[ 1332.863408][  T827]  __sta_info_alloc+0xce6/0x2640
[ 1332.868334][  T827]  ieee80211_ibss_add_sta+0x5b7/0x870
[ 1332.873703][  T827]  ieee80211_ibss_rx_queued_mgmt+0x179b/0x2af0
[ 1332.879852][  T827]  ieee80211_iface_work+0x85f/0x12d0
[ 1332.885128][  T827]  cfg80211_wiphy_work+0x2b8/0x470
[ 1332.890228][  T827]  process_scheduled_works+0xade/0x17b0
[ 1332.895762][  T827]  worker_thread+0x8a0/0xda0
[ 1332.900348][  T827]  kthread+0x70e/0x8a0
[ 1332.904408][  T827] page last free pid 25441 tgid 25441 stack trace:
[ 1332.910931][  T827]  __free_frozen_pages+0xbc4/0xd30
[ 1332.916038][  T827]  __put_partials+0x146/0x170
[ 1332.920701][  T827]  put_cpu_partial+0x1f2/0x2e0
[ 1332.925450][  T827]  __slab_free+0x2b9/0x390
[ 1332.929862][  T827]  qlist_free_all+0x97/0x140
[ 1332.934443][  T827]  kasan_quarantine_reduce+0x148/0x160
[ 1332.939897][  T827]  __kasan_slab_alloc+0x22/0x80
[ 1332.944743][  T827]  __kmalloc_cache_noprof+0x36f/0x6f0
[ 1332.950125][  T827]  ____ip_mc_inc_group+0x528/0xde0
[ 1332.955227][  T827]  ip_mc_up+0x125/0x300
[ 1332.959382][  T827]  inetdev_event+0xfb3/0x15b0
[ 1332.964047][  T827]  notifier_call_chain+0x1b6/0x3e0
[ 1332.969173][  T827]  __dev_notify_flags+0x18d/0x2e0
[ 1332.974269][  T827]  netif_change_flags+0xe8/0x1a0
[ 1332.979194][  T827]  do_setlink+0xc55/0x41c0
[ 1332.983601][  T827]  rtnl_newlink+0x1619/0x1c80
[ 1332.988284][  T827] 
[ 1332.990595][  T827] Memory state around the buggy address:
[ 1332.996211][  T827]  ffff88806b528600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1333.004357][  T827]  ffff88806b528680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1333.012407][  T827] >ffff88806b528700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1333.020454][  T827]                                            ^
[ 1333.026593][  T827]  ffff88806b528780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1333.034647][  T827]  ffff88806b528800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1333.042692][  T827] ==================================================================
[ 1333.056783][T24301] em28xx 6-1:0.132: Closing input extension
[ 1333.107062][  T827] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1333.114287][  T827] CPU: 0 UID: 0 PID: 827 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[ 1333.123141][  T827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1333.133184][  T827] Call Trace:
[ 1333.136456][  T827]  <TASK>
[ 1333.139379][  T827]  dump_stack_lvl+0x99/0x250
[ 1333.143954][  T827]  ? __asan_memcpy+0x40/0x70
[ 1333.148528][  T827]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1333.153706][  T827]  ? __pfx__printk+0x10/0x10
[ 1333.158280][  T827]  vpanic+0x237/0x6d0
[ 1333.162252][  T827]  ? __pfx_vpanic+0x10/0x10
[ 1333.166739][  T827]  ? preempt_schedule+0xae/0xc0
[ 1333.171604][  T827]  ? __pfx_preempt_schedule+0x10/0x10
[ 1333.177006][  T827]  panic+0xb9/0xc0
[ 1333.180750][  T827]  ? __pfx_panic+0x10/0x10
[ 1333.185184][  T827]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 1333.191091][  T827]  ? is_module_address+0x17/0xf0
[ 1333.196026][  T827]  ? v4l2_fh_open+0xac/0x420
[ 1333.200607][  T827]  check_panic_on_warn+0x89/0xb0
[ 1333.205530][  T827]  ? v4l2_fh_open+0xac/0x420
[ 1333.210118][  T827]  end_report+0x78/0x160
[ 1333.214354][  T827]  kasan_report+0x129/0x150
[ 1333.218847][  T827]  ? v4l2_fh_open+0xac/0x420
[ 1333.223426][  T827]  v4l2_fh_open+0xac/0x420
[ 1333.227829][  T827]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1333.233798][  T827]  em28xx_v4l2_open+0x157/0x9a0
[ 1333.238634][  T827]  v4l2_open+0x1bf/0x3a0
[ 1333.242859][  T827]  chrdev_open+0x4c9/0x5e0
[ 1333.247259][  T827]  ? __pfx_chrdev_open+0x10/0x10
[ 1333.252179][  T827]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 1333.258493][  T827]  ? __pfx_chrdev_open+0x10/0x10
[ 1333.263535][  T827]  do_dentry_open+0x950/0x13f0
[ 1333.268316][  T827]  vfs_open+0x3b/0x340
[ 1333.272373][  T827]  ? path_openat+0x2ecd/0x3830
[ 1333.277124][  T827]  path_openat+0x2ee5/0x3830
[ 1333.281704][  T827]  ? __pfx_path_openat+0x10/0x10
[ 1333.286627][  T827]  do_filp_open+0x1fa/0x410
[ 1333.291125][  T827]  ? __lock_acquire+0xab9/0xd20
[ 1333.295959][  T827]  ? __pfx_do_filp_open+0x10/0x10
[ 1333.300965][  T827]  ? _raw_spin_unlock+0x28/0x50
[ 1333.305810][  T827]  ? alloc_fd+0x64c/0x6c0
[ 1333.310124][  T827]  do_sys_openat2+0x121/0x1c0
[ 1333.314781][  T827]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1333.319956][  T827]  ? exc_page_fault+0x76/0xf0
[ 1333.324618][  T827]  ? do_user_addr_fault+0xc85/0x1380
[ 1333.329881][  T827]  __x64_sys_openat+0x138/0x170
[ 1333.334710][  T827]  do_syscall_64+0xfa/0x3b0
[ 1333.339191][  T827]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1333.344369][  T827]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1333.350411][  T827]  ? clear_bhb_loop+0x60/0xb0
[ 1333.355070][  T827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1333.361023][  T827] RIP: 0033:0x7eff597d0407
[ 1333.365440][  T827] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1333.385039][  T827] RSP: 002b:00007ffc35c5d460 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1333.393448][  T827] RAX: ffffffffffffffda RBX: 00007eff59744880 RCX: 00007eff597d0407
[ 1333.401514][  T827] RDX: 0000000000000000 RSI: 00007ffc35c5df1a RDI: ffffffffffffff9c
[ 1333.409627][  T827] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 1333.417595][  T827] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1333.425549][  T827] R13: 00007ffc35c5d6b0 R14: 00007eff59a29000 R15: 000055784980f4d8
[ 1333.433511][  T827]  </TASK>
[ 1333.436835][  T827] Kernel Offset: disabled
[ 1333.441149][  T827] Rebooting in 86400 seconds..