last executing test programs:

8m28.04471715s ago: executing program 0 (id=194):
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041dc3208572026e1f8140b8d2a7433010207000d000000000000000009046003020301d800092064ca880eab8a03433a8afb4cb0c9e576aa9a3aa2fa1f312f23b2d3d4"], 0x0)
socket(0x2b, 0x1, 0xe)

8m24.894420328s ago: executing program 0 (id=207):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e00010027bd7000fcdbdf250a000000", @ANYRESOCT=r0, @ANYBLOB="0000089a140001e9b3f71f99d994da45a1fbed408f5f586ffbf6ed858e891bf67c451c068a2b6f78"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20008000)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x20c})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001180)={'ipvlan0\x00', &(0x7f0000001080)=@ethtool_drvinfo={0x3, "1e2411fc3b78cf607748989841ea060cf1d1480de4c044bda25ba3d097c6077f", "25cd2e3f3effb8f35bd214cdbcc6db8a1646e7d3966666ae177c0fa8d476b4df", "021e87142042d3b2a66a65c243ed93889addabc5546b72c9e2364ebeb2eb3112", "39a54b8fbb00740522da22a05251ecc93700", "7b4fa5b95035f110f9b53bbf1cfa59fd46c822861e35ef54fe3cf09162fb32fa", "621b3f30113a54dbab7a3caa", 0x1ff, 0x6, 0x5, 0x8, 0x4c}})
r3 = socket(0x345c4575dac4b244, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x6)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000017c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newtfilter={0x64, 0x28, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x5}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x64}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000004c0)="ada34cd1476dab6dd8ea27740f0dc3b0a17ec67cba6c2bdbe9a48f719f6cda83595eb3b170a32fef2666568ea186d80fc273b19b63b21a3340259798485b8789fd9bf3a2d9d5a4b304b6a9486c50c02512d60f5660889203508055f97de78668c378fce5f10e142d2d36", 0x6a}], 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
r8 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r8)
ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]})
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000140))
r10 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r9}, './file0\x00'})
ioctl$VIDIOC_G_JPEGCOMP(r10, 0x808c563d, &(0x7f0000000400))

8m24.625833586s ago: executing program 0 (id=209):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x40, r3, 0x1, 0x200, 0x25dfdc01, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008010}, 0x40080)

8m24.543310808s ago: executing program 0 (id=210):
mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x9316e6fb81c276de, 0xf4, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="05000000e9ff1801fdfffdff00840000010684638ac82da323c5b00771b7cd7e1fbea0a58a37c68685"], 0x14}}, 0x20000000)
openat$kvm(0xffffff9c, &(0x7f0000000080), 0x400000, 0x0)

8m24.502934423s ago: executing program 0 (id=212):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @mcast2={0xff, 0x5}, 0x6}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011906a5a318"], 0xdd12}, {&(0x7f00000000c0)={0x84, 0x2d, 0x400, 0x70bd29, 0x25dfdbfc, "", [@nested={0x74, 0x44, 0x0, 0x1, [@nested={0xc, 0xf2, 0x0, 0x1, [@typed={0x8, 0x9b, 0x0, 0x0, @uid}]}, @generic="88c007d0b474e22112652a164584a108386b1fe46ccbace1f29da320b0547ee8257542d5ee9df46ed610d252305837368d3d26f310b28d9a2b004abd53ebe3f12bf0d648a60786dd10aad1507327717bcd63", @nested={0x4, 0x15}, @nested={0x4, 0x10d}, @generic="1bfec6ca986ae0963f04"]}]}, 0x84}], 0x2}, 0x20040051)

8m24.237724898s ago: executing program 0 (id=215):
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x107, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x10, 0x803, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000240)={0x101, <r7=>0x0, 0x10000})
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40086439, &(0x7f0000000300)={0x5, r7})
sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@newtclass={0x24, 0x28, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xf, 0x4}, {0x2, 0x7}}}, 0x24}}, 0x400c0)
getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000020000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012800b000100697036746e6c0000180002801400"], 0x48}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x2500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0xfffffffb}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x20004090)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

8m23.692328917s ago: executing program 32 (id=215):
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x107, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x10, 0x803, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000240)={0x101, <r7=>0x0, 0x10000})
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40086439, &(0x7f0000000300)={0x5, r7})
sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@newtclass={0x24, 0x28, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xf, 0x4}, {0x2, 0x7}}}, 0x24}}, 0x400c0)
getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000020000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012800b000100697036746e6c0000180002801400"], 0x48}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x2500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0xfffffffb}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x20004090)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

13.824832734s ago: executing program 4 (id=1994):
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})
pread64(r1, &(0x7f00000002c0)=""/190, 0xbe, 0x200)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x0, 0xb, 0x1)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000300)={0x3, @output={0x0, 0x1, {0x1, 0x2}, 0x4, 0x7}})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0)
ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000040))
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, &(0x7f00000001c0)={0x4, 0x2, 0x2, 0x6, 0x0, [0xfea6, 0x9, 0x0, 0x10001]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002840)=@newchain={0x1a4c, 0x64, 0x400, 0x70bd2c, 0x8, {0x0, 0x0, 0x0, r6, {0xfff3, 0xb}, {0xf, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_flow={{0x9}, {0x2a8, 0x2, [@TCA_FLOW_MASK={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x2}, @TCA_FLOW_EMATCHES={0x284, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x22c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x7f, 0x2, 0xdb}, {0x2, 0x9, 0x1, "f701017e611e0f6146"}}}, @TCF_EM_META={0xf8, 0x3, 0x0, 0x0, {{0xb, 0x4, 0x80}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x1, 0x2}, {0x8, 0xfb, 0x1}}}, @TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="ee7f40176b", @TCF_META_TYPE_VAR="f2a991997230", @TCF_META_TYPE_VAR="617fcaab2c55f449086f", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="b0a8ba13e280"]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="aed7d3dd1adc69638340", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="3008b61cc23fb5e751a2"]}, @TCA_EM_META_RVALUE={0x37, 0x3, [@TCF_META_TYPE_VAR="50f6a3c65b", @TCF_META_TYPE_VAR="57ecef841f9c2faa7a4f", @TCF_META_TYPE_VAR="bfd5cf49657b85", @TCF_META_TYPE_VAR="6f824026fe07", @TCF_META_TYPE_VAR="a6c86f41e9458de188c6", @TCF_META_TYPE_VAR="019461fc09428cb97d", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="d6f4c8", @TCF_META_TYPE_VAR="0836a2d92d82894dc2"]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="59645b484ac4", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="76b3", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="ca91fb3982dc", @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_META={0x6c, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xd}, {0x80, 0x40, 0x1}}}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="6c8726cd", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="d30179", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x32, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="ced3ea4e2b7cf17cdd", @TCF_META_TYPE_VAR="ceaf54a9633151c7c1", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="0eb4f2ed4011bc", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="114cfc8775fc39007d"]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xd, 0x1, 0x2}, {0x0, 0x5d39, 0x40, 0x6, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0xff, 0x2, 0x3}, {0xc0a6, 0x0, 0x1}}}, @TCF_EM_IPT={0x64, 0x3, 0x0, 0x0, {{0xff, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0xa}, {0xd, 0x9, 0x7, 0x237}}}]}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xe, 0x8, 0x9e33}, {0x3, 0x2, 0x2}}}, @TCF_EM_IPT={0x40, 0x2, 0x0, 0x0, {{0x33, 0x9, 0x8d9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x14, 0x5, "1dbd746016af59d328472fb1a6bb56f8"}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x4, 0x5}}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x1758, 0x2, [@TCA_FLOW_ACT={0x1734, 0x9, 0x0, 0x1, [@m_sample={0x60, 0x1b, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x80000001}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x3aa6, 0x3, 0xa, 0x63d5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x452}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_police={0x1594, 0x5, 0x0, 0x0, {{0xb}, {0x14ac, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x20000000, 0x2, 0x1f37, 0x9, {0x7, 0x1}, {0xff, 0x2, 0x3, 0x3, 0x4, 0x7f}, 0x80000001, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x200, 0x1ea5, 0x5, 0xf8, 0x3cc4, 0x9, 0xa, 0x5, 0x2, 0x518, 0x3ff, 0x3, 0x0, 0x6, 0x8, 0xfff, 0x0, 0x2, 0x20000000, 0x9, 0x4a6acb5a, 0x296b, 0x9, 0xfffffd62, 0xcb, 0x6, 0x1, 0x0, 0x9, 0x6, 0xffffffff, 0x9, 0x0, 0xfffffffc, 0x8, 0x9, 0xfc, 0xbf0, 0x0, 0x7f, 0xc, 0x2c0306ff, 0x7, 0x2, 0x4a, 0x80, 0xa, 0xfffffffe, 0xfff, 0x7, 0x7, 0x5, 0xf102, 0xffffff01, 0xe, 0x12d4, 0x9, 0x7ab, 0x0, 0x7, 0x4, 0xd2, 0x8, 0x6, 0x80000001, 0xfffff3c5, 0x4, 0x9, 0x3f2, 0x5cdf, 0x6, 0xfffffff8, 0xfff, 0x10001, 0x7, 0x9, 0x400, 0x8, 0x5, 0x1, 0x0, 0x80000001, 0x6, 0x7fff, 0x9, 0x8, 0x8, 0x9, 0x3, 0x200, 0xcfb, 0x3, 0x4, 0x7, 0x2dca, 0xfffffffd, 0x2, 0x40, 0x7fff, 0x200, 0x3c, 0xe, 0x1, 0x10000, 0xecf, 0x3, 0x7, 0x6, 0x40, 0x3, 0x1, 0x5, 0xe, 0x4, 0xedd6, 0x7, 0x40, 0x8, 0x1ce6, 0x3, 0x2800, 0x6, 0x5, 0x8, 0xfffffeff, 0x5, 0xafbf, 0x1, 0x188e8563, 0x8000, 0xc2b1, 0x3, 0x40, 0x8, 0x4a3, 0xffff, 0x2, 0x1, 0x2, 0x91c3, 0xfa2, 0x1, 0xc, 0x5, 0x1000, 0x3, 0xfffffffc, 0x3, 0x0, 0x4, 0x7, 0x2, 0xffff0, 0x4, 0xffffffff, 0x6, 0x8, 0xe, 0xffffffff, 0x0, 0x4, 0x9, 0x1ff, 0x4, 0x7f, 0xa, 0xae5, 0x8, 0x7, 0x8, 0x6, 0x80000000, 0x9, 0xfffffffd, 0x8001, 0x7, 0x8, 0x3, 0x5, 0x10, 0xd, 0x1, 0x2, 0xff, 0x3, 0x0, 0x80, 0xfffffff8, 0x6, 0x0, 0x32, 0x2, 0x6, 0x3, 0x9, 0x6, 0xe00, 0x7ff, 0x7ff, 0x6, 0xff, 0x411350d0, 0x7, 0x1, 0x80000001, 0x2, 0x4, 0x6, 0x1, 0xfff, 0x50000, 0x81, 0xfffffffe, 0x347, 0x7, 0x180, 0x4, 0x0, 0x2, 0x8b7, 0x23, 0x8, 0xffffffff, 0x5, 0x1, 0x2, 0x101, 0x800, 0x4, 0x9, 0x401, 0x8, 0x8, 0x0, 0x8af, 0xf8000000, 0x1a, 0x9, 0x7, 0x3, 0xffffffff, 0x0, 0x9, 0x8, 0x3, 0x6, 0x9b2, 0x0, 0x3, 0x0, 0x7, 0x0, 0xe04a, 0x7, 0x2]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffa}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x547}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9e}, @TCA_POLICE_RATE={0x404, 0x2, [0x400000, 0x7f, 0x200, 0x10001, 0x5, 0x80, 0x1, 0x5000, 0x1, 0x2, 0x4, 0x8, 0xa5, 0x0, 0x4, 0x80000001, 0x4787, 0x8, 0x8, 0x8, 0x3, 0xb, 0x9, 0xc0000000, 0x3, 0xeb6, 0xf4, 0x4, 0x1, 0x0, 0x7, 0x1, 0x3, 0x1c, 0x0, 0xe, 0x8, 0x7fffffff, 0xffff, 0x8001, 0xfffffffe, 0x7e, 0x10000, 0x800, 0xfffffff8, 0xfffffffa, 0x5, 0x3, 0xa5, 0x3, 0x9, 0xdae7, 0x2, 0x3, 0x2, 0x3, 0x2, 0x6, 0x10000, 0x100, 0x1, 0x400, 0x101, 0xb, 0x800, 0x3f, 0x7, 0xbd, 0x0, 0x3343, 0x7, 0x7, 0x3, 0x4, 0x3, 0x3e, 0x8001, 0x5, 0x2, 0x1, 0x80000000, 0x7c54, 0x10000, 0xfffffffb, 0xffffffff, 0x4, 0x9, 0x1, 0x2, 0x9, 0xff, 0x7, 0xac, 0x8d, 0x216, 0x8, 0x78, 0x4, 0xfffff000, 0x1ff, 0x8, 0xfffffffa, 0x1, 0x2, 0x3, 0xd9, 0x800, 0x400, 0x3, 0x1, 0xc, 0x3, 0x2, 0x8, 0x5, 0x88f, 0x32, 0x3, 0x0, 0x5, 0x9, 0x2, 0x1400, 0x9, 0x8, 0x9, 0x1, 0x1, 0x4, 0x0, 0x8001, 0x1d2, 0x7, 0x4, 0x3, 0x7fff, 0x8, 0x24, 0x3, 0x3ff, 0x100, 0x8000, 0x0, 0x4, 0x8e99, 0x6, 0x1, 0x9, 0x6, 0x4, 0x5b, 0x3, 0x8, 0x5, 0x6, 0x4, 0x1, 0x4, 0x0, 0x4, 0x80000000, 0x2, 0x2, 0x2, 0x1, 0x81, 0x5, 0x7ff, 0x922, 0x7, 0x753, 0x3, 0x8, 0x9, 0x200, 0x5, 0x6, 0x8000, 0x52a70cad, 0x9, 0x9, 0x1000, 0x7, 0xe, 0x7, 0x0, 0x1eac, 0x1, 0x8, 0x5, 0x3ff, 0xfff, 0xe97, 0x4b4, 0x1, 0x9, 0x800, 0x9, 0x8, 0x100, 0x2, 0xf1, 0x80000000, 0x6ddbc3f3, 0x2, 0x1000, 0x8, 0xe, 0x5, 0x34d, 0x1, 0xfff, 0xe, 0x2, 0x1, 0x4, 0x10001, 0x3, 0xa6, 0xfffe000, 0x3, 0x7, 0x1e, 0x6, 0x714f, 0x0, 0x1, 0x8, 0x400, 0x7fff, 0x7ff, 0x7ff, 0x9b, 0x6, 0x9, 0x1, 0x1000, 0x12, 0x2, 0x2, 0x7, 0x40, 0xfffffffd, 0x8000, 0xaf, 0x7a6b, 0x1, 0x4, 0x4, 0x0, 0x8, 0x7, 0x6, 0x85fb, 0x8001, 0xc]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x5, 0x9, 0x33b1, 0x7, 0x1, 0x8, 0x4800000, 0x0, 0x1, 0x7fff, 0xfffffff3, 0x7fffffff, 0x10, 0x40, 0xfffffff9, 0xff, 0x8, 0x6, 0x7, 0x1, 0x40, 0x800, 0x2, 0x6, 0x2, 0x1, 0x7, 0x7f, 0x101, 0x9, 0x2, 0x200, 0xa0a3, 0x77, 0xfffffe00, 0x9c2, 0x8, 0x79e, 0x7, 0x0, 0xa, 0x4, 0x8, 0x81, 0x4, 0xfffff304, 0x1, 0x4c3, 0x9f0500b6, 0x7c, 0x6, 0x3, 0x9, 0x6, 0xffffffff, 0x200, 0x4, 0x9, 0x4, 0x80000000, 0x1000, 0x6, 0x2, 0x8000, 0x8, 0x7f, 0x1000, 0xf23, 0x40, 0x8, 0x5, 0x7, 0x0, 0x6, 0x80000001, 0x4, 0x100, 0x59, 0x485, 0x6000000, 0x5, 0x9, 0xffffffff, 0x2, 0xffffff2e, 0x6, 0x2, 0x5b7, 0x2, 0x7, 0x5, 0x7, 0x4, 0x200, 0x0, 0x1, 0x5, 0x4, 0x3, 0x4, 0x2, 0x5, 0xfff, 0x1000, 0x1, 0x1, 0xe, 0x0, 0xb5, 0x5, 0xfffffff3, 0x4dc, 0x4, 0x1, 0x8, 0x3, 0x4, 0x587c, 0x9, 0x8, 0x40, 0x9, 0x7, 0x7, 0x80000000, 0x7fffffff, 0x12c, 0x0, 0x0, 0x10c, 0x2, 0x10000, 0x4, 0x10001, 0x2, 0x1, 0x200, 0x1, 0x6, 0x280000, 0xfffffffa, 0x8, 0x10000, 0xd8f, 0x3, 0xffff0000, 0x8, 0x30, 0x9, 0x3, 0x8, 0x1, 0x8, 0x6, 0xfffffffe, 0x4, 0x0, 0x1, 0x8, 0x6, 0x2466, 0x1, 0x5d, 0x8001, 0x300, 0x3, 0x0, 0xccf9, 0xfffff156, 0x8, 0x3, 0x0, 0xe, 0x8, 0x8, 0x4, 0xc408, 0x8, 0x8, 0x8, 0xad62, 0x0, 0x1ff, 0x9c36000, 0x101, 0xffff, 0x5, 0x5, 0xd, 0x10001, 0x5, 0x85de, 0x0, 0x9, 0x80000000, 0x26, 0x2e, 0x4, 0x6, 0x1, 0x6, 0xffff8000, 0x0, 0xfffffff8, 0x8773, 0x1, 0xb4f, 0x4, 0x5, 0x6, 0xa7, 0xffffff21, 0x40, 0x61ea17d4, 0x5, 0x4, 0x3, 0x9, 0xf, 0x20000000, 0x6000000, 0x1, 0x0, 0x3, 0x8, 0x2, 0x4, 0xfb4, 0x0, 0x5, 0x10, 0xffff, 0x6a4e, 0x6, 0x4, 0x6, 0x2fbb, 0x90, 0x2, 0xe, 0xa0, 0x2, 0xe0, 0x4, 0x9, 0x1, 0x1, 0xffffffff, 0x91d2, 0x1, 0x6, 0x731, 0x7fffffff, 0x0, 0x1000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x7, 0x7, 0x54a91810, 0xe, 0x6, 0x7, 0x5, 0xfffffffd, 0x2, 0x2, 0x7, 0x9, 0x0, 0xf9f, 0x8, 0x2, 0x4, 0x6, 0x2, 0x10000, 0x8, 0x6, 0x9, 0x100, 0x3, 0x80000001, 0x1, 0x100, 0xff, 0x100, 0x1b2, 0x100000, 0x401, 0x4, 0x4, 0x81, 0x5, 0x6, 0x67f, 0xa61, 0x8, 0xffffffff, 0xcc22, 0xfff, 0x4bb8, 0x8, 0xfff, 0x2, 0xc, 0xe, 0x3, 0x4, 0x8, 0xfffffff8, 0x6, 0x800, 0x8, 0x2, 0x8, 0x101, 0x4, 0x8, 0xf1a, 0x8, 0x401, 0x1, 0x7, 0xade, 0x2, 0x5, 0x7fff, 0x7, 0x9, 0x3, 0x6, 0x64e, 0x8, 0x5, 0x5, 0x2000000, 0x7, 0x7, 0x0, 0x0, 0x5254fa97, 0x9, 0x10001, 0x8, 0xfd6e, 0x8, 0xdc8c, 0x200, 0x3, 0xfffffffc, 0xe5, 0x8001, 0x0, 0xfff, 0xec, 0x7, 0x5, 0x1, 0x80, 0x5, 0xc29, 0xd7, 0x815a, 0x3, 0x2, 0x5, 0x2, 0x0, 0x7df, 0x10001, 0xc176, 0x1, 0x3, 0x8, 0x2, 0x3ff, 0x2b5, 0x7, 0x10, 0x2, 0xca6c, 0x9, 0x1ff, 0x9, 0x5f9, 0x3, 0x4, 0x2800, 0x6, 0xff, 0x3, 0xa, 0x9, 0x4, 0x24, 0xffff0001, 0x10, 0x6, 0x3, 0x8, 0x3ff, 0x9, 0x10, 0x399c, 0x81, 0x3a, 0x4, 0x4, 0x0, 0xffffffff, 0xff, 0x5, 0x2, 0x9, 0xfff, 0x8, 0x3, 0x7, 0x56, 0x0, 0x0, 0x1ec, 0x3, 0x55f, 0x7, 0xd, 0x5, 0x3, 0x7, 0x2, 0x6, 0x9, 0x1000, 0x2, 0xf, 0x101, 0x9, 0x6, 0xa81, 0x2, 0x3, 0x6, 0x97, 0xd, 0x8, 0xb4, 0x8, 0xfffffffd, 0x101, 0xfffffff7, 0x7, 0x5, 0x3, 0x7, 0x4, 0x0, 0x2e7, 0x4, 0x2, 0xa, 0x400, 0x80000001, 0x8001, 0x81, 0x764, 0x40, 0x6d, 0x7fffffff, 0x5, 0x4, 0x0, 0x6, 0xdac, 0x3, 0x8, 0x0, 0xd, 0x4, 0x1, 0x4, 0xc, 0x401, 0x0, 0x9, 0xfffeffff, 0x4, 0x23, 0x8, 0x81, 0x7f, 0x80000001, 0xfffffffd, 0x4, 0xb, 0x0, 0x7, 0x1000, 0xffff5865, 0x262, 0x3a, 0x7fffffff, 0x7, 0x5, 0x0, 0x2, 0x7, 0x101, 0x6cd, 0x1, 0x5, 0x446f]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9589}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0x9, 0x5, 0x6, 0x4, 0x5, 0x6, 0x6, 0x80, 0x4, 0xff, 0x759, 0x2, 0x2, 0x80000000, 0x101, 0x6, 0x1ff, 0x1, 0x101, 0x1, 0xa, 0x7, 0xfffffffc, 0x8001, 0x9, 0xc, 0x0, 0xb38, 0x5, 0x76, 0x2c92, 0x3, 0x2, 0xfc1b, 0xffff8001, 0xdc, 0x200, 0xfffffffa, 0x6, 0xc812, 0x8000, 0x1000, 0x5dc, 0x4e8, 0x80000000, 0xac, 0x3f, 0x2b, 0x6, 0x54, 0x401, 0x10001, 0x7f, 0x5, 0x8001, 0x7, 0x6, 0xfffff62d, 0xa7a, 0x2, 0x8, 0x8, 0x40, 0x4, 0x7fffffff, 0xff, 0x7, 0x10000, 0x10001, 0x9, 0x4, 0x6, 0x7, 0x4, 0x46c7, 0x4, 0x0, 0x100, 0x2, 0x401, 0x4, 0x8, 0x6, 0x4, 0x100, 0x7, 0xffd2, 0x0, 0x9, 0x40, 0x5, 0x800, 0x1, 0x8001, 0x2, 0xb6b, 0x5, 0x68, 0x4, 0x8, 0x4, 0x1ec, 0x7, 0x0, 0x7ff, 0x3, 0x800, 0x6, 0x0, 0x5, 0x7fff, 0xb5, 0x4, 0x30e, 0x640e, 0x1, 0x3, 0x1, 0x6840, 0x10000, 0x1, 0xffffddce, 0xc3, 0x9, 0x1, 0x4, 0x3, 0x4, 0x5fc1, 0x0, 0x4, 0x2800000, 0x8, 0x5, 0x3, 0xca, 0x7ff, 0x9, 0xb36, 0x0, 0xb, 0x9, 0xa3, 0x401, 0xfffffffc, 0xffffffff, 0x1, 0x28b0, 0x9b39, 0x8, 0x6, 0xe7, 0xfffffff7, 0x8, 0x6, 0x5, 0xff, 0x2, 0x9, 0x400, 0x10000, 0x0, 0x1, 0x5, 0x7, 0x3, 0x7, 0x9, 0x1, 0x6077, 0x8001, 0xffff, 0x6, 0xffff, 0xfffffffe, 0xd, 0x7, 0x5, 0x81, 0x3, 0x9, 0x0, 0x6, 0x0, 0x1ff, 0x8d, 0x0, 0x10001, 0x3, 0x1, 0x8000, 0xd8, 0xfffffffa, 0xa2c, 0xffff, 0x9, 0x8001, 0x80000000, 0x80, 0x6, 0xc05, 0x4, 0x10000, 0x700, 0x81, 0x0, 0x0, 0x7fff, 0x73, 0xfffffff8, 0x6, 0xffffffff, 0x0, 0x9, 0xc, 0xdc, 0x5, 0x4, 0x1, 0x101, 0x3, 0x5, 0x3, 0x1, 0x9, 0x2, 0x1, 0xffffffff, 0x1, 0x0, 0x9, 0x6, 0x0, 0x31d2, 0x77e, 0x83, 0x5, 0x800, 0x3, 0x5, 0x7, 0x8, 0xffff, 0x7ff, 0x81, 0x2, 0x9, 0xbb8, 0x3, 0x7c0, 0x1, 0x2, 0x3]}]]}, {0xbd, 0x6, "38d650b9a836ef8b79c9dfb030b60fb929f56bf4980a083dccc6cd066b7622ae1ad863c47ea40bb0f530c7ebb16edb12309b3300ad1d021956663a0212338134d8d2379ad610d602d1996283946a642f2c2722b3527faa1ceeaa1d2e7ec5f8fdda82e181f17afbf805d462ef6ba6a176729b510d1f0bc5e81f63849c4e9cf791288d6e11825fc2700a2c292e64d7a778468c18bc5c0c5d2036d0f6db147553da6cb8cfe8419e506b92751285f70446fd4e78ede734c2fcf842"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x13c, 0x16, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1}]}, {0xed, 0x6, "0b3e85b8c79ba64296674498b6b3a44b88fde7b8a143f43fe3b8d3c8d49f570ccc7931d42b2a7ef97a1d5188560ad4d21b78b85d80c3e6161953797ae8e4b76d9f5977b40452193b6e2a35250bad0e1c9de51786a003292de66003746927d5c5e20f296d31f6d874890094b3871c8f5fd9a4896ba2aa56acd436a1ae026cbc685ee6e41fd176d12419e71ac0c1f310e2c154d516388bf5dcb6563dfe47eb0effaa325c3b24e0a6b7ae1684ffbe60519eb60f2bfd8a0de78b87ee28687f75bf945c1fd613595749cbb5a9757c049f6b580e93fd0d25a9391197c9869c231884ccccd69b54009b78f0cb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x7}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x6}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x9, 0xc}}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffe00}]}, 0x1a4c}}, 0x0)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243)
close(r8)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

10.595291875s ago: executing program 4 (id=2011):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000940)=[{0x6, 0x0, 0x1, 0x7fff8000}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_delrule={0x3c, 0x21, 0x200, 0x70bd2c, 0x25dfdbfb, {0x2, 0x10, 0x80, 0x7, 0x66, 0x0, 0x0, 0x4, 0x1c}, [@FRA_FLOW={0x8, 0xb, 0x4}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x4}, @FRA_FLOW={0x8, 0xb, 0x88e}, @FRA_FLOW={0x8, 0xb, 0x400}]}, 0x3c}}, 0x80c0)
r2 = epoll_create1(0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendto$rxrpc(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r5, &(0x7f0000001280)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r7, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x2})
lseek(r3, 0xfffffffffffffffa, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0xa0000013})
r8 = socket$kcm(0x10, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x64, 0x42, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4c, 0x1, 0x0, 0x1, [@typed={0x14, 0x119, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0x8, 0x43, 0x0, 0x0, @uid}, @nested={0x2c, 0x64, 0x0, 0x1, [@nested={0x20, 0x52, 0x0, 0x1, [@nested={0x4, 0x11}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0xa}, @nested={0x4, 0x1e}, @typed={0x8, 0x92, 0x0, 0x0, @fd}]}, @typed={0x8, 0x15, 0x0, 0x0, @pid}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff030000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108", 0x6c}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c14)

7.565684438s ago: executing program 4 (id=2028):
syz_usb_connect$uac1(0x0, 0xb7, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffdc7, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xcf, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @extension_unit={0x8, 0x24, 0x8, 0x0, 0x0, 0x0, 'P'}, @input_terminal={0xc}, @feature_unit={0x13, 0x24, 0x6, 0x0, 0x6, 0x6, [0x0, 0x7, 0x9, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x5}, @feature_unit={0x31, 0x24, 0x6, 0x5, 0x0, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x8}}}}}}}]}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

5.372634528s ago: executing program 5 (id=2038):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000940)=[{0x6, 0x0, 0x1, 0x7fff8000}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_delrule={0x3c, 0x21, 0x200, 0x70bd2c, 0x25dfdbfb, {0x2, 0x10, 0x80, 0x7, 0x66, 0x0, 0x0, 0x4, 0x1c}, [@FRA_FLOW={0x8, 0xb, 0x4}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x4}, @FRA_FLOW={0x8, 0xb, 0x88e}, @FRA_FLOW={0x8, 0xb, 0x400}]}, 0x3c}}, 0x80c0)
r2 = epoll_create1(0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendto$rxrpc(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r5, &(0x7f0000001280)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r7, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x2})
lseek(r3, 0xfffffffffffffffa, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0xa0000013})
r8 = socket$kcm(0x10, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x64, 0x42, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4c, 0x1, 0x0, 0x1, [@typed={0x14, 0x119, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0x8, 0x43, 0x0, 0x0, @uid}, @nested={0x2c, 0x64, 0x0, 0x1, [@nested={0x20, 0x52, 0x0, 0x1, [@nested={0x4, 0x11}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0xa}, @nested={0x4, 0x1e}, @typed={0x8, 0x92, 0x0, 0x0, @fd}]}, @typed={0x8, 0x15, 0x0, 0x0, @pid}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff030000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c14)

4.695266061s ago: executing program 2 (id=2045):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000009}, 0x840)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000200), &(0x7f00000001c0)=0x14)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00')
read$alg(r2, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
readv(r3, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000440)=""/208, 0xd0}], 0x2)
r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185648, &(0x7f0000000000)={0x980000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990a2f, 0x80008002, '\x00', @p_u16=&(0x7f00000010c0)=0xa5b}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x521dc1, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)

4.485470985s ago: executing program 4 (id=2047):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000440), r7)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000018c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56747, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4004000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4.010539876s ago: executing program 1 (id=2050):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sendmsg(r2, 0x0, 0x80) (async)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x5d5c, 0x9}) (async, rerun: 32)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r3, 0x100300) (rerun: 32)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8}, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0xc4a77c080d81a3c) (async)
r5 = socket(0x1e, 0x5, 0x4) (async)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x24000880) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12)
madvise(&(0x7f0000267000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
shutdown(r7, 0x0) (async)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x800, 0x2, 0x3d6}, &(0x7f0000000340)=<r8=>0x0, &(0x7f00000000c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000}) (async)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x100000, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

3.813226031s ago: executing program 2 (id=2051):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe58", 0x77, 0x0, 0x0, 0x0)

3.691413036s ago: executing program 2 (id=2052):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000008000000000000000000"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}, {0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

3.609101032s ago: executing program 5 (id=2053):
r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000013c0)='cmdline\x00')
read$FUSE(r3, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) (rerun: 64)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000002540004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r4, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
close(0x3) (async)
socket$inet(0x10, 0x3, 0x800) (async, rerun: 64)
r6 = socket(0x2, 0x80805, 0x0) (async, rerun: 64)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000240)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0xcd, 0xb}}, 0x44)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000000)=r4, 0x1) (async, rerun: 32)
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)

3.499237637s ago: executing program 2 (id=2054):
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x100, 0x2, 0x3b9}, &(0x7f00000001c0), &(0x7f0000000280))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvfrom$unix(r2, 0x0, 0x0, 0x2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
syz_usb_connect(0x2, 0x48, &(0x7f00000000c0)={{0x12, 0x1, 0x141, 0x93, 0xb9, 0x5b, 0x20, 0x6cd, 0x112, 0xd05, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x77, 0x4, 0x7, 0xb8, 0x9e, 0x4, [], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x4, 0x0, 0x3}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x4c, 0x2, 0x3}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x9, 0xa, 0x9}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x0, 0x7, 0x1}}]}}]}}]}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r5, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e000018000280040012000500160001000000080015"], 0x48}}, 0x0)
connect$unix(r1, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x38, r7, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x14}]}]}]}, 0x38}}, 0xc000)
recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x2060)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
mknodat(r8, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4)
getdents64(r0, &(0x7f0000000000)=""/49, 0x31)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x0)
renameat2(r9, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000200)='./file7\x00', 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r10, 0x111, 0x3, 0x1, 0x4)

3.362199461s ago: executing program 1 (id=2055):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38020000190001000000100010000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00006000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x238}}, 0x20004040)

3.34603241s ago: executing program 4 (id=2056):
unshare(0x68040200)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000700300801280102d52a000000010902"], 0x0) (async)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000700300801280102d52a000000010902"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044)
unshare(0x8040000)

3.227278676s ago: executing program 1 (id=2057):
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
unshare(0x22020400) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0) (async)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000001c0)=0x6) (async)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/144, 0x90}, {&(0x7f0000000100)=""/121, 0x79}], 0x2, 0x1, 0x0)

2.991501212s ago: executing program 1 (id=2058):
r0 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

2.731648303s ago: executing program 1 (id=2059):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500)
socket$nl_netfilter(0x10, 0x3, 0xc)
lsm_set_self_attr(0x65, 0x0, 0x20, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000240)=0x1e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x40000000101a81, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f00000004c0)=0x4)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r6)
sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r7, 0x1, 0xf0bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804)
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_io_uring_setup(0x53fe, &(0x7f0000000080)={0x0, 0x80aa, 0x2000, 0x2, 0x2af}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2)
close_range(r2, 0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)

2.451283835s ago: executing program 5 (id=2060):
r0 = socket$igmp(0x2, 0x3, 0x2)
io_uring_setup(0x6e02, &(0x7f0000000040)={0x0, 0xb046, 0x40, 0x1, 0x34c})
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x3, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x2, 0x2b}, 0xa, @in6=@local, 0x800, 0x4, 0x0, 0x0, 0x0, 0x80000001}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010105}, 0x10)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r4 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000300)={&(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x45}, 0x80, 0x0}, 0x20000080)
syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0x59, 0x1, 0x3}]}}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
socket$inet(0x2, 0x3, 0x4)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000240)=""/4080, 0xff0}], 0x1, 0x15f, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9)

2.254613664s ago: executing program 5 (id=2061):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000009}, 0x840)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000200), &(0x7f00000001c0)=0x14)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x2, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x38, 0x0, 0x16, 0x6e})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00')
read$alg(r2, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
readv(r3, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000440)=""/208, 0xd0}], 0x2)
r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185648, &(0x7f0000000000)={0x980000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990a2f, 0x80008002, '\x00', @p_u16=&(0x7f00000010c0)=0xa5b}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x521dc1, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)

1.42311281s ago: executing program 1 (id=2063):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000940)=[{0x6, 0x0, 0x1, 0x7fff8000}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_delrule={0x3c, 0x21, 0x200, 0x70bd2c, 0x25dfdbfb, {0x2, 0x10, 0x80, 0x7, 0x66, 0x0, 0x0, 0x4, 0x1c}, [@FRA_FLOW={0x8, 0xb, 0x4}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x4}, @FRA_FLOW={0x8, 0xb, 0x88e}, @FRA_FLOW={0x8, 0xb, 0x400}]}, 0x3c}}, 0x80c0)
r2 = epoll_create1(0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendto$rxrpc(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r5, &(0x7f0000001280)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r7, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x2})
lseek(r3, 0xfffffffffffffffa, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0xa0000013})
r8 = socket$kcm(0x10, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x64, 0x42, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4c, 0x1, 0x0, 0x1, [@typed={0x14, 0x119, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0x8, 0x43, 0x0, 0x0, @uid}, @nested={0x2c, 0x64, 0x0, 0x1, [@nested={0x20, 0x52, 0x0, 0x1, [@nested={0x4, 0x11}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0xa}, @nested={0x4, 0x1e}, @typed={0x8, 0x92, 0x0, 0x0, @fd}]}, @typed={0x8, 0x15, 0x0, 0x0, @pid}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff030000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c14)

1.310982684s ago: executing program 5 (id=2064):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)

1.128226753s ago: executing program 5 (id=2066):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@ipv6_getroute={0x38, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}]}, 0x38}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @empty, 0x8}}, 0x2, 0x800, 0xeff, 0x5, 0x40, 0x2, 0x6}, &(0x7f0000000140)=0x9c)
write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040801}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000040)={0x80}, 0x1)
syz_usb_ep_read(r3, 0x1, 0x9a, &(0x7f0000000140)=""/154)
syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
unshare(0x8000000)

1.063232903s ago: executing program 3 (id=2067):
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1a000}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x80, 0x0, 0x0)

1.012028188s ago: executing program 3 (id=2068):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000000010000000000"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}, {0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

899.378553ms ago: executing program 3 (id=2069):
r0 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

726.780848ms ago: executing program 3 (id=2070):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240))
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82187202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x2, {0x0, 0xffff}}}}}}}}, 0x0)

623.055563ms ago: executing program 3 (id=2071):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38020000190001000000100010000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00006000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x238}}, 0x20004040)

606.905217ms ago: executing program 3 (id=2072):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@ccm_128={{0x304}, "5c000002010400", "ccaa54dbfef3216ec09b63757e98ed63", "cde21de0", "bcad0b2f6d5df9b2"}, 0x28)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, &(0x7f00000004c0)={0x0, 0x0, 0x7})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x5, 0x3e33, 0x0, 0x7, 0x800}, 0x0, &(0x7f0000000240)={0x22, 0x77e, 0x9, 0xa, 0x0, 0x5, 0x2000000004000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x303}, '\x00 \x00', "38967a2445914c2e5ab898a7f56a364a", "80020007", "bff5b80e1f6fd131"}, 0x28)

410.209037ms ago: executing program 2 (id=2073):
r0 = socket$igmp(0x2, 0x3, 0x2)
io_uring_setup(0x6e02, &(0x7f0000000040)={0x0, 0xb046, 0x40, 0x1, 0x34c})
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x3, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x2, 0x2b}, 0xa, @in6=@local, 0x800, 0x4, 0x0, 0x0, 0x0, 0x80000001}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000002380)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x21}})
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0)
mmap$qrtrtun(&(0x7f000037a000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x5)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
openat$vcsa(0xffffff9c, &(0x7f00000001c0), 0x3010c0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x4, 0x59, 0x1, 0x3}]}}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x29, 0x0, 0x62, 0xe, 0x4e, 0x24, 0xc, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9)

167.074226ms ago: executing program 4 (id=2074):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000009}, 0x840)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000200), &(0x7f00000001c0)=0x14)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x2, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x38, 0x0, 0x16, 0x6e})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00')
read$alg(r2, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
readv(r3, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000440)=""/208, 0xd0}], 0x2)
r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185648, &(0x7f0000000000)={0x980000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990a2f, 0x80008002, '\x00', @p_u16=&(0x7f00000010c0)=0xa5b}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x521dc1, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)

0s ago: executing program 2 (id=2075):
add_key(&(0x7f00000001c0)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0x12)
r1 = syz_io_uring_setup(0x516b, &(0x7f0000000140)={0x0, 0x4aa6, 0x10100, 0x7fe}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x10, 0x0, r0, 0x0, 0x0})
io_uring_enter(r1, 0x2dbe, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

B disconnect, device number 111
[  445.103904][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  445.114837][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  445.125290][   T37] bond0 (unregistering): Released all slaves
[  445.139014][   T37] bond1 (unregistering): Released all slaves
[  445.152665][   T37] bond2 (unregistering): Released all slaves
[  445.269317][  T917] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  445.288798][ T1226] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  445.429219][ T1226] usb 2-1: device descriptor read/64, error -71
[  445.450052][  T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.462248][  T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  445.475552][  T917] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  445.485262][  T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.505964][  T917] usb 3-1: config 0 descriptor??
[  445.576936][   T37] hsr_slave_0: left promiscuous mode
[  445.601618][   T37] hsr_slave_1: left promiscuous mode
[  445.619658][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.647768][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  445.660037][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.667486][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  445.680684][ T1226] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  445.712187][   T37] veth1_macvtap: left promiscuous mode
[  445.717767][   T37] veth0_macvtap: left promiscuous mode
[  445.725664][   T37] veth1_vlan: left promiscuous mode
[  445.731419][   T37] veth0_vlan: left promiscuous mode
[  445.870078][ T1226] usb 2-1: device descriptor read/64, error -71
[  445.890262][ T5148] Bluetooth: hci4: command tx timeout
[  445.940615][T11338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  445.992066][ T1226] usb usb2-port1: attempt power cycle
[  446.013202][T11338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.340790][ T1226] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[  446.372478][ T1226] usb 2-1: device descriptor read/8, error -71
[  446.457806][  T917] hid-led 0003:27B8:01ED.0019: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0
[  446.573571][  T917] hid-led 0003:27B8:01ED.0019: ThingM blink(1) initialized
[  446.619359][ T1226] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  446.643360][ T1226] usb 2-1: device descriptor read/8, error -71
[  446.669913][T11338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.684714][T11338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.742952][ T5912] usb 3-1: USB disconnect, device number 119
[  446.795697][ T1226] usb usb2-port1: unable to enumerate USB device
[  447.065674][   T37] team0 (unregistering): Port device team_slave_1 removed
[  447.105469][   T37] team0 (unregistering): Port device team_slave_0 removed
[  447.551784][T11329] chnl_net:caif_netlink_parms(): no params data found
[  447.578448][  T917] usb 3-1: new full-speed USB device number 120 using dummy_hcd
[  447.588623][T11367] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  447.610738][T11368] syzkaller0: entered promiscuous mode
[  447.619959][T11368] syzkaller0: entered allmulticast mode
[  447.632470][T11370] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1537'.
[  447.644498][T11371] tipc: Resetting bearer <eth:syzkaller0>
[  447.661746][T11364] tipc: Resetting bearer <eth:syzkaller0>
[  447.690430][T11364] tipc: Disabling bearer <eth:syzkaller0>
[  447.830177][  T917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  447.848329][  T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  447.860675][  T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  447.873689][  T917] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  447.893157][  T917] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  447.918686][  T917] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  447.948404][  T917] usb 3-1: Manufacturer: syz
[  447.955376][T11329] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.968486][ T5148] Bluetooth: hci4: command tx timeout
[  447.994925][T11329] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.998581][  T917] usb 3-1: config 0 descriptor??
[  448.004390][T11329] bridge_slave_0: entered allmulticast mode
[  448.042194][T11329] bridge_slave_0: entered promiscuous mode
[  448.142408][T11329] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.167803][T11329] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.185957][T11329] bridge_slave_1: entered allmulticast mode
[  448.207782][T11329] bridge_slave_1: entered promiscuous mode
[  448.212782][T11374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.234666][T11374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.254108][   T37] IPVS: stop unused estimator thread 0...
[  448.295710][T11374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.343776][T11374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.437543][T11329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.477319][T11329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.538321][  T917] rc_core: IR keymap rc-hauppauge not found
[  448.548325][  T917] Registered IR keymap rc-empty
[  448.553352][  T917] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  448.608601][  T917] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  448.632569][  T917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  448.685098][  T917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33
[  448.689829][T11329] team0: Port device team_slave_0 added
[  448.721974][T11329] team0: Port device team_slave_1 added
[  448.746250][  T917] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  448.778443][  T917] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  448.808843][  T917] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  448.828306][   T44] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  448.836275][  T917] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  448.848361][T11329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.858218][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.890625][  T917] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  448.910509][  T917] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  448.938548][T11329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.938859][  T917] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  448.974443][T11329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.978448][  T917] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  448.988542][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.988571][T11329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.048263][   T44] usb 2-1: Using ep0 maxpacket: 8
[  449.055046][  T917] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  449.063709][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  449.070969][T11394] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1542'.
[  449.078700][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  449.118338][   T44] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  449.118362][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'.
[  449.129128][  T917] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  449.151648][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.180027][   T44] usb 2-1: config 0 descriptor??
[  449.186404][T11329] hsr_slave_0: entered promiscuous mode
[  449.191277][  T917] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  449.209475][T11329] hsr_slave_1: entered promiscuous mode
[  449.220309][  T917] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  449.245628][T11329] debugfs: 'hsr0' already exists in 'hsr'
[  449.266979][  T917] usb 3-1: USB disconnect, device number 120
[  449.268238][T11329] Cannot create hsr debugfs directory
[  450.054335][ T5148] Bluetooth: hci4: command tx timeout
[  450.190199][   T44] usbhid 2-1:0.0: can't add hid device: -71
[  450.206501][   T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  450.240512][   T44] usb 2-1: USB disconnect, device number 116
[  450.429704][T11329] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  450.451233][T11329] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  450.491051][T11329] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  450.516213][T11329] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  450.556137][T11428] loop3: detected capacity change from 0 to 7
[  450.577192][T11428] Dev loop3: unable to read RDB block 7
[  450.598448][T11428]  loop3: unable to read partition table
[  450.621482][T11428] loop3: partition table beyond EOD, truncated
[  450.726981][T11428] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  450.828555][   T44] usb 2-1: new full-speed USB device number 117 using dummy_hcd
[  450.892208][T11329] 8021q: adding VLAN 0 to HW filter on device bond0
[  451.010383][   T44] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  451.034419][   T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  451.132590][T11329] 8021q: adding VLAN 0 to HW filter on device team0
[  451.356454][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64
[  451.374910][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.382162][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.510624][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.511817][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  451.517883][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.548271][   T44] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  451.613348][   T44] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3
[  451.638576][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.657754][   T44] usb 2-1: Product: syz
[  451.677605][   T44] usb 2-1: Manufacturer: syz
[  451.727454][T11329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  451.758284][   T44] usb 2-1: SerialNumber: syz
[  451.772901][   T44] usb 2-1: config 0 descriptor??
[  451.792738][T11425] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  451.820192][   T44] iuu_phoenix 2-1:0.0: iuu_phoenix converter detected
[  451.845245][   T44] usb 2-1: iuu_phoenix converter now attached to ttyUSB0
[  451.958704][T11329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  452.029722][ T1226] usb 2-1: USB disconnect, device number 117
[  452.051982][ T1226] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  452.090435][T11329] veth0_vlan: entered promiscuous mode
[  452.096800][ T1226] iuu_phoenix 2-1:0.0: device disconnected
[  452.129944][ T5148] Bluetooth: hci4: command tx timeout
[  452.133465][T11329] veth1_vlan: entered promiscuous mode
[  452.197747][T11329] veth0_macvtap: entered promiscuous mode
[  452.209393][T11329] veth1_macvtap: entered promiscuous mode
[  452.255845][T11329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  452.299805][T11329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  452.318043][ T8574] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.335413][ T8574] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.355802][ T8574] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.393836][ T8574] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.507630][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.518496][    T9] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  452.534829][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.573309][ T8574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.586696][ T8574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.680843][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  452.705191][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  452.728290][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  452.749174][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  452.782537][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  452.802040][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.829753][    T9] usb 3-1: config 0 descriptor??
[  452.878394][ T1226] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  453.050760][ T1226] usb 2-1: Using ep0 maxpacket: 8
[  453.059038][ T1226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  453.073514][ T1226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  453.084622][ T1226] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  453.097430][ T1226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.110419][ T1226] usb 2-1: config 0 descriptor??
[  453.270370][    T9] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  454.100460][ T1226] usbhid 2-1:0.0: can't add hid device: -71
[  454.118964][ T1226] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  454.136045][ T1226] usb 2-1: USB disconnect, device number 118
[  454.228538][    T9] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  454.369163][    T9] usb 6-1: device descriptor read/64, error -71
[  454.588311][ T5920] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  454.618294][    T9] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[  454.685009][ T1226] usb 3-1: USB disconnect, device number 121
[  454.748719][    T9] usb 6-1: device descriptor read/64, error -71
[  454.760002][ T5920] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  454.769477][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.777487][ T5920] usb 2-1: Product: syz
[  454.782664][ T5920] usb 2-1: Manufacturer: syz
[  454.787256][ T5920] usb 2-1: SerialNumber: syz
[  454.794094][ T5920] usb 2-1: config 0 descriptor??
[  454.859240][    T9] usb usb6-port1: attempt power cycle
[  455.001839][ T5920] hso 2-1:0.0: Failed to find INT IN ep
[  455.008722][ T5920] usb-storage 2-1:0.0: USB Mass Storage device detected
[  455.214717][T11546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.215504][    T9] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[  455.231732][T11546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.257037][ T5920] usb 2-1: USB disconnect, device number 119
[  455.271474][    T9] usb 6-1: device descriptor read/8, error -71
[  455.538353][    T9] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[  455.558995][    T9] usb 6-1: device descriptor read/8, error -71
[  455.668756][    T9] usb usb6-port1: unable to enumerate USB device
[  455.948279][ T5920] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  456.098331][ T5920] usb 3-1: Using ep0 maxpacket: 16
[  456.105445][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  456.117212][ T5920] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  456.127647][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.143356][ T5920] usb 3-1: config 0 descriptor??
[  456.284865][T11584] loop3: detected capacity change from 0 to 7
[  456.298668][T11584] Dev loop3: unable to read RDB block 7
[  456.305531][T11584]  loop3: unable to read partition table
[  456.312480][T11584] loop3: partition table beyond EOD, truncated
[  456.318790][T11584] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  456.360466][ T5920] usbhid 3-1:0.0: can't add hid device: -71
[  456.381664][ T5920] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  456.402129][ T5920] usb 3-1: USB disconnect, device number 122
[  456.747803][T11600] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1575'.
[  456.939703][ T5891] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[  456.960887][T11604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.969989][T11604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.100000][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10
[  457.111353][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8312, setting to 1024
[  457.122623][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  457.135792][ T5891] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  457.144916][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.155047][ T5891] usb 2-1: config 0 descriptor??
[  457.198374][ T5911] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  457.329015][ T5911] usb 3-1: device descriptor read/64, error -71
[  457.569134][ T5911] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  457.698327][ T5911] usb 3-1: device descriptor read/64, error -71
[  457.769481][T11597] netlink: zone id is out of range
[  457.774681][T11597] netlink: zone id is out of range
[  457.780212][T11597] netlink: zone id is out of range
[  457.785577][T11597] netlink: zone id is out of range
[  457.791157][T11597] netlink: set zone limit has 8 unknown bytes
[  457.802681][ T5891] usbhid 2-1:0.0: can't add hid device: -71
[  457.809873][ T5911] usb usb3-port1: attempt power cycle
[  457.811361][ T5891] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  457.826023][ T5891] usb 2-1: USB disconnect, device number 120
[  458.148292][ T5911] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  458.179460][ T5911] usb 3-1: device descriptor read/8, error -71
[  458.418395][ T5911] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  458.449245][ T5911] usb 3-1: device descriptor read/8, error -71
[  458.558873][ T5911] usb usb3-port1: unable to enumerate USB device
[  458.668260][    T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  458.768545][ T5912] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[  458.818299][    T9] usb 2-1: Using ep0 maxpacket: 8
[  458.825023][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  458.836052][    T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  458.845543][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.857838][    T9] usb 2-1: config 0 descriptor??
[  458.933020][ T5912] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  458.942220][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.950326][ T5912] usb 6-1: Product: syz
[  458.954525][ T5912] usb 6-1: Manufacturer: syz
[  458.959270][ T5912] usb 6-1: SerialNumber: syz
[  458.966180][ T5912] usb 6-1: config 0 descriptor??
[  459.070833][    T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  459.175071][T11618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.183963][T11618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.535421][    T9] usb 2-1: USB disconnect, device number 121
[  459.647193][T11625] loop3: detected capacity change from 0 to 7
[  459.657814][ T6321] Dev loop3: unable to read RDB block 7
[  459.664069][ T6321]  loop3: unable to read partition table
[  459.670480][ T6321] loop3: partition table beyond EOD, truncated
[  459.677969][T11625] Dev loop3: unable to read RDB block 7
[  459.683951][T11625]  loop3: unable to read partition table
[  459.690683][T11625] loop3: partition table beyond EOD, truncated
[  459.696982][T11625] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  461.008700][ T5912] usb 6-1: f81604_read: reg: 105 failed: -ETIMEDOUT
[  461.023144][ T5912] f81604 6-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT
[  461.031174][    T9] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  461.040782][ T5912] f81604 6-1:0.0: probe with driver f81604 failed with error -110
[  461.188365][    T9] usb 3-1: Using ep0 maxpacket: 8
[  461.195366][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  461.205935][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  461.228494][ T5891] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  461.247519][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.265477][    T9] usb 3-1: config 0 descriptor??
[  461.283805][    T9] gspca_main: vc032x-2.14.0 probing 046d:0892
[  461.398257][ T5891] usb 2-1: Using ep0 maxpacket: 8
[  461.407157][ T5891] usb 2-1: config 162 has an invalid interface number: 142 but max is 1
[  461.416772][ T5891] usb 2-1: config 162 has an invalid interface number: 112 but max is 1
[  461.425453][ T5891] usb 2-1: config 162 has no interface number 0
[  461.432319][ T5891] usb 2-1: config 162 has no interface number 1
[  461.438905][ T5891] usb 2-1: config 162 interface 142 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  461.454971][ T5891] usb 2-1: config 162 interface 112 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  461.470611][ T5891] usb 2-1: config 162 interface 112 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  461.487812][ T5891] usb 2-1: config 162 interface 112 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  461.498687][ T5891] usb 2-1: config 162 interface 112 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  461.513062][ T5891] usb 2-1: config 162 interface 142 has no altsetting 0
[  461.520283][ T5891] usb 2-1: config 162 interface 112 has no altsetting 0
[  461.531076][ T5891] usb 2-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=a7.08
[  461.540291][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.548357][ T5891] usb 2-1: Product: syz
[  461.552585][ T5891] usb 2-1: Manufacturer: syz
[  461.557305][ T5891] usb 2-1: SerialNumber: syz
[  461.610658][ T5920] usb 6-1: USB disconnect, device number 85
[  462.058284][ T5920] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[  462.221070][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10
[  462.232418][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8312, setting to 1024
[  462.243604][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  462.256671][ T5920] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  462.265883][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.276786][ T5920] usb 6-1: config 0 descriptor??
[  462.294988][    T9] gspca_vc032x: reg_r err -71
[  462.301653][    T9] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[  462.318862][    T9] usb 3-1: USB disconnect, device number 127
[  462.860625][T11658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1593'.
[  462.889554][T11645] netlink: zone id is out of range
[  462.895036][T11645] netlink: zone id is out of range
[  462.900439][T11645] netlink: zone id is out of range
[  462.905638][T11645] netlink: zone id is out of range
[  462.913376][T11645] netlink: set zone limit has 8 unknown bytes
[  462.922876][ T5920] usbhid 6-1:0.0: can't add hid device: -71
[  462.942127][ T5920] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  462.956671][ T5920] usb 6-1: USB disconnect, device number 86
[  463.014884][T11660] loop3: detected capacity change from 0 to 7
[  463.025112][T11660] Dev loop3: unable to read RDB block 7
[  463.032740][T11660]  loop3: unable to read partition table
[  463.038880][T11660] loop3: partition table beyond EOD, truncated
[  463.049890][T11660] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  464.023883][ T5891] pl2303 2-1:162.142: required endpoints missing
[  464.072585][ T5891] pl2303 2-1:162.112: required interrupt-in endpoint missing
[  464.115438][ T5891] usb 2-1: USB disconnect, device number 122
[  464.755906][T11678] syz_tun: entered allmulticast mode
[  464.839364][T11681] loop6: detected capacity change from 0 to 7
[  464.849810][ T5889] Dev loop6: unable to read RDB block 7
[  464.855969][ T5889]  loop6: AHDI p2
[  464.861051][ T5889] loop6: partition table partially beyond EOD, truncated
[  464.875738][T11681] Dev loop6: unable to read RDB block 7
[  464.882823][T11681]  loop6: AHDI p2
[  464.886698][T11681] loop6: partition table partially beyond EOD, truncated
[  464.906405][T11681] ALSA: seq fatal error: cannot create timer (-22)
[  465.228278][   T44] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[  465.251399][T11691] loop3: detected capacity change from 0 to 7
[  465.260075][T11691] Dev loop3: unable to read RDB block 7
[  465.265778][T11691]  loop3: unable to read partition table
[  465.273407][T11691] loop3: partition table beyond EOD, truncated
[  465.279875][T11691] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  465.388281][   T44] usb 6-1: Using ep0 maxpacket: 8
[  465.395032][   T44] usb 6-1: config 0 has an invalid interface number: 106 but max is 0
[  465.403921][   T44] usb 6-1: config 0 has no interface number 0
[  465.410095][   T44] usb 6-1: New USB device found, idVendor=05ac, idProduct=3d58, bcdDevice=88.ce
[  465.419184][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.429408][   T44] usb 6-1: config 0 descriptor??
[  465.622788][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'.
[  465.633959][T11694] ip6gre1: entered allmulticast mode
[  465.650322][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'.
[  465.651279][   T44] usb 6-1: USB disconnect, device number 87
[  465.898527][    T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  466.030208][    T9] usb 3-1: device descriptor read/64, error -71
[  466.268457][    T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  466.392738][T11731] openvswitch: netlink: Key 6 has unexpected len 66 expected 2
[  466.408313][    T9] usb 3-1: device descriptor read/64, error -71
[  466.538577][    T9] usb usb3-port1: attempt power cycle
[  466.731215][T11736] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  466.740871][T11736] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  466.788574][T11736] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  466.848481][ T5920] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[  466.909025][    T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  466.968958][    T9] usb 3-1: device descriptor read/8, error -71
[  466.988946][ T5920] usb 6-1: device descriptor read/64, error -71
[  467.208323][    T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  467.228287][ T5920] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[  467.228883][    T9] usb 3-1: device descriptor read/8, error -71
[  467.348608][    T9] usb usb3-port1: unable to enumerate USB device
[  467.379645][ T5920] usb 6-1: device descriptor read/64, error -71
[  467.488773][ T5920] usb usb6-port1: attempt power cycle
[  467.848386][ T5920] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  467.959043][ T5920] usb 6-1: device descriptor read/8, error -71
[  468.208731][ T5920] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[  468.228964][ T5920] usb 6-1: device descriptor read/8, error -71
[  468.359375][ T5920] usb usb6-port1: unable to enumerate USB device
[  468.701828][T11753] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  468.708660][T11753] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  468.732691][T11753] vhci_hcd vhci_hcd.0: Device attached
[  468.744768][T11754] loop2: detected capacity change from 0 to 7
[  468.745346][T11753] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7)
[  468.757408][T11753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  468.766576][T11753] vhci_hcd vhci_hcd.0: Device attached
[  468.772438][ T5889] Dev loop2: unable to read RDB block 7
[  468.782353][ T5889]  loop2: AHDI p1 p2 p3
[  468.786565][ T5889] loop2: partition table partially beyond EOD, truncated
[  468.803381][ T5889] loop2: p1 start 1601398130 is beyond EOD, truncated
[  468.810626][ T5889] loop2: p2 start 1702059890 is beyond EOD, truncated
[  468.816422][T11756] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9)
[  468.823909][T11756] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  468.837996][T11754] Dev loop2: unable to read RDB block 7
[  468.844482][T11756] vhci_hcd vhci_hcd.0: Device attached
[  468.844893][T11754]  loop2: AHDI p1 p2 p3
[  468.858590][T11754] loop2: partition table partially beyond EOD, truncated
[  468.870366][T11754] loop2: p1 start 1601398130 is beyond EOD, truncated
[  468.879772][T11754] loop2: p2 start 1702059890 is beyond EOD, truncated
[  468.911563][T11753] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11)
[  468.918200][T11753] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  468.925818][ T5891] vhci_hcd: vhci_device speed not set
[  468.955317][T11753] vhci_hcd vhci_hcd.0: Device attached
[  468.987187][ T5197] Dev loop2: unable to read RDB block 7
[  468.987249][T11756] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(14)
[  468.993023][ T5891] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  468.999369][T11756] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  469.014987][ T5197]  loop2: AHDI p1 p2 p3
[  469.019843][ T5197] loop2: partition table partially beyond EOD, truncated
[  469.027332][T11756] vhci_hcd vhci_hcd.0: Device attached
[  469.028888][T11753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  469.045918][ T5197] loop2: p1 start 1601398130 is beyond EOD, truncated
[  469.055680][ T5197] loop2: p2 start 1702059890 is beyond EOD, truncated
[  469.120089][T11753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  469.132846][T11753] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(19)
[  469.139486][T11753] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  469.158017][T11753] vhci_hcd vhci_hcd.0: Device attached
[  469.185731][T11753] vhci_hcd vhci_hcd.0: port 0 already used
[  469.206131][T11768] vhci_hcd: connection closed
[  469.209688][T11762] vhci_hcd: connection closed
[  469.209695][T11758] vhci_hcd: connection reset by peer
[  469.210880][T11766] vhci_hcd: connection closed
[  469.214413][   T37] vhci_hcd: stop threads
[  469.223326][T11771] vhci_hcd: connection closed
[  469.236835][   T37] vhci_hcd: release socket
[  469.260376][   T37] vhci_hcd: disconnect device
[  469.274664][   T37] vhci_hcd: stop threads
[  469.279145][   T37] vhci_hcd: release socket
[  469.282081][T11774] vhci_hcd: connection closed
[  469.283691][   T37] vhci_hcd: disconnect device
[  469.302553][   T37] vhci_hcd: stop threads
[  469.307709][   T37] vhci_hcd: release socket
[  469.316106][   T37] vhci_hcd: disconnect device
[  469.322450][   T37] vhci_hcd: stop threads
[  469.326826][   T37] vhci_hcd: release socket
[  469.331905][   T37] vhci_hcd: disconnect device
[  469.336839][   T37] vhci_hcd: stop threads
[  469.343987][   T37] vhci_hcd: release socket
[  469.348869][   T37] vhci_hcd: disconnect device
[  469.353932][   T37] vhci_hcd: stop threads
[  469.359303][   T37] vhci_hcd: release socket
[  469.363967][   T37] vhci_hcd: disconnect device
[  469.418276][   T44] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  469.570100][   T44] usb 3-1: config 0 has an invalid interface number: 23 but max is 0
[  469.578308][   T44] usb 3-1: config 0 has no interface number 0
[  469.584515][   T44] usb 3-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  469.595036][   T44] usb 3-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023
[  469.607312][   T44] usb 3-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[  469.616498][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.624562][   T44] usb 3-1: Product: syz
[  469.629033][   T44] usb 3-1: Manufacturer: syz
[  469.633652][   T44] usb 3-1: SerialNumber: syz
[  469.648917][   T44] usb 3-1: config 0 descriptor??
[  469.656356][T11776] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  469.664004][T11776] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  469.674560][   T44] ums-usbat 3-1:0.23: USB Mass Storage device detected
[  469.798326][    T9] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[  469.893440][T11776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.902663][T11776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.960760][    T9] usb 6-1: Using ep0 maxpacket: 16
[  470.096622][T11777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.118451][T11787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.127348][T11787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.151161][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  470.160606][    T9] usb 6-1: too many configurations: 152, using maximum allowed: 8
[  470.160613][T11777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.183244][    T9] usb 6-1: unable to read config index 0 descriptor/start: -71
[  470.193735][    T9] usb 6-1: can't read configurations, error -71
[  470.200606][T11776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.224255][T11776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.237287][T11777] netlink: 'syz.2.1627': attribute type 4 has an invalid length.
[  470.245948][T11796] netlink: 'syz.2.1627': attribute type 4 has an invalid length.
[  470.247749][T11777] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1627'.
[  470.253848][T11796] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1627'.
[  470.271647][T11777] : renamed from bond0 (while UP)
[  470.323155][   T44] ums-usbat 3-1:0.23: probe with driver ums-usbat failed with error -5
[  470.348553][   T44] usb 3-1: USB disconnect, device number 6
[  470.572053][T11799] netlink: 'syz.1.1633': attribute type 10 has an invalid length.
[  470.580758][T11799] bridge0: port 3(team0) entered disabled state
[  470.587675][T11799] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.595271][T11799] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.625262][T11800] netlink: 'syz.1.1633': attribute type 10 has an invalid length.
[  470.961043][T11799] bridge0: port 3(team0) entered blocking state
[  470.967484][T11799] bridge0: port 3(team0) entered forwarding state
[  470.974620][T11799] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.981837][T11799] bridge0: port 2(bridge_slave_1) entered forwarding state
[  470.989388][T11799] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.996592][T11799] bridge0: port 1(bridge_slave_0) entered forwarding state
[  471.012009][T11799] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  471.164569][T11800] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  471.377571][T11817] input: syz0 as /devices/virtual/input/input36
[  472.148262][   T44] usb 6-1: new low-speed USB device number 94 using dummy_hcd
[  472.278328][   T44] usb 6-1: device descriptor read/64, error -71
[  472.528273][   T44] usb 6-1: new low-speed USB device number 95 using dummy_hcd
[  472.561807][T11840] netlink: 'syz.4.1644': attribute type 2 has an invalid length.
[  472.708310][   T44] usb 6-1: device descriptor read/64, error -71
[  472.716850][T11846] loop6: detected capacity change from 0 to 7
[  472.744339][ T5889] Dev loop6: unable to read RDB block 7
[  472.768350][ T5889]  loop6: AHDI p3
[  472.778386][ T5889] loop6: partition table partially beyond EOD, truncated
[  472.811483][T11846] Dev loop6: unable to read RDB block 7
[  472.831027][T11846]  loop6: AHDI p3
[  472.834730][T11846] loop6: partition table partially beyond EOD, truncated
[  472.842107][   T44] usb usb6-port1: attempt power cycle
[  473.157376][   T30] audit: type=1326 audit(1760459500.759:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  473.184469][   T30] audit: type=1326 audit(1760459500.759:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  473.207541][   T44] usb 6-1: new low-speed USB device number 96 using dummy_hcd
[  473.215655][   T30] audit: type=1326 audit(1760459500.759:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf706d539 code=0x7ffc0000
[  473.241312][   T30] audit: type=1326 audit(1760459500.759:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  473.242507][   T44] usb 6-1: device descriptor read/8, error -71
[  473.267585][   T30] audit: type=1326 audit(1760459500.759:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=341 compat=1 ip=0xf706d539 code=0x7ffc0000
[  473.293067][   T30] audit: type=1326 audit(1760459500.759:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  473.315384][   T30] audit: type=1326 audit(1760459500.759:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf706d539 code=0x7ffc0000
[  473.338298][   T30] audit: type=1326 audit(1760459500.759:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  473.360705][    T9] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  473.369222][   T30] audit: type=1326 audit(1760459500.759:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf706d539 code=0x7ffc0000
[  473.392132][   T30] audit: type=1326 audit(1760459500.759:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.2.1652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  473.528270][   T44] usb 6-1: new low-speed USB device number 97 using dummy_hcd
[  473.543454][    T9] usb 2-1: Using ep0 maxpacket: 32
[  473.552799][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  473.572872][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  473.599464][   T44] usb 6-1: device descriptor read/8, error -71
[  473.625294][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  473.652780][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  473.674873][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.714101][   T44] usb usb6-port1: unable to enumerate USB device
[  473.718877][    T9] usb 2-1: config 0 descriptor??
[  473.737551][T11855] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  473.754065][    T9] hub 2-1:0.0: USB hub found
[  473.950287][    T9] hub 2-1:0.0: 2 ports detected
[  474.090653][T11869] fuse: Unknown parameter 'gro_id'
[  474.198305][ T5891] vhci_hcd: vhci_device speed not set
[  474.211007][T11871] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1649'.
[  474.652384][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1659'.
[  474.782608][T11889] overlayfs: missing 'lowerdir'
[  474.860289][T11892] loop3: detected capacity change from 0 to 7
[  474.869918][T11892] Dev loop3: unable to read RDB block 7
[  474.881264][T11892]  loop3: unable to read partition table
[  474.889881][T11892] loop3: partition table beyond EOD, truncated
[  474.910094][T11892] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  475.178512][    T9] hub 2-1:0.0: hub_hub_status failed (err = -110)
[  475.185059][    T9] hub 2-1:0.0: config failed, can't get hub status (err -110)
[  475.200354][    T9] usbhid 2-1:0.0: can't add hid device: -32
[  475.215892][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  475.260562][ T5920] usb 6-1: new full-speed USB device number 98 using dummy_hcd
[  475.348241][   T44] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  475.419894][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  475.430768][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  475.442398][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  475.453703][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  475.463658][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  475.479132][ T5920] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  475.495876][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  475.507221][ T5920] usb 6-1: Product: syz
[  475.511514][   T44] usb 3-1: Using ep0 maxpacket: 16
[  475.556349][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  475.568766][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  475.581972][ T5920] usb 6-1: Manufacturer: syz
[  475.587671][   T44] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  475.598101][ T5920] usb 6-1: SerialNumber: syz
[  475.603899][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.615212][ T5920] usb 6-1: config 0 descriptor??
[  475.646645][   T44] usb 3-1: config 0 descriptor??
[  475.840400][ T5920] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  475.847466][ T5920] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  476.041011][ T5920] radio-si470x 6-1:0.0: software version 0, hardware version 0
[  476.053627][ T5920] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  476.067537][ T5920] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  476.111540][   T44] playstation 0003:054C:05C4.001B: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0
[  476.228009][ T5912] usb 2-1: USB disconnect, device number 123
[  476.256657][ T5920] radio-si470x 6-1:0.0: submitting int urb failed (-90)
[  476.304379][   T44] playstation 0003:054C:05C4.001B: Failed to retrieve feature with reportID 18: -71
[  476.338420][   T44] playstation 0003:054C:05C4.001B: Failed to retrieve DualShock4 pairing info: -71
[  476.372228][   T44] playstation 0003:054C:05C4.001B: Failed to get MAC address from DualShock4
[  476.391937][T11916] netlink: 'syz.1.1668': attribute type 12 has an invalid length.
[  476.431440][   T44] playstation 0003:054C:05C4.001B: Failed to create dualshock4.
[  476.502171][   T44] playstation 0003:054C:05C4.001B: probe with driver playstation failed with error -71
[  476.535153][   T44] usb 3-1: USB disconnect, device number 7
[  477.158465][ T5920] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -110
[  477.167247][ T5920] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22
[  477.404557][ T5898] usb 6-1: USB disconnect, device number 98
[  477.791720][T11937] loop3: detected capacity change from 0 to 7
[  477.824609][T11937] Dev loop3: unable to read RDB block 7
[  477.841692][T11937]  loop3: unable to read partition table
[  477.855759][T11937] loop3: partition table beyond EOD, truncated
[  477.873680][T11937] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  478.153443][T11942] pim6reg: entered allmulticast mode
[  478.369138][ T5898] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  478.429574][ T5920] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[  478.541021][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10
[  478.554560][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8312, setting to 1024
[  478.574695][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  478.598622][ T5898] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  478.617628][ T5920] usb 6-1: Using ep0 maxpacket: 8
[  478.624836][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  478.640333][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.652832][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  478.678256][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  478.689870][ T5898] usb 2-1: config 0 descriptor??
[  478.702125][ T5920] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  478.712804][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.724893][ T5920] usb 6-1: config 0 descriptor??
[  478.809270][    T9] usb 3-1: device descriptor read/64, error -71
[  479.059695][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  479.198310][    T9] usb 3-1: device descriptor read/64, error -71
[  479.310169][    T9] usb usb3-port1: attempt power cycle
[  479.353136][T11967] =======================================================
[  479.353136][T11967] WARNING: The mand mount option has been deprecated and
[  479.353136][T11967]          and is ignored by this kernel. Remove the mand
[  479.353136][T11967]          option from the mount to silence this warning.
[  479.353136][T11967] =======================================================
[  479.367836][T11948] netlink: zone id is out of range
[  479.388178][    C1] vkms_vblank_simulate: vblank timer overrun
[  479.402366][T11948] netlink: zone id is out of range
[  479.407844][T11948] netlink: zone id is out of range
[  479.414370][T11948] netlink: zone id is out of range
[  479.420211][T11948] netlink: set zone limit has 8 unknown bytes
[  479.436301][ T5898] usbhid 2-1:0.0: can't add hid device: -71
[  479.442521][ T5898] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  479.453099][ T5898] usb 2-1: USB disconnect, device number 124
[  479.658301][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  479.679024][    T9] usb 3-1: device descriptor read/8, error -71
[  479.750298][ T5920] usbhid 6-1:0.0: can't add hid device: -71
[  479.763464][ T5920] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  479.790078][ T5920] usb 6-1: USB disconnect, device number 99
[  479.918272][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  479.959182][    T9] usb 3-1: device descriptor read/8, error -71
[  480.081022][    T9] usb usb3-port1: unable to enumerate USB device
[  480.481909][T11985] loop3: detected capacity change from 0 to 7
[  480.494207][T11985] Dev loop3: unable to read RDB block 7
[  480.509675][T11985]  loop3: unable to read partition table
[  480.522547][T11985] loop3: partition table beyond EOD, truncated
[  480.536938][T11985] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  480.689231][T11989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1689'.
[  481.089027][    T9] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[  481.208347][ T5912] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  481.248324][    T9] usb 6-1: Using ep0 maxpacket: 16
[  481.255525][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  481.266698][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  481.276693][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  481.289814][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  481.299264][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.310776][    T9] usb 6-1: config 0 descriptor??
[  481.380695][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10
[  481.405807][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8312, setting to 1024
[  481.417747][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  481.431790][ T5912] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  481.441014][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.453513][ T5912] usb 2-1: config 0 descriptor??
[  481.741534][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001C/input/input37
[  481.761037][    T9] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  481.964075][T11996] pim6reg: entered allmulticast mode
[  481.982149][T11996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.992393][T11996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.004953][T11996] pim6reg: left allmulticast mode
[  482.066787][T12002] netlink: zone id is out of range
[  482.072215][T12002] netlink: zone id is out of range
[  482.077459][T12002] netlink: zone id is out of range
[  482.082740][T12002] netlink: zone id is out of range
[  482.090434][T12002] netlink: set zone limit has 4 unknown bytes
[  482.104416][ T1226] usb 6-1: USB disconnect, device number 100
[  482.110917][ T5912] usbhid 2-1:0.0: can't add hid device: -71
[  482.117111][ T5912] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  482.154007][ T5912] usb 2-1: USB disconnect, device number 125
[  482.843406][T12019] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  482.849934][T12019] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  482.858723][T12019] vhci_hcd vhci_hcd.0: Device attached
[  482.969613][T12019] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  483.146123][ T5891] usb 35-1: new high-speed USB device number 2 using vhci_hcd
[  483.220005][T12020] vhci_hcd: cannot find the pending unlink 9
[  483.221609][T12019] bond1 (unregistering): Released all slaves
[  483.354818][T12020] vhci_hcd: connection reset by peer
[  483.362188][   T33] vhci_hcd: stop threads
[  483.366458][   T33] vhci_hcd: release socket
[  483.371351][   T33] vhci_hcd: disconnect device
[  483.831428][T12029] loop3: detected capacity change from 0 to 7
[  483.844064][T12029] Dev loop3: unable to read RDB block 7
[  483.849886][T12029]  loop3: unable to read partition table
[  483.893380][T12029] loop3: partition table beyond EOD, truncated
[  483.955239][T12029] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  484.040010][ T5197] Dev loop3: unable to read RDB block 7
[  484.045631][ T5197]  loop3: unable to read partition table
[  484.158469][ T5197] loop3: partition table beyond EOD, truncated
[  484.201847][T12035] fuse: Bad value for 'user_id'
[  484.206972][T12035] fuse: Bad value for 'user_id'
[  484.558275][ T1226] usb 2-1: new low-speed USB device number 126 using dummy_hcd
[  484.689011][ T1226] usb 2-1: device descriptor read/64, error -71
[  484.868349][ T5898] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[  484.929274][ T1226] usb 2-1: new low-speed USB device number 127 using dummy_hcd
[  484.998233][ T5898] usb 6-1: device descriptor read/64, error -71
[  485.058669][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  485.078270][ T1226] usb 2-1: device descriptor read/64, error -71
[  485.189494][ T1226] usb usb2-port1: attempt power cycle
[  485.225351][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  485.233393][    T9] usb 3-1: can't read configurations, error -61
[  485.248279][ T5898] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[  485.368273][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  485.388381][ T5898] usb 6-1: device descriptor read/64, error -71
[  485.508833][ T5898] usb usb6-port1: attempt power cycle
[  485.520290][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  485.527951][    T9] usb 3-1: can't read configurations, error -61
[  485.534623][    T9] usb usb3-port1: attempt power cycle
[  485.540200][ T1226] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[  485.569419][ T1226] usb 2-1: device descriptor read/8, error -71
[  485.808291][ T1226] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[  485.829692][ T1226] usb 2-1: device descriptor read/8, error -71
[  485.858302][ T5898] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[  485.878852][ T5898] usb 6-1: device descriptor read/8, error -71
[  485.898306][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  485.930662][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  485.938855][ T1226] usb usb2-port1: unable to enumerate USB device
[  485.945236][    T9] usb 3-1: can't read configurations, error -61
[  486.078431][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  486.100824][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  486.108564][    T9] usb 3-1: can't read configurations, error -61
[  486.115088][    T9] usb usb3-port1: unable to enumerate USB device
[  486.128322][ T5898] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[  486.159205][ T5898] usb 6-1: device descriptor read/8, error -71
[  486.269939][ T5898] usb usb6-port1: unable to enumerate USB device
[  487.096178][T12057] net veth1_virt_wifi 
€Â: renamed from virt_wifi0
[  487.165998][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'.
[  487.176910][T12059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1709'.
[  487.592939][T12068] bond_slave_0: entered allmulticast mode
[  487.786637][   T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  488.001242][   T44] usb 2-1: Using ep0 maxpacket: 8
[  488.027790][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  488.060151][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  488.129871][T12062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  488.142086][   T44] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  488.157551][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.168739][   T44] usb 2-1: config 0 descriptor??
[  488.288767][ T5891] vhci_hcd: vhci_device speed not set
[  489.217924][   T44] usbhid 2-1:0.0: can't add hid device: -71
[  489.224199][   T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  489.263621][   T44] usb 2-1: USB disconnect, device number 4
[  501.570572][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  501.576887][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  563.010852][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  563.017178][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  570.208225][ T5833] Bluetooth: hci4: command 0x0406 tx timeout
[  583.424988][T12093] netlink: 'syz.4.1717': attribute type 4 has an invalid length.
[  583.432823][T12093] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1717'.
[  585.451053][T12121] netlink: 'syz.3.1720': attribute type 10 has an invalid length.
[  586.061600][T12121] team0: Port device netdevsim0 added
[  587.378515][T12155] usb usb8: usbfs: process 12155 (syz.2.1726) did not claim interface 0 before use
[  587.388561][T12155] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  592.711917][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1743'.
[  593.939293][T12235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1747'.
[  594.318202][   T44] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  594.747925][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10
[  594.760322][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8312, setting to 1024
[  594.781997][   T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  594.801031][   T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  594.823962][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.858445][   T44] usb 2-1: config 0 descriptor??
[  594.994750][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1750'.
[  595.516459][T12232] netlink: zone id is out of range
[  595.521801][T12232] netlink: zone id is out of range
[  595.526982][T12232] netlink: zone id is out of range
[  595.532274][T12232] netlink: zone id is out of range
[  595.538262][T12232] netlink: zone id is out of range
[  595.543557][T12232] netlink: set zone limit has 4 unknown bytes
[  595.653997][   T44] usbhid 2-1:0.0: can't add hid device: -71
[  595.663595][   T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  595.734709][   T44] usb 2-1: USB disconnect, device number 5
[  597.769115][T12277] veth0_to_bridge: entered promiscuous mode
[  597.775500][T12277] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  599.677732][T12305] netlink: 94 bytes leftover after parsing attributes in process `syz.4.1767'.
[  600.211643][ T5919] usb 6-1: new low-speed USB device number 105 using dummy_hcd
[  600.311939][T12327] dummy0: entered allmulticast mode
[  600.336261][T12328] dns_resolver: Unsupported content type (4)
[  600.374473][T12327] dummy0: left allmulticast mode
[  600.391186][ T5919] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 8
[  600.402560][ T5919] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  600.426949][ T5919] usb 6-1: config 1 interface 0 has no altsetting 0
[  600.506405][T12334] xt_CT: You must specify a L4 protocol and not use inversions on it
[  600.628202][   T44] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  600.798432][   T44] usb 3-1: Using ep0 maxpacket: 8
[  600.806157][   T44] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  600.815132][   T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  600.827407][   T44] usb 3-1: config 0 has no interface number 0
[  600.833975][   T44] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  600.847515][   T44] usb 3-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de
[  600.857272][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.879391][   T44] usb 3-1: config 0 descriptor??
[  600.890212][   T44] usb 3-1: bad CDC descriptors
[  600.896493][   T44] cdc_acm 3-1:0.1: Zero length descriptor references
[  600.903667][   T44] cdc_acm 3-1:0.1: probe with driver cdc_acm failed with error -22
[  600.947028][T12337] fuse: Bad value for 'user_id'
[  600.952147][T12337] fuse: Bad value for 'user_id'
[  601.121426][   T44] usb 3-1: USB disconnect, device number 16
[  601.581825][T12351] bridge0: port 4(gretap0) entered blocking state
[  601.589323][T12351] bridge0: port 4(gretap0) entered disabled state
[  601.596004][T12351] gretap0: entered allmulticast mode
[  601.603118][T12351] gretap0: entered promiscuous mode
[  601.611461][T12351] bridge0: port 4(gretap0) entered blocking state
[  601.617973][T12351] bridge0: port 4(gretap0) entered forwarding state
[  602.889920][ T5919] usb 6-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.40
[  602.901416][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.960498][ T5919] usb 6-1: Product: 圉岤ᅦ蔧퓮�꿫㴾했괆㷓와䩻泸歆醸�熠㒘唹㺭蒫칠篿繫铠屟톮帙봱柺⹃�觯圃였�혛�䉶ⷩﰵᡔ�ꅊᅕ䗓岷ꧻ껜�쳙훉ຌ�罞�庴�暅簬좸댶ᷯ뻸꼶�
[  603.046363][ T5919] usb 6-1: Manufacturer: Р
[  603.067174][ T5919] usb 6-1: can't set config #1, error -71
[  603.099866][ T5919] usb 6-1: USB disconnect, device number 105
[  603.842884][T12401] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  604.000505][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  604.000523][   T30] audit: type=1326 audit(1760459631.609:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  604.048974][   T30] audit: type=1326 audit(1760459631.639:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  604.138074][   T30] audit: type=1326 audit(1760459631.639:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  604.173594][   T30] audit: type=1326 audit(1760459631.639:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  604.213346][   T30] audit: type=1326 audit(1760459631.639:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  604.315156][   T30] audit: type=1326 audit(1760459631.639:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  604.359140][   T30] audit: type=1326 audit(1760459631.639:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  604.381648][   T30] audit: type=1326 audit(1760459631.639:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  604.425177][   T30] audit: type=1326 audit(1760459631.639:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  604.447641][   T30] audit: type=1326 audit(1760459631.639:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  604.748274][ T1226] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  604.898193][ T1226] usb 3-1: Using ep0 maxpacket: 16
[  604.909963][ T1226] usb 3-1: config 0 has an invalid interface number: 15 but max is 0
[  604.918635][ T1226] usb 3-1: config 0 has no interface number 0
[  604.929077][ T1226] usb 3-1: New USB device found, idVendor=05ac, idProduct=e7da, bcdDevice=4b.a9
[  604.941071][ T1226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.949385][ T1226] usb 3-1: Product: syz
[  604.953723][ T1226] usb 3-1: Manufacturer: syz
[  604.958620][ T1226] usb 3-1: SerialNumber: syz
[  604.966932][ T1226] usb 3-1: config 0 descriptor??
[  605.049901][ T5919] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[  605.219966][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10
[  605.238176][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8312, setting to 1024
[  605.321139][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  605.335316][ T5919] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  605.345779][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.401097][ T5919] usb 6-1: config 0 descriptor??
[  605.461105][T12442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  605.470664][T12442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  605.480796][T12442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  605.490126][T12442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.359103][T12445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.380905][T12445] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.392031][T12430] netlink: zone id is out of range
[  606.397178][T12430] netlink: zone id is out of range
[  606.402450][T12430] netlink: zone id is out of range
[  606.408752][T12430] netlink: zone id is out of range
[  606.417375][ T5919] usbhid 6-1:0.0: can't add hid device: -71
[  606.440985][ T5919] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  606.455241][T12445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.466955][T12445] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.467840][ T5919] usb 6-1: USB disconnect, device number 106
[  606.948251][ T5912] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  607.138399][ T5912] usb 2-1: Using ep0 maxpacket: 8
[  607.182528][ T5912] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[  607.191485][ T5912] usb 2-1: config 6 has no interface number 0
[  607.197871][ T5912] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  607.213726][ T5912] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  607.234227][ T5912] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  607.245904][ T5912] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  607.262708][ T5912] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  607.272011][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.280176][ T5912] usb 2-1: Product: syz
[  607.284635][ T5912] usb 2-1: Manufacturer: syz
[  607.289361][ T5912] usb 2-1: SerialNumber: syz
[  607.301159][ T5912] hso 2-1:6.2: Failed to find BULK IN ep
[  607.601400][ T1226] ipheth 3-1:0.15: Unable to find alternate settings interface
[  607.647951][ T1226] usb 3-1: USB disconnect, device number 17
[  609.646670][T12497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1829'.
[  609.688348][ T1226] usb 2-1: USB disconnect, device number 6
[  609.741447][T12501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  609.787115][T12501] syzkaller0: entered promiscuous mode
[  609.817264][T12501] syzkaller0: entered allmulticast mode
[  609.867705][T12502] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  609.929555][T12501] tipc: Resetting bearer <eth:syzkaller0>
[  610.358400][ T5898] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  610.529719][ T5898] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  610.538752][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  610.549839][ T5898] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  610.559409][ T5898] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  610.567413][ T5898] usb 2-1: Manufacturer: syz
[  610.574621][ T5898] usb 2-1: config 0 descriptor??
[  610.630827][ T5898] rc_core: IR keymap rc-hauppauge not found
[  610.636747][ T5898] Registered IR keymap rc-empty
[  610.642691][ T5898] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  610.654530][ T5898] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input38
[  610.769304][ T5898] tipc: Node number set to 3397884050
[  610.790861][    C1] igorplugusb 2-1:0.0: Error: urb status = -32
[  610.806194][T12507] IPv6: sit1: Disabled Multicast RS
[  610.812488][T12507] sit1: entered allmulticast mode
[  610.821965][ T5898] usb 2-1: USB disconnect, device number 7
[  611.338488][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1839'.
[  611.363751][T12527] vxlan1: entered promiscuous mode
[  611.726854][T12536] netlink: 'syz.5.1842': attribute type 21 has an invalid length.
[  611.735316][T12536] netlink: 'syz.5.1842': attribute type 6 has an invalid length.
[  611.743755][T12536] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1842'.
[  612.849166][ T5898] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  612.972595][T12565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1852'.
[  613.021900][ T5898] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024
[  613.054501][ T5898] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024
[  613.072028][ T5898] usb 2-1: config 0 interface 0 has no altsetting 0
[  613.107411][ T5898] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  613.154248][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  613.188256][ T5898] usb 2-1: Product: syz
[  613.192472][ T5898] usb 2-1: Manufacturer: syz
[  613.212791][ T5898] usb 2-1: SerialNumber: syz
[  613.262629][ T5898] usb 2-1: config 0 descriptor??
[  613.279146][T12553] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  613.293610][ T5898] usb 2-1: selecting invalid altsetting 0
[  614.278455][    T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  614.782053][    T9] usb 3-1: config 0 has an invalid interface number: 56 but max is 0
[  614.798233][    T9] usb 3-1: config 0 has no interface number 0
[  614.830213][    T9] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76
[  614.842490][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.875839][    T9] usb 3-1: Product: syz
[  614.891856][    T9] usb 3-1: Manufacturer: syz
[  614.896471][    T9] usb 3-1: SerialNumber: syz
[  614.937004][    T9] usb 3-1: config 0 descriptor??
[  615.190891][    T9] peak_usb 3-1:0.56: PEAK-System PCAN-USB X6 v74 fw v55.110.34 (2 channels)
[  615.277816][T12596] netlink: 'syz.5.1862': attribute type 10 has an invalid length.
[  615.316989][T12596] team0: Port device dummy0 added
[  615.328657][T12596] netlink: 'syz.5.1862': attribute type 10 has an invalid length.
[  615.359435][T12596] team0: Port device dummy0 removed
[  615.369819][T12596] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  615.392387][    T9] peak_usb 3-1:0.56 can0: sending command failure: -22
[  615.418476][    T9] peak_usb 3-1:0.56 can0: sending command failure: -22
[  615.425604][    T9] peak_usb 3-1:0.56 can0: sending command failure: -22
[  615.520015][    T9] peak_usb 3-1:0.56: probe with driver peak_usb failed with error -22
[  615.629219][ T5898] usb 3-1: USB disconnect, device number 18
[  615.665114][T12605] binder: 12604:12605 ioctl c0306201 800001c0 returned -22
[  615.712108][T12607] raw_sendmsg: syz.5.1865 forgot to set AF_INET. Fix it!
[  615.875346][ T5912] usb 2-1: USB disconnect, device number 8
[  616.798370][T12625] loop3: detected capacity change from 0 to 7
[  616.917653][T12625] Dev loop3: unable to read RDB block 7
[  616.938230][ T5920] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[  616.942845][T12625]  loop3: unable to read partition table
[  616.986225][T12625] loop3: partition table beyond EOD, truncated
[  616.992589][T12625] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  617.026041][ T5197] Dev loop3: unable to read RDB block 7
[  617.031745][ T5197]  loop3: unable to read partition table
[  617.040818][ T5197] loop3: partition table beyond EOD, truncated
[  617.088396][ T5920] usb 6-1: Using ep0 maxpacket: 32
[  617.112330][ T5920] usb 6-1: config index 0 descriptor too short (expected 1311, got 18)
[  617.173135][ T5920] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  617.248334][ T5920] usb 6-1: New USB device found, idVendor=fee9, idProduct=d500, bcdDevice=23.50
[  617.261056][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.287394][ T5920] usb 6-1: Product: syz
[  617.304784][ T5920] usb 6-1: Manufacturer: syz
[  617.322685][ T5920] usb 6-1: SerialNumber: syz
[  617.396492][ T5920] usb 6-1: config 0 descriptor??
[  617.676298][   T30] kauditd_printk_skb: 75 callbacks suppressed
[  617.676316][   T30] audit: type=1326 audit(1760459645.279:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12643 comm="syz.3.1877" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x0
[  617.710212][T12641] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  617.768220][ T5912] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  617.898208][ T5912] usb 3-1: device descriptor read/64, error -71
[  617.958243][ T5919] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  618.118184][ T5919] usb 2-1: Using ep0 maxpacket: 32
[  618.125213][ T5919] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  618.134831][ T5919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  618.145108][ T5919] usb 2-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  618.148677][ T5912] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  618.156038][ T5919] usb 2-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping
[  618.173853][ T5919] usb 2-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30
[  618.205568][ T5919] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  618.230405][ T5919] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  618.241160][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.249230][ T5919] usb 2-1: Product: syz
[  618.253397][ T5919] usb 2-1: Manufacturer: syz
[  618.257988][ T5919] usb 2-1: SerialNumber: syz
[  618.328204][ T5912] usb 3-1: device descriptor read/64, error -71
[  618.439184][ T5912] usb usb3-port1: attempt power cycle
[  618.517570][ T5919] usb 2-1: USB disconnect, device number 9
[  618.788314][ T5912] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  618.818798][ T5912] usb 3-1: device descriptor read/8, error -71
[  619.068387][ T5912] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  619.088918][ T5912] usb 3-1: device descriptor read/8, error -71
[  619.089946][T12663] loop3: detected capacity change from 0 to 7
[  619.182559][T12663] Dev loop3: unable to read RDB block 7
[  619.191992][T12663]  loop3: unable to read partition table
[  619.197890][T12663] loop3: partition table beyond EOD, truncated
[  619.282147][ T5912] usb usb3-port1: unable to enumerate USB device
[  619.302768][T12663] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  619.346062][ T5197] Dev loop3: unable to read RDB block 7
[  619.352812][ T5197]  loop3: unable to read partition table
[  619.359850][ T5197] loop3: partition table beyond EOD, truncated
[  619.577883][ T5920] usb 6-1: USB disconnect, device number 107
[  620.434147][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1890'.
[  620.976514][ T5920] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  621.143509][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10
[  621.197924][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8312, setting to 1024
[  621.218637][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  621.298419][ T5920] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  621.312149][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.358488][ T5920] usb 3-1: config 0 descriptor??
[  621.573835][T12705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  621.581142][T12705] IPv6: NLM_F_CREATE should be set when creating new route
[  621.981160][T12694] netlink: zone id is out of range
[  621.986363][T12694] netlink: zone id is out of range
[  621.995763][T12715] mac80211_hwsim hwsim11 ÿÿÿÿÿÿ: renamed from wlan1
[  622.008786][T12694] netlink: zone id is out of range
[  622.013967][T12694] netlink: zone id is out of range
[  622.050318][ T5920] usbhid 3-1:0.0: can't add hid device: -71
[  622.056363][ T5920] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  622.066544][T12715] x_tables: duplicate underflow at hook 3
[  622.101133][ T5920] usb 3-1: USB disconnect, device number 23
[  622.629305][T12737] delete_channel: no stack
[  623.172638][T12755] FAULT_INJECTION: forcing a failure.
[  623.172638][T12755] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  623.227232][T12755] CPU: 1 UID: 0 PID: 12755 Comm: syz.4.1912 Not tainted syzkaller #0 PREEMPT(full) 
[  623.227258][T12755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  623.227269][T12755] Call Trace:
[  623.227277][T12755]  <TASK>
[  623.227286][T12755]  dump_stack_lvl+0x189/0x250
[  623.227313][T12755]  ? __pfx____ratelimit+0x10/0x10
[  623.227340][T12755]  ? __pfx_dump_stack_lvl+0x10/0x10
[  623.227359][T12755]  ? __pfx__printk+0x10/0x10
[  623.227389][T12755]  should_fail_ex+0x414/0x560
[  623.227419][T12755]  _copy_to_user+0x31/0xb0
[  623.227445][T12755]  simple_read_from_buffer+0xe1/0x170
[  623.227471][T12755]  proc_fail_nth_read+0x1b3/0x220
[  623.227497][T12755]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  623.227525][T12755]  ? rw_verify_area+0x2a6/0x4d0
[  623.227541][T12755]  ? __lock_acquire+0xab9/0xd20
[  623.227561][T12755]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  623.227586][T12755]  vfs_read+0x200/0xa30
[  623.227604][T12755]  ? fdget_pos+0x247/0x320
[  623.227628][T12755]  ? __pfx___mutex_lock+0x10/0x10
[  623.227647][T12755]  ? __pfx_vfs_read+0x10/0x10
[  623.227668][T12755]  ? __fget_files+0x2a/0x420
[  623.227691][T12755]  ? __fget_files+0x3a0/0x420
[  623.227710][T12755]  ? __fget_files+0x2a/0x420
[  623.227738][T12755]  ksys_read+0x145/0x250
[  623.227760][T12755]  ? __pfx_ksys_read+0x10/0x10
[  623.227782][T12755]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  623.227803][T12755]  ? lockdep_hardirqs_on+0x9c/0x150
[  623.227824][T12755]  __do_fast_syscall_32+0xb6/0x2b0
[  623.227843][T12755]  ? lockdep_hardirqs_on+0x9c/0x150
[  623.227864][T12755]  do_fast_syscall_32+0x34/0x80
[  623.227881][T12755]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  623.227902][T12755] RIP: 0023:0xf7f17539
[  623.227919][T12755] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  623.227936][T12755] RSP: 002b:00000000f5406590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  623.227956][T12755] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f5406620
[  623.227969][T12755] RDX: 000000000000000f RSI: 00000000f73a5ff4 RDI: 0000000000000000
[  623.227981][T12755] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  623.227992][T12755] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  623.228003][T12755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  623.228031][T12755]  </TASK>
[  623.668230][ T5920] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  623.808474][ T1226] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[  623.868404][ T5920] usb 2-1: Using ep0 maxpacket: 8
[  623.874020][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'.
[  623.875538][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  623.894318][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  623.909697][ T5920] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  623.919051][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.942252][ T5920] usb 2-1: config 0 descriptor??
[  623.968331][ T1226] usb 6-1: Using ep0 maxpacket: 32
[  623.977994][ T1226] usb 6-1: config 0 has an invalid interface number: 108 but max is 0
[  623.988592][ T1226] usb 6-1: config 0 has no interface number 0
[  623.996659][ T1226] usb 6-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice= c.46
[  624.006265][ T1226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.014619][ T1226] usb 6-1: Product: syz
[  624.019005][    T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  624.026668][ T1226] usb 6-1: Manufacturer: syz
[  624.032360][ T1226] usb 6-1: SerialNumber: syz
[  624.039533][ T1226] usb 6-1: config 0 descriptor??
[  624.179750][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10
[  624.191125][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8312, setting to 1024
[  624.202252][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  624.215536][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  624.229376][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.244236][    T9] usb 3-1: config 0 descriptor??
[  624.257325][ T1226] ldusb 6-1:0.108: Interrupt in endpoint not found
[  624.274196][ T1226] usb 6-1: USB disconnect, device number 108
[  624.451767][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  624.458575][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  624.736637][ T5920] usbhid 2-1:0.0: can't add hid device: -71
[  624.743845][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  624.755115][ T5920] usb 2-1: USB disconnect, device number 10
[  624.871113][T12767] netlink: zone id is out of range
[  624.876374][T12767] netlink: zone id is out of range
[  624.881905][T12767] netlink: zone id is out of range
[  624.887547][T12767] netlink: zone id is out of range
[  624.899878][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  624.912807][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  624.942131][    T9] usb 3-1: USB disconnect, device number 24
[  625.571949][T12793] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1928'.
[  625.838208][ T5912] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  625.999848][ T5912] usb 3-1: config 0 has an invalid interface number: 6 but max is 0
[  626.018463][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  626.038491][ T5912] usb 3-1: config 0 has no interface number 0
[  626.049010][ T5912] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  626.080804][ T5912] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  626.098189][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.116733][ T5912] usb 3-1: Product: syz
[  626.137544][ T5912] usb 3-1: Manufacturer: syz
[  626.157856][ T5912] usb 3-1: SerialNumber: syz
[  626.178241][ T5912] usb 3-1: config 0 descriptor??
[  626.184061][T12793] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  626.197188][T12793] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  626.216821][ T5912] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  626.416409][   T44] usb 3-1: USB disconnect, device number 25
[  627.281538][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1941'.
[  627.290683][T12831] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1941'.
[  627.398201][ T1226] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  627.560244][ T1226] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  627.581647][ T1226] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  627.592570][ T1226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.612206][ T1226] usb 3-1: config 0 descriptor??
[  627.629556][ T1226] pwc: Askey VC010 type 2 USB webcam detected.
[  628.025853][ T1226] pwc: recv_control_msg error -32 req 02 val 2b00
[  628.041391][ T1226] pwc: recv_control_msg error -32 req 02 val 2700
[  628.057697][ T1226] pwc: recv_control_msg error -32 req 02 val 2c00
[  628.065810][ T1226] pwc: recv_control_msg error -32 req 04 val 1000
[  628.155931][   T30] audit: type=1326 audit(1760459655.759:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  628.161021][T12854] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1951'.
[  628.180879][   T30] audit: type=1326 audit(1760459655.759:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  628.212242][   T30] audit: type=1326 audit(1760459655.759:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=107 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  628.235555][   T30] audit: type=1326 audit(1760459655.759:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  628.286610][   T30] audit: type=1326 audit(1760459655.759:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  628.334626][   T30] audit: type=1326 audit(1760459655.759:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  628.365677][   T30] audit: type=1326 audit(1760459655.759:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  628.387782][    C0] vkms_vblank_simulate: vblank timer overrun
[  628.394035][   T44] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  628.395231][   T30] audit: type=1326 audit(1760459655.789:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  628.425058][   T30] audit: type=1326 audit(1760459655.789:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  628.447955][   T30] audit: type=1326 audit(1760459655.799:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  628.470100][    C0] vkms_vblank_simulate: vblank timer overrun
[  628.538223][   T44] usb 2-1: device descriptor read/64, error -71
[  628.687900][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1940'.
[  628.699840][T12861] bridge_slave_1: left allmulticast mode
[  628.705513][T12861] bridge_slave_1: left promiscuous mode
[  628.713702][T12861] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.778272][   T44] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  628.830322][T12867] netlink: 'syz.5.1956': attribute type 10 has an invalid length.
[  628.838592][T12867] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1956'.
[  628.886053][T12867] team0: entered promiscuous mode
[  628.891266][T12867] team_slave_0: entered promiscuous mode
[  628.897190][T12867] team_slave_1: entered promiscuous mode
[  628.903198][T12867] team0: entered allmulticast mode
[  628.908392][T12867] team_slave_0: entered allmulticast mode
[  628.914136][T12867] team_slave_1: entered allmulticast mode
[  628.924919][T12867] bridge0: port 3(team0) entered blocking state
[  628.932931][   T44] usb 2-1: device descriptor read/64, error -71
[  628.940112][T12867] bridge0: port 3(team0) entered disabled state
[  628.949750][T12867] bridge0: port 3(team0) entered blocking state
[  628.956115][T12867] bridge0: port 3(team0) entered forwarding state
[  629.048768][   T44] usb usb2-port1: attempt power cycle
[  629.388226][   T44] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  629.414809][   T44] usb 2-1: device descriptor read/8, error -71
[  629.658237][   T44] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  629.678855][   T44] usb 2-1: device descriptor read/8, error -71
[  629.788667][   T44] usb usb2-port1: unable to enumerate USB device
[  630.174615][ T1226] pwc: recv_control_msg error -71 req 02 val 2000
[  630.188256][ T1226] pwc: recv_control_msg error -71 req 02 val 2100
[  630.205100][ T1226] pwc: recv_control_msg error -71 req 04 val 1500
[  630.215584][ T1226] pwc: recv_control_msg error -71 req 02 val 2500
[  630.239802][ T1226] pwc: recv_control_msg error -71 req 02 val 2400
[  630.247415][ T1226] pwc: recv_control_msg error -71 req 02 val 2600
[  630.254793][ T1226] pwc: recv_control_msg error -71 req 02 val 2900
[  630.262374][ T1226] pwc: recv_control_msg error -71 req 02 val 2800
[  630.270237][ T1226] pwc: recv_control_msg error -71 req 04 val 1100
[  630.277192][ T1226] pwc: recv_control_msg error -71 req 04 val 1200
[  630.298304][ T1226] pwc: Registered as video103.
[  630.305393][ T1226] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39
[  630.350457][ T1226] usb 3-1: USB disconnect, device number 26
[  630.468294][    T9] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[  630.628279][    T9] usb 6-1: Using ep0 maxpacket: 8
[  630.638067][    T9] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  630.647708][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.656282][    T9] usb 6-1: Product: syz
[  630.661823][    T9] usb 6-1: Manufacturer: syz
[  630.666437][    T9] usb 6-1: SerialNumber: syz
[  630.675939][    T9] usb 6-1: config 0 descriptor??
[  630.686414][    T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  630.696028][    T9] usb 6-1: setting power ON
[  630.700884][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  630.711830][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  630.722335][    T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  630.731376][    T9] usb 6-1: media controller created
[  630.757626][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  630.781157][    T9] usb 6-1: selecting invalid altsetting 6
[  630.787159][    T9] usb 6-1: digital interface selection failed (-22)
[  630.794283][    T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  630.804011][    T9] usb 6-1: setting power OFF
[  630.808976][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  630.816074][    T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  630.826220][    T9] (NULL device *): no alternate interface
[  630.859498][    T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  630.916475][T12884] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1962'.
[  631.448261][ T5920] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  631.600787][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10
[  631.612875][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8312, setting to 1024
[  631.625116][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  631.639101][ T5920] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  631.649984][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.663490][ T5920] usb 2-1: config 0 descriptor??
[  631.988297][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  632.148215][    T9] usb 3-1: Using ep0 maxpacket: 8
[  632.158556][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  632.167948][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.176125][    T9] usb 3-1: Product: syz
[  632.180429][    T9] usb 3-1: Manufacturer: syz
[  632.185061][    T9] usb 3-1: SerialNumber: syz
[  632.192459][    T9] usb 3-1: config 0 descriptor??
[  632.276897][T12904] netlink: zone id is out of range
[  632.283245][T12904] netlink: zone id is out of range
[  632.288829][T12904] netlink: zone id is out of range
[  632.294492][T12904] netlink: zone id is out of range
[  632.308605][ T5920] usbhid 2-1:0.0: can't add hid device: -71
[  632.317040][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  632.336382][ T5920] usb 2-1: USB disconnect, device number 15
[  632.413557][    T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  632.614617][    T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  632.627120][    T9] usb 3-1: USB disconnect, device number 27
[  633.107318][ T5920] usb 6-1: USB disconnect, device number 109
[  633.780535][T12945] loop2: detected capacity change from 0 to 7
[  633.787632][T12945] Dev loop2: unable to read RDB block 7
[  633.793835][T12945]  loop2: unable to read partition table
[  633.800889][T12945] loop2: partition table beyond EOD, truncated
[  633.807261][T12945] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  634.168243][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  634.328156][    T9] usb 2-1: Using ep0 maxpacket: 16
[  634.340662][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  634.348782][    T9] usb 2-1: config 0 has no interface number 0
[  634.358730][    T9] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  634.367798][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.388140][    T9] usb 2-1: Product: syz
[  634.392432][    T9] usb 2-1: Manufacturer: syz
[  634.397291][    T9] usb 2-1: SerialNumber: syz
[  634.413472][    T9] usb 2-1: config 0 descriptor??
[  634.452354][    T9] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  634.477877][T12962] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1990'.
[  635.173802][    T9] gspca_spca1528: reg_w err -110
[  635.200392][    T9] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110
[  635.996543][ T1226] usb 2-1: USB disconnect, device number 16
[  636.031177][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  636.031200][   T30] audit: type=1326 audit(1760459663.629:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12981 comm="syz.4.1994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  636.147050][   T30] audit: type=1326 audit(1760459663.629:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12981 comm="syz.4.1994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  636.174077][   T30] audit: type=1326 audit(1760459663.629:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12981 comm="syz.4.1994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  636.360557][   T30] audit: type=1326 audit(1760459663.629:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12981 comm="syz.4.1994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  636.453141][   T30] audit: type=1326 audit(1760459663.629:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12981 comm="syz.4.1994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f17539 code=0x7ffc0000
[  636.475246][    C1] vkms_vblank_simulate: vblank timer overrun
[  636.602921][T12993] input: syz0 as /devices/virtual/input/input40
[  637.340604][T12999] ip6erspan0: entered promiscuous mode
[  637.828205][ T5898] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[  637.981138][T13018] netlink: 'syz.1.2004': attribute type 10 has an invalid length.
[  638.004838][ T5898] usb 6-1: Using ep0 maxpacket: 8
[  638.018418][ T5898] usb 6-1: unable to get BOS descriptor or descriptor too short
[  638.027618][ T5898] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  638.039647][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  638.055601][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  638.088800][T13018] 8021q: adding VLAN 0 to HW filter on device batadv0
[  638.120718][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  638.131845][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  638.153306][ T5898] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0
[  638.171044][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  638.196886][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 48059, setting to 1024
[  638.248047][ T5898] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  638.266944][ T5898] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  638.277217][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.288710][T13018] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  638.297561][ T5898] usb 6-1: Product: syz
[  638.304732][ T5898] usb 6-1: Manufacturer: syz
[  638.330544][ T5898] usb 6-1: SerialNumber: syz
[  638.347941][ T5898] usb 6-1: config 0 descriptor??
[  638.384826][T13005] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  638.396848][ T5898] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  638.483282][ T5898] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12
[  638.587072][T12465] udevd[12465]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  638.632748][ T5898] usb 6-1: USB disconnect, device number 110
[  638.688313][ T5920] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  638.688468][ T5148] Bluetooth: hci0: command 0x0406 tx timeout
[  638.698152][ T5920] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  638.708333][    T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  638.848294][    T9] usb 3-1: device descriptor read/64, error -71
[  638.908196][ T1226] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  639.058287][ T1226] usb 2-1: Using ep0 maxpacket: 8
[  639.064674][ T1226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  639.075638][ T1226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  639.085444][ T1226] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  639.094612][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  639.102303][ T1226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.114916][ T1226] usb 2-1: config 0 descriptor??
[  639.238655][    T9] usb 3-1: device descriptor read/64, error -71
[  639.349363][    T9] usb usb3-port1: attempt power cycle
[  639.359564][T13041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  639.370342][T13041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  639.618226][ T5912] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[  639.718233][    T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  639.739028][    T9] usb 3-1: device descriptor read/8, error -71
[  639.790578][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  639.802245][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  639.813808][ T5912] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  639.823107][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.833259][ T5912] usb 6-1: config 0 descriptor??
[  639.908592][ T1226] usbhid 2-1:0.0: can't add hid device: -71
[  639.915472][ T1226] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  639.929779][ T1226] usb 2-1: USB disconnect, device number 17
[  639.998336][    T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  640.019211][    T9] usb 3-1: device descriptor read/8, error -71
[  640.044685][ T5912] usbhid 6-1:0.0: can't add hid device: -71
[  640.052670][ T5912] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  640.063211][ T5912] usb 6-1: USB disconnect, device number 111
[  640.128670][    T9] usb usb3-port1: unable to enumerate USB device
[  640.378209][ T5919] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  640.544520][ T5919] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  640.568307][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.576331][ T5919] usb 2-1: Product: syz
[  640.619545][ T5919] usb 2-1: Manufacturer: syz
[  640.628796][ T5919] usb 2-1: SerialNumber: syz
[  640.636473][ T5919] usb 2-1: config 0 descriptor??
[  640.768213][ T5148] Bluetooth: hci1: command 0x0406 tx timeout
[  640.770290][ T5920] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  640.781177][ T5920] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  640.860942][ T5919] hso 2-1:0.0: Failed to find INT IN ep
[  640.867640][ T5919] usb-storage 2-1:0.0: USB Mass Storage device detected
[  641.592106][T13067] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2022'.
[  641.958487][ T5919] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[  642.128924][ T5919] usb 6-1: Using ep0 maxpacket: 8
[  642.144249][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  642.167266][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  642.177846][ T5919] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  642.187736][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.202143][ T5919] usb 6-1: config 0 descriptor??
[  642.848254][ T5148] Bluetooth: hci2: command 0x0406 tx timeout
[  642.848369][ T5920] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  642.860841][ T5920] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  642.993687][ T5919] usbhid 6-1:0.0: can't add hid device: -71
[  643.005851][ T5919] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  643.029893][ T5919] usb 6-1: USB disconnect, device number 112
[  643.093755][ T5891] usb 2-1: USB disconnect, device number 18
[  643.314519][T13103] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  643.440647][T13105] tipc: Resetting bearer <eth:syzkaller0>
[  643.498198][ T5891] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  643.662842][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  643.674491][ T5891] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00
[  643.684102][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.694561][ T5891] usb 2-1: config 0 descriptor??
[  644.056919][T13109] netlink: 'syz.5.2036': attribute type 27 has an invalid length.
[  644.107874][T13099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  644.121687][T13099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  644.155278][ T5891] aquacomputer_d5next 0003:0C70:F0BD.001D: item fetching failed at offset 0/3
[  644.186301][ T5891] aquacomputer_d5next 0003:0C70:F0BD.001D: probe with driver aquacomputer_d5next failed with error -22
[  644.199698][T13102] tipc: Disabling bearer <eth:syzkaller0>
[  644.345625][    T9] usb 2-1: USB disconnect, device number 19
[  644.508259][ T5891] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[  644.680607][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10
[  644.693247][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8312, setting to 1024
[  644.705962][ T5891] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  644.721576][ T5891] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  644.732644][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.753866][ T5891] usb 6-1: config 0 descriptor??
[  644.930238][ T5920] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  644.936664][ T5920] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  644.939903][ T5148] Bluetooth: hci3: command 0x0406 tx timeout
[  645.188354][T13137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  645.196228][T13137] syzkaller0: entered promiscuous mode
[  645.202305][T13137] syzkaller0: entered allmulticast mode
[  645.303560][T13142] tipc: Resetting bearer <eth:syzkaller0>
[  645.371670][T13113] netlink: zone id is out of range
[  645.376905][T13113] netlink: zone id is out of range
[  645.382373][T13113] netlink: zone id is out of range
[  645.387572][T13113] netlink: zone id is out of range
[  645.398257][ T5891] usbhid 6-1:0.0: can't add hid device: -71
[  645.404348][ T5891] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  645.423774][   T30] audit: type=1326 audit(1760459673.029:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13143 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  645.447917][ T5891] usb 6-1: USB disconnect, device number 113
[  645.460377][   T30] audit: type=1326 audit(1760459673.029:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13143 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  645.486915][   T30] audit: type=1326 audit(1760459673.029:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13143 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  645.539934][   T30] audit: type=1326 audit(1760459673.029:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13143 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  645.571400][   T30] audit: type=1326 audit(1760459673.029:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13143 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  645.594949][   T30] audit: type=1326 audit(1760459673.029:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13143 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  645.617242][    C0] vkms_vblank_simulate: vblank timer overrun
[  645.625693][   T30] audit: type=1326 audit(1760459673.029:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13143 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  645.647989][   T30] audit: type=1326 audit(1760459673.029:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13143 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  645.670089][    C0] vkms_vblank_simulate: vblank timer overrun
[  645.726227][   T30] audit: type=1326 audit(1760459673.049:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13143 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  645.807469][   T30] audit: type=1326 audit(1760459673.049:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13143 comm="syz.1.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  646.015626][T13136] tipc: Resetting bearer <eth:syzkaller0>
[  646.148534][T13136] tipc: Disabling bearer <eth:syzkaller0>
[  646.358062][T13167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  646.368259][    T9] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[  646.400613][T13167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  646.478236][ T5898] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  646.533128][    T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  646.543543][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.551994][    T9] usb 6-1: Product: syz
[  646.556476][    T9] usb 6-1: Manufacturer: syz
[  646.561311][    T9] usb 6-1: SerialNumber: syz
[  646.643009][ T5898] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  646.651761][ T5898] usb 3-1: config 0 has no interface number 0
[  646.657986][ T5898] usb 3-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  646.672359][ T5898] usb 3-1: config 0 interface 20 altsetting 119 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  646.686580][ T5898] usb 3-1: config 0 interface 20 altsetting 119 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  646.698630][ T5898] usb 3-1: config 0 interface 20 altsetting 119 has an invalid descriptor for endpoint zero, skipping
[  646.712339][ T5898] usb 3-1: config 0 interface 20 has no altsetting 0
[  646.722749][ T5898] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05
[  646.732554][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.741080][ T5898] usb 3-1: Product: syz
[  646.745579][ T5898] usb 3-1: Manufacturer: syz
[  646.751841][ T5898] usb 3-1: SerialNumber: syz
[  646.762686][ T5898] usb 3-1: config 0 descriptor??
[  647.008689][ T5148] Bluetooth: hci4: command 0x0406 tx timeout
[  647.008696][ T5920] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  647.008714][ T5920] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  647.026063][    T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[  647.090322][    T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  647.123065][    T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  647.177605][    T9] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  647.241258][    T9] usb 6-1: USB disconnect, device number 114
[  648.355904][T13193] netlink: 'syz.5.2064': attribute type 4 has an invalid length.
[  648.379022][T13193] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2064'.
[  648.412591][T13195] netlink: 'syz.3.2065': attribute type 4 has an invalid length.
[  648.436035][T13195] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2065'.
[  648.438247][   T44] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  648.610300][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10
[  648.624187][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8312, setting to 1024
[  648.636368][   T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  648.651211][   T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  648.662015][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.704281][   T44] usb 2-1: config 0 descriptor??
[  648.988244][T13091] usb 6-1: new full-speed USB device number 115 using dummy_hcd
[  649.146411][ T5898] keyspan 3-1:0.20: Keyspan 1 port adapter converter detected
[  649.155386][ T5898] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 87
[  649.177088][T13091] usb 6-1: config 7 has an invalid interface number: 101 but max is 0
[  649.189601][ T5898] keyspan 3-1:0.20: unsupported endpoint type 0
[  649.206268][T13091] usb 6-1: config 7 has no interface number 0
[  649.214998][ T5898] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 81
[  649.223782][ T5898] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 1
[  649.231989][ T5898] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 2
[  649.241117][ T5898] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 85
[  649.252257][T13091] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  649.261657][ T5898] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 5
[  649.269444][T13091] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.278865][T13091] usb 6-1: Product: syz
[  649.285264][T13091] usb 6-1: Manufacturer: syz
[  649.290728][ T5898] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  649.298957][T13091] usb 6-1: SerialNumber: syz
[  649.336418][T13190] netlink: zone id is out of range
[  649.342211][T13190] netlink: zone id is out of range
[  649.350770][T13190] netlink: zone id is out of range
[  649.355918][T13190] netlink: zone id is out of range
[  649.356080][ T5898] usb 3-1: USB disconnect, device number 32
[  649.397503][   T44] usbhid 2-1:0.0: can't add hid device: -71
[  649.403666][   T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  649.430684][ T5898] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  649.447290][   T44] usb 2-1: USB disconnect, device number 20
[  649.465468][ T5898] keyspan 3-1:0.20: device disconnected
[  649.655287][T13220] cgroup: fork rejected by pids controller in /syz2
[  649.777972][ T5841] syz_tun (unregistering): left allmulticast mode
[  649.999443][ T4919] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.023059][ T4919] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.314617][ T4919] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.325961][ T4919] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.469591][ T4919] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.480680][ T4919] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.624841][ T4919] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.754414][ T4919] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.128553][T13236] netlink: 'syz.4.2080': attribute type 4 has an invalid length.
[  651.175950][T13236] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2080'.
[  651.572775][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  651.590503][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  651.601155][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  651.637451][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  651.646779][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  651.667820][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  651.675397][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  651.683250][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  651.691930][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  651.703387][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  651.870824][T13091] as10x_usb: device has been detected
[  651.877189][T13091] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  651.888444][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  651.952536][ T4919] team0: Port device geneve0 removed
[  651.986356][T13091] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  652.032293][    T9] usb 2-1: device descriptor read/64, error -71
[  652.062077][T13091] as10x_usb: error during firmware upload part1
[  652.081111][T13091] Registered device Elgato EyeTV DTT Deluxe
[  652.109882][T13091] usb 6-1: USB disconnect, device number 115
[  652.220931][T13091] Unregistered device Elgato EyeTV DTT Deluxe
[  652.222672][T13091] as10x_usb: device has been disconnected
[  652.298249][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  652.441172][ T4919]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  652.448233][    T9] usb 2-1: device descriptor read/64, error -71
[  652.457633][ T4919]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  652.470314][ T4919]  (unregistering): Released all slaves
[  652.482680][ T4919] bond1 (unregistering): Released all slaves
[  652.560838][    T9] usb usb2-port1: attempt power cycle
[  652.754750][T13253] chnl_net:caif_netlink_parms(): no params data found
[  652.875954][T13253] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.883292][T13253] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.890976][T13253] bridge_slave_0: entered allmulticast mode
[  652.899607][T13253] bridge_slave_0: entered promiscuous mode
[  652.908685][    T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  652.917335][T13253] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.924976][T13253] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.932751][T13253] bridge_slave_1: entered allmulticast mode
[  652.939788][    T9] usb 2-1: device descriptor read/8, error -71
[  652.948864][T13253] bridge_slave_1: entered promiscuous mode
[  652.997917][T13253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  653.012802][T13253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  653.057864][T13253] team0: Port device team_slave_0 added
[  653.067055][T13253] team0: Port device team_slave_1 added
[  653.109403][T13253] batman_adv: batadv0: Adding interface: batadv_slave_0
[  653.116362][T13253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  653.145872][T13253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  653.159672][T13253] batman_adv: batadv0: Adding interface: batadv_slave_1
[  653.166619][T13253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  653.193116][T13253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  653.208686][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  653.229257][    T9] usb 2-1: device descriptor read/8, error -71
[  653.256010][T13253] hsr_slave_0: entered promiscuous mode
[  653.263360][T13253] hsr_slave_1: entered promiscuous mode
[  653.271506][T13253] debugfs: 'hsr0' already exists in 'hsr'
[  653.277532][T13253] Cannot create hsr debugfs directory
[  653.341920][    T9] usb usb2-port1: unable to enumerate USB device
[  653.806207][T13253] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  653.813736][ T5148] Bluetooth: hci1: command tx timeout
[  653.829042][T13253] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  653.841549][T13253] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  653.854783][T13253] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  653.963886][T13253] 8021q: adding VLAN 0 to HW filter on device bond0
[  653.987673][T13253] 8021q: adding VLAN 0 to HW filter on device team0
[  654.001818][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  654.009019][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  654.029767][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  654.036956][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  654.152401][T13253] 8021q: adding VLAN 0 to HW filter on device batadv0
[  654.216596][T13253] veth0_vlan: entered promiscuous mode
[  654.227257][ T4919] tipc: Left network mode
[  654.232158][T13253] veth1_vlan: entered promiscuous mode
[  654.276406][T13253] veth0_macvtap: entered promiscuous mode
[  654.304309][T13253] veth1_macvtap: entered promiscuous mode
[  654.327060][T13253] batman_adv: batadv0: Interface activated: batadv_slave_0
[  654.402263][T13253] batman_adv: batadv0: Interface activated: batadv_slave_1
[  654.421689][ T8574] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  654.455033][ T8574] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  654.463973][ T8574] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  654.513468][ T8574] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  654.614737][ T4919] hsr_slave_0: left promiscuous mode
[  654.632611][ T4919] hsr_slave_1: left promiscuous mode
[  654.650038][ T4919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  654.657458][ T4919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  654.668045][ T4919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  654.680306][ T4919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  654.688743][ T4919] batman_adv: batadv0: Removing interface: dummy0
[  654.712370][ T4919] veth1_macvtap: left promiscuous mode
[  654.717952][ T4919] veth0_macvtap: left promiscuous mode
[  654.726784][ T4919] veth1_vlan: left promiscuous mode
[  654.732736][ T4919] veth0_vlan: left promiscuous mode
[  654.867850][ T4919] pim6reg (unregistering): left allmulticast mode
[  655.423779][ T4919] team0 (unregistering): Port device team_slave_1 removed
[  655.484528][ T4919] team0 (unregistering): Port device team_slave_0 removed
[  655.888329][ T5148] Bluetooth: hci1: command tx timeout
[  656.188290][T11809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  656.196211][T11809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  656.284858][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  656.294410][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  656.398434][T13358] netlink: 'syz.2.2077': attribute type 4 has an invalid length.
[  656.406472][T13358] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2077'.
[  656.432375][ T4919] ------------[ cut here ]------------
[  656.437902][ T4919] WARNING: CPU: 0 PID: 4919 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  656.448353][ T4919] Modules linked in:
[  656.452715][ T4919] CPU: 0 UID: 0 PID: 4919 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) 
[  656.462306][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  656.472432][ T4919] Workqueue: netns cleanup_net
[  656.477224][ T4919] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
SYZFAIL: failed to send rpc
fd=3 want=32080 sent=0 n=-1 (errno 104: Connection reset by peer)
[  656.483347][ T4919] Code: 38 41 12 f8 4b 83 3c 2c 00 75 19 e8 0c 91 ac f7 49 81 fd f8 07 00 00 74 1d e8 fe 90 ac f7 49 83 c5 08 eb c9 e8 f3 90 ac f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  656.503082][ T4919] RSP: 0018:ffffc9000eb3f890 EFLAGS: 00010293
[  656.509480][ T4919] RAX: ffffffff8a13b2fd RBX: ffff8880312ec000 RCX: ffff888033380000
[  656.517740][ T4919] RDX: 0000000000000000 RSI: ffffffff8d7e835a RDI: ffff8880312ec000
[  656.526750][ T4919] RBP: ffffc9000eb3f990 R08: ffffffff8f9e1177 R09: 1ffffffff1f3c22e
[  656.535595][ T4919] R10: dffffc0000000000 R11: fffffbfff1f3c22f R12: ffff8880312ec000
[  656.544893][ T4919] R13: 0000000000000000 R14: ffff8880327c0000 R15: dffffc0000000000
[  656.552968][ T4919] FS:  0000000000000000(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000
[  656.561992][ T4919] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  656.568663][ T4919] CR2: 00000000f71f3c90 CR3: 0000000045b60000 CR4: 00000000003526f0
[  656.577347][ T4919] Call Trace:
[  656.580709][ T4919]  <TASK>
[  656.583656][ T4919]  ops_undo_list+0x49a/0x990
[  656.588314][ T4919]  ? __pfx_ops_undo_list+0x10/0x10
[  656.593449][ T4919]  ? do_raw_spin_unlock+0x122/0x240
[  656.598725][ T4919]  cleanup_net+0x4d8/0x820
[  656.603173][ T4919]  ? __pfx_cleanup_net+0x10/0x10
[  656.608380][ T4919]  ? _raw_spin_unlock_irq+0x23/0x50
[  656.613615][ T4919]  ? process_scheduled_works+0x9ef/0x17b0
[  656.619460][ T4919]  ? process_scheduled_works+0x9ef/0x17b0
[  656.625226][ T4919]  process_scheduled_works+0xae1/0x17b0
[  656.631091][ T4919]  ? __pfx_process_scheduled_works+0x10/0x10
[  656.637357][ T4919]  worker_thread+0x8a0/0xda0
[  656.642281][ T4919]  kthread+0x711/0x8a0
[  656.646382][ T4919]  ? __pfx_worker_thread+0x10/0x10
[  656.651585][ T4919]  ? __pfx_kthread+0x10/0x10
[  656.656194][ T4919]  ? _raw_spin_unlock_irq+0x23/0x50
[  656.661530][ T4919]  ? lockdep_hardirqs_on+0x9c/0x150
[  656.666743][ T4919]  ? __pfx_kthread+0x10/0x10
[  656.671464][ T4919]  ret_from_fork+0x4bc/0x870
[  656.676078][ T4919]  ? __pfx_ret_from_fork+0x10/0x10
[  656.681296][ T4919]  ? __switch_to_asm+0x39/0x70
[  656.686076][ T4919]  ? __switch_to_asm+0x33/0x70
[  656.690979][ T4919]  ? __pfx_kthread+0x10/0x10
[  656.695593][ T4919]  ret_from_fork_asm+0x1a/0x30
[  656.700448][ T4919]  </TASK>
[  656.703478][ T4919] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  656.710765][ T4919] CPU: 0 UID: 0 PID: 4919 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) 
[  656.720215][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  656.730531][ T4919] Workqueue: netns cleanup_net
[  656.735309][ T4919] Call Trace:
[  656.738582][ T4919]  <TASK>
[  656.741506][ T4919]  dump_stack_lvl+0x99/0x250
[  656.746089][ T4919]  ? __asan_memcpy+0x40/0x70
[  656.750673][ T4919]  ? __pfx_dump_stack_lvl+0x10/0x10
[  656.755876][ T4919]  ? __pfx__printk+0x10/0x10
[  656.760466][ T4919]  vpanic+0x237/0x6d0
[  656.764447][ T4919]  ? __pfx_vpanic+0x10/0x10
[  656.768952][ T4919]  panic+0xb9/0xc0
[  656.772670][ T4919]  ? __pfx_panic+0x10/0x10
[  656.777099][ T4919]  __warn+0x31b/0x4b0
[  656.781077][ T4919]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  656.786446][ T4919]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  656.791902][ T4919]  report_bug+0x2be/0x4f0
[  656.796272][ T4919]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  656.801637][ T4919]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  656.807008][ T4919]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  656.812373][ T4919]  handle_bug+0x84/0x160
[  656.816611][ T4919]  exc_invalid_op+0x1a/0x50
[  656.821107][ T4919]  asm_exc_invalid_op+0x1a/0x20
[  656.825949][ T4919] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  656.831929][ T4919] Code: 38 41 12 f8 4b 83 3c 2c 00 75 19 e8 0c 91 ac f7 49 81 fd f8 07 00 00 74 1d e8 fe 90 ac f7 49 83 c5 08 eb c9 e8 f3 90 ac f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  656.851529][ T4919] RSP: 0018:ffffc9000eb3f890 EFLAGS: 00010293
[  656.857686][ T4919] RAX: ffffffff8a13b2fd RBX: ffff8880312ec000 RCX: ffff888033380000
[  656.865646][ T4919] RDX: 0000000000000000 RSI: ffffffff8d7e835a RDI: ffff8880312ec000
[  656.873611][ T4919] RBP: ffffc9000eb3f990 R08: ffffffff8f9e1177 R09: 1ffffffff1f3c22e
[  656.881573][ T4919] R10: dffffc0000000000 R11: fffffbfff1f3c22f R12: ffff8880312ec000
[  656.889535][ T4919] R13: 0000000000000000 R14: ffff8880327c0000 R15: dffffc0000000000
[  656.897502][ T4919]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  656.902889][ T4919]  ops_undo_list+0x49a/0x990
[  656.907480][ T4919]  ? __pfx_ops_undo_list+0x10/0x10
[  656.912588][ T4919]  ? do_raw_spin_unlock+0x122/0x240
[  656.917820][ T4919]  cleanup_net+0x4d8/0x820
[  656.922234][ T4919]  ? __pfx_cleanup_net+0x10/0x10
[  656.927168][ T4919]  ? _raw_spin_unlock_irq+0x23/0x50
[  656.932362][ T4919]  ? process_scheduled_works+0x9ef/0x17b0
[  656.938083][ T4919]  ? process_scheduled_works+0x9ef/0x17b0
[  656.943805][ T4919]  process_scheduled_works+0xae1/0x17b0
[  656.949370][ T4919]  ? __pfx_process_scheduled_works+0x10/0x10
[  656.955358][ T4919]  worker_thread+0x8a0/0xda0
[  656.959967][ T4919]  kthread+0x711/0x8a0
[  656.964029][ T4919]  ? __pfx_worker_thread+0x10/0x10
[  656.969136][ T4919]  ? __pfx_kthread+0x10/0x10
[  656.973725][ T4919]  ? _raw_spin_unlock_irq+0x23/0x50
[  656.978931][ T4919]  ? lockdep_hardirqs_on+0x9c/0x150
[  656.984118][ T4919]  ? __pfx_kthread+0x10/0x10
[  656.988702][ T4919]  ret_from_fork+0x4bc/0x870
[  656.993293][ T4919]  ? __pfx_ret_from_fork+0x10/0x10
[  656.998405][ T4919]  ? __switch_to_asm+0x39/0x70
[  657.003165][ T4919]  ? __switch_to_asm+0x33/0x70
[  657.007921][ T4919]  ? __pfx_kthread+0x10/0x10
[  657.012504][ T4919]  ret_from_fork_asm+0x1a/0x30
[  657.017280][ T4919]  </TASK>
[  657.020552][ T4919] Kernel Offset: disabled
[  657.024887][ T4919] Rebooting in 86400 seconds..