last executing test programs:

29m49.888298524s ago: executing program 2 (id=2701):
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080))
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1)
sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x411, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x14)
getpid()
r5 = syz_open_procfs(0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x3ea)

29m47.858075489s ago: executing program 2 (id=2705):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x10100, 0x3, 0x1, 0x0, r1}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x54, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
io_uring_setup(0x1530, 0x0)
futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x1)

29m45.858602799s ago: executing program 2 (id=2709):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x6, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5)

29m40.178263639s ago: executing program 2 (id=2715):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x2040400)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000002240), 0x2)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2e0, 0x0, 0xffffffff, 0xc2, 0x0, r3}, &(0x7f00000003c0)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
epoll_create1(0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0)

29m36.416670893s ago: executing program 2 (id=2722):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x11}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x5dc}], 0x1}, 0x4)

29m32.657802603s ago: executing program 2 (id=2728):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syslog(0x3, 0xffffffffffffffff, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$dsp(r2, 0x0, 0x0)
syz_clone(0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x800)
poll(&(0x7f00000000c0)=[{r2}, {r2, 0x1040}, {r1, 0x2187}, {r3, 0x64a9}], 0x4, 0x3ff)

29m17.106461535s ago: executing program 32 (id=2728):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syslog(0x3, 0xffffffffffffffff, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$dsp(r2, 0x0, 0x0)
syz_clone(0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x800)
poll(&(0x7f00000000c0)=[{r2}, {r2, 0x1040}, {r1, 0x2187}, {r3, 0x64a9}], 0x4, 0x3ff)

1m25.184495207s ago: executing program 3 (id=6206):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r2, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
io_setup(0x8, &(0x7f0000004200))
syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
syz_mount_image$fuse(0x0, 0x0, 0x4028, 0x0, 0x0, 0x0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002700), 0x200, 0x0)
ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000002740))
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES32=r1, @ANYBLOB="b4b743eb58df7349c2f8c2cf51ea7c12e5e27cb65806ab38e37d453433f64991efc223f8d7f6022729dea8bddecb4c972b38f3e5805804a2ac5e9dd8297386aeeb15ffc68745e696ba85c6f2d85a4451b457cd2c24933eb4766cf213a9edb87605e73cbc543faefd5cc0e464fea21ab47a30b1b0194bfdd639e29edc95741cd74985f56cbd7f9544b53cb59abb58df8de4713e10207f215816bd191017b925215584d985d71716f1560c7f2b807f570a31dcdcf832161ac4e6cc28e9bc990293f017f7f492f18f39d5327b20bec76183f0bc3a73aa7f3e8e705d1bcea22b26922ca66b0b535560a40a66", @ANYRESDEC, @ANYRESOCT])
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r5=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x0, 0x91, 0x8000, 0x4, 0xa, 0xa4, 0xffb, 0x7, 0x8, 0xc3, 0x4, 0xd4200003, 0x3, 0x6, 0x6, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x6, 0x0, 0x7, 0x5, 0x100000, 0x767, 0xc, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x80001c00, 0xb, 0x5, 0xa, 0x8, 0x8000100, 0x1fc00000, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0xfffffffd, 0x7e, 0x6, 0xa, 0xcd22, 0xf, 0xff, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x17ffff, 0x4007, 0xfd, 0x9, 0x3, 0xf7, 0x5, 0x3, 0x6, 0x9, 0x10, 0x9, 0x6, 0xe, 0x4, 0x100002, 0x8, 0x80000752, 0x8, 0x3, 0x24, 0x10001, 0x312, 0x1, 0x6, 0x6, 0x9, 0x8, 0xfdffffff, 0x2, 0x41, 0x1084, 0x100, 0x5, 0x252, 0x81, 0x1, 0xaa10, 0x80, 0x5, 0x0, 0xb, 0x2, 0xd9a, 0xd, 0x2e2, 0xffffdffc, 0x43, 0x5, 0x5, 0x8, 0x3, 0x4, 0x2, 0x41a, 0x8, 0x9, 0x4, 0x401, 0x66d1, 0x9, 0x9, 0x8, 0x7, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socket(0x840000000002, 0x3, 0xff)

1m23.45715011s ago: executing program 3 (id=6210):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r3, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10)
setsockopt(r4, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5, 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0xa, 0x0)
ioctl$MON_IOCX_GETX(r6, 0x80089203, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffc9b})
sendmmsg$inet6(r0, &(0x7f00000003c0), 0x0, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x9, 0x8, [0x1, 0x2, 0x267, 0x7, 0x3, 0x9, 0xffe, 0x2]}, 0x18)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

1m22.157809602s ago: executing program 3 (id=6214):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='lblc\x00', &(0x7f00000002c0)='proc\x00', 0x0)
r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x0, 0xdb1e11e678f3b5dc})
io_uring_enter(r3, 0x5370, 0x0, 0x0, 0x0, 0x4e)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000008c0), 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x84, @multicast1, 0x4e21, 0x3, 'none\x00', 0xc, 0x9, 0x67}, {@remote, 0x4623, 0x4, 0x100000ca, 0x12d5f, 0x3}}, 0x44)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r2, 0x0, 0x1)
fchdir(r8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
openat$cgroup_ro(r8, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
syz_open_dev$char_usb(0xc, 0xb4, 0x3)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x63e9}, 0x20)

1m18.819245078s ago: executing program 3 (id=6221):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0)
ftruncate(r4, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bind$tipc(r5, &(0x7f0000000440)=@name={0x1e, 0x2, 0x1, {{}, 0x1}}, 0x10)
mprotect(&(0x7f0000227000/0x1000)=nil, 0x1000, 0xf)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket(0x11, 0x3, 0x8)
socket(0x11, 0xa, 0x8)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\b'], 0x32)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

1m18.336785443s ago: executing program 3 (id=6222):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video(&(0x7f0000000140), 0x11, 0x303000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf254100000008000300", @ANYRES32=r4, @ANYBLOB="08e0c7c1d5df8eaa5cdc6c112e291df18af4a1318724e8149b0ab8bbfd19e973bb749134d7ec447ba256d7eb28f37c54913b53d50366c7747618098d0b561b2d9c98be69dd019f0eead393688a833260c77139171ab69fa01bd0db29c59a58158e9cab99827e868d851769535cdc1c37046a12031a76317fe48d44906579c6b66d13267238155a6036dc6b0f47bf846ae1c5854da7dd7945053cd03bf21716"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4040004)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2})
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$P9_RGETLOCK(r6, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r6, 0x407, 0x100000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4048800}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})

1m13.888867654s ago: executing program 3 (id=6233):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil)
capget(&(0x7f0000000280)={0x20080522}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0xc, 0x9, 0x2, 0x7}, 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
remap_file_pages(&(0x7f0000115000/0x400000)=nil, 0x400000, 0x8, 0x2, 0x1c0000)
fspick(0xffffffffffffff9c, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x20040, 0x2000)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x0)
shutdown(r2, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0xa0002)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x400c4152, &(0x7f0000000540)={0x0, 0x0, 0x6})
add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000740)="186dc20debb1a8b0f3eb385e493fab6ebd37db9405277204f4581e1944f6557de05d49da6d70ea5369e51f2a88f13031cf60120d96cc157f9135c984f2889651fc157c8ebd8c8328fc57821cebea075906aaf4365629c9bda2de33fdd443cff778db00aecdb33cae8bd103b731b522b663fb05355d44ecd9f308de30", 0x7c, 0xfffffffffffffffd)

58.824424628s ago: executing program 33 (id=6233):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil)
capget(&(0x7f0000000280)={0x20080522}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0xc, 0x9, 0x2, 0x7}, 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
remap_file_pages(&(0x7f0000115000/0x400000)=nil, 0x400000, 0x8, 0x2, 0x1c0000)
fspick(0xffffffffffffff9c, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x20040, 0x2000)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x0)
shutdown(r2, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0xa0002)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x400c4152, &(0x7f0000000540)={0x0, 0x0, 0x6})
add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000740)="186dc20debb1a8b0f3eb385e493fab6ebd37db9405277204f4581e1944f6557de05d49da6d70ea5369e51f2a88f13031cf60120d96cc157f9135c984f2889651fc157c8ebd8c8328fc57821cebea075906aaf4365629c9bda2de33fdd443cff778db00aecdb33cae8bd103b731b522b663fb05355d44ecd9f308de30", 0x7c, 0xfffffffffffffffd)

22.078147546s ago: executing program 1 (id=6336):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000880)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12)
madvise(&(0x7f0000267000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
close_range(r3, 0xffffffffffffffff, 0x0)

19.59480251s ago: executing program 1 (id=6341):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000880)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12)
madvise(&(0x7f0000267000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
close_range(r3, 0xffffffffffffffff, 0x0)

17.131551426s ago: executing program 4 (id=6344):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$UHID_CREATE(r5, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x120)
write$UHID_DESTROY(r5, &(0x7f0000000080), 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x271d, &(0x7f0000032380)=""/102400, &(0x7f0000000000)=0x19000)
r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
poll(&(0x7f00000000c0)=[{r7, 0xe7d4c009da6c1985}, {r7, 0x201}], 0x2, 0x4)
bind$tipc(r1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r8 = fsopen(&(0x7f00000000c0)='minix\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)='Md', 0x0, 0x0)

14.897537092s ago: executing program 4 (id=6347):
unshare(0x6a040000)
r0 = socket(0x1e, 0x4, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000004a80)=""/4083, 0xff3}], 0x1}}], 0x1, 0x0, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1})
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000004980)}}], 0x1, 0x9200000000000004)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r7 = userfaultfd(0x1)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
syz_open_dev$media(0x0, 0x9, 0x402)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)

14.755409465s ago: executing program 6 (id=6348):
r0 = gettid()
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x26c, 0x0, 0x8000000}]})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x20010, r4, 0xbf245000)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x408, 0x3, 0x1}, 0x18, 0x0)
r7 = landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0)
landlock_restrict_self(r7, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@bridge_getvlan={0x50, 0x72, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x300008d4)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}}], {0x14}}, 0x50}}, 0x0)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r9}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
read$usbmon(0xffffffffffffffff, 0x0, 0x0)

14.653970369s ago: executing program 0 (id=6349):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
syz_clone(0x1008000, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000200)=0x10, 0x4)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x80105013, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x6, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000400)=0x2, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x20004810, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = dup(r5)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@mpls_newroute={0x1c, 0x18, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1c, 0x0, 0x80, 0x10, 0xff, 0x1, 0xff, 0x2, 0x3000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x4, 0x25, 0x0, 0x0, 0x9, 0x7ff0bdbe, 0x0, 0x0, 0xb5, 0x0})
openat$misdntimer(0xffffff9c, &(0x7f0000000000), 0x4501, 0x0)

12.432793277s ago: executing program 0 (id=6350):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000940)={@broadcast, @local, @void, {@llc={0x8864, {@snap={0xab, 0xaa, '\x00', "fd27a7", 0xf8}}}}}, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
setitimer(0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x401}}, 0x2, 0x9}, &(0x7f0000000980)=0x90)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x40045b17, 0x0)

12.367381255s ago: executing program 6 (id=6351):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r3})
syz_open_dev$media(0x0, 0x0, 0x101d01)
r4 = fsopen(&(0x7f0000000200)='overlay\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='{:\'@-\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0)
fsopen(&(0x7f0000000280)='nfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r4)
fsconfig$FSCONFIG_SET_PATH(r4, 0x3, 0x0, &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000c00)=@ethtool_per_queue_op={0x4b, 0xf, [0x3, 0x9, 0x3, 0xe, 0x2, 0x3, 0x4, 0x1, 0x6, 0x1, 0xba3, 0x1, 0x5, 0x9ff, 0x8, 0x5, 0x80000000, 0x0, 0x2, 0x4d, 0xffffa52e, 0x3c, 0x8, 0xffff, 0x7f, 0x4e3, 0x5, 0x2, 0x0, 0x7fff, 0x6, 0x7, 0x7, 0x1, 0x4, 0x81, 0xd1a, 0x9, 0x9, 0x8, 0x0, 0x10001, 0x5, 0xfc000000, 0x200002, 0x200, 0x5, 0x855e, 0x49, 0x3, 0x5, 0x23, 0xb728, 0x960, 0x4, 0x5, 0x50, 0x7f3, 0x8001, 0x2a, 0x9, 0x800, 0xfd8, 0xbf29, 0x1d49, 0xef, 0x1, 0x7, 0x2, 0xffff, 0x3, 0x5, 0x5, 0x6, 0x4e, 0x1, 0x7, 0xffffb9c0, 0x288, 0x1000, 0xca1b, 0x1, 0x8001, 0x80000000, 0x3, 0x1e300000, 0x8, 0x80000000, 0x3, 0x40, 0x401, 0x6, 0x6c0c, 0x5, 0x3, 0x7fff, 0x7, 0xfffffffe, 0xfffffffd, 0x8, 0x1, 0x0, 0xc, 0x40, 0x6, 0x7, 0x3, 0x8, 0x101, 0x5, 0xcb3a, 0x80000000, 0x10000, 0x3, 0x7, 0x0, 0xfffffff8, 0x1, 0x8, 0xff, 0x3, 0xfffffff8, 0x2, 0x7dc, 0x4, 0xe6, 0x5, 0x6], "8ee43201f26c1c263ceb312aa313a9034c0bb1df2e5f4ad028a43e88065a110e01e68ec90c5f73edf9dba21e64ff911b7787ba7b7e45dd21d4837e896fa802da63a712295a35f3a32c3f4931fe8416f3e598fc"}})
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f00000004c0)='\x1c@\\\x00', 0x0)
read(r4, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002240)={{0x14}, [@NFT_MSG_NEWRULE={0x12f0, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x12c4, 0x4, 0x0, 0x1, [{0x1294, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1280, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_IMMEDIATE_DATA={0x126c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x65, 0x1, "ce61d40b44cbc6fd4dd467e5f5b89ff892490d943c15ed45ee9ad2bba11a87d93b28c08776d3a1c428af3771418bb761ecbf1d3f48f1c0239bbf00b90a9b1fe0e31c4450cc90515f4b4185044ac4d86a5bd93d5e055160943b00163911a9af0255"}, @NFTA_DATA_VALUE={0x65, 0x1, "077821c6e549fc09b60ced88436092c09a948508bb106219161969c887bad499687e5e0f45a8aec379cbf2d7250cd709b475cae6bf2b77c0b7df4a2eb97c6b094484f012b74771114cb95266b356d7d267d742d65a44bbacaa2ae994d83ce35f8b"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x48, 0x1, "f6be0b501cbda085cb03fab23ffaa2cdc94cd3e82cb1d8e86b813dbe23c9b0cca819d3d798d610cb9c149e186c04c45d1c1adf80cab597d01a9d84148f6c9e8ab60ad7c9"}, @NFTA_DATA_VALUE={0xfe4, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "ebbc8895f3ce44d3b3e79f2d3c4280341de8c8e6b1f143d205730f724ecb54c61782b275fd4434057988508aff2376ad1efd6ee651ecf18e4efc559c7b4b6c250188642f8836dd595821b807f98ab5d5133b8c1ae7afe5163e6f47e18cab414a45190f730b1a54af0a6421b5dd72b0da47687e2191a12a638240cf4656c2d34c276b022fb8c47687fdfdbbbdc6660d11801ff9ce97fef7b0bf360ccb46c0bf040ce1766c868dab33a921fc803d8bc0ede46ac8464ad45bf27e6fc591fe52aa5795e7cb926982b39ad3dc873d650cbf2a6e61e68c1c9d4f0dd32ba5f5e9ab5bf248b9ca16b1d9177f4f6a8029f2"}]}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1318}}, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)

11.486180867s ago: executing program 1 (id=6352):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00')
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0xd8, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x2b, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x4c, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r6=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r6, 0x1, 0xffff, 0xa, 0x1ff, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009700c0ffffffffff95"], 0x0, 0xf}, 0x94)
r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r6, <r8=>0x0})
r9 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0xe0000, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r9, 0xc01064c5, &(0x7f0000000540)={&(0x7f0000000500)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x7, 0x0, [], [0x10, 0x0, 0x0, 0x3]})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={r6, r8, 0x9, 0x7, 0x1})
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r10, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1})

11.484892248s ago: executing program 5 (id=6362):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000880)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12)
madvise(&(0x7f0000267000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
close_range(r3, 0xffffffffffffffff, 0x0)

9.225628042s ago: executing program 4 (id=6353):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fspick(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
socket$netlink(0x10, 0x3, 0xa)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e24, 0xffffffff, @remote, 0x1}}}, 0x84)
r3 = open(0x0, 0x1850c2, 0x14c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0)
ftruncate(r3, 0x200004)
read$FUSE(r3, &(0x7f00000013c0)={0x2020}, 0x2020)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_emit_ethernet(0x46, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"})
r5 = socket$inet6(0xa, 0x80802, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f0000000100)={0xa, 0x4e26, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}, {}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="bc490c381382bd53ae1657e11dfd69fc74960ab74b8f2b5f471c42fa35b0389ebf87a4e1e01e5d2de6a42cfb4bc47ba27a24541282362459519cb24b78", 0x3d}, {&(0x7f0000000400)="f7444b7dccb1233a8ec713f93a724fd03355cfd8d79345351e15b96127c2500d6394cb582d07014af84ffb02e27c9844699f6c7f0836a00f28049b7c9949f8dc26ef33e4adf848c6bb544ee041c68aa8208534637410bea6a706589aeeaab1148ad10a59cac1466c0b8290855a56b2d97c644fe2a986d08796eb19d8cb181c97be5f1a1226d1440337f92d3055387e04347a8b31a801d1fab65f853b8b8e01b8e3ea47253e1bdfbb0708fecd10236f2a87519f7bc5722da337590567fdb0c9c33d9b0308078371b7c72c26dab66a9e", 0xcf}, {&(0x7f0000000700)="92b9e0db134ad089740b0266e32e1318a51e706ca73bab53b91475a22691696b8f4d08140f6dec2c0c8ad36a7bfbddf5b56882c6ad26e11f6bd500c62699c78ea268b666011a083934367684f9197df6d4f509a2484bc495fb6b7d44732d86bff502d4480381b37988b6a5357508946d", 0x70}, {&(0x7f0000003400)="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", 0xffc}, {&(0x7f00000002c0)}], 0x5, &(0x7f0000000500)}}], 0x4, 0x1c000)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x4, 0x4, 0x5, 0xffffffff, 0x1, 0x5})
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={0x10001b, 0xfa}, 0x4e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000002340)=""/4096)

9.223673694s ago: executing program 5 (id=6364):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBLED(r0, 0x4b65, 0x75)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x40, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x891}, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
r7 = socket(0x2, 0x3, 0xff)
r8 = gettid()
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r8, r9, 0x0, r7, r7)
ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000200)={0x1, 0x0, 0xd, 0x84880})
r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r12, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r11], 0x38}}, 0x10)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x5d, 0xa0, 0x5, 0x0, 0x44, 0x8, 0x0, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x0, 0x87, 0x1a, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0x6, 0x4, 0xa0, 0x0, 0x2, 0x100000000}], 0x2})
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000140)={[0x7fffffff, 0x4, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x2, 0x3, 0x4, 0x0, 0xdbd], 0xeeee8000, 0x400})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000000240)={0x80})

8.42917266s ago: executing program 1 (id=6354):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000940)={@broadcast, @local, @void, {@llc={0x8864, {@snap={0xab, 0xaa, '\x00', "fd27a7", 0xf8}}}}}, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
setitimer(0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x401}}, 0x2, 0x9}, &(0x7f0000000980)=0x90)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x40045b17, 0x0)

7.949077498s ago: executing program 0 (id=6355):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0xffffffffffffffb9)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000040))
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x8}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2c0000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
unshare(0x2c020600)
r5 = msgget$private(0x0, 0xef)
msgctl$IPC_RMID(r5, 0x0)
write$binfmt_misc(r4, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x3}]}}}]}, 0x44}}, 0x0)

6.767195142s ago: executing program 6 (id=6356):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r8)
execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=r8, @ANYBLOB="000000000000000000000400028008000a00", @ANYRES32, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

6.445819187s ago: executing program 5 (id=6357):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='lblc\x00', &(0x7f00000002c0)='proc\x00', 0x0)
r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x0, 0xdb1e11e678f3b5dc})
io_uring_enter(r3, 0x5370, 0x0, 0x0, 0x0, 0x4e)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000008c0), 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x84, @multicast1, 0x4e21, 0x3, 'none\x00', 0xc, 0x9, 0x67}, {@remote, 0x4623, 0x4, 0x100000ca, 0x12d5f, 0x3}}, 0x44)
r8 = fsmount(r2, 0x0, 0x1)
fchdir(r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20008880)
openat$cgroup_ro(r8, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
syz_open_dev$char_usb(0xc, 0xb4, 0x3)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x63e9}, 0x20)

6.024007524s ago: executing program 0 (id=6358):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='lblc\x00', &(0x7f00000002c0)='proc\x00', 0x0)
r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x0, 0xdb1e11e678f3b5dc})
io_uring_enter(r3, 0x5370, 0x0, 0x0, 0x0, 0x4e)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000008c0), 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x84, @multicast1, 0x4e21, 0x3, 'none\x00', 0xc, 0x9, 0x67}, {@remote, 0x4623, 0x4, 0x100000ca, 0x12d5f, 0x3}}, 0x44)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20008880)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
syz_open_dev$char_usb(0xc, 0xb4, 0x3)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x63e9}, 0x20)

5.410561252s ago: executing program 4 (id=6359):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x1c000, 0x440)
fdatasync(r3)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000016c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0x4000, &(0x7f00000006c0)="02"})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = eventfd2(0x3, 0x1)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000240)={r8, 0x7ff, 0x2, r8})
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="662d008d0b263960fcfa43ebb066a2a4d267699773dcff76b0525b73d842f161aa96bea0e521a2c5e98d22987fd37c983c7cbb396d9bae6e0c6565ec5b654737bd7b28f195130c1e40587eda2493c0c09f2b2abcb0f491ef97f6d5d21eca986137e055ed64e66d441352459d34805cb92c7e6ef0a2cac5c74564d4055b64bfd53679fc541130e739ac59bb85096fb10089d3c4ec055b0b375ed8763e7bc12f473b8b5a5d03249d4e6587a182", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRES16=r4, @ANYBLOB="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"/334], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x104000, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0xae64, 0x0)
ioctl$KVM_SET_PIT2(r7, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x10, 0x3bc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]})
r10 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGICOUNT(r10, 0x545d, 0x0)

5.075752043s ago: executing program 6 (id=6360):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='lblc\x00', &(0x7f00000002c0)='proc\x00', 0x0)
r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x0, 0xdb1e11e678f3b5dc})
io_uring_enter(r3, 0x5370, 0x0, 0x0, 0x0, 0x4e)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000008c0), 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x84, @multicast1, 0x4e21, 0x3, 'none\x00', 0xc, 0x9, 0x67}, {@remote, 0x4623, 0x4, 0x100000ca, 0x12d5f, 0x3}}, 0x44)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20008880)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
syz_open_dev$char_usb(0xc, 0xb4, 0x3)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x63e9}, 0x20)

4.460682063s ago: executing program 0 (id=6361):
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60a4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0', [{0x20, '\x87\xf7\x96\xeb\x05\x8c\x8c\x1d\xbb!O7\xfc\xcf\\\xa5%ih\x1a\xadu\x04\x7f\x10\x87\x8eN\x96\x053\xf0?4)\xa2\x12\xea\xcb1\xaf?t\fwV\xb9\x986\x97\x99k\x93\x84\xff\x9d\xf3\f\xf9.p\x9f\x16\x14\xd7\xc6\xfb\xc5W\x01\xf1\x9a\xa2\x7f{\x98_,/\x81\xea\x99\xd5\xf5*\xc7\xe7R`\xabBDRg\xc2\xc1\xf4\x89rM3\xc5/\x14\xb3\x19=R\x900\xf6\xa9\xb66\x11\x9cR0S\xd2\xb9D\x94\xa8\xfe\x8bz\a\x05\xf5\x83\xce\ta\x85-N\xb1M\xc9\xab\xad\"\xb0B\xb92\x02$/\xc8\xe7.\xb7&\xe2w\xc8M\xaeU/\x00\xe0\xfd\xcc\xabS\xb3\x0e\xb8\xa2\x1daG0\xa3\xd2\r\x11\x83\xc1\xbd\x92)u5\xbb\x9c\x9c)\xd2W\xe7\xb4S\xda\x969X\xa6\xcc\xdd\xb7\b<\xe1\xd2-\x06\xda\xefymb\xf1\xe7\xc1\'.N\xa0\xdb\xde\x1d\tx\xf3\xdd\x04\xb4K\xfdb9d\x92\x87bg\xb5U?\xb5\xd2\x0e\xc9\xcf\xf4\xbb\xd7Y\x843\x84\x14\xd4\xa2\x9e3]\x9f\x88\x01\xbf3\x01\xc3\x92\xb9#V\xa0\xfa\xc1EH\xa1Z\x82\xcb\x96\x1e<\x05p\xae\xc9\xc3W\xf7}b\x8b\xb8\x16\x81V\xa4\x93\x060&69\xd7\xc9\xd7\xd1\x8bP\xd8\xd9\x16\xdd\x15{*\x00#\xb9\xdfN\x18\xb5\x94b\x81\xb8\xb5\x17\x9e\xb8\xe6!&\xbd;\xf0@0+v\x19\x1d]\xbf\xfa\xa0*\xf6\x83e\x13\x1f\xdd\xaf\xc1\xbb\x8bE\xe6\xc2\xe6\xe1\x13\xd8\xcc\xbe\x94\xe6\xcenu\xf5\xc0\x89\xa0\xfb\xfb\xdc\x11B\xfa\xf4\x84\xb0\x8b\r(\xfag\"\x18\xc3\xa1&{\xd7\xfb@\x90o\x91>\x13f\xb5K\x9d\xad\xc0\x8c\xb1\xef\x87\xa1\x9e\xf0\x02[\xb5\x93\xc7D!\x1e\xbe\x02\x90'}], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0x273)
close(r2)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800}, 0x38)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0)
io_setup(0x8, &(0x7f0000004200)=<r3=>0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000}, 0x20)
io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0}])

4.460046521s ago: executing program 5 (id=6363):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1c000, 0x440)
fdatasync(r2)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000016c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0x4000, &(0x7f00000006c0)="02"})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = eventfd2(0x3, 0x1)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000240)={r7, 0x7ff, 0x2, r7})
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="662d008d0b263960fcfa43ebb066a2a4d267699773dcff76b0525b73d842f161aa96bea0e521a2c5e98d22987fd37c983c7cbb396d9bae6e0c6565ec5b654737bd7b28f195130c1e40587eda2493c0c09f2b2abcb0f491ef97f6d5d21eca986137e055ed64e66d441352459d34805cb92c7e6ef0a2cac5c74564d4055b64bfd53679fc541130e739ac59bb85096fb10089d3c4ec055b0b375ed8763e7bc12f473b8b5a5d03249d4e6587a182", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r8, @ANYBLOB=',group_id=', @ANYRES16=r3, @ANYBLOB="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"/334], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x104000, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0xae64, 0x0)
ioctl$KVM_SET_PIT2(r6, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x10, 0x3bc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]})
r9 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGICOUNT(r9, 0x545d, 0x0)

4.281311982s ago: executing program 1 (id=6365):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
syz_clone(0x1008000, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000200)=0x10, 0x4)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x80105013, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x6, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000400)=0x2, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x20004810, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = dup(r5)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@mpls_newroute={0x1c, 0x18, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1c, 0x0, 0x80, 0x10, 0xff, 0x1, 0xff, 0x2, 0x3000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x4, 0x25, 0x0, 0x0, 0x9, 0x7ff0bdbe, 0x0, 0x0, 0xb5, 0x0})
openat$misdntimer(0xffffff9c, &(0x7f0000000000), 0x4501, 0x0)

4.216935403s ago: executing program 4 (id=6366):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108907, 0x0)
connect(r2, &(0x7f0000000140)=@in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x80)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="0000000000000000b703000008"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4)
r5 = syz_io_uring_setup(0x231e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x8, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528)
sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x9901, 0x1, 0x3, 0x1}, 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)

4.19098674s ago: executing program 5 (id=6367):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000940)={@broadcast, @local, @void, {@llc={0x8864, {@snap={0xab, 0xaa, '\x00', "fd27a7", 0xf8}}}}}, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
setitimer(0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x401}}, 0x2, 0x9}, &(0x7f0000000980)=0x90)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r6, 0x40045b17, 0x0)

3.617946471s ago: executing program 6 (id=6368):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0xffffffffffffff8c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008095)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000001000000000000000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000950000080000"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0xff5, &(0x7f00000013c0)=""/4085}, 0x94)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f01000000000000000000090582", @ANYRESOCT=r2], 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
connect$inet(r3, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0x275a, 0x0)
write$binfmt_misc(r4, &(0x7f0000000040), 0xe09)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
getpeername(r5, 0x0, 0x0)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000000c0)=0x20)
write$binfmt_elf32(r6, 0x0, 0x4cd)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x1)
write$dsp(r6, &(0x7f0000000480)="75d512d39077459e67ee110daaf0413bc745ef85bc9f2141d513969bd8000000", 0x1000c)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301)

903.880822ms ago: executing program 5 (id=6369):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
r2 = io_uring_setup(0x45a6, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0})
add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb", 0xae, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98)
sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="93", 0x34000}], 0x1}, 0x4040)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0)
r5 = dup(r4)
fallocate(r5, 0x10, 0x0, 0x72000)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, 0x0, 0x0)
r7 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x2, 0x2, 0x12})
io_uring_register$IORING_REGISTER_IOWQ_AFF(r7, 0x11, &(0x7f0000000d40)="01", 0x1)

754.048012ms ago: executing program 0 (id=6370):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58)
unshare(0x24040000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r1 = socket$pptp(0x18, 0x1, 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x8, 0x0, r1, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1, {0x2}})
io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x80800)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d206781f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67", 0xa}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x50, 0xffffffffffffffff, 0x10000000)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_test', 0x341a82, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x1, 0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_emit_ethernet(0x78, &(0x7f0000000780)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv4={0x800, @tipc={{0x14, 0x4, 0x1, 0x6, 0x6a, 0x64, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ssrr={0x89, 0xb, 0x8b, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3c}]}, @timestamp_addr={0x44, 0x1c, 0xbf, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xdc5b}, {@private=0xa010101, 0xfffffffa}]}, @noop, @timestamp_prespec={0x44, 0x14, 0x5e, 0x3, 0x9, [{@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010100, 0xfffff001}]}]}}, @payload_conn={{{0x1a, 0x0, 0x1, 0x1, 0x1, 0x6, 0x3, 0x2, 0x0, 0x0, 0x1, 0x3, 0x3, 0x0, 0x5, 0x9, 0x1, 0x4e24, 0x4e21}}, [0x0, 0x0]}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x7, 0x10}, 0xc)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r5, &(0x7f0000000400)="b1", 0x1, 0x4400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_SYMLINKAT={0x26, 0x1, 0x0, r4, &(0x7f00000001c0)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000200)='.\x00', 0x0, 0x0, 0x1, {0x0, r6}})
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000085cfb8478c663cf9f8280adbf0af076e41813219903e1826e5c783c3a2be89753aef032949fb324da72c289859c3d8d7d3ff25846f2f0a454c55d2cf24ab9048492ac8466249e96a7e8c39c2d93f38edb12eb39f2be44e015457cc19279cd9e7c0fe032568bf40de439e377b51d3163409d9daac566384c2f34a69400f8f57a9306d69d16475cf26eca4faa0abcc0070a66d1c8556a5a55c678306b3c9e6edf2f7da10c45724a6f5a482a99bed1e26b5c249ba63f3ca5289c571b22e52d2b577693b560f0e7f8d8917b4d9bcea8c923c1f393fe834e736277a3bbdb2776c9f6a5262872b599c258aa4bb47", @ANYRES16=r7, @ANYBLOB="000127bd7000fcdbdf2501000000080005000600000024000380060007004e230000080003000300000006000400310300000800010002000000080004006df90000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24000100)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b140209000000000001090224000100000000090400000103000000092100000001220500090581030280618ee500000000"], 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io(r8, &(0x7f0000000580)={0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="400cff0300000000000043"], 0x0, 0x0, 0x0, 0x0}, 0x0)

199.610595ms ago: executing program 1 (id=6371):
timer_settime(0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYRES64], 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c00"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x4, 0x80}}, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x40, 0xf, 0x2, 0x7}, 0x0, 0x0, &(0x7f00000010c0)={0x40, 0x19, 0x2, "5c95"}, 0x0, 0x0, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0x3}, 0x0})
close(r0)

127.940343ms ago: executing program 6 (id=6372):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x120)
write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x271d, &(0x7f0000032380)=""/102400, &(0x7f0000000000)=0x19000)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3)
r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
poll(&(0x7f00000000c0)=[{r5, 0xe7d4c009da6c1985}, {r5, 0x201}], 0x2, 0x4)
bind$tipc(r0, 0x0, 0x0)
r6 = fsopen(&(0x7f00000000c0)='minix\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='Md', 0x0, 0x0)

0s ago: executing program 4 (id=6373):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='lblc\x00', &(0x7f00000002c0)='proc\x00', 0x0)
r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x0, 0xdb1e11e678f3b5dc})
io_uring_enter(r3, 0x5370, 0x0, 0x0, 0x0, 0x4e)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000008c0), 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x84, @multicast1, 0x4e21, 0x3, 'none\x00', 0xc, 0x9, 0x67}, {@remote, 0x4623, 0x4, 0x100000ca, 0x12d5f, 0x3}}, 0x44)
r8 = fsmount(r2, 0x0, 0x1)
fchdir(r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20008880)
openat$cgroup_ro(r8, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
syz_open_dev$char_usb(0xc, 0xb4, 0x3)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x63e9}, 0x20)

kernel console output (not intermixed with test programs):

tel CE9500 reference design' in warm state
[ 2628.329027][T17709] usb 2-1: selecting invalid altsetting 1
[ 2628.348191][T17709] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 2628.422703][T17709] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2628.452852][T17709] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 2628.462086][T17709] usb 2-1: media controller created
[ 2628.585678][T17709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2628.704410][T17709] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 2628.732281][T17709] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 2628.766792][T17709] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 2628.796721][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5746'.
[ 2628.806531][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5746'.
[ 2629.070844][T17709] usb 2-1: USB disconnect, device number 33
[ 2630.476710][ T1107] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 2631.961565][T27477] usb 1-1: new full-speed USB device number 118 using dummy_hcd
[ 2632.227159][T27477] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2632.248917][T27477] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 2632.291423][T27477] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2632.302563][T27477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2632.362642][T27477] usb 1-1: config 0 descriptor??
[ 2632.368485][ T1123] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2632.447150][T27477] hub 1-1:0.0: USB hub found
[ 2632.765423][ T1130] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2632.765488][T27477] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2632.780502][ T1130] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 2633.232057][T27477] usbhid 1-1:0.0: can't add hid device: -32
[ 2633.238214][T27477] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[ 2634.842218][T27477] usb 1-1: USB disconnect, device number 118
[ 2635.476648][   T30] audit: type=1326 audit(1769946230.435:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.5760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[ 2635.534796][   T30] audit: type=1326 audit(1769946230.445:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.5760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf743d539 code=0x7ffc0000
[ 2635.661927][   T30] audit: type=1326 audit(1769946230.445:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.5760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[ 2635.777356][   T30] audit: type=1326 audit(1769946230.455:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.5760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf743d539 code=0x7ffc0000
[ 2635.886849][   T30] audit: type=1326 audit(1769946230.555:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.5760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[ 2635.892754][ T1163] syzkaller0: entered promiscuous mode
[ 2635.930444][ T1163] syzkaller0: entered allmulticast mode
[ 2635.984591][ T1169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5762'.
[ 2636.014004][ T1169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2636.065842][   T30] audit: type=1326 audit(1769946230.555:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.5760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[ 2636.143675][   T30] audit: type=1326 audit(1769946230.565:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.5760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf743d539 code=0x7ffc0000
[ 2636.249667][   T30] audit: type=1326 audit(1769946230.565:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1164 comm="syz.5.5760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71a572b code=0x7ffc0000
[ 2636.337448][   T30] audit: type=1326 audit(1769946230.565:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.5760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[ 2636.425209][   T30] audit: type=1326 audit(1769946230.565:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1147 comm="syz.5.5760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[ 2636.868686][ T1169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2639.262761][ T1195] x_tables: duplicate underflow at hook 3
[ 2639.775797][ T1206] netlink: 'syz.0.5766': attribute type 4 has an invalid length.
[ 2641.341595][ T1209] pim6reg0: tun_chr_ioctl cmd 1074812118
[ 2643.903212][ T1241] syzkaller0: entered promiscuous mode
[ 2643.908932][ T1241] syzkaller0: entered allmulticast mode
[ 2643.954768][ T1241] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[ 2644.034751][ T1243] input: syz1 as /devices/virtual/input/input120
[ 2644.656554][   T30] kauditd_printk_skb: 5 callbacks suppressed
[ 2644.656574][   T30] audit: type=1326 audit(1769946239.615:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1246 comm="syz.1.5777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2644.801557][   T30] audit: type=1326 audit(1769946239.745:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1246 comm="syz.1.5777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2644.844589][   T30] audit: type=1326 audit(1769946239.785:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1246 comm="syz.1.5777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2644.929312][   T30] audit: type=1326 audit(1769946239.785:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1246 comm="syz.1.5777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2645.011548][   T30] audit: type=1326 audit(1769946239.885:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1246 comm="syz.1.5777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2645.052525][   T30] audit: type=1326 audit(1769946239.885:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1246 comm="syz.1.5777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2645.108923][   T30] audit: type=1326 audit(1769946239.885:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1246 comm="syz.1.5777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2645.198582][   T30] audit: type=1326 audit(1769946240.045:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1246 comm="syz.1.5777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2645.242198][ T1254] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5778'.
[ 2645.263221][   T30] audit: type=1326 audit(1769946240.125:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1246 comm="syz.1.5777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2645.352829][   T30] audit: type=1326 audit(1769946240.125:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1246 comm="syz.1.5777" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2645.561816][T17709] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 2645.721643][T17709] usb 6-1: Using ep0 maxpacket: 8
[ 2645.733938][T17709] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 2645.747412][T17709] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2645.767679][T17709] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2645.777564][T17709] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2645.797792][T17709] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2645.818215][T17709] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2645.871675][T17709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2646.132126][T17709] usb 6-1: GET_CAPABILITIES returned 0
[ 2646.137652][T17709] usbtmc 6-1:16.0: can't read capabilities
[ 2646.405924][ T1271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5781'.
[ 2646.575490][ T1270] netlink: 'syz.4.5779': attribute type 2 has an invalid length.
[ 2646.710986][ T1275] netlink: 'syz.4.5779': attribute type 2 has an invalid length.
[ 2646.763481][ T1270] !: entered promiscuous mode
[ 2646.799107][T17709] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 2646.981627][T17709] usb 1-1: Using ep0 maxpacket: 8
[ 2647.004308][T17709] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2647.020078][T17709] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2647.031567][T17709] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2647.046261][T17709] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2647.067900][T17709] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2647.094834][T17709] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2647.124260][T17709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2647.363487][T17709] usb 1-1: GET_CAPABILITIES returned 0
[ 2647.369023][T17709] usbtmc 1-1:16.0: can't read capabilities
[ 2648.222441][T27477] usb 6-1: USB disconnect, device number 91
[ 2648.701652][T27477] usb 2-1: new low-speed USB device number 34 using dummy_hcd
[ 2648.841902][T27477] usb 2-1: device descriptor read/64, error -71
[ 2649.081573][T27477] usb 2-1: new low-speed USB device number 35 using dummy_hcd
[ 2649.221784][T27477] usb 2-1: device descriptor read/64, error -71
[ 2649.342701][T27477] usb usb2-port1: attempt power cycle
[ 2649.711518][T27477] usb 2-1: new low-speed USB device number 36 using dummy_hcd
[ 2649.754921][T27477] usb 2-1: device descriptor read/8, error -71
[ 2650.081842][T27477] usb 2-1: new low-speed USB device number 37 using dummy_hcd
[ 2650.102372][T27477] usb 2-1: device descriptor read/8, error -71
[ 2650.178386][T32652] usb 1-1: USB disconnect, device number 119
[ 2650.213907][T27477] usb usb2-port1: unable to enumerate USB device
[ 2650.722717][T32652] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 2650.906747][T32652] usb 4-1: Using ep0 maxpacket: 8
[ 2650.932507][T32652] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2650.954294][T32652] usb 4-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config
[ 2650.989541][T32652] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2651.026123][T32652] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2651.078563][T32652] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2651.118826][T32652] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2651.149185][T32652] usb 4-1: Product: syz
[ 2651.173404][T32652] usb 4-1: Manufacturer: syz
[ 2651.208062][T32652] usb 4-1: SerialNumber: syz
[ 2651.258306][ T1324] batman_adv: batadv0: Interface deactivated: dummy0
[ 2651.584542][T32652] cdc_ncm 4-1:1.0: skipping garbage
[ 2651.595848][T32652] cdc_ncm 4-1:1.0: skipping garbage
[ 2651.601098][T32652] cdc_ncm 4-1:1.0: skipping garbage
[ 2651.621192][T32652] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[ 2651.628720][T32652] cdc_ncm 4-1:1.0: bind() failure
[ 2651.638766][T32652] usb 4-1: USB disconnect, device number 12
[ 2652.814169][ T1338] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5793'.
[ 2652.971752][T17709] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[ 2653.153384][T17709] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2653.174964][T17709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 2653.205577][T17709] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2653.248811][T17709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2653.286086][T17709] usb 2-1: config 0 descriptor??
[ 2653.300203][ T1336] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2653.325471][T17709] hub 2-1:0.0: USB hub found
[ 2653.487703][ T1356] fuse: Unknown parameter 'f-'
[ 2653.552095][T17709] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2653.970818][T17709] usbhid 2-1:0.0: can't add hid device: -32
[ 2653.988779][T17709] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[ 2654.027862][T17709] usb 2-1: USB disconnect, device number 38
[ 2654.297583][ T1366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5799'.
[ 2654.411293][ T1367] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5799'.
[ 2654.890826][ T1374] netlink: 'syz.3.5800': attribute type 2 has an invalid length.
[ 2654.963739][ T1374] : entered promiscuous mode
[ 2655.071280][ T1374] GUP no longer grows the stack in syz.3.5800 (1374): 80005000-80008000 (80004000)
[ 2655.105192][ T1374] CPU: 0 UID: 0 PID: 1374 Comm: syz.3.5800 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2655.105225][ T1374] Tainted: [L]=SOFTLOCKUP
[ 2655.105234][ T1374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2655.105246][ T1374] Call Trace:
[ 2655.105255][ T1374]  <TASK>
[ 2655.105265][ T1374]  dump_stack_lvl+0xe8/0x150
[ 2655.105295][ T1374]  fixup_user_fault+0x637/0x6f0
[ 2655.105329][ T1374]  fault_in_user_writeable+0x71/0xd0
[ 2655.105356][ T1374]  futex_lock_pi+0x800/0xb00
[ 2655.105386][ T1374]  ? __pfx_futex_lock_pi+0x10/0x10
[ 2655.105432][ T1374]  ? __pfx_futex_wake_mark+0x10/0x10
[ 2655.105467][ T1374]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[ 2655.105497][ T1374]  do_futex+0x292/0x420
[ 2655.105529][ T1374]  ? __pfx_do_futex+0x10/0x10
[ 2655.105556][ T1374]  ? __vm_munmap+0x2e6/0x3d0
[ 2655.105584][ T1374]  __se_sys_futex_time32+0x3ab/0x440
[ 2655.105619][ T1374]  ? __pfx___se_sys_futex_time32+0x10/0x10
[ 2655.105650][ T1374]  ? rcu_is_watching+0x15/0xb0
[ 2655.105674][ T1374]  ? __ia32_sys_futex_time32+0x21/0xf0
[ 2655.105707][ T1374]  __do_fast_syscall_32+0x1d2/0x540
[ 2655.105729][ T1374]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2655.105747][ T1374]  ? do_fast_syscall_32+0x33/0x70
[ 2655.105767][ T1374]  ? asm_int80_emulation+0x1a/0x20
[ 2655.105785][ T1374]  ? do_int80_emulation+0x20e/0x400
[ 2655.105810][ T1374]  do_fast_syscall_32+0x33/0x70
[ 2655.105839][ T1374]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2655.105862][ T1374] RIP: 0023:0xf7f37539
[ 2655.105885][ T1374] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2655.105902][ T1374] RSP: 002b:00000000f4f9150c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0
[ 2655.105931][ T1374] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 000000000000008d
[ 2655.105944][ T1374] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000
[ 2655.105957][ T1374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2655.105967][ T1374] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2655.105985][ T1374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2655.106014][ T1374]  </TASK>
[ 2656.364809][ T1396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5805'.
[ 2657.191911][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 2657.198366][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2657.550287][ T1408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5806'.
[ 2657.682554][ T1417] fuse: Unknown parameter 'ìÔ‰ðÉF¡fd'
[ 2658.065407][ T1424] fuse: Bad value for 'fd'
[ 2658.167267][ T1426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2658.176562][ T1426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2661.096315][ T1451] could not allocate digest TFM handle md5
[ 2663.140847][ T1483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5821'.
[ 2663.185389][ T1483] netlink: 277 bytes leftover after parsing attributes in process `syz.4.5821'.
[ 2663.194767][ T1483] netlink: 277 bytes leftover after parsing attributes in process `syz.4.5821'.
[ 2664.062239][T17709] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 2664.192903][   T30] kauditd_printk_skb: 40 callbacks suppressed
[ 2664.192926][   T30] audit: type=1326 audit(1769946259.155:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1499 comm="syz.3.5824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37539 code=0x7ffc0000
[ 2664.241559][T17709] usb 2-1: Using ep0 maxpacket: 16
[ 2664.253786][   T30] audit: type=1326 audit(1769946259.215:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1499 comm="syz.3.5824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37539 code=0x7ffc0000
[ 2664.291818][   T30] audit: type=1326 audit(1769946259.235:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1499 comm="syz.3.5824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f37539 code=0x7ffc0000
[ 2664.336439][ T1507] Cannot find add_set index 3 as target
[ 2664.349894][T17709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2664.368833][T17709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2664.395910][T17709] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2664.433960][   T30] audit: type=1326 audit(1769946259.235:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1499 comm="syz.3.5824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37539 code=0x7ffc0000
[ 2664.468709][T17709] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2664.486940][T17709] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2664.504901][   T30] audit: type=1326 audit(1769946259.235:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1499 comm="syz.3.5824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37539 code=0x7ffc0000
[ 2664.534327][T17709] usb 2-1: Manufacturer: syz
[ 2664.568658][   T30] audit: type=1326 audit(1769946259.235:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1499 comm="syz.3.5824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f37539 code=0x7ffc0000
[ 2664.624372][   T30] audit: type=1326 audit(1769946259.235:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1499 comm="syz.3.5824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37539 code=0x7ffc0000
[ 2664.659420][T17709] usb 2-1: config 0 descriptor??
[ 2664.697655][   T30] audit: type=1326 audit(1769946259.235:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1499 comm="syz.3.5824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37539 code=0x7ffc0000
[ 2664.773171][   T30] audit: type=1326 audit(1769946259.235:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1499 comm="syz.3.5824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f37539 code=0x7ffc0000
[ 2664.837683][   T30] audit: type=1326 audit(1769946259.235:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1499 comm="syz.3.5824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37539 code=0x7ffc0000
[ 2666.883214][ T1524] fuse: Unknown parameter 'f-'
[ 2666.970581][T32652] usb 2-1: USB disconnect, device number 39
[ 2667.103957][ T1528] sctp: [Deprecated]: syz.4.5829 (pid 1528) Use of int in maxseg socket option.
[ 2667.103957][ T1528] Use struct sctp_assoc_value instead
[ 2667.129200][ T1528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5829'.
[ 2667.678880][ T1528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5829'.
[ 2669.011938][ T1558] netlink: 'syz.1.5835': attribute type 2 has an invalid length.
[ 2669.119700][ T1560] netlink: 'syz.1.5835': attribute type 2 has an invalid length.
[ 2669.168230][ T1558] !: entered promiscuous mode
[ 2671.160436][ T1564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5838'.
[ 2671.186031][   T30] kauditd_printk_skb: 41 callbacks suppressed
[ 2671.186047][   T30] audit: type=1326 audit(1769946266.145:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1561 comm="syz.1.5838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2671.259162][   T30] audit: type=1326 audit(1769946266.145:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1561 comm="syz.1.5838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2671.291798][   T30] audit: type=1326 audit(1769946266.145:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1561 comm="syz.1.5838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2671.326994][   T30] audit: type=1326 audit(1769946266.145:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1561 comm="syz.1.5838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2671.357000][   T30] audit: type=1326 audit(1769946266.145:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1561 comm="syz.1.5838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2671.379492][   T30] audit: type=1326 audit(1769946266.185:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1561 comm="syz.1.5838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2671.405521][   T30] audit: type=1326 audit(1769946266.185:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1561 comm="syz.1.5838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2671.446910][   T30] audit: type=1326 audit(1769946266.185:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1561 comm="syz.1.5838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2671.478225][ T1571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5839'.
[ 2671.489261][   T30] audit: type=1326 audit(1769946266.185:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1561 comm="syz.1.5838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2671.541524][T27477] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 2671.572092][   T30] audit: type=1326 audit(1769946266.185:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1561 comm="syz.1.5838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000
[ 2671.607048][ T1571] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[ 2671.739288][T27477] usb 2-1: Using ep0 maxpacket: 16
[ 2671.767056][T27477] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[ 2671.819847][T27477] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2671.834295][T27477] usb 2-1: config 0 has no interface number 0
[ 2671.954816][T27477] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 2671.967012][T27477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2672.044371][T27477] usb 2-1: Product: syz
[ 2672.048757][T27477] usb 2-1: Manufacturer: syz
[ 2672.060617][T27477] usb 2-1: SerialNumber: syz
[ 2672.078894][T27477] usb 2-1: config 0 descriptor??
[ 2674.075656][T27477] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[ 2674.086264][T27477] uvcvideo 2-1:0.105: No valid video chain found.
[ 2674.105663][T27477] usb 2-1: USB disconnect, device number 40
[ 2675.021013][ T1617] netlink: 'syz.0.5849': attribute type 2 has an invalid length.
[ 2675.064097][ T1617] !: entered promiscuous mode
[ 2675.114129][ T1611] netlink: 'syz.0.5849': attribute type 2 has an invalid length.
[ 2677.563024][ T1640] ALSA: mixer_oss: invalid OSS volume 'u'
[ 2680.841592][   T30] kauditd_printk_skb: 56 callbacks suppressed
[ 2680.841613][   T30] audit: type=1326 audit(1769946275.795:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1677 comm="syz.3.5863" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f37539 code=0x0
[ 2680.918104][ T1687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5864'.
[ 2681.099539][ T1687] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[ 2682.003133][ T1692] tipc: Failed to remove unknown binding: 66,1,1/1181062766:296528661/296528663
[ 2682.022173][ T1692] tipc: Failed to remove unknown binding: 66,1,1/1181062766:296528661/296528663
[ 2682.031681][ T1692] tipc: Failed to remove unknown binding: 66,1,1/1181062766:296528661/296528663
[ 2682.159506][ T1699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5866'.
[ 2682.421484][T32652] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 2682.641514][T32652] usb 1-1: Using ep0 maxpacket: 8
[ 2682.667302][T32652] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2682.693132][T32652] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2682.745090][T32652] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2682.767071][T32652] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2682.782471][T32652] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2682.798200][T32652] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2682.815071][T32652] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2683.047312][T32652] usb 1-1: GET_CAPABILITIES returned 0
[ 2683.055521][T32652] usbtmc 1-1:16.0: can't read capabilities
[ 2683.221596][T17709] usb 6-1: new full-speed USB device number 92 using dummy_hcd
[ 2683.351030][ T1717] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 2683.414313][T17709] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2683.427854][T17709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 2683.442840][T17709] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2683.452401][T17709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2683.464009][T17709] usb 6-1: config 0 descriptor??
[ 2683.470575][ T1707] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2683.489221][T17709] hub 6-1:0.0: USB hub found
[ 2683.724236][T17709] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2683.771704][T17709] usbhid 6-1:0.0: can't add hid device: -71
[ 2683.778744][T17709] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 2683.814917][T17709] usb 6-1: USB disconnect, device number 92
[ 2684.864579][T17709] usb 1-1: USB disconnect, device number 120
[ 2685.630706][ T1747] netlink: 'syz.4.5876': attribute type 2 has an invalid length.
[ 2685.646127][ T1747] : entered promiscuous mode
[ 2686.258866][ T1756] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5878'.
[ 2686.766760][ T1732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2688.018909][ T1762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5879'.
[ 2688.195717][   T30] audit: type=1326 audit(1769946283.155:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1766 comm="syz.4.5881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2688.241642][   T30] audit: type=1326 audit(1769946283.155:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1766 comm="syz.4.5881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2688.272034][   T30] audit: type=1326 audit(1769946283.155:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1766 comm="syz.4.5881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2688.300484][   T30] audit: type=1326 audit(1769946283.155:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1766 comm="syz.4.5881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2688.323616][   T30] audit: type=1326 audit(1769946283.175:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1766 comm="syz.4.5881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2688.715610][   T30] audit: type=1326 audit(1769946283.675:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1766 comm="syz.4.5881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2688.758153][   T30] audit: type=1326 audit(1769946283.675:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1766 comm="syz.4.5881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2688.781923][   T30] audit: type=1326 audit(1769946283.705:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1776 comm="syz.4.5881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf719572b code=0x7ffc0000
[ 2688.898049][   T30] audit: type=1326 audit(1769946283.845:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1766 comm="syz.4.5881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2688.925438][   T30] audit: type=1326 audit(1769946283.885:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1776 comm="syz.4.5881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2689.131633][T27477] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[ 2689.313124][T27477] usb 6-1: Using ep0 maxpacket: 16
[ 2689.330363][T27477] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2689.350009][T27477] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2689.376253][T27477] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2689.418844][T27477] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2689.454753][T27477] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2689.470961][T27477] usb 6-1: Manufacturer: syz
[ 2689.489916][T27477] usb 6-1: config 0 descriptor??
[ 2690.219822][ T1798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5886'.
[ 2690.265086][ T1799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5885'.
[ 2690.517963][T17707] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[ 2690.581576][T17709] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 2690.681869][T17707] usb 1-1: Using ep0 maxpacket: 8
[ 2690.689597][T17707] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2690.698810][T17707] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2690.715482][T17707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2690.731828][T17707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2690.750163][T17707] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2690.763746][T17709] usb 4-1: Using ep0 maxpacket: 8
[ 2690.779009][T17707] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2690.799173][T17707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2690.832795][T17709] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 2690.841110][T17709] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2690.853625][T17709] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2690.871025][T17709] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2690.896445][T17709] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2690.911545][T17709] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2690.921509][T17709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2691.115709][T17707] usb 1-1: GET_CAPABILITIES returned 0
[ 2691.121248][T17707] usbtmc 1-1:16.0: can't read capabilities
[ 2691.195133][T17709] usb 4-1: GET_CAPABILITIES returned 0
[ 2691.200803][T17709] usbtmc 4-1:16.0: can't read capabilities
[ 2691.846521][T17709] usb 6-1: USB disconnect, device number 93
[ 2693.427147][T17709] usb 4-1: USB disconnect, device number 13
[ 2693.617629][T17707] usb 1-1: USB disconnect, device number 121
[ 2693.931885][ T1838] IPv6: Can't replace route, no match found
[ 2693.957713][ T1838] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5895'.
[ 2695.969026][ T1855] fuse: Unknown parameter 'f-'
[ 2696.417799][ T1838] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5895'.
[ 2698.187437][ T1883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5903'.
[ 2698.517842][T17707] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 2698.687275][T17707] usb 1-1: Using ep0 maxpacket: 8
[ 2698.695064][T17707] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2698.704348][T17707] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2698.762706][T17707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2698.789919][T17707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2698.817825][T17707] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2698.847313][T17707] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2698.871831][T17707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2699.036463][ T1894] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5906'.
[ 2699.131963][T17707] usb 1-1: GET_CAPABILITIES returned 0
[ 2699.142727][T17707] usbtmc 1-1:16.0: can't read capabilities
[ 2699.311745][T17707] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[ 2699.321801][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[ 2699.461459][T17707] usb 6-1: device descriptor read/64, error -32
[ 2699.701492][T17707] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 2699.751455][   T30] kauditd_printk_skb: 60 callbacks suppressed
[ 2699.751481][   T30] audit: type=1326 audit(1769946294.705:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1897 comm="syz.4.5907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2699.844063][   T30] audit: type=1326 audit(1769946294.705:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1897 comm="syz.4.5907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2699.873875][   T30] audit: type=1326 audit(1769946294.745:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1897 comm="syz.4.5907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2699.909805][   T30] audit: type=1326 audit(1769946294.745:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1897 comm="syz.4.5907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2699.941650][   T30] audit: type=1326 audit(1769946294.745:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1897 comm="syz.4.5907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2699.964952][T17707] usb 6-1: Using ep0 maxpacket: 8
[ 2699.971045][   T30] audit: type=1326 audit(1769946294.745:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1897 comm="syz.4.5907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2700.004983][   T30] audit: type=1326 audit(1769946294.755:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1897 comm="syz.4.5907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2700.031596][   T30] audit: type=1326 audit(1769946294.755:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1897 comm="syz.4.5907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2700.054683][T17707] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 2700.063238][   T30] audit: type=1326 audit(1769946294.755:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1897 comm="syz.4.5907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2700.065627][T17707] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2700.100021][T17707] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2700.111018][T17707] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2700.122337][T17707] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2700.135685][T17707] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2700.148437][T17707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2700.158803][   T30] audit: type=1326 audit(1769946294.755:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1897 comm="syz.4.5907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000
[ 2700.409612][T17707] usb 6-1: GET_CAPABILITIES returned 0
[ 2700.415853][T17707] usbtmc 6-1:16.0: can't read capabilities
[ 2701.050275][T32652] usb 1-1: USB disconnect, device number 122
[ 2701.893881][T17709] usb 6-1: USB disconnect, device number 95
[ 2702.044890][ T1922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5922'.
[ 2702.331686][T17707] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[ 2702.388546][ T1935] netlink: 'syz.5.5913': attribute type 10 has an invalid length.
[ 2702.424553][ T1935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5913'.
[ 2702.501653][T17707] usb 1-1: Using ep0 maxpacket: 8
[ 2702.512524][T17707] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2702.512581][T17707] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2702.549518][T17707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2702.591858][T17707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2702.606431][ T1935] team0 (unregistering): left promiscuous mode
[ 2702.622803][T17707] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2702.637112][ T1935] team_slave_0: left promiscuous mode
[ 2702.647736][ T1935] team_slave_1: left promiscuous mode
[ 2702.662444][T17707] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2702.672910][ T1935] dummy0: left promiscuous mode
[ 2702.693680][ T1935] team0 (unregistering): Port device team_slave_0 removed
[ 2702.701018][T17707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2702.726127][ T1935] team0 (unregistering): Port device team_slave_1 removed
[ 2702.763242][ T1935] team0 (unregistering): Port device dummy0 removed
[ 2703.100171][T17707] usb 1-1: GET_CAPABILITIES returned 0
[ 2703.107974][T17707] usbtmc 1-1:16.0: can't read capabilities
[ 2704.376268][T32652] usb 1-1: USB disconnect, device number 123
[ 2704.657054][ T1954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5914'.
[ 2704.677480][ T1954] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5914'.
[ 2704.692285][ T1954] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5914'.
[ 2705.081565][T27477] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 2705.231526][T27477] usb 2-1: Using ep0 maxpacket: 32
[ 2705.267946][T27477] usb 2-1: config 1 interface 0 altsetting 95 bulk endpoint 0x82 has invalid maxpacket 64
[ 2705.300867][T27477] usb 2-1: config 1 interface 0 altsetting 95 bulk endpoint 0x3 has invalid maxpacket 16
[ 2705.331514][T27477] usb 2-1: config 1 interface 0 altsetting 95 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2705.379376][T27477] usb 2-1: config 1 interface 0 has no altsetting 0
[ 2705.449083][T27477] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2705.471553][T27477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2705.499222][T27477] usb 2-1: Product: syz
[ 2705.529625][T27477] usb 2-1: Manufacturer: syz
[ 2705.549877][T27477] usb 2-1: SerialNumber: syz
[ 2705.593160][ T1956] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2705.641644][ T1956] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2705.841979][ T1944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2706.111413][ T1956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2706.182126][ T1956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2706.807459][T27477] usb 2-1: bad CDC descriptors
[ 2706.874984][T27477] usb 2-1: USB disconnect, device number 41
[ 2707.635517][ T1983] fuse: Unknown parameter 'f-'
[ 2709.226406][ T2014] netlink: 'syz.5.5931': attribute type 2 has an invalid length.
[ 2709.269950][ T2014] : entered promiscuous mode
[ 2710.331629][   T30] kauditd_printk_skb: 21 callbacks suppressed
[ 2710.331649][   T30] audit: type=1326 audit(1769946305.275:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2002 comm="syz.1.5929" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x0
[ 2712.055917][ T2050] tipc: Failed to remove unknown binding: 66,1,1/0:3915360724/3915360726
[ 2712.112039][ T2050] tipc: Failed to remove unknown binding: 66,1,1/0:3915360724/3915360726
[ 2712.135507][ T2050] tipc: Failed to remove unknown binding: 66,1,1/0:3915360724/3915360726
[ 2713.391763][ T2065] binder: BINDER_SET_CONTEXT_MGR already set
[ 2713.408267][ T2065] binder: 2064:2065 ioctl 4018620d 800000c0 returned -16
[ 2713.444891][ T2065] binder: BINDER_SET_CONTEXT_MGR already set
[ 2713.460850][ T2065] binder: 2064:2065 ioctl 4018620d 80000040 returned -16
[ 2713.507721][ T2065] fuse: Unknown parameter 'f-'
[ 2714.148063][ T2077] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5942'.
[ 2714.464723][ T2082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5943'.
[ 2714.735712][ T2082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2714.761230][ T2082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2715.332654][ T2095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5948'.
[ 2716.575336][ T2105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5949'.
[ 2716.942278][T17707] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[ 2717.101590][T17707] usb 1-1: Using ep0 maxpacket: 8
[ 2717.115771][T17707] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2717.126014][T17707] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2717.144888][T17707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2717.161424][T17707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2717.172309][T17707] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2717.187051][T17707] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2717.196902][T17707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2717.214635][   T30] audit: type=1326 audit(1769946312.175:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2107 comm="syz.5.5950" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x0
[ 2717.520310][T17707] usb 1-1: GET_CAPABILITIES returned 0
[ 2717.550584][T17707] usbtmc 1-1:16.0: can't read capabilities
[ 2718.625397][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 2718.631943][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2718.801178][ T2125] binder: BINDER_SET_CONTEXT_MGR already set
[ 2718.807947][ T2125] binder: 2124:2125 ioctl 4018620d 800000c0 returned -16
[ 2719.611445][T21135] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[ 2719.811615][T21135] usb 2-1: device descriptor read/64, error -71
[ 2720.091429][T21135] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[ 2720.320026][ T2144] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[ 2720.393452][ T2144] openvswitch: netlink: Message has 16 unknown bytes.
[ 2720.447764][T32652] usb 1-1: USB disconnect, device number 124
[ 2720.601787][T21135] usb 2-1: device descriptor read/64, error -71
[ 2720.721976][T21135] usb usb2-port1: attempt power cycle
[ 2721.011427][T17707] usb 1-1: new low-speed USB device number 125 using dummy_hcd
[ 2721.141510][T21135] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[ 2721.285775][T21135] usb 2-1: device descriptor read/8, error -71
[ 2721.439795][T17707] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 2721.454655][T17707] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 2721.483839][T17707] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2721.520627][T17707] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 2721.561566][T21135] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[ 2721.582117][T21135] usb 2-1: device descriptor read/8, error -71
[ 2721.593609][T17707] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 2721.643261][T17707] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 2721.654249][T17707] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 2721.675396][T17707] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2721.696261][T21135] usb usb2-port1: unable to enumerate USB device
[ 2721.714703][T17707] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 2721.761219][T17707] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 2721.833749][T17707] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 2721.855856][T17707] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 2721.884371][T17707] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2721.944087][T17707] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 2722.087463][T17707] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 2723.434239][T17707] usb 1-1: string descriptor 0 read error: -22
[ 2723.440595][T17707] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 2723.450161][T17707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2723.467161][T17707] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 2723.731155][T17707] usb 1-1: USB disconnect, device number 125
[ 2724.102200][ T2181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5964'.
[ 2724.451478][T21135] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[ 2724.632616][T21135] usb 1-1: Using ep0 maxpacket: 8
[ 2724.639819][T21135] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2724.649982][T21135] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2724.681554][T21135] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2724.732299][T21135] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2724.776616][T21135] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2724.827546][T21135] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2724.891683][T21135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2725.125511][T21135] usb 1-1: GET_CAPABILITIES returned 0
[ 2725.146565][T21135] usbtmc 1-1:16.0: can't read capabilities
[ 2725.386916][ T2197] xt_bpf: check failed: parse error
[ 2725.531669][T27477] usb 2-1: new full-speed USB device number 46 using dummy_hcd
[ 2725.694337][T27477] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2725.712449][T27477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 2725.733499][T27477] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2725.832567][T27477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2725.854727][T27477] usb 2-1: config 0 descriptor??
[ 2725.880837][ T2192] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 2725.960684][T27477] hub 2-1:0.0: USB hub found
[ 2726.195667][T27477] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2726.632826][T27477] usbhid 2-1:0.0: can't add hid device: -71
[ 2726.678423][T27477] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2726.722603][T27477] usb 2-1: USB disconnect, device number 46
[ 2726.927576][T17707] usb 1-1: USB disconnect, device number 126
[ 2727.172896][ T2208] fuse: Unknown parameter 'f-'
[ 2727.241457][T17709] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 2727.403658][T17709] usb 6-1: Using ep0 maxpacket: 8
[ 2727.437228][T17709] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[ 2727.478172][T17709] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64
[ 2727.557869][T17709] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2727.629402][T17709] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 2727.663358][T17709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2727.690559][T17709] usb 6-1: Product: syz
[ 2727.704629][T17709] usb 6-1: Manufacturer: syz
[ 2727.716692][ T2216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5973'.
[ 2727.751430][T17709] usb 6-1: SerialNumber: syz
[ 2727.857662][T17709] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[ 2727.979292][T17709] usbtest 6-1:1.0: couldn't get endpoints, -22
[ 2727.990596][T17709] usbtest 6-1:1.0: probe with driver usbtest failed with error -22
[ 2728.081609][T27477] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[ 2728.285284][T27477] usb 1-1: Using ep0 maxpacket: 8
[ 2728.444287][T27477] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2728.477912][T27477] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2728.504940][T27477] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2728.524955][T27477] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2728.550062][T27477] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2728.581471][T27477] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2728.600791][T27477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2728.990148][T27477] usb 1-1: GET_CAPABILITIES returned 0
[ 2729.045343][T27477] usbtmc 1-1:16.0: can't read capabilities
[ 2729.197610][ T2229] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5975'.
[ 2729.309198][ T2229] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5975'.
[ 2729.367846][ T2229] netlink: 'syz.3.5975': attribute type 3 has an invalid length.
[ 2729.659912][ T2229] netlink: 11 bytes leftover after parsing attributes in process `syz.3.5975'.
[ 2729.892693][ T2229] 
: renamed from bridge_slave_0
[ 2730.516942][ T2238] netlink: 'syz.1.5976': attribute type 10 has an invalid length.
[ 2730.546457][ T2238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5976'.
[ 2730.576681][T17709] usb 1-1: USB disconnect, device number 127
[ 2730.835960][T32652] usb 6-1: USB disconnect, device number 96
[ 2731.169885][ T2255] program syz.4.5979 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2732.512641][ T2261] syz.3.5981 (2261): drop_caches: 2
[ 2732.751481][T27477] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 2732.992882][T27477] usb 1-1: Using ep0 maxpacket: 8
[ 2733.002172][T27477] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2733.052094][T27477] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2733.067471][T27477] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2733.117818][T27477] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2733.160180][T27477] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2733.188958][T27477] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2733.219386][T27477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2733.455796][T27477] usb 1-1: GET_CAPABILITIES returned 0
[ 2733.461894][T27477] usbtmc 1-1:16.0: can't read capabilities
[ 2734.361659][T17709] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 2734.380103][ T2284] QAT: failed to copy from user.
[ 2734.606527][T17709] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[ 2734.648298][T17709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024
[ 2734.678531][T17709] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[ 2734.744323][T17709] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2734.754073][T17709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2734.771508][T17709] usb 2-1: Product: syz
[ 2734.778674][T17709] usb 2-1: Manufacturer: syz
[ 2734.792205][T17709] usb 2-1: SerialNumber: syz
[ 2734.822412][T17709] usb 2-1: config 0 descriptor??
[ 2734.870249][ T2274] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 2735.189960][ T2274] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 2735.292628][T17707] usb 1-1: USB disconnect, device number 2
[ 2735.680575][ T2297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5988'.
[ 2736.041514][T17709] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 2736.211755][ T2303] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2736.222045][T17709] usb 1-1: Using ep0 maxpacket: 8
[ 2736.233320][T17709] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2736.241905][T17709] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2736.252061][T17709] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2736.262443][T17709] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2736.282455][T17709] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2736.296136][T17709] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2736.311995][T17709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2736.534553][T17709] usb 1-1: GET_CAPABILITIES returned 0
[ 2736.550343][T17709] usbtmc 1-1:16.0: can't read capabilities
[ 2737.597025][T17709] usb 2-1: USB disconnect, device number 47
[ 2738.499120][T17709] usb 1-1: USB disconnect, device number 3
[ 2739.633715][ T2352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2739.645678][ T2352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2739.874509][T17709] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 2740.111924][T17709] usb 4-1: Using ep0 maxpacket: 8
[ 2740.160105][T17709] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 2740.180189][T17709] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2740.213158][T17709] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2740.255488][T17709] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2740.304750][T17709] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2740.360977][T17709] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2740.401982][T17709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2740.743911][T17709] usb 4-1: GET_CAPABILITIES returned 0
[ 2740.768809][T17709] usbtmc 4-1:16.0: can't read capabilities
[ 2741.517596][ T2365] QAT: failed to copy from user.
[ 2742.521264][T17709] usb 4-1: USB disconnect, device number 14
[ 2743.691275][ T2378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6007'.
[ 2743.721016][ T2378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6007'.
[ 2743.731049][ T2378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6007'.
[ 2743.763384][ T2394] fuse: Unknown parameter 'f-'
[ 2744.248238][ T2378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6007'.
[ 2744.780946][ T2378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6007'.
[ 2744.971908][ T2378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6007'.
[ 2747.448735][ T2449] QAT: failed to copy from user.
[ 2747.841531][T27477] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 2747.991645][T27477] usb 2-1: Using ep0 maxpacket: 8
[ 2747.998486][T27477] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 2747.998545][T27477] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2747.998572][T27477] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2747.998599][T27477] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2747.998662][T27477] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2747.998694][T27477] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2747.998711][T27477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2748.251550][T27477] usb 2-1: GET_CAPABILITIES returned 0
[ 2748.251601][T27477] usbtmc 2-1:16.0: can't read capabilities
[ 2750.222591][ T2481] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 2750.633436][T21135] usb 2-1: USB disconnect, device number 48
[ 2750.681548][T27477] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 2753.176820][ T2515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6028'.
[ 2753.197639][ T2516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6027'.
[ 2753.383973][ T2515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6028'.
[ 2753.451423][T32652] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 2753.601555][T32652] usb 4-1: Using ep0 maxpacket: 8
[ 2753.687548][T32652] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 2753.696205][T32652] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2753.711540][T32652] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2753.735080][T32652] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2753.735116][T32652] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2753.735151][T32652] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2753.735169][T32652] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2754.006771][T32652] usb 4-1: GET_CAPABILITIES returned 0
[ 2754.006834][T32652] usbtmc 4-1:16.0: can't read capabilities
[ 2756.116493][T27477] usb 4-1: USB disconnect, device number 15
[ 2756.824218][ T2569] usb usb8: usbfs: process 2569 (syz.3.6037) did not claim interface 0 before use
[ 2757.143317][ T2577] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6039'.
[ 2757.233454][ T2577] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6039'.
[ 2757.773319][ T2583] fuse: Unknown parameter '0x0000000000000006'
[ 2758.050568][ T2577] netlink: 'syz.5.6039': attribute type 3 has an invalid length.
[ 2758.225095][ T2577] netlink: 11 bytes leftover after parsing attributes in process `syz.5.6039'.
[ 2758.251898][ T2578] 
: renamed from bridge_slave_0
[ 2758.434675][ T2596] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2760.701962][T17709] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 2760.905920][T17709] usb 2-1: Using ep0 maxpacket: 8
[ 2761.034213][T17709] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 2761.054682][T17709] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2761.093257][T17709] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2761.129129][T17709] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2761.165473][T17709] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2761.211853][T17709] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2761.220920][T17709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2761.742567][T17709] usb 2-1: GET_CAPABILITIES returned 0
[ 2761.764850][T17709] usbtmc 2-1:16.0: can't read capabilities
[ 2761.792201][ T2644] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[2644]
[ 2762.057062][ T2650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6050'.
[ 2762.128607][ T2650] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6050'.
[ 2763.463521][ T2659] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[ 2763.541739][ T2659] tipc: Bearer <udp:syz1>: trying with adjusted priority
[ 2763.652268][ T2659] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2763.869604][T32652] usb 2-1: USB disconnect, device number 49
[ 2764.202301][ T2678] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2764.737577][ T2687] pimreg: entered allmulticast mode
[ 2765.339528][ T2676] pimreg: left allmulticast mode
[ 2766.788188][ T2706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6061'.
[ 2767.441258][ T2721] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2768.971173][ T2741] netlink: 'syz.3.6064': attribute type 4 has an invalid length.
[ 2770.091449][T27477] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 2770.324453][ T2759] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[2759]
[ 2770.334751][T27477] usb 2-1: Using ep0 maxpacket: 8
[ 2770.352379][T27477] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 2770.369348][T27477] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2770.396058][T27477] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2770.423053][T27477] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2770.448995][T27477] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2770.527423][T27477] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2770.561826][T27477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2770.796229][T27477] usb 2-1: GET_CAPABILITIES returned 0
[ 2770.811180][T27477] usbtmc 2-1:16.0: can't read capabilities
[ 2771.853594][ T2776] input: syz1 as /devices/virtual/input/input123
[ 2772.956160][T27477] usb 2-1: USB disconnect, device number 50
[ 2773.047853][ T2785] pimreg: entered allmulticast mode
[ 2773.379904][ T2799] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2773.593916][ T2804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6075'.
[ 2773.842652][ T2782] pimreg: left allmulticast mode
[ 2775.196087][ T2822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6076'.
[ 2775.206891][ T2822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6076'.
[ 2776.045824][ T2832] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2777.442733][ T2864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6083'.
[ 2777.461265][ T2864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6083'.
[ 2777.513713][ T2864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6083'.
[ 2777.523052][ T2864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6083'.
[ 2777.533052][ T2864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6083'.
[ 2778.747431][ T2844] netlink: 'syz.4.6080': attribute type 4 has an invalid length.
[ 2778.971423][T17707] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 2779.059183][ T2891] input: syz1 as /devices/virtual/input/input124
[ 2779.154282][T17707] usb 6-1: Using ep0 maxpacket: 8
[ 2779.197280][T17707] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 2779.219474][T17707] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2779.325746][T17707] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2779.394955][T17707] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2779.416419][T17707] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2779.478623][T17707] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2779.515542][T17707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2779.863669][T17707] usb 6-1: GET_CAPABILITIES returned 0
[ 2779.869903][T17707] usbtmc 6-1:16.0: can't read capabilities
[ 2780.070268][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 2780.077070][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2780.649419][ T2904] syzkaller0: entered promiscuous mode
[ 2780.662340][ T2904] syzkaller0: entered allmulticast mode
[ 2781.355257][ T2899] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[ 2781.396570][ T2899] tipc: Bearer <udp:syz1>: trying with adjusted priority
[ 2781.460477][ T2899] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[ 2782.674674][T27477] usb 6-1: USB disconnect, device number 97
[ 2783.224650][ T2930] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[ 2783.272518][ T2930] tipc: Bearer <udp:syz1>: trying with adjusted priority
[ 2783.287585][ T2930] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2784.484140][ T2941] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[ 2784.517190][ T2941] tipc: Bearer <udp:syz1>: trying with adjusted priority
[ 2784.532102][ T2941] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[ 2785.058434][ T2961] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2787.169201][ T2975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2787.187330][ T2975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2787.294704][ T2976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6104'.
[ 2787.857169][ T2973] netlink: 320 bytes leftover after parsing attributes in process `syz.1.6104'.
[ 2788.971424][T17707] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 2789.131412][T17707] usb 1-1: Using ep0 maxpacket: 8
[ 2789.142662][T17707] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2789.157787][T17707] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2789.196072][T17707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2789.239467][T17707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2789.302549][T17707] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2789.411381][T17707] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2789.420458][T17707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2790.024321][ T3011] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2790.034047][T17707] usb 1-1: GET_CAPABILITIES returned 0
[ 2790.039551][T17707] usbtmc 1-1:16.0: can't read capabilities
[ 2790.658961][ T3021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6115'.
[ 2790.692920][ T3021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6115'.
[ 2791.787386][ T3030] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2792.032168][T27477] usb 6-1: new full-speed USB device number 98 using dummy_hcd
[ 2792.068536][T32652] usb 1-1: USB disconnect, device number 5
[ 2792.213464][T27477] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2792.227289][T27477] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 2792.239498][T27477] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2792.251624][T27477] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2792.280918][T27477] usb 6-1: config 0 descriptor??
[ 2792.291253][ T3029] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2792.304168][T27477] hub 6-1:0.0: USB hub found
[ 2792.508217][T27477] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2792.912950][T27477] usbhid 6-1:0.0: can't add hid device: -71
[ 2792.920709][T27477] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 2792.992709][T27477] usb 6-1: USB disconnect, device number 98
[ 2793.467486][ T3048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6131'.
[ 2794.604420][ T3074] fuse: Unknown parameter 'f-'
[ 2795.179830][ T3080] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2796.011473][T27477] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 2796.221484][T27477] usb 1-1: Using ep0 maxpacket: 8
[ 2796.295642][T27477] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2796.311451][T27477] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2796.340657][T27477] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2796.400708][T27477] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2796.431155][T27477] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2796.470224][T27477] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2796.507999][T27477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2796.729279][ T3100] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2796.821619][T27477] usb 1-1: GET_CAPABILITIES returned 0
[ 2796.827140][T27477] usbtmc 1-1:16.0: can't read capabilities
[ 2797.995076][ T3105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6132'.
[ 2799.035322][ T3118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2799.067840][ T3118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2799.929463][T27477] usb 1-1: USB disconnect, device number 6
[ 2800.164473][ T3134] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[ 2800.173661][ T3134] tipc: Bearer <udp:syz1>: trying with adjusted priority
[ 2800.190993][ T3134] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2800.271645][ T5914] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 2800.321910][ T3135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6138'.
[ 2800.421689][ T5914] usb 2-1: device descriptor read/64, error -71
[ 2800.438934][ T3137] netlink: 320 bytes leftover after parsing attributes in process `syz.4.6138'.
[ 2800.675908][ T5914] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 2800.881728][ T5914] usb 2-1: device descriptor read/64, error -71
[ 2801.001934][ T5914] usb usb2-port1: attempt power cycle
[ 2801.361443][ T5914] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 2801.406316][ T5914] usb 2-1: device descriptor read/8, error -71
[ 2801.651397][ T5914] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 2801.673130][ T5914] usb 2-1: device descriptor read/8, error -71
[ 2801.811735][ T5914] usb usb2-port1: unable to enumerate USB device
[ 2802.033202][ T3150] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2803.851423][T17709] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[ 2804.015256][T17709] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2804.085856][T17709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 2804.121384][T17709] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2804.136005][T17709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2804.186858][T17709] usb 1-1: config 0 descriptor??
[ 2804.199764][ T3177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2804.224358][T17709] hub 1-1:0.0: USB hub found
[ 2804.337846][ T3186] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2804.430250][T17709] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2804.827481][T17709] usbhid 1-1:0.0: can't add hid device: -71
[ 2804.857473][T17709] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 2804.912742][T17709] usb 1-1: USB disconnect, device number 7
[ 2805.260799][ T3198] program syz.3.6151 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2805.524694][ T3198] syz.3.6151 (3198): drop_caches: 2
[ 2805.699443][   T30] audit: type=1326 audit(1769946400.655:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3199 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000
[ 2805.799003][   T30] audit: type=1326 audit(1769946400.705:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3199 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f62539 code=0x7ffc0000
[ 2805.846071][   T30] audit: type=1326 audit(1769946400.705:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3199 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000
[ 2805.913296][   T30] audit: type=1326 audit(1769946400.705:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3199 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000
[ 2805.962942][   T30] audit: type=1326 audit(1769946400.705:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3199 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f62539 code=0x7ffc0000
[ 2806.079229][   T30] audit: type=1326 audit(1769946400.705:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3199 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000
[ 2806.130494][   T30] audit: type=1326 audit(1769946400.705:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3199 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000
[ 2806.191964][   T30] audit: type=1326 audit(1769946400.705:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3199 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f62539 code=0x7ffc0000
[ 2806.235143][   T30] audit: type=1326 audit(1769946400.705:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3199 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000
[ 2806.272052][   T30] audit: type=1326 audit(1769946400.705:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3199 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000
[ 2806.294884][ T3204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6152'.
[ 2807.283064][ T3217] input: syz1 as /devices/virtual/input/input126
[ 2807.635723][ T3219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6156'.
[ 2807.663449][ T3219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6156'.
[ 2807.697090][ T3219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6156'.
[ 2807.729555][ T3219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6156'.
[ 2807.756055][ T3219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6156'.
[ 2808.691659][ T3228] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2809.088858][ T3243] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2809.234406][ T3246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2809.272508][ T3243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2809.315388][ T3246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2809.631497][T17707] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 2809.802257][T17707] usb 6-1: Using ep0 maxpacket: 32
[ 2809.812025][T17707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[ 2809.846061][T17707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2809.874193][T17707] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2809.916900][T17707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 2809.948701][T17707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2810.038184][T17707] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[ 2810.087506][T17707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2810.134502][T17707] usb 6-1: Product: syz
[ 2810.143968][T17707] usb 6-1: Manufacturer: syz
[ 2810.163204][T17707] usb 6-1: SerialNumber: syz
[ 2810.211729][T17707] usb 6-1: config 0 descriptor??
[ 2810.230472][ T3243] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2810.271502][T17707] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input127
[ 2810.350533][ T5181] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 2810.420338][ T2753] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 2810.505270][ T5181] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 2810.554465][ T5181] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 2810.607155][ T5181] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 2810.628277][ T5181] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 2810.643218][ T3243] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 2810.665756][ T5181] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 2811.232280][T17707] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[ 2811.405514][T17707] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2811.433793][T17707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 2811.461936][T17707] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2811.484250][T17707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2811.513216][T17707] usb 1-1: config 0 descriptor??
[ 2811.541241][ T3256] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[ 2811.563389][T17707] hub 1-1:0.0: USB hub found
[ 2811.771868][T17707] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2812.178737][T17707] usbhid 1-1:0.0: can't add hid device: -71
[ 2812.192776][T17707] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 2812.281876][T17707] usb 1-1: USB disconnect, device number 8
[ 2812.827494][T17707] usb 6-1: USB disconnect, device number 99
[ 2814.980555][ T3290] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2817.209058][ T3308] fuse: Unknown parameter 'f-'
[ 2817.842218][ T3325] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 2819.261682][ T5914] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[ 2819.424596][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2819.493399][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 2819.506117][ T5914] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2819.532627][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2819.556658][ T5914] usb 1-1: config 0 descriptor??
[ 2819.568415][ T3334] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2819.579304][ T5914] hub 1-1:0.0: USB hub found
[ 2819.795921][ T5914] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2820.176215][ T3357] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6180'.
[ 2820.243653][ T5914] usbhid 1-1:0.0: can't add hid device: -71
[ 2820.255580][ T5914] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 2820.303936][ T3353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6179'.
[ 2820.336076][ T3353] netlink: 320 bytes leftover after parsing attributes in process `syz.3.6179'.
[ 2820.432745][ T5914] usb 1-1: USB disconnect, device number 9
[ 2820.572614][T17707] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 2820.741831][T17707] usb 2-1: Using ep0 maxpacket: 8
[ 2820.754256][T17707] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 2820.781619][T17707] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2820.863281][T17707] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2820.909850][T17707] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2820.950391][T17707] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2821.003256][T17707] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2821.035099][T17707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2821.366376][T17707] usb 2-1: GET_CAPABILITIES returned 0
[ 2821.381158][T17707] usbtmc 2-1:16.0: can't read capabilities
[ 2821.893464][ T3373] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2822.036983][ T3377] fuse: Unknown parameter 'f-'
[ 2824.204393][T17707] usb 2-1: USB disconnect, device number 55
[ 2824.805803][ T3419] fuse: Unknown parameter 'f-'
[ 2825.612956][ T3568] fuse: Unknown parameter 'f-'
[ 2826.969129][ T3992] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.6199' sets config #0
[ 2827.029532][ T3992] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.6199' sets config #1
[ 2828.267289][ T4144] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6201'.
[ 2828.891481][T17709] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 2829.101630][T17709] usb 2-1: Using ep0 maxpacket: 8
[ 2829.111081][T17709] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 2829.121768][T17709] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2829.145539][T17709] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2829.188811][T17709] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2829.209967][ T4156] fuse: Unknown parameter 'f-'
[ 2829.229566][T17709] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2829.294165][T17709] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2829.321352][T17709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2829.634348][T17709] usb 2-1: GET_CAPABILITIES returned 0
[ 2829.671842][ T4161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6203'.
[ 2829.696920][T17709] usbtmc 2-1:16.0: can't read capabilities
[ 2829.915272][ T4173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6206'.
[ 2831.631473][T32652] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[ 2832.049126][T32652] usb 1-1: config 0 has no interfaces?
[ 2832.064733][T32652] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00
[ 2832.118301][T32652] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2832.155079][T32652] usb 1-1: config 0 descriptor??
[ 2832.516852][T17709] usb 2-1: USB disconnect, device number 56
[ 2833.251232][ T4207] program syz.1.6212 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2834.416580][T32652] usb 1-1: USB disconnect, device number 10
[ 2836.102466][ T4241] syzkaller1: entered promiscuous mode
[ 2836.129794][ T4241] syzkaller1: entered allmulticast mode
[ 2836.155996][ T4241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6221'.
[ 2840.485972][ T4301] openvswitch: netlink: Message has 1 unknown bytes.
[ 2840.507537][ T4301] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2841.506887][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 2841.514219][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2843.595817][ T4338] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2843.981445][ T5914] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 2844.135459][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2844.154044][ T5914] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2844.171869][ T5914] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2844.181053][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2844.195234][ T5914] usb 6-1: config 0 descriptor??
[ 2845.212633][ T4354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2845.310451][ T4356] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[ 2845.321942][ T4356] openvswitch: netlink: Message has 16 unknown bytes.
[ 2848.260190][T17709] usb 6-1: USB disconnect, device number 100
[ 2850.267772][ T4411] fuse: Unknown parameter 'f-'
[ 2850.698883][ T4421] hsr0: entered promiscuous mode
[ 2850.715447][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6252'.
[ 2850.923553][ T4421] hsr_slave_0: left promiscuous mode
[ 2851.498948][ T4428] netlink: 'syz.5.6254': attribute type 4 has an invalid length.
[ 2851.590066][   T30] kauditd_printk_skb: 28 callbacks suppressed
[ 2851.590085][   T30] audit: type=1400 audit(1769946446.545:1954): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B25250232D14211823621494CB2CE51344170755D29F27061B3CB021457E0E8E4EAEDB60F88EF927E2B9F969D7B83E8C3EA39324D7E018663FB29E428E26ABC3ED1900A6A02 pid=4425 comm="syz.5.6254"
[ 2852.073940][ T4421] hsr0 (unregistering): left promiscuous mode
[ 2852.221244][ T4431] fuse: Unknown parameter 'f-'
[ 2852.883923][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6257'.
[ 2852.893093][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6257'.
[ 2852.906212][ T4437] netlink: 'syz.5.6257': attribute type 11 has an invalid length.
[ 2853.134221][ T4438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6256'.
[ 2853.441815][ T5914] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 2853.603212][ T5914] usb 1-1: Using ep0 maxpacket: 8
[ 2853.617554][ T5914] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2853.641841][ T5914] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2853.652621][ T5914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2853.664541][ T5914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2853.674701][ T5914] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2853.688023][ T5914] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2853.698874][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2853.869326][ T4447] QAT: failed to copy from user.
[ 2853.987637][ T5914] usb 1-1: GET_CAPABILITIES returned 0
[ 2854.005567][ T5914] usbtmc 1-1:16.0: can't read capabilities
[ 2855.811458][T17709] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 2855.963741][T17709] usb 2-1: Using ep0 maxpacket: 8
[ 2855.965695][T17709] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 2855.965719][T17709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2855.973772][T17709] pvrusb2: Hardware description: Terratec Grabster AV400
[ 2855.973786][T17709] pvrusb2: **********
[ 2855.973793][T17709] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 2855.973807][T17709] pvrusb2: Important functionality might not be entirely working.
[ 2855.973814][T17709] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 2855.973823][T17709] pvrusb2: **********
[ 2856.222168][ T2344] pvrusb2: Invalid write control endpoint
[ 2856.333092][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2856.353549][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2856.355659][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2856.356573][ T2344] pvrusb2: Invalid write control endpoint
[ 2856.356589][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 2856.356602][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 2856.356612][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 2856.356624][ T2344] pvrusb2: Device being rendered inoperable
[ 2856.356661][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 2856.356707][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[ 2856.356706][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2856.357369][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2856.357630][ T2344] pvrusb2: Attached sub-driver cx25840
[ 2856.357645][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 2856.357658][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 2856.437836][T17948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2856.442856][T17948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2856.443412][T17948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2856.444364][T17948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2856.445023][T17948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2856.970041][ T4463] chnl_net:caif_netlink_parms(): no params data found
[ 2857.083775][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2857.091946][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2857.099209][ T4463] bridge_slave_0: entered allmulticast mode
[ 2857.121219][ T4463] bridge_slave_0: entered promiscuous mode
[ 2857.131424][ T4463] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2857.146884][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2857.148352][T17709] usb 1-1: USB disconnect, device number 11
[ 2857.163970][ T4463] bridge_slave_1: entered allmulticast mode
[ 2857.183599][ T4463] bridge_slave_1: entered promiscuous mode
[ 2857.252908][ T4463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2857.268840][ T4463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2857.337341][ T4463] team0: Port device team_slave_0 added
[ 2857.350484][ T4463] team0: Port device team_slave_1 added
[ 2857.401977][ T4463] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2857.409394][ T4463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2857.448774][ T4463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2857.467787][ T4463] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2857.485237][ T4463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2857.534794][ T4463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2857.649987][ T4463] hsr_slave_0: entered promiscuous mode
[ 2857.659511][ T4463] hsr_slave_1: entered promiscuous mode
[ 2858.200765][ T4463] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2858.498839][T17707] usb 2-1: USB disconnect, device number 57
[ 2858.543934][T17948] Bluetooth: hci1: command tx timeout
[ 2858.664009][ T4463] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2858.726091][ T4463] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2858.830809][ T4491] fuse: Unknown parameter 'f-'
[ 2859.140187][ T4463] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2859.180418][ T4505] netlink: 'syz.1.6269': attribute type 4 has an invalid length.
[ 2859.341724][T27477] usb 6-1: new full-speed USB device number 101 using dummy_hcd
[ 2859.439814][   T30] audit: type=1400 audit(1769946454.395:1955): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B25250232D14211823621494CB2CE51344170755D29F27061B3CB021457E0E8E4EAEDB60F88EF927E2B9F969D7B83E8C3EA39324D7E018663FB29E428E26ABC3ED1900A6A02 pid=4495 comm="syz.1.6269"
[ 2859.462821][T17709] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 2859.530473][ T4463] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2859.538820][T27477] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[ 2859.591427][T27477] usb 6-1: config 0 has no interface number 0
[ 2859.610756][T27477] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 288, setting to 64
[ 2859.638501][ T4463] 8021q: adding VLAN 0 to HW filter on device team0
[ 2859.652037][T17709] usb 1-1: Using ep0 maxpacket: 8
[ 2859.700505][T27477] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 2859.731104][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2859.738272][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2859.773550][T27477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2859.797526][T27477] usb 6-1: Product: syz
[ 2859.808724][T27477] usb 6-1: Manufacturer: syz
[ 2859.832536][T27477] usb 6-1: SerialNumber: syz
[ 2859.845991][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2859.853202][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2859.923770][T27477] usb 6-1: config 0 descriptor??
[ 2859.936465][ T4504] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2859.962745][T17709] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2859.980842][T17709] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2860.012769][T17709] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2860.066754][T17709] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2860.100018][T17709] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2860.168897][T17709] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2860.209777][T17709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2860.295759][ T4463] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2860.459313][ T4463] veth0_vlan: entered promiscuous mode
[ 2860.538115][ T4463] veth1_vlan: entered promiscuous mode
[ 2860.574164][ T4463] veth0_macvtap: entered promiscuous mode
[ 2860.592994][T17709] usb 1-1: GET_CAPABILITIES returned 0
[ 2860.614689][ T4463] veth1_macvtap: entered promiscuous mode
[ 2860.622528][T17948] Bluetooth: hci1: command tx timeout
[ 2860.629962][T17709] usbtmc 1-1:16.0: can't read capabilities
[ 2860.812700][ T4463] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2860.846154][ T4463] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2860.889543][T17683] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2861.227205][T17683] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2861.288498][T17683] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2861.349647][T17683] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2861.441443][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2861.466256][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2861.553713][T17683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2861.571843][T17683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2862.473229][ T4528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6272'.
[ 2862.702931][T17948] Bluetooth: hci1: command tx timeout
[ 2862.867912][ T4538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6274'.
[ 2862.901122][T17709] usb 1-1: USB disconnect, device number 12
[ 2863.010449][ T4539] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2863.019830][ T4539] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6273'.
[ 2863.055084][ T4538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2863.068118][ T4538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2863.388659][T27477] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected
[ 2863.434138][T27477] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81
[ 2863.451765][T27477] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1
[ 2863.461922][ T4544] QAT: failed to copy from user.
[ 2863.479848][T27477] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2
[ 2863.503793][T27477] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 2863.553188][T27477] usb 6-1: USB disconnect, device number 101
[ 2863.584100][T27477] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 2863.618934][T27477] keyspan 6-1:0.133: device disconnected
[ 2864.812899][T17948] Bluetooth: hci1: command tx timeout
[ 2865.552801][ T4565] input: syz1 as /devices/virtual/input/input129
[ 2866.280355][ T4574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6279'.
[ 2866.521423][ T4577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2866.560741][ T4577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2866.572156][T17709] usb 6-1: new full-speed USB device number 102 using dummy_hcd
[ 2866.733758][T17709] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23
[ 2866.743866][T17709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2866.905805][T17709] usb 6-1: config 0 descriptor??
[ 2866.996884][T17709] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input130
[ 2867.221841][ T4520] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 2867.328067][ T4585] fuse: Unknown parameter 'f-'
[ 2867.391792][ T4520] usb 2-1: Using ep0 maxpacket: 32
[ 2867.445830][ T4520] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 2867.477860][ T4520] usb 2-1: config 0 has no interface number 0
[ 2867.518717][ T4520] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2867.532795][ T4520] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2867.559821][ T4520] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 2867.580264][ T4520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2867.617181][ T4520] usb 2-1: config 0 descriptor??
[ 2867.863601][ T4593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2867.971535][ T4592] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[ 2868.383742][ T4520] uclogic 0003:28BD:0094.0033: pen parameters not found
[ 2868.391332][ T4520] uclogic 0003:28BD:0094.0033: interface is invalid, ignoring
[ 2868.785659][ T4579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2868.842896][ T4579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2869.158061][ T5181] bcm5974 6-1:0.0: could not read from device
[ 2869.218058][T17709] usb 6-1: USB disconnect, device number 102
[ 2869.228037][ T5181] bcm5974 6-1:0.0: could not read from device
[ 2869.260035][T27477] usb 2-1: USB disconnect, device number 58
[ 2869.354286][ T2752] udevd[2752]: Error opening device "/dev/input/event4": No such file or directory
[ 2869.382426][ T2752] udevd[2752]: Unable to EVIOCGABS device "/dev/input/event4"
[ 2869.400329][ T2752] udevd[2752]: Unable to EVIOCGABS device "/dev/input/event4"
[ 2869.430780][ T2752] udevd[2752]: Unable to EVIOCGABS device "/dev/input/event4"
[ 2869.462314][ T2752] udevd[2752]: Unable to EVIOCGABS device "/dev/input/event4"
[ 2870.519345][ T4610] syz.6.6288 (4610): drop_caches: 2
[ 2871.398271][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6292'.
[ 2871.425970][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6292'.
[ 2871.470551][ T4631] netlink: 'syz.0.6292': attribute type 11 has an invalid length.
[ 2875.899033][ T4665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6298'.
[ 2876.074323][ T4670] xt_bpf: check failed: parse error
[ 2876.592363][ T4656] syz.6.6296 (4656): drop_caches: 2
[ 2876.798407][ T4681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6301'.
[ 2877.091826][ T4521] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 2877.494309][ T4521] usb 1-1: Using ep0 maxpacket: 8
[ 2877.542790][ T4521] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2877.604806][ T4521] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2877.642391][ T4521] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2877.726870][ T4521] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2877.856979][ T4521] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2877.904389][ T4521] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2877.937580][ T4521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2878.210956][ T4521] usb 1-1: GET_CAPABILITIES returned 0
[ 2878.250645][ T4521] usbtmc 1-1:16.0: can't read capabilities
[ 2879.705709][T27477] usb 1-1: USB disconnect, device number 13
[ 2880.103221][ T4709] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2881.627093][ T4724] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6311'.
[ 2881.652397][ T4724] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6311'.
[ 2881.664961][ T4724] netlink: 'syz.5.6311': attribute type 3 has an invalid length.
[ 2881.673170][ T4724] netlink: 11 bytes leftover after parsing attributes in process `syz.5.6311'.
[ 2882.522850][ T4733] fuse: Unknown parameter 'f-'
[ 2884.041500][T27477] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[ 2884.253506][T27477] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2884.265015][T27477] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2884.293428][T27477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2884.315460][T27477] usb 1-1: config 0 descriptor??
[ 2884.331598][T27477] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2884.342923][T27477] hub 1-1:0.0: probe with driver hub failed with error -5
[ 2884.358110][T27477] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2884.654106][ T4756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6318'.
[ 2884.755482][ T4756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2884.778964][ T4756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2886.924164][T17709] usb 1-1: USB disconnect, device number 14
[ 2888.365574][ T4790] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2888.819492][ T4805] tipc: Started in network mode
[ 2888.828129][ T4805] tipc: Node identity e0000002, cluster identity 4711
[ 2888.944286][ T4805] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2889.982909][ T4822] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6331'.
[ 2891.108518][ T4822] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6331'.
[ 2891.138921][ T4822] netlink: 'syz.0.6331': attribute type 3 has an invalid length.
[ 2891.151429][ T4822] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6331'.
[ 2891.582063][ T4520] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[ 2891.718154][ T4843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6335'.
[ 2891.823795][ T4520] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2891.841031][ T4520] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2891.869386][ T4520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2891.924568][ T4520] usb 1-1: config 0 descriptor??
[ 2891.962502][ T4520] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2891.968484][ T4520] hub 1-1:0.0: probe with driver hub failed with error -5
[ 2891.978124][ T4520] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2892.671906][ T4521] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[ 2892.834302][ T4521] usb 6-1: Using ep0 maxpacket: 8
[ 2892.855406][ T4521] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 2892.903159][ T4521] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2892.929490][ T4521] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2892.970202][ T4521] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2892.997232][ T4521] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2893.039982][ T4521] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2893.069298][ T4521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2893.274169][ T4314] syz_tun (unregistering): left promiscuous mode
[ 2893.381964][ T4521] usb 6-1: GET_CAPABILITIES returned 0
[ 2893.393915][ T4521] usbtmc 6-1:16.0: can't read capabilities
[ 2894.027050][ T4859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6337'.
[ 2894.188440][ T4860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2894.221290][ T4860] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2894.307861][ T3441] bond0: (slave netdevsim0): Releasing backup interface
[ 2894.502311][ T4520] usb 1-1: USB disconnect, device number 15
[ 2894.770184][ T4520] usb 6-1: USB disconnect, device number 103
[ 2895.017707][ T4867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6340'.
[ 2895.301206][ T4875] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6340'.
[ 2896.228716][ T3441] gretap0 (unregistering): left promiscuous mode
[ 2896.330836][ T3441] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 2896.388444][ T3441] bond3 (unregistering): (slave gretap2): Releasing backup interface
[ 2897.355525][ T3441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2897.377267][ T3441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2897.396967][ T3441] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 2897.408317][ T3441] bond0 (unregistering): (slave veth0_to_hsr): Releasing backup interface
[ 2897.430440][ T3441] bond0 (unregistering): Released all slaves
[ 2897.629348][ T3441] bond1 (unregistering): Released all slaves
[ 2897.787881][ T3441] bond2 (unregistering): Released all slaves
[ 2897.808022][ T3441] bond3 (unregistering): Released all slaves
[ 2897.826370][ T3441] bond4 (unregistering): Released all slaves
[ 2897.856667][ T4885] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2898.032359][ T4903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2898.084373][ T4903] syzkaller0: entered promiscuous mode
[ 2898.089902][ T4903] syzkaller0: entered allmulticast mode
[ 2898.432695][T21135] usb 6-1: new full-speed USB device number 104 using dummy_hcd
[ 2898.644194][T21135] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 2898.661650][T21135] usb 6-1: not running at top speed; connect to a high speed hub
[ 2898.683504][T21135] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 2
[ 2898.699716][T21135] usb 6-1: config 5 interface 0 has no altsetting 1
[ 2898.713863][T21135] usb 6-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70
[ 2898.727503][T21135] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2898.775981][T21135] usb 6-1: Product: syz
[ 2898.781718][T21135] usb 6-1: Manufacturer: syz
[ 2898.786349][T21135] usb 6-1: SerialNumber: syz
[ 2898.906598][ T4925] hub 9-0:1.0: USB hub found
[ 2898.915841][ T4925] hub 9-0:1.0: 1 port detected
[ 2899.099390][ T3441] : left promiscuous mode
[ 2899.190658][ T4927] xt_TCPMSS: Only works on TCP SYN packets
[ 2899.800380][ T4926] tipc: Resetting bearer <eth:syzkaller0>
[ 2899.957386][ T3441] tipc: Disabling bearer <udp:syz2>
[ 2899.985792][ T3441] tipc: Left network mode
[ 2900.046437][T21135] usb 6-1: USB disconnect, device number 104
[ 2900.142398][ T4902] tipc: Resetting bearer <eth:syzkaller0>
[ 2900.153463][ T2752] udevd[2752]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2900.283663][ T3441] IPVS: stopping backup sync thread 27016 ...
[ 2900.308908][ T4902] tipc: Disabling bearer <eth:syzkaller0>
[ 2900.593539][ T4951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6349'.
[ 2900.673911][ T4953] usb usb8: usbfs: process 4953 (syz.0.6349) did not claim interface 0 before use
[ 2902.632985][ T4968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6350'.
[ 2902.944284][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 2902.950711][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2903.071468][T27477] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 2903.261648][T27477] usb 1-1: Using ep0 maxpacket: 8
[ 2903.475490][T27477] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2903.532179][T27477] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2903.579582][T27477] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2903.652067][T27477] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2903.708017][T27477] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2903.780177][T27477] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2903.835909][T27477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2904.342031][T27477] usb 1-1: GET_CAPABILITIES returned 0
[ 2904.361350][T27477] usbtmc 1-1:16.0: can't read capabilities
[ 2905.238368][ T3441] hsr_slave_0: left promiscuous mode
[ 2905.258216][ T3441] hsr_slave_1: left promiscuous mode
[ 2905.896848][ T3441] pim6reg (unregistering): left allmulticast mode
[ 2906.482234][ T5020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6354'.
[ 2906.609546][T17709] usb 1-1: USB disconnect, device number 16
[ 2906.832100][T17707] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 2907.022518][T17707] usb 2-1: Using ep0 maxpacket: 8
[ 2907.055280][T17707] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 2907.069666][T17707] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2907.087394][T17707] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2907.099703][T17707] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2907.127893][T17707] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2907.145692][T17707] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2907.182074][T17707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2907.427237][T17707] usb 2-1: GET_CAPABILITIES returned 0
[ 2907.433756][T17707] usbtmc 2-1:16.0: can't read capabilities
[ 2908.086829][ T5027] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6356'.
[ 2908.261140][ T5006] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 2908.359800][ T5030] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6356'.
[ 2908.498518][ T5035] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[ 2908.514062][ T5035] tipc: Bearer <udp:syz1>: trying with adjusted priority
[ 2908.545131][ T5035] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2908.999996][ T3441] IPVS: stop unused estimator thread 0...
[ 2909.200226][ T5041] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2909.900207][ T5045] binder: BINDER_SET_CONTEXT_MGR already set
[ 2909.959650][ T5045] binder: 5044:5045 ioctl 4018620d 800000c0 returned -16
[ 2909.999889][ T5048] binder: BINDER_SET_CONTEXT_MGR already set
[ 2910.046396][ T5048] binder: 5044:5048 ioctl 4018620d 80000040 returned -16
[ 2910.158843][ T5045] fuse: Unknown parameter 'f-'
[ 2910.211648][ T5047] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2910.364169][ T5055] binder: BINDER_SET_CONTEXT_MGR already set
[ 2910.377710][ T5055] binder: 5053:5055 ioctl 4018620d 80000040 returned -16
[ 2910.407149][ T5055] fuse: Unknown parameter 'f-'
[ 2910.441193][ T4520] usb 2-1: USB disconnect, device number 59
[ 2910.804138][ T5068] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6367'.
[ 2911.061866][T17707] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[ 2911.111790][T28697] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[ 2911.336214][ T5081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6365'.
[ 2911.342813][T28697] usb 6-1: Using ep0 maxpacket: 8
[ 2911.356547][T17707] usb 1-1: config 0 has an invalid interface number: 133 but max is 0
[ 2911.366854][T28697] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 2911.397855][T17707] usb 1-1: config 0 has no interface number 0
[ 2911.417996][T28697] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2911.433180][ T5079] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2911.442324][ T5079] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6366'.
[ 2911.495795][T17707] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 288, setting to 64
[ 2911.537261][T28697] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2911.560848][ T5083] usb usb8: usbfs: process 5083 (syz.1.6365) did not claim interface 0 before use
[ 2911.576556][T28697] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2911.606527][T28697] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2911.643923][T17707] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 2911.682006][T17707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2911.706297][T28697] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2911.720327][T17707] usb 1-1: Product: syz
[ 2911.732127][T17707] usb 1-1: Manufacturer: syz
[ 2911.736757][T17707] usb 1-1: SerialNumber: syz
[ 2911.745422][T28697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2911.785824][T17707] usb 1-1: config 0 descriptor??
[ 2911.865768][ T5060] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2912.088988][T28697] usb 6-1: GET_CAPABILITIES returned 0
[ 2912.115050][T28697] usbtmc 6-1:16.0: can't read capabilities
[ 2913.824558][T27477] usb 6-1: USB disconnect, device number 105
[ 2913.988280][T17707] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected
[ 2914.033617][T17707] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81
[ 2914.093496][T17707] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1
[ 2914.135661][T17707] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2
[ 2914.184999][T17707] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 2914.246860][T17707] usb 1-1: USB disconnect, device number 17
[ 2914.351085][T17707] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 2914.424744][T17707] keyspan 1-1:0.133: device disconnected
[ 2914.782084][T17707] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 2914.941969][T28697] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[ 2914.972565][T17707] usb 1-1: Using ep0 maxpacket: 16
[ 2914.980677][T17707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[ 2915.016534][T17707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32770, setting to 1024
[ 2915.061854][T17707] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[ 2915.070968][T17707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2915.112152][T28697] usb 2-1: device descriptor read/64, error -71
[ 2915.164538][T17707] usb 1-1: config 0 descriptor??
[ 2915.372479][T28697] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[ 2915.501989][T28697] usb 2-1: device descriptor read/64, error -71
[ 2915.612549][T28697] usb usb2-port1: attempt power cycle
[ 2915.654709][T17707] bigben 0003:146B:0902.0034: unexpected rdesc, please submit for review
[ 2915.676654][T17707] bigben 0003:146B:0902.0034: unknown main item tag 0x0
[ 2915.696422][T17707] bigben 0003:146B:0902.0034: unknown main item tag 0x0
[ 2915.716798][T17707] bigben 0003:146B:0902.0034: unknown main item tag 0x0
[ 2915.734409][T17707] bigben 0003:146B:0902.0034: unknown main item tag 0x0
[ 2915.781883][T17707] bigben 0003:146B:0902.0034: item fetching failed at offset 4/5
[ 2915.833265][T17707] bigben 0003:146B:0902.0034: parse failed
[ 2915.878686][T17707] bigben 0003:146B:0902.0034: probe with driver bigben failed with error -22
[ 2915.938799][T17707] usb 1-1: USB disconnect, device number 18
[ 2915.972942][T28697] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[ 2916.033127][T28697] usb 2-1: device descriptor read/8, error -71
[ 2916.213190][ T5121] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[ 2916.224539][ T5121] tipc: Bearer <udp:syz1>: trying with adjusted priority
[ 2916.321388][T28697] usb 2-1: new full-speed USB device number 63 using dummy_hcd
[ 2916.345725][T28697] usb 2-1: device descriptor read/8, error -71
[ 2916.387549][ T5121] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2916.470473][T28697] usb usb2-port1: unable to enumerate USB device
[ 2916.491785][ T5107] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[ 2916.507095][ T5107] tipc: Bearer <udp:syz1>: trying with adjusted priority
[ 2916.514630][ T5107] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[ 2917.655129][ T5160] fuse: Unknown parameter 'f-'
[ 2918.668574][ T5176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6380'.
[ 2919.011362][ T4520] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 2919.207850][ T4520] usb 1-1: Using ep0 maxpacket: 8
[ 2919.213077][ T4520] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2919.213133][ T4520] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2919.213157][ T4520] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2919.213184][ T4520] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2919.213209][ T4520] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2919.213253][ T4520] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2919.213278][ T4520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2919.294272][ T5191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2919.298448][ T5191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2919.431153][ T4520] usb 1-1: GET_CAPABILITIES returned 0
[ 2919.431188][ T4520] usbtmc 1-1:16.0: can't read capabilities
[ 2920.134873][ T5212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6382'.
[ 2920.329575][ T5212] usb usb8: usbfs: process 5212 (syz.5.6382) did not claim interface 0 before use
[ 2921.453596][T27477] usb 1-1: USB disconnect, device number 19
[ 2921.951349][T27477] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 2922.111913][T27477] usb 1-1: Using ep0 maxpacket: 8
[ 2922.114995][T27477] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[ 2922.115048][T27477] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64
[ 2922.115070][T27477] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2922.141742][T27477] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 2922.198303][T27477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2922.267863][T27477] usb 1-1: Product: syz
[ 2922.267905][T27477] usb 1-1: Manufacturer: syz
[ 2922.267923][T27477] usb 1-1: SerialNumber: syz
[ 2922.286731][T27477] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[ 2922.287678][T27477] usbtest 1-1:1.0: couldn't get endpoints, -22
[ 2922.287761][T27477] usbtest 1-1:1.0: probe with driver usbtest failed with error -22
[ 2924.596767][T17707] usb 1-1: USB disconnect, device number 20
[ 2964.384693][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 2964.391046][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2981.821650][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[ 3025.824289][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 3025.830604][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 3069.981898][   T31] INFO: task kworker/0:3:17695 blocked for more than 143 seconds.
[ 3069.989770][   T31]       Tainted: G             L      syzkaller #0
[ 3069.997183][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3070.006544][   T31] task:kworker/0:3     state:D stack:20632 pid:17695 tgid:17695 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 3070.019121][   T31] Workqueue: usb_hub_wq hub_event
[ 3070.024713][   T31] Call Trace:
[ 3070.028007][   T31]  <TASK>
[ 3070.030979][   T31]  __schedule+0x14ea/0x5050
[ 3070.036079][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 3070.041117][   T31]  ? __pfx___schedule+0x10/0x10
[ 3070.047015][   T31]  ? schedule+0x90/0x360
[ 3070.051868][   T31]  schedule+0x164/0x360
[ 3070.056063][   T31]  usb_kill_urb+0x1cf/0x2f0
[ 3070.060576][   T31]  ? __pfx_usb_kill_urb+0x10/0x10
[ 3070.066903][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 3070.073636][   T31]  usb_start_wait_urb+0x1a3/0x510
[ 3070.078702][   T31]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 3070.085276][   T31]  usb_control_msg+0x232/0x3e0
[ 3070.090057][   T31]  hub_port_init+0xb1e/0x28d0
[ 3070.095303][   T31]  hub_event+0x2593/0x4f30
[ 3070.099797][   T31]  ? __pfx_hub_event+0x10/0x10
[ 3070.105181][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[ 3070.110942][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[ 3070.117414][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[ 3070.124016][   T31]  process_scheduled_works+0xaec/0x17a0
[ 3070.129814][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 3070.136405][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 3070.145203][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3070.150603][   T31]  ? schedule+0x90/0x360
[ 3070.155430][   T31]  worker_thread+0xda6/0x1360
[ 3070.160143][   T31]  kthread+0x726/0x8b0
[ 3070.165162][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 3070.170285][   T31]  ? __pfx_kthread+0x10/0x10
[ 3070.175416][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3070.180650][   T31]  ? __pfx_kthread+0x10/0x10
[ 3070.185787][   T31]  ret_from_fork+0x51b/0xa40
[ 3070.190396][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3070.196093][   T31]  ? __switch_to+0xc82/0x1410
[ 3070.200813][   T31]  ? __pfx_kthread+0x10/0x10
[ 3070.206331][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3070.211120][   T31]  </TASK>
[ 3070.214792][   T31] 
[ 3070.214792][   T31] Showing all locks held in the system:
[ 3070.223443][   T31] 1 lock held by khungtaskd/31:
[ 3070.228298][   T31]  #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 3070.238765][   T31] 2 locks held by getty/5586:
[ 3070.244320][   T31]  #0: ffff888034f7b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 3070.254602][   T31]  #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[ 3070.265322][   T31] 5 locks held by kworker/0:3/17695:
[ 3070.270604][   T31]  #0: ffff8881426e6948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[ 3070.282828][   T31]  #1: ffffc9000ecd7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[ 3070.294730][   T31]  #2: ffff8881453d0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[ 3070.303761][   T31]  #3: ffff888029621518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30
[ 3070.314327][   T31]  #4: ffff888144f47368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30
[ 3070.325077][   T31] 4 locks held by kworker/1:12/17707:
[ 3070.330575][   T31]  #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140
[ 3070.341722][   T31]  #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[ 3070.350631][   T31]  #2: ffff8880b87260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30
[ 3070.360173][   T31]  #3: ffffffff9a1f0920 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580
[ 3070.372087][   T31] 4 locks held by kworker/u8:3/4518:
[ 3070.377484][   T31]  #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140
[ 3070.388137][   T31]  #1: ffffc9000ee77bc0 ((work_completion)(&(&bat_priv->mcast.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[ 3070.402162][   T31]  #2: ffff8880b86260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30
[ 3070.412342][   T31]  #3: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_change+0xd4/0x340
[ 3070.421800][   T31] 
[ 3070.424143][   T31] =============================================
[ 3070.424143][   T31] 
[ 3070.433157][   T31] NMI backtrace for cpu 1
[ 3070.433175][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3070.433205][   T31] Tainted: [L]=SOFTLOCKUP
[ 3070.433210][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 3070.433219][   T31] Call Trace:
[ 3070.433225][   T31]  <TASK>
[ 3070.433254][   T31]  dump_stack_lvl+0xe8/0x150
[ 3070.433276][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 3070.433312][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 3070.433334][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 3070.433354][   T31]  sys_info+0x135/0x170
[ 3070.433370][   T31]  watchdog+0xf90/0xfe0
[ 3070.433388][   T31]  ? watchdog+0x209/0xfe0
[ 3070.433406][   T31]  kthread+0x726/0x8b0
[ 3070.433423][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3070.433436][   T31]  ? __pfx_kthread+0x10/0x10
[ 3070.433453][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3070.433474][   T31]  ? __pfx_kthread+0x10/0x10
[ 3070.433507][   T31]  ret_from_fork+0x51b/0xa40
[ 3070.433531][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3070.433552][   T31]  ? __switch_to+0xc82/0x1410
[ 3070.433574][   T31]  ? __pfx_kthread+0x10/0x10
[ 3070.433591][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3070.433621][   T31]  </TASK>
[ 3070.433627][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 3070.565425][    C0] NMI backtrace for cpu 0
[ 3070.565445][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3070.565469][    C0] Tainted: [L]=SOFTLOCKUP
[ 3070.565476][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 3070.565494][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 3070.565519][    C0] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 67 12 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 3070.565535][    C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000246
[ 3070.565552][    C0] RAX: 00000000037de693 RBX: ffffffff8199570d RCX: 0000000080000001
[ 3070.565566][    C0] RDX: 0000000000000001 RSI: ffffffff8dcc9146 RDI: ffffffff8c073a00
[ 3070.565578][    C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db
[ 3070.565592][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef1b70
[ 3070.565606][    C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000
[ 3070.565618][    C0] FS:  0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000
[ 3070.565633][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3070.565645][    C0] CR2: 000055d33b7c4168 CR3: 000000007f59c000 CR4: 00000000003526f0
[ 3070.565661][    C0] Call Trace:
[ 3070.565670][    C0]  <TASK>
[ 3070.565676][    C0]  default_idle+0x9/0x20
[ 3070.565698][    C0]  default_idle_call+0x72/0xb0
[ 3070.565720][    C0]  do_idle+0x1bd/0x500
[ 3070.565735][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 3070.565758][    C0]  ? __pfx_do_idle+0x10/0x10
[ 3070.565778][    C0]  cpu_startup_entry+0x43/0x60
[ 3070.565794][    C0]  rest_init+0x2de/0x300
[ 3070.565817][    C0]  start_kernel+0x380/0x3d0
[ 3070.565842][    C0]  x86_64_start_reservations+0x24/0x30
[ 3070.565862][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 3070.565880][    C0]  common_startup_64+0x13e/0x147
[ 3070.565911][    C0]  </TASK>
[ 3070.760576][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 3070.767450][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3070.778129][   T31] Tainted: [L]=SOFTLOCKUP
[ 3070.782451][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 3070.792503][   T31] Call Trace:
[ 3070.795784][   T31]  <TASK>
[ 3070.798723][   T31]  vpanic+0x1e0/0x670
[ 3070.802715][   T31]  panic+0xc5/0xd0
[ 3070.806442][   T31]  ? __pfx_panic+0x10/0x10
[ 3070.810885][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 3070.816298][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 3070.822490][   T31]  watchdog+0xfda/0xfe0
[ 3070.826656][   T31]  ? watchdog+0x209/0xfe0
[ 3070.830991][   T31]  kthread+0x726/0x8b0
[ 3070.835072][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3070.839754][   T31]  ? __pfx_kthread+0x10/0x10
[ 3070.844361][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3070.849574][   T31]  ? __pfx_kthread+0x10/0x10
[ 3070.854277][   T31]  ret_from_fork+0x51b/0xa40
[ 3070.858879][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3070.864011][   T31]  ? __switch_to+0xc82/0x1410
[ 3070.868728][   T31]  ? __pfx_kthread+0x10/0x10
[ 3070.873339][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3070.878136][   T31]  </TASK>
[ 3070.881787][   T31] Kernel Offset: disabled
[ 3070.886116][   T31] Rebooting in 86400 seconds..