last executing test programs:

10.256323082s ago: executing program 0 (id=2114):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRESDEC, @ANYBLOB="1803e224c67ce267cde376705368baf8cee82f5c6ee0fb8cb5ad6ce00870e8c67253cb3af4415da152d60f55a9881d85b89e8f99ff1416493073ff0bfdd1decdb5f33af119035634350d1e155327f1787265"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000)
recvmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0xff0}, {{0x0, 0x0, 0x0}, 0x1e4}, {{0x0, 0x0, 0x0}, 0x1001}, {{0x0, 0x0, &(0x7f0000000900)}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/115, 0x73}, {&(0x7f0000001900)=""/213, 0xd5}, {&(0x7f0000003e00)=""/4093, 0xffd}, {&(0x7f0000006080)=""/4094, 0xffe}, {&(0x7f0000000680)=""/91, 0x5b}], 0x5}, 0xb1}, {{0x0, 0xfffffffffffffdf8, 0x0}, 0x4a}, {{&(0x7f0000000280)=@phonet, 0x80, &(0x7f00000008c0)=[{&(0x7f00000013c0)=""/38, 0x26}, {&(0x7f0000001400)=""/244, 0xf4}, {&(0x7f0000000700)=""/156, 0x9c}], 0x3, &(0x7f0000000b40)=""/159, 0x9f}, 0x1000}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000340)=""/186, 0xba}], 0x1, &(0x7f0000000d00)=""/122, 0x7a}}, {{&(0x7f0000000d80)=@qipcrtr, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e00)=""/211, 0xd3}, {&(0x7f0000000f00)=""/142, 0x8e}, {&(0x7f0000000fc0)=""/233, 0xe9}, {&(0x7f00000010c0)=""/177, 0xb1}], 0x4, &(0x7f00000011c0)=""/109, 0x6d}, 0x80000001}], 0xb, 0x20, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
syz_emit_ethernet(0x52, &(0x7f0000001400)=ANY=[], 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000480)="11fa608f61c7253696529e3711a861ecbbd9eac9c2f28d6f6c05a721aeac6b6641bcc6cdc1011301ed6701e1ee4f57286f8b5dcce2908a37ad40e53666613fcbccd10a13e9dbff55c134d5b3f0495e8e4ae51b7a8e", 0x55}], 0x1, 0xfee2, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x202, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000140)={0x2, 0x4}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f00000dc000/0x1000)=nil, 0x1000, 0x9000, 0x2, &(0x7f0000ff6000/0x9000)=nil)
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000300)={0x2, 0x2, 0x1, 0x40, <r7=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x4}, 0x8)
socket$kcm(0x10, 0x2, 0x0)
socket(0x3b3c6e2888cfa763, 0xa, 0x0)
fsopen(0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
unshare(0x8000000)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2, 0x3}, 0x20)

9.281415996s ago: executing program 4 (id=2118):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000280)={0x100, {{0xa, 0x4e20, 0x4, @empty, 0x6}}, {{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}}}, 0x104)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x80)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
io_setup(0x3, &(0x7f0000000140)=<r4=>0x0)
io_submit(r4, 0x0, &(0x7f0000000a40))
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz1\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x40000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0xb16, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x1, 0x0, 0x0, 0x7, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xeaf2, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x7b, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff9, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x2000, 0xfffffffd, 0x1}, 0x10)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x3, 0x4)
bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000005009803"])
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)={0x24, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)

9.05317207s ago: executing program 2 (id=2119):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x623}], 0x10}, 0x406)

9.041935703s ago: executing program 0 (id=2120):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16])
io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)

8.811305033s ago: executing program 3 (id=2121):
r0 = socket$tipc(0x1e, 0x4, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0))
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x1122, 0x0, 0x0)
keyctl$set_timeout(0xf, 0x0, 0x100000001)
keyctl$link(0x8, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x14d}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0x1000}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x4000000000001f4, 0x81)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x2, 0x3}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa006701ec000000000000000000000000000000ff0200000000000000000000000300"/48], 0x0)

8.127547279s ago: executing program 2 (id=2122):
r0 = io_uring_setup(0x6b57, &(0x7f0000000080)={0x0, 0x926f, 0x80, 0x1, 0xb7})
mmap$IORING_OFF_SQ_RING(&(0x7f00006e8000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x1)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040))
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x4806, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b)
write(r3, 0x0, 0x0)
unshare(0x22020400)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r4, 0x6, 0x4, 0x0, &(0x7f0000000000)=0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000))

7.505301461s ago: executing program 1 (id=2123):
syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@noop, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}}, {@multicast2}]}]}}}}}}}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = fsopen(&(0x7f0000000340)='bpf\x00', 0x1)
open(&(0x7f0000000140)='./file0\x00', 0x402401, 0x40) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000004}, 0x8080)

6.840183927s ago: executing program 1 (id=2124):
r0 = socket$nl_route(0x10, 0x3, 0x0)
semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4805}, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00'})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@empty, 0x0, r4})
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7})
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000000", @ANYRES16=r2, @ANYBLOB="90007f0a0a0002000180c20000030000060005"], 0x30}, 0x1, 0x0, 0x0, 0x811}, 0x40004)
r8 = openat$mixer(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r8, 0x80044dff, &(0x7f0000000080))

6.664339243s ago: executing program 4 (id=2125):
io_setup(0x2278, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2800491, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x4, 0x0, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
r3 = socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)
r10 = memfd_create(&(0x7f0000000240)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00B\xd3$y\xf3\xc3\xa2\xda\xc7\x81\xcc3\\\xd4\xccJAKTQ0\x19L\x9d\x7f\xab\x818M6{\xb7\xf6\x97Z\xf6\r\xc3wd\x01', 0x2)
ftruncate(r10, 0x1000006)
fcntl$addseals(r10, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r10, 0x0, 0x0, 0x1000000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x2)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

6.502142801s ago: executing program 3 (id=2126):
r0 = socket$inet6(0xa, 0x803, 0x6)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x94)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket(0x10, 0x80000, 0xca)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a100f7f9cbe68e9, &(0x7f0000000080)={0x400, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x4e20, 0x0, @remote}}}, 0x108)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8af", 0x2c, 0x90, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f000090a000/0x4000)=nil, 0x4000, 0x1000006, 0x100010, 0xffffffffffffffff, 0x71fb9000)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x3, 0x0, @mcast1}}}, 0x104)
close(0xffffffffffffffff)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000026000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x68, 0x0, 0x24})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

6.254562972s ago: executing program 1 (id=2127):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x74, 0xd, 0xcf, 0x40, 0xbda, 0x140, 0xda29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xff, 0xf0, 0x8, [{{0x9, 0x4, 0x9e, 0x8, 0x0, 0xce, 0xe0, 0xa7, 0x4c}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket(0x9, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0xd0, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xa0, 0x2, [@TCA_FLOWER_ACT={0x9c, 0x3, [@m_bpf={0x98, 0x1, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x80000000, 0x8, 0x20000000, 0x9, 0x2}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x1, 0xf, 0x17, 0x5}, {0x9, 0xab, 0x89, 0x2}, {0xfff8, 0x7, 0xf3}, {0x3, 0xfd, 0x28, 0x2}, {0x8, 0x2, 0x38, 0x4}, {0x1, 0x6, 0x81, 0x6}, {0x1, 0x6, 0x8, 0x1}, {0x2, 0xb, 0xd, 0x2}, {0xe7, 0x5, 0x2b, 0xffffff7f}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8d8}, 0x80)
syz_usb_connect$cdc_ncm(0x2, 0x91, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0xa6, 0x0, 0x1d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '4'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x3, 0x3a, 0x8}, {0x6, 0x24, 0x1a, 0x7, 0x38}, [@call_mgmt={0x5, 0x24, 0x1, 0x5, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0xc, 0x4, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x410, 0xff, 0x0, 0xb5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x16, 0x10, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0xe373ea161c99954b, 0x2, 0x5, 0x6}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x3, 0x2, 0x10, 0x3}, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x9, 0x0, 0x200}]}, 0x5, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2809}}, {0x50, &(0x7f00000004c0)=@string={0x50, 0x3, "1dff6ed9853ec97e649df05286414066d43522d0b5a00a1b55536120b6e2d53fe13885759ba351b53e9172ac1030dbdcaaa24c4b081352dadc0cdf65603cdbd76b3001a25b48ab03f69b6ef99e6b"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x418}}, {0x4e, &(0x7f0000000580)=@string={0x4e, 0x3, "7e8fce3200591ab3ca616613a96939cc135034ec590c3a6ae02f289bfc9518bc8d594f4cd0a060d15579c7e92a0b170bf0ccf8daa8cdfd1ae56cefe269348de76e658d0e4e02fe6f93a0f20c"}}]})
syz_usb_control_io$printer(r0, &(0x7f0000002900)={0x14, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="04000000000000009a4be643f89c0cb4e735fd37ea9ddd6f303a14c751233efa5b219263b8719be6a13474f9046ecea7d3390b7d5b2ed3cf9201fd68a6bec9131f847ed62c7c0db285df67133f29490432cede84785beeaa29ab54d285f1fdca10e632c3bf28387b362bc50b506309e57d61f088e16526"]}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
close(r6)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000071, 0x0, 0x5}]})
r8 = socket$tipc(0x1e, 0x5, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0)
bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r8, 0x0)
r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003740), 0x2000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r10, 0xc0f85403, &(0x7f0000003780)={{0x3, 0x1, 0x4, 0x2, 0xfffffff1}, 0x4000008, 0x7, 'id0\x00', 'timer0\x00', 0x0, 0x15, 0x5, 0xb05, 0x8})
r11 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r11, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x42, 0x0, 0xffffffff}}, 0x10, 0x0}, 0x0)

6.013235398s ago: executing program 0 (id=2128):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece)
ioctl$LOOP_SET_FD(r4, 0x4c00, r1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_int(r5, 0x1, 0x10, 0x0, 0x0)
shutdown(r0, 0x1)
recvmmsg(r5, 0x0, 0x0, 0x2300, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x0)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140), 0x18)

5.600802089s ago: executing program 0 (id=2129):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setpgid(r1, r1)
setpgid(0x0, r1)
wait4(r1, 0x0, 0x2, 0x0)
get_robust_list(r1, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

4.738443521s ago: executing program 3 (id=2130):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4)
recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x80800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x134, 0x10, 0x200, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88affd25, 0x14200}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_LABEL={0x8}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}, @IFLA_AF_SPEC={0xe4, 0x1a, 0x0, 0x1, [@AF_INET={0x48, 0x2, 0x0, 0x1, {0x44, 0x1, 0x0, 0x1, [{0x8, 0xe, 0x0, 0x0, 0x2}, {0x8, 0x1e, 0x0, 0x0, 0x7}, {0x8, 0x8, 0x0, 0x0, 0x2}, {0x8, 0x9, 0x0, 0x0, 0x7}, {0x8, 0x20, 0x0, 0x0, 0xfffffffa}, {0x8, 0x21, 0x0, 0x0, 0x3}, {0x8, 0x4, 0x0, 0x0, 0x4}, {0x8, 0x18, 0x0, 0x0, 0x800}]}}, @AF_BRIDGE={0x4}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x3c}}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x28, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x134}}, 0x0)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0x10000010})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)

4.559157819s ago: executing program 2 (id=2131):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x84000000, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x1, 0x60000000, 0xc}, {@rand_addr=0x64010104, 0x4e26, 0x12002, 0x3, 0x8001}}, 0x44)

4.419448148s ago: executing program 2 (id=2132):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
wait4(r3, 0x0, 0x80000000, 0x0)
ptrace(0x10, r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r6, 0x81044804, &(0x7f0000000400)={0x1, 0x2})
syz_usb_control_io(r5, &(0x7f0000000500)={0x18, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003c70000000703"], 0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000000000050000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310007000000000000000002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r4], 0x54}}, 0x20000000)
syz_open_procfs(r3, &(0x7f0000000000)='net/fib_trie\x00')
wait4(r3, 0x0, 0xa0000009, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000034000b43d300fff5e700000003d25a80", 0x14}], 0x1}, 0x0)

4.326527874s ago: executing program 1 (id=2133):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00788f0000060000000000000000e4000000000000000093421882000000009b6ac62f30d7683d8303ca6f22173087f2bb8e71ded891a1974211664bdd8bff9b7ec990bc0d0671883e0093142eaf5706566855f03b968c08c370a3d48df6caa95807efeb8b436c112bec6613f4529600"/126], 0x44}}, 0x1)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x90, 0x1405, 0x8, 0x70bd2a, 0x25dfdbfb, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0xc851}, 0x20000000)

4.133186461s ago: executing program 1 (id=2134):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$unix(r1, 0x0, 0x0, 0x2004c084, &(0x7f0000001680)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000914010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xbc, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x34}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, 0x0}, 0x40}, @exit_looper], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000500)={0x4, 0x8, '\x00', 0x0, &(0x7f00000004c0)=[0x0]})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb4}}, 0x0)

4.120183625s ago: executing program 2 (id=2135):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$unix(r1, 0x0, 0x0, 0x2004c084, &(0x7f0000001680)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000914010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xbc, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x34}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, 0x0}, 0x40}, @exit_looper], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000500)={0x4, 0x8, '\x00', 0x0, &(0x7f00000004c0)=[0x0]})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb4}}, 0x0)

4.086494657s ago: executing program 4 (id=2136):
r0 = socket$tipc(0x1e, 0x4, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0))
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x1122, 0x0, 0x0)
keyctl$set_timeout(0xf, 0x0, 0x100000001)
keyctl$link(0x8, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30c6d1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f40e2ab1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c81106db988096bba7772e6acc5956344eaa64fea7c6319a37312ad57490dd2ebcb9bdf2815aae851bbd55317b4fcdaa8b06d30ed3db8a117424fed41f68979ac996e7fcd4549daf29bff6a2643e184580eb0b0bf81046975ea8d5e06e7124790dfca059217a34f4120feb2bb", 0x14d}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0x1000}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x4000000000001f4, 0x81)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x2, 0x3}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa006701ec000000000000000000000000000000ff0200000000000000000000000300"/48], 0x0)

3.868634289s ago: executing program 0 (id=2137):
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syzkaller0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x11, 0x9, 0x20000a30, 0x0, 0x0, 0x8, 0x7, 0x0, 0x3000000}})
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, 0x0)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)={0x34, 0x1a, 0x1, 0xfffffffd, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str=':*^${\x00'}, @typed={0xa, 0x19, 0x0, 0x0, @str=':*^${\x00'}, @nested={0xc, 0x1c, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x34}], 0x1}, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

3.389675801s ago: executing program 3 (id=2138):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16])
io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)

1.551777696s ago: executing program 3 (id=2139):
r0 = socket$nl_route(0x10, 0x3, 0x0)
semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4805}, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00'})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@empty, 0x0, r4})
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000580)={0x601, 0x1, &(0x7f0000000180)=[r7], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff})
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000000", @ANYRES16=r2, @ANYBLOB="90007f0a0a0002000180c20000030000060005"], 0x30}, 0x1, 0x0, 0x0, 0x811}, 0x40004)
r8 = openat$mixer(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r8, 0x80044dff, &(0x7f0000000080))

972.369503ms ago: executing program 1 (id=2140):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_MSG_RING={0x28, 0x32, 0x0, r4, 0x1, &(0x7f0000000040)="5b0526a74d31f432d421d863af45725e7429eaa59d1a4c3e3a078b17874359f20ac3", 0x22, 0x0, 0x1})
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010000104000000004000000200000000", @ANYRES32=0x0, @ANYBLOB="038000000000000004001980080004003a010000140003006272696467655f736c6176655f310000"], 0x40}}, 0x0)
r7 = socket$inet(0x2, 0x2, 0x73)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))

928.03933ms ago: executing program 4 (id=2141):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000980)=0x40)
r1 = open(&(0x7f0000000000)='.\x00', 0x18100, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)

621.955542ms ago: executing program 4 (id=2142):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00')
write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xbb)

258.781046ms ago: executing program 3 (id=2143):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xfe, 0xec, 0x48, 0x8, 0x61d, 0xc120, 0xe367, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x42, 0x1f, 0xe3}}]}}]}}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000240)={r0, 0x7, 0x414, 0xffffffffffff7fff})
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003c80)=@newtfilter={0x210, 0x2c, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xa, 0xffe0}, {0xf, 0x5}}, [@f_rsvp={{0x9}, {0x1e0, 0x2, [@TCA_RSVP_ACT={0x1dc, 0x6, [@m_nat={0xcc, 0x4, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0x3, 0x1, 0x8}, @private=0xa010101, @rand_addr=0x64010100, 0x100000001}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x0, 0x10, 0x8f}, @local, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0x0, 0xb, 0xa26f526}, @empty, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xffff, 0x1, 0xfffffffc, 0xa}, @multicast1, @multicast1, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x10c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0xe2, 0x6, "fd1cf9493df8f9254b21313698bea5959a175298c1acba8fd61d5452955384783d99ac08fefd92ed3b1a024a9710b13547fc6f0ff35da51d72b5ac8205e562d21e3fb5a744166dfccd0fa99014a5b1a00eea75baadfc251fb856f5c696d016b73fe544aa4d37e44e179d0df414fd537efe31be5a1ec00498b58ced143df9917d46e8c245361f50a04787b9f4df22e8f75d5c2ffd355a5def78b301bba30f150b02f479a8fba8d870d0301ae6e0ffc4d0c392928e075831dab8c08323f9830c6db24909f39f17e1fa2733d34368a17ece3b9c05e8f38e1d3127c59ce0b562"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x210}}, 0x0)
recvmmsg(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/232, 0xe8}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000006c0)=""/145, 0x91}, {&(0x7f0000000480)=""/21, 0x15}], 0x4}, 0x1}], 0x2, 0x2023, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000180)="6d69ad902005f52896666eec602234844ece48ba9ee0f520a8bdced8f79eee1769e5ccd256db81c124ff07ee31213317b8eb633d007eb28ac3bf12544682c6f5fd948ac61681c6d95ce30ed7333bbd94f1296524bfc27704a73261b20c1f13", &(0x7f00000005c0)=""/241, &(0x7f00000000c0)="1733e3bb4db7649f4492cf4a901016df917001c59779fa1823bff0ae8b42bb96d96ca2", &(0x7f0000000780)="d7c3938b3a6f0cdbde936f0ac969e5af50eb2db7fd6a4708c761eb8b904f9e3050b8c068feccc4d3aeae6fbc0b3820c70d9f62c760e445e10e6e99a7cd6a2cd7f038901d1664d7bd09a7c192ff8156f103932467b37ce5f245204e71ac5a5e1ebafa4b9cc79f7b7cc3ccd4efac325598c9b083059ebf2b33b17ec13bfe94fef4297dfc368c56f3edb5142bf73345d29f0320c8ba8d96ad6300c105aa1f51850cfb7fefe68e3003f7f01aee2e545c117248b951846e59a322b98399b32bd3c07a59178f5b4320f7d48725dd2d15592dd84a69138b3fb82ce81fa0291a9bce8d88d21194afb3c2e9be359ee3", 0x0, r3, 0x4}, 0x38)

236.030106ms ago: executing program 4 (id=2144):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x13, 0x0, @void}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r3=>0x0})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x2, 0x4)
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

219.417483ms ago: executing program 2 (id=2145):
r0 = socket$inet6(0xa, 0x803, 0x6)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x94)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket(0x10, 0x80000, 0xca)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a100f7f9cbe68e9, &(0x7f0000000080)={0x400, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x4e20, 0x0, @remote}}}, 0x108)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8af", 0x2c, 0x90, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f000090a000/0x4000)=nil, 0x4000, 0x1000006, 0x100010, 0xffffffffffffffff, 0x71fb9000)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x3, 0x0, @mcast1}}}, 0x104)
close(0xffffffffffffffff)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000026000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x68, 0x0, 0x24})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

0s ago: executing program 0 (id=2146):
io_setup(0x2278, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2800491, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x4, 0x0, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
r3 = socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)
r10 = memfd_create(&(0x7f0000000240)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00B\xd3$y\xf3\xc3\xa2\xda\xc7\x81\xcc3\\\xd4\xccJAKTQ0\x19L\x9d\x7f\xab\x818M6{\xb7\xf6\x97Z\xf6\r\xc3wd\x01', 0x2)
ftruncate(r10, 0x1000006)
fcntl$addseals(r10, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r10, 0x0, 0x0, 0x1000000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x2)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

nt 0x81 has invalid wMaxPacketSize 0
[  639.685959][ T5901] usb 3-1: Product: syz
[  639.690034][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  639.690190][ T5901] usb 3-1: Manufacturer: syz
[  639.732270][    T9] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  639.734124][ T5901] usb 3-1: SerialNumber: syz
[  639.754806][ T5929] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  639.792503][ T5901] usb 3-1: config 0 descriptor??
[  639.797991][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.798372][T12596] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  639.817885][ T5929] usb 4-1: config 0 descriptor??
[  639.879097][ T5901] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  639.908165][ T5901] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  639.921642][    T9] usb 5-1: Using ep0 maxpacket: 16
[  639.936760][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.965957][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  639.987130][    T9] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  639.999481][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.014610][    T9] usb 5-1: config 0 descriptor??
[  640.065716][    T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  640.191899][ T5901] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  640.304115][ T5929] hid-multitouch 0003:0457:07DA.0038: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0
[  640.351812][ T5901] usb 2-1: Using ep0 maxpacket: 8
[  640.374324][  T917] usb 3-1: USB disconnect, device number 77
[  640.392714][ T5901] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  640.406135][  T917] ldusb 3-1:0.0: LD USB Device #1 now disconnected
[  640.417607][ T5901] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  640.436146][ T5901] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  640.448842][ T5901] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  640.466632][ T5901] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  640.493118][T12598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  640.502598][ T5901] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  640.515142][T12598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  640.526966][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.566493][T12598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  640.575967][T12598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  640.592038][ T5929] usb 4-1: USB disconnect, device number 63
[  640.754724][ T5901] usb 2-1: GET_CAPABILITIES returned 0
[  640.760330][ T5901] usbtmc 2-1:16.0: can't read capabilities
[  640.942888][T12613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.119937][T12613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.154618][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.203330][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.245427][T12613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.259318][    T9] usb 2-1: USB disconnect, device number 84
[  641.300057][T12613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.441763][T12613] loop2: detected capacity change from 0 to 7
[  641.463101][T12613] Dev loop2: unable to read RDB block 7
[  641.484854][T12613]  loop2: unable to read partition table
[  641.498584][T12613] loop2: partition table beyond EOD, truncated
[  641.528423][T12613] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  642.060821][ T5207] Dev loop2: unable to read RDB block 7
[  642.079111][ T5207]  loop2: unable to read partition table
[  642.087960][ T5901] usb 1-1: USB disconnect, device number 83
[  642.109149][ T5901] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  642.121347][ T5207] loop2: partition table beyond EOD, truncated
[  642.611780][ T5929] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  642.947950][T12633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.958664][T12633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.115316][  T917] usb 5-1: USB disconnect, device number 89
[  643.552206][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short
[  643.562535][ T5929] usb 2-1: unable to read config index 0 descriptor/start: -71
[  643.570153][ T5929] usb 2-1: can't read configurations, error -71
[  644.169805][T12654] FAULT_INJECTION: forcing a failure.
[  644.169805][T12654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  644.290266][T12654] CPU: 1 UID: 0 PID: 12654 Comm: syz.0.1758 Not tainted syzkaller #0 PREEMPT(full) 
[  644.290299][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  644.290314][T12654] Call Trace:
[  644.290323][T12654]  <TASK>
[  644.290347][T12654]  dump_stack_lvl+0x189/0x250
[  644.290382][T12654]  ? __pfx____ratelimit+0x10/0x10
[  644.290408][T12654]  ? __pfx_dump_stack_lvl+0x10/0x10
[  644.290438][T12654]  ? __pfx__printk+0x10/0x10
[  644.290459][T12654]  ? __might_fault+0xb0/0x130
[  644.290501][T12654]  should_fail_ex+0x414/0x560
[  644.290538][T12654]  _copy_from_user+0x2d/0xb0
[  644.290567][T12654]  cmsghdr_from_user_compat_to_kern+0x50b/0x800
[  644.290612][T12654]  ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10
[  644.290655][T12654]  ____sys_sendmsg+0x20f/0x830
[  644.290693][T12654]  ? __pfx_____sys_sendmsg+0x10/0x10
[  644.290741][T12654]  ___sys_sendmsg+0x21f/0x2a0
[  644.290774][T12654]  ? __pfx____sys_sendmsg+0x10/0x10
[  644.290844][T12654]  ? __fget_files+0x2a/0x420
[  644.290874][T12654]  ? __fget_files+0x3a0/0x420
[  644.290917][T12654]  __sys_sendmmsg+0x28e/0x430
[  644.290954][T12654]  ? __pfx___sys_sendmmsg+0x10/0x10
[  644.290996][T12654]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  644.291043][T12654]  ? ksys_write+0x22a/0x250
[  644.291083][T12654]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  644.291116][T12654]  __do_fast_syscall_32+0xb6/0x2b0
[  644.291145][T12654]  ? lockdep_hardirqs_on+0x9c/0x150
[  644.291175][T12654]  do_fast_syscall_32+0x34/0x80
[  644.291202][T12654]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  644.291229][T12654] RIP: 0023:0xf7ff6539
[  644.291256][T12654] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  644.291276][T12654] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  644.291299][T12654] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a00
[  644.291315][T12654] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000000
[  644.291328][T12654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  644.291342][T12654] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  644.291355][T12654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  644.291386][T12654]  </TASK>
[  644.651524][    T9] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  644.867006][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  644.940872][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  645.086755][    T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  645.100832][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  645.110973][    T9] usb 5-1: SerialNumber: syz
[  645.385179][    T9] usb 5-1: 0:2 : does not exist
[  645.412462][    T9] usb 5-1: unit 5: unexpected type 0x0a
[  645.515749][    T9] usb 5-1: USB disconnect, device number 90
[  645.541843][   T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  645.542197][  T917] usb 2-1: new full-speed USB device number 87 using dummy_hcd
[  645.621958][ T5901] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  645.724074][  T917] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  645.725035][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  645.737882][  T917] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  645.763127][  T917] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  645.771643][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  645.779057][  T917] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  645.798638][   T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  645.799713][  T917] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  645.821666][ T5901] usb 4-1: Using ep0 maxpacket: 16
[  645.859772][  T917] usb 2-1: config 0 interface 0 has no altsetting 0
[  645.875161][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  645.887596][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  645.904399][ T5901] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  645.911397][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.927907][  T917] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  645.937846][  T917] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  645.951116][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.952354][   T10] usb 1-1: config 0 descriptor??
[  645.968057][  T917] usb 2-1: Product: syz
[  645.988625][ T5901] usb 4-1: config 0 descriptor??
[  646.002741][  T917] usb 2-1: Manufacturer: syz
[  646.007413][  T917] usb 2-1: SerialNumber: syz
[  646.025862][ T5901] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  646.043889][  T917] usb 2-1: config 0 descriptor??
[  646.066357][T12673] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  646.099315][  T917] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  646.135370][  T917] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  646.409582][   T10] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0
[  646.423633][   T10] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0
[  646.431122][   T10] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0
[  646.444231][   T10] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0
[  646.453910][   T10] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0
[  646.464799][   T10] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0
[  646.496999][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-1)
[  646.508434][  T917] usb 2-1: USB disconnect, device number 87
[  646.526321][  T917] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  646.577496][   T10] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0
[  646.597060][   T10] cp2112 0003:10C4:EA90.0039: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  646.663702][T12689] FAULT_INJECTION: forcing a failure.
[  646.663702][T12689] name failslab, interval 1, probability 0, space 0, times 0
[  646.680259][T12689] CPU: 1 UID: 0 PID: 12689 Comm: syz.2.1769 Not tainted syzkaller #0 PREEMPT(full) 
[  646.680292][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  646.680308][T12689] Call Trace:
[  646.680317][T12689]  <TASK>
[  646.680328][T12689]  dump_stack_lvl+0x189/0x250
[  646.680364][T12689]  ? __pfx____ratelimit+0x10/0x10
[  646.680391][T12689]  ? __pfx_dump_stack_lvl+0x10/0x10
[  646.680422][T12689]  ? __pfx__printk+0x10/0x10
[  646.680447][T12689]  ? __pfx___might_resched+0x10/0x10
[  646.680474][T12689]  ? fs_reclaim_acquire+0x7d/0x100
[  646.680513][T12689]  should_fail_ex+0x414/0x560
[  646.680553][T12689]  should_failslab+0xa8/0x100
[  646.680588][T12689]  __kmalloc_cache_noprof+0x70/0x3d0
[  646.680618][T12689]  ? alloc_pipe_info+0xe9/0x4d0
[  646.680654][T12689]  alloc_pipe_info+0xe9/0x4d0
[  646.680688][T12689]  splice_direct_to_actor+0xa5d/0xcc0
[  646.680740][T12689]  ? __pfx_aa_file_perm+0x10/0x10
[  646.680763][T12689]  ? __pfx_direct_splice_actor+0x10/0x10
[  646.680803][T12689]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  646.680847][T12689]  do_splice_direct+0x181/0x270
[  646.680883][T12689]  ? __pfx_do_splice_direct+0x10/0x10
[  646.680912][T12689]  ? rcu_read_lock_any_held+0xb3/0x120
[  646.680944][T12689]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  646.680980][T12689]  ? vfs_copy_file_range+0xaca/0x1370
[  646.681025][T12689]  vfs_copy_file_range+0xb03/0x1370
[  646.681078][T12689]  ? __pfx_vfs_copy_file_range+0x10/0x10
[  646.681128][T12689]  __se_sys_copy_file_range+0x2fb/0x470
[  646.681163][T12689]  ? fput+0xa0/0xd0
[  646.681188][T12689]  ? __pfx___se_sys_copy_file_range+0x10/0x10
[  646.681232][T12689]  ? __ia32_sys_copy_file_range+0x21/0xf0
[  646.681272][T12689]  __do_fast_syscall_32+0xb6/0x2b0
[  646.681302][T12689]  ? lockdep_hardirqs_on+0x9c/0x150
[  646.681334][T12689]  do_fast_syscall_32+0x34/0x80
[  646.681363][T12689]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  646.681391][T12689] RIP: 0023:0xf7ff6539
[  646.681415][T12689] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  646.681434][T12689] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000179
[  646.681457][T12689] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080
[  646.681473][T12689] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 00000000fffffff8
[  646.681486][T12689] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  646.681499][T12689] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  646.681513][T12689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  646.681548][T12689]  </TASK>
[  646.996450][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  647.059601][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  647.093398][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  647.104332][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  647.116973][T12691] loop2: detected capacity change from 0 to 7
[  647.126660][T12691] Dev loop2: unable to read RDB block 7
[  647.132937][T12691]  loop2: unable to read partition table
[  647.139122][T12691] loop2: partition table beyond EOD, truncated
[  647.146299][T12691] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  647.341597][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1771'.
[  647.848337][T12705] netlink: 'syz.4.1774': attribute type 6 has an invalid length.
[  648.070200][ T5207] Dev loop2: unable to read RDB block 7
[  648.088131][ T5207]  loop2: unable to read partition table
[  648.094828][ T5207] loop2: partition table beyond EOD, truncated
[  648.209741][T12714] FAULT_INJECTION: forcing a failure.
[  648.209741][T12714] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  648.340721][T12714] CPU: 1 UID: 0 PID: 12714 Comm: syz.2.1775 Not tainted syzkaller #0 PREEMPT(full) 
[  648.340753][T12714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  648.340768][T12714] Call Trace:
[  648.340777][T12714]  <TASK>
[  648.340788][T12714]  dump_stack_lvl+0x189/0x250
[  648.340824][T12714]  ? __pfx____ratelimit+0x10/0x10
[  648.340851][T12714]  ? __pfx_dump_stack_lvl+0x10/0x10
[  648.340881][T12714]  ? __pfx__printk+0x10/0x10
[  648.340916][T12714]  should_fail_ex+0x414/0x560
[  648.340956][T12714]  _copy_to_user+0x31/0xb0
[  648.340986][T12714]  simple_read_from_buffer+0xe1/0x170
[  648.341022][T12714]  proc_fail_nth_read+0x1b3/0x220
[  648.341052][T12714]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  648.341081][T12714]  ? rw_verify_area+0x2a6/0x4d0
[  648.341108][T12714]  ? __lock_acquire+0xab9/0xd20
[  648.341130][T12714]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  648.341157][T12714]  vfs_read+0x200/0xa30
[  648.341183][T12714]  ? fdget_pos+0x247/0x320
[  648.341220][T12714]  ? __pfx___mutex_lock+0x10/0x10
[  648.341248][T12714]  ? __pfx_vfs_read+0x10/0x10
[  648.341277][T12714]  ? __fget_files+0x2a/0x420
[  648.341314][T12714]  ? __fget_files+0x3a0/0x420
[  648.341344][T12714]  ? __fget_files+0x2a/0x420
[  648.341385][T12714]  ksys_read+0x145/0x250
[  648.341418][T12714]  ? __pfx_ksys_read+0x10/0x10
[  648.341448][T12714]  ? lockdep_hardirqs_on+0x9c/0x150
[  648.341476][T12714]  __do_fast_syscall_32+0xb6/0x2b0
[  648.341505][T12714]  ? lockdep_hardirqs_on+0x9c/0x150
[  648.341543][T12714]  do_fast_syscall_32+0x34/0x80
[  648.341572][T12714]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  648.341607][T12714] RIP: 0023:0xf7ff6539
[  648.341626][T12714] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  648.341647][T12714] RSP: 002b:00000000f54e6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  648.341670][T12714] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54e6620
[  648.341686][T12714] RDX: 000000000000000f RSI: 00000000f7485ff4 RDI: 0000000000000000
[  648.341701][T12714] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  648.341714][T12714] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  648.341728][T12714] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  648.341760][T12714]  </TASK>
[  648.995755][ T5207] Dev loop2: unable to read RDB block 7
[  649.002961][ T5207]  loop2: unable to read partition table
[  649.027780][ T5207] loop2: partition table beyond EOD, truncated
[  649.037848][   T10] cp2112 0003:10C4:EA90.0039: error requesting version
[  649.129544][   T10] cp2112 0003:10C4:EA90.0039: probe with driver cp2112 failed with error -71
[  649.275845][  T917] usb 4-1: USB disconnect, device number 64
[  649.321580][   T10] usb 1-1: USB disconnect, device number 84
[  649.628065][T12731] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3897524436 (7795048872 ns) > initial count (2759807172 ns). Using initial count to start timer.
[  649.815150][T12722] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3996681224 (15986724896 ns) > initial count (3709615788 ns). Using initial count to start timer.
[  650.781590][    T9] usb 5-1: new full-speed USB device number 91 using dummy_hcd
[  650.963387][    T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  650.972272][   T10] usb 1-1: new full-speed USB device number 85 using dummy_hcd
[  651.011622][    T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  651.039074][    T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  651.079528][    T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  651.108891][    T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  651.159979][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  651.169758][   T10] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  651.192266][   T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  651.214834][    T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  651.224080][    T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  651.233030][   T10] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  651.245415][    T9] usb 5-1: Product: syz
[  651.250116][   T10] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  651.262356][    T9] usb 5-1: Manufacturer: syz
[  651.270463][    T9] usb 5-1: SerialNumber: syz
[  651.285790][   T10] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  651.300362][    T9] usb 5-1: config 0 descriptor??
[  651.320402][T12737] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  651.378443][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  651.410452][    T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  651.470668][   T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  651.493379][    T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  651.513209][   T10] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  651.525091][   T10] usb 1-1: Product: syz
[  651.554928][   T10] usb 1-1: Manufacturer: syz
[  651.601547][   T10] usb 1-1: SerialNumber: syz
[  651.643401][   T10] usb 1-1: config 0 descriptor??
[  651.674644][T12744] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  651.697297][   T10] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  651.749601][   T10] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  652.144476][    C0] ldusb 5-1:0.0: usb_submit_urb failed (-1)
[  652.156708][ T5901] usb 5-1: USB disconnect, device number 91
[  652.218443][ T5901] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  653.888750][   T10] usb 1-1: USB disconnect, device number 85
[  654.004821][   T10] ldusb 1-1:0.0: LD USB Device #1 now disconnected
[  654.073704][ T5901] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  654.272060][ T5901] usb 3-1: Using ep0 maxpacket: 16
[  654.286723][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  654.311831][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  654.355519][ T5901] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  654.471647][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.505421][ T5901] usb 3-1: config 0 descriptor??
[  654.533966][ T5901] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  654.558514][T12777] tipc: Started in network mode
[  654.606126][T12777] tipc: Node identity ce7b2231021d, cluster identity 4711
[  654.627869][T12777] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  654.672149][T12778] syzkaller0: entered promiscuous mode
[  654.708351][T12778] syzkaller0: entered allmulticast mode
[  654.757958][T12777] syzkaller0: mtu less than device minimum
[  654.915424][T12776] tipc: Resetting bearer <eth:syzkaller0>
[  654.948326][T12776] tipc: Disabling bearer <eth:syzkaller0>
[  655.430783][T12795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  655.440314][T12795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  655.473703][T12795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  655.483214][T12795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  655.495998][T12795] loop2: detected capacity change from 0 to 7
[  655.517029][T12795] Dev loop2: unable to read RDB block 7
[  655.522978][T12795]  loop2: unable to read partition table
[  655.529123][T12795] loop2: partition table beyond EOD, truncated
[  655.604338][T12795] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  655.841525][    T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  656.034690][T12803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  656.046090][T12803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  656.072779][   T10] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  656.221068][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  656.236877][    T9] usb 1-1: unable to read config index 0 descriptor/start: -71
[  656.247412][    T9] usb 1-1: can't read configurations, error -71
[  656.260231][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  656.279879][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  656.291060][   T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  656.306342][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  656.316723][   T10] usb 5-1: SerialNumber: syz
[  656.624483][ T5902] usb 2-1: new full-speed USB device number 88 using dummy_hcd
[  656.794222][ T5902] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  656.841890][ T5902] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  656.909112][ T5956] usb 3-1: USB disconnect, device number 78
[  656.924569][ T5902] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  657.013708][ T5902] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  657.123128][ T5902] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  657.205811][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0
[  657.226102][T12830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1801'.
[  657.580652][ T5902] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  657.590626][ T5902] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  657.599368][ T5902] usb 2-1: Product: syz
[  657.614413][ T5902] usb 2-1: Manufacturer: syz
[  657.619099][ T5902] usb 2-1: SerialNumber: syz
[  657.629592][T12830] IPv6: NLM_F_CREATE should be specified when creating new route
[  657.676323][ T5902] usb 2-1: config 0 descriptor??
[  657.691331][T12810] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  657.708306][ T5902] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  657.742165][ T5902] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  658.416429][ T5940] usb 2-1: USB disconnect, device number 88
[  658.433408][ T5940] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  659.404285][   T10] usb 5-1: 0:2 : does not exist
[  659.479760][   T10] usb 5-1: USB disconnect, device number 92
[  659.695506][ T6153] udevd[6153]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  661.880900][   T30] audit: type=1326 audit(1759448647.136:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.2.1809" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff6539 code=0x0
[  662.259958][T12883] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1813'.
[  662.274255][T12883] FAULT_INJECTION: forcing a failure.
[  662.274255][T12883] name failslab, interval 1, probability 0, space 0, times 0
[  662.290748][T12883] CPU: 0 UID: 0 PID: 12883 Comm: syz.3.1813 Not tainted syzkaller #0 PREEMPT(full) 
[  662.290771][T12883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  662.290782][T12883] Call Trace:
[  662.290789][T12883]  <TASK>
[  662.290796][T12883]  dump_stack_lvl+0x189/0x250
[  662.290822][T12883]  ? __pfx____ratelimit+0x10/0x10
[  662.290841][T12883]  ? __pfx_dump_stack_lvl+0x10/0x10
[  662.290862][T12883]  ? __pfx__printk+0x10/0x10
[  662.290875][T12883]  ? genl_rcv+0x28/0x40
[  662.290898][T12883]  ? ____sys_sendmsg+0x505/0x830
[  662.290919][T12883]  ? __sys_sendmsg+0x164/0x220
[  662.290958][T12883]  should_fail_ex+0x414/0x560
[  662.290986][T12883]  should_failslab+0xa8/0x100
[  662.291015][T12883]  kmem_cache_alloc_noprof+0x73/0x3c0
[  662.291040][T12883]  ? skb_clone+0x212/0x3a0
[  662.291070][T12883]  skb_clone+0x212/0x3a0
[  662.291096][T12883]  __netlink_deliver_tap+0x404/0x850
[  662.291125][T12883]  ? netlink_deliver_tap+0x2e/0x1b0
[  662.291145][T12883]  netlink_deliver_tap+0x19c/0x1b0
[  662.291168][T12883]  netlink_sendskb+0x68/0x140
[  662.291192][T12883]  netlink_unicast+0x397/0x9e0
[  662.291219][T12883]  ? __asan_memcpy+0x40/0x70
[  662.291251][T12883]  ? __pfx_netlink_unicast+0x10/0x10
[  662.291285][T12883]  netlink_rcv_skb+0x28c/0x470
[  662.291309][T12883]  ? __lock_acquire+0xab9/0xd20
[  662.291335][T12883]  ? __pfx_genl_rcv_msg+0x10/0x10
[  662.291369][T12883]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  662.291417][T12883]  ? down_read+0x1ad/0x2e0
[  662.291449][T12883]  genl_rcv+0x28/0x40
[  662.291479][T12883]  netlink_unicast+0x82f/0x9e0
[  662.291512][T12883]  ? __pfx_netlink_unicast+0x10/0x10
[  662.291538][T12883]  ? netlink_sendmsg+0x642/0xb30
[  662.291563][T12883]  ? skb_put+0x11b/0x210
[  662.291596][T12883]  netlink_sendmsg+0x805/0xb30
[  662.291643][T12883]  ? __pfx_netlink_sendmsg+0x10/0x10
[  662.291674][T12883]  ? __import_iovec+0x5d4/0x7f0
[  662.291700][T12883]  ? aa_sock_msg_perm+0xf1/0x1d0
[  662.291736][T12883]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  662.291759][T12883]  ? __pfx_netlink_sendmsg+0x10/0x10
[  662.291794][T12883]  __sock_sendmsg+0x219/0x270
[  662.291820][T12883]  ____sys_sendmsg+0x505/0x830
[  662.291856][T12883]  ? __pfx_____sys_sendmsg+0x10/0x10
[  662.291902][T12883]  ___sys_sendmsg+0x21f/0x2a0
[  662.291934][T12883]  ? __pfx____sys_sendmsg+0x10/0x10
[  662.292002][T12883]  ? __fget_files+0x2a/0x420
[  662.292033][T12883]  ? __fget_files+0x3a0/0x420
[  662.292075][T12883]  __sys_sendmsg+0x164/0x220
[  662.292106][T12883]  ? __pfx___sys_sendmsg+0x10/0x10
[  662.292155][T12883]  ? lockdep_hardirqs_on+0x9c/0x150
[  662.292186][T12883]  __do_fast_syscall_32+0xb6/0x2b0
[  662.292215][T12883]  ? lockdep_hardirqs_on+0x9c/0x150
[  662.292245][T12883]  do_fast_syscall_32+0x34/0x80
[  662.292272][T12883]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  662.292299][T12883] RIP: 0023:0xf7f44539
[  662.292334][T12883] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  662.292358][T12883] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  662.292381][T12883] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0
[  662.292400][T12883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  662.292413][T12883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  662.292425][T12883] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  662.292439][T12883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  662.292470][T12883]  </TASK>
[  662.633339][ T5956] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  662.941663][ T5956] usb 1-1: Using ep0 maxpacket: 16
[  662.948846][ T5956] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  663.011186][ T5956] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  663.035648][ T5956] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  663.064576][T12885] dvmrp0: entered allmulticast mode
[  663.074936][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.102363][ T5956] usb 1-1: config 0 descriptor??
[  663.125385][ T5956] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  663.201340][T12892] FAULT_INJECTION: forcing a failure.
[  663.201340][T12892] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  663.218666][T12892] CPU: 1 UID: 0 PID: 12892 Comm: syz.1.1816 Not tainted syzkaller #0 PREEMPT(full) 
[  663.218698][T12892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  663.218712][T12892] Call Trace:
[  663.218722][T12892]  <TASK>
[  663.218732][T12892]  dump_stack_lvl+0x189/0x250
[  663.218768][T12892]  ? __pfx____ratelimit+0x10/0x10
[  663.218795][T12892]  ? __pfx_dump_stack_lvl+0x10/0x10
[  663.218824][T12892]  ? __pfx__printk+0x10/0x10
[  663.218845][T12892]  ? __might_fault+0xb0/0x130
[  663.218900][T12892]  should_fail_ex+0x414/0x560
[  663.218939][T12892]  _copy_from_user+0x2d/0xb0
[  663.218968][T12892]  kstrtouint_from_user+0xc4/0x170
[  663.218994][T12892]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  663.219035][T12892]  proc_fail_nth_write+0x88/0x200
[  663.219061][T12892]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  663.219093][T12892]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  663.219119][T12892]  vfs_write+0x27b/0xb30
[  663.219157][T12892]  ? __pfx_vfs_write+0x10/0x10
[  663.219187][T12892]  ? __fget_files+0x2a/0x420
[  663.219224][T12892]  ? __fget_files+0x3a0/0x420
[  663.219253][T12892]  ? __fget_files+0x2a/0x420
[  663.219295][T12892]  ksys_write+0x145/0x250
[  663.219326][T12892]  ? __pfx_ksys_write+0x10/0x10
[  663.219359][T12892]  ? lockdep_hardirqs_on+0x9c/0x150
[  663.219389][T12892]  __do_fast_syscall_32+0xb6/0x2b0
[  663.219419][T12892]  ? lockdep_hardirqs_on+0x9c/0x150
[  663.219450][T12892]  do_fast_syscall_32+0x34/0x80
[  663.219485][T12892]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  663.219512][T12892] RIP: 0023:0xf706e539
[  663.219532][T12892] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  663.219551][T12892] RSP: 002b:00000000f545e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  663.219585][T12892] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545e620
[  663.219601][T12892] RDX: 0000000000000001 RSI: 00000000f7405ff4 RDI: 0000000000000000
[  663.219615][T12892] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  663.219628][T12892] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  663.219642][T12892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  663.219674][T12892]  </TASK>
[  663.567581][ T5928] usb 4-1: new full-speed USB device number 65 using dummy_hcd
[  663.718131][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1817'.
[  663.793592][ T5928] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  663.802357][ T5928] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  663.816345][ T5928] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  663.891694][ T5928] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  663.927732][ T5928] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  663.950737][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0
[  663.960192][ T5928] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  663.970312][ T5928] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  663.980510][ T5928] usb 4-1: Product: syz
[  663.985120][ T5928] usb 4-1: Manufacturer: syz
[  663.989853][ T5928] usb 4-1: SerialNumber: syz
[  664.013152][ T5928] usb 4-1: config 0 descriptor??
[  664.023305][T12890] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  664.041924][ T5928] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  664.111875][ T5956] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  664.272262][ T5928] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  664.368089][T12900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  664.380850][T12900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.383555][T12898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  664.423824][T12900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  664.429456][T12898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.433859][T12900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.463176][T12900] loop2: detected capacity change from 0 to 7
[  664.493713][ T6153] Dev loop2: unable to read RDB block 7
[  664.558756][   T10] usb 4-1: USB disconnect, device number 65
[  664.575468][   T10] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  664.623418][ T6153]  loop2: unable to read partition table
[  664.630666][ T6153] loop2: partition table beyond EOD, truncated
[  664.680654][T12900] Dev loop2: unable to read RDB block 7
[  664.697043][T12900]  loop2: unable to read partition table
[  664.709281][T12900] loop2: partition table beyond EOD, truncated
[  664.722992][T12900] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  664.813373][T12911] FAULT_INJECTION: forcing a failure.
[  664.813373][T12911] name failslab, interval 1, probability 0, space 0, times 0
[  664.835477][T12911] CPU: 1 UID: 0 PID: 12911 Comm: syz.2.1820 Not tainted syzkaller #0 PREEMPT(full) 
[  664.835508][T12911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  664.835526][T12911] Call Trace:
[  664.835535][T12911]  <TASK>
[  664.835545][T12911]  dump_stack_lvl+0x189/0x250
[  664.835582][T12911]  ? __pfx____ratelimit+0x10/0x10
[  664.835603][T12911]  ? __pfx_dump_stack_lvl+0x10/0x10
[  664.835623][T12911]  ? __pfx__printk+0x10/0x10
[  664.835640][T12911]  ? __pfx___might_resched+0x10/0x10
[  664.835659][T12911]  ? fs_reclaim_acquire+0x7d/0x100
[  664.835687][T12911]  should_fail_ex+0x414/0x560
[  664.835714][T12911]  should_failslab+0xa8/0x100
[  664.835738][T12911]  __kmalloc_cache_noprof+0x70/0x3d0
[  664.835759][T12911]  ? alloc_pipe_info+0xe9/0x4d0
[  664.835783][T12911]  alloc_pipe_info+0xe9/0x4d0
[  664.835806][T12911]  splice_direct_to_actor+0xa5d/0xcc0
[  664.835840][T12911]  ? __pfx_aa_file_perm+0x10/0x10
[  664.835855][T12911]  ? __lock_acquire+0xab9/0xd20
[  664.835871][T12911]  ? __pfx_direct_splice_actor+0x10/0x10
[  664.835893][T12911]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  664.835923][T12911]  do_splice_direct+0x181/0x270
[  664.835947][T12911]  ? __pfx_do_splice_direct+0x10/0x10
[  664.835967][T12911]  ? common_file_perm+0x1b5/0x230
[  664.835991][T12911]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  664.836016][T12911]  ? bpf_lsm_file_permission+0x9/0x20
[  664.836033][T12911]  ? security_file_permission+0x75/0x290
[  664.836053][T12911]  ? rw_verify_area+0x255/0x4d0
[  664.836075][T12911]  do_sendfile+0x4da/0x7e0
[  664.836099][T12911]  ? __pfx_do_sendfile+0x10/0x10
[  664.836117][T12911]  ? __ia32_compat_sys_sendfile+0x180/0x1d0
[  664.836141][T12911]  ? lockdep_hardirqs_on+0x9c/0x150
[  664.836162][T12911]  __do_fast_syscall_32+0xb6/0x2b0
[  664.836184][T12911]  ? lockdep_hardirqs_on+0x9c/0x150
[  664.836204][T12911]  do_fast_syscall_32+0x34/0x80
[  664.836225][T12911]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  664.836244][T12911] RIP: 0023:0xf7ff6539
[  664.836258][T12911] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  664.836272][T12911] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb
[  664.836289][T12911] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003
[  664.836300][T12911] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000
[  664.836309][T12911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  664.836319][T12911] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  664.836334][T12911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  664.836355][T12911]  </TASK>
[  665.150931][ T5956] usb 2-1: unable to get BOS descriptor or descriptor too short
[  665.182109][ T5956] usb 2-1: unable to read config index 0 descriptor/start: -71
[  665.190417][ T5956] usb 2-1: can't read configurations, error -71
[  665.206741][ T5207] Dev loop2: unable to read RDB block 7
[  665.216590][ T5207]  loop2: unable to read partition table
[  665.224915][ T5207] loop2: partition table beyond EOD, truncated
[  665.771780][ T5901] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  665.871293][ T5928] usb 1-1: USB disconnect, device number 88
[  665.951582][ T5901] usb 4-1: Using ep0 maxpacket: 32
[  665.959188][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  666.069888][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  666.101616][ T5901] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  666.110738][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.268090][ T5901] usb 4-1: config 0 descriptor??
[  666.715681][ T5901] savu 0003:1E7D:2D5A.003A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  666.968274][   T10] usb 4-1: USB disconnect, device number 66
[  667.103412][T12939] fido_id[12939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  667.922867][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'.
[  668.149047][T12962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1832'.
[  668.781514][ T5940] usb 3-1: new full-speed USB device number 79 using dummy_hcd
[  669.123260][ T5940] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  669.141520][ T5940] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  669.153433][ T5940] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  669.269826][ T5940] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  669.322815][ T5940] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  669.342230][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0
[  669.353077][ T5940] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  669.376338][ T5940] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  669.393815][ T5940] usb 3-1: Product: syz
[  669.406095][ T5940] usb 3-1: Manufacturer: syz
[  669.429904][ T5940] usb 3-1: SerialNumber: syz
[  669.456516][T12971] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  669.550234][ T5940] usb 3-1: config 0 descriptor??
[  669.562777][T12966] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  669.589043][ T5940] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  669.649678][ T5940] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  669.999040][   T10] usb 3-1: USB disconnect, device number 79
[  670.014026][   T10] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  670.091514][ T5902] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  670.326065][ T5902] usb 4-1: Using ep0 maxpacket: 16
[  670.336386][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  670.360064][ T5902] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  670.382084][ T5928] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  670.465158][T12980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  670.485473][T12980] syzkaller0: entered promiscuous mode
[  670.490988][T12980] syzkaller0: entered allmulticast mode
[  670.532891][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.599257][ T5928] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  670.623958][ T5902] usb 4-1: config 0 descriptor??
[  670.626416][T12980] tipc: Resetting bearer <eth:syzkaller0>
[  670.677453][T12979] tipc: Resetting bearer <eth:syzkaller0>
[  670.751537][ T5928] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  670.761355][ T5928] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  670.774688][ T5902] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  670.783063][T12979] tipc: Disabling bearer <eth:syzkaller0>
[  670.801605][ T5928] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  670.836866][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.899397][ T5928] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  671.094083][T12978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  671.133026][T12978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.161762][ T5928] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12
[  671.459235][T12978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  671.474515][T12978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.525947][   T30] audit: type=1326 audit(1759448656.696:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  671.561932][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  671.586751][   T30] audit: type=1326 audit(1759448656.696:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e539 code=0x7ffc0000
[  671.690583][   T30] audit: type=1326 audit(1759448656.706:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e539 code=0x7ffc0000
[  671.716131][T12991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  671.744958][T12991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.814501][T12991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  671.825783][   T30] audit: type=1326 audit(1759448656.706:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e539 code=0x7ffc0000
[  671.854827][T12991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.900161][T12991] loop2: detected capacity change from 0 to 7
[  671.911056][   T30] audit: type=1326 audit(1759448656.746:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  671.933610][ T6153] Dev loop2: unable to read RDB block 7
[  671.940502][ T6153]  loop2: unable to read partition table
[  671.961896][ T6153] loop2: partition table beyond EOD, truncated
[  671.974046][   T30] audit: type=1326 audit(1759448656.746:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf706e539 code=0x7ffc0000
[  671.998278][   T30] audit: type=1326 audit(1759448656.746:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  672.062003][   T30] audit: type=1326 audit(1759448656.746:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf706e539 code=0x7ffc0000
[  672.117342][T12991] Dev loop2: unable to read RDB block 7
[  672.144845][ T5902] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  672.160518][T12991]  loop2: unable to read partition table
[  672.192444][   T30] audit: type=1326 audit(1759448656.746:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  672.220668][T12991] loop2: partition table beyond EOD, truncated
[  672.227676][T12991] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  672.258430][   T30] audit: type=1326 audit(1759448656.756:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  672.312660][ T5902] usb 5-1: Using ep0 maxpacket: 16
[  672.322447][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  672.338308][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  672.365841][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  672.433071][ T5902] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  672.454382][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.506844][ T5902] usb 5-1: config 0 descriptor??
[  672.865496][ T5207] Dev loop2: unable to read RDB block 7
[  672.879917][ T5207]  loop2: unable to read partition table
[  672.902444][ T5207] loop2: partition table beyond EOD, truncated
[  672.940103][ T5902] hid-multitouch 0003:0457:07DA.003B: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0
[  673.133303][T12993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  673.142596][T12993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  673.154627][T12993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  673.164280][T12993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  673.184803][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1841'.
[  673.190913][ T5915] usb 5-1: USB disconnect, device number 93
[  673.194004][T12998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1841'.
[  673.307924][T13002] fido_id[13002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  673.336216][ T5207] Dev loop2: unable to read RDB block 7
[  673.347636][ T5207]  loop2: unable to read partition table
[  673.378093][ T5207] loop2: partition table beyond EOD, truncated
[  673.401194][ T5902] usb 2-1: USB disconnect, device number 91
[  673.418335][ T5915] usb 4-1: USB disconnect, device number 67
[  673.533372][T13007] IPv6: Can't replace route, no match found
[  673.647023][T13011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1844'.
[  674.202398][ T5915] usb 5-1: new full-speed USB device number 94 using dummy_hcd
[  674.373960][ T5915] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  674.382727][ T5915] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  674.482450][ T5915] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  674.508714][ T5915] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  674.529288][ T5915] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  674.903300][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0
[  674.943479][ T5915] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  674.994562][ T5915] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  675.085760][ T5915] usb 5-1: Product: syz
[  675.092933][ T5915] usb 5-1: Manufacturer: syz
[  675.097591][ T5915] usb 5-1: SerialNumber: syz
[  675.158507][ T5915] usb 5-1: config 0 descriptor??
[  675.184662][T13018] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  675.220998][ T5915] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  675.280966][ T5915] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  675.301618][ T5902] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  675.498015][ T5902] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  675.601624][ T5902] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  675.792051][ T5902] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  675.808667][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  675.861625][ T5902] usb 2-1: Product: syz
[  675.865866][ T5902] usb 2-1: Manufacturer: syz
[  675.870511][ T5902] usb 2-1: SerialNumber: syz
[  675.916483][ T5901] usb 5-1: USB disconnect, device number 94
[  675.937417][ T5901] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  675.950602][ T5902] usb 2-1: config 0 descriptor??
[  676.162008][ T5929] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  676.312338][ T5929] usb 3-1: Using ep0 maxpacket: 16
[  676.319276][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  676.362675][ T5929] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  676.387072][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.465941][ T5929] usb 3-1: config 0 descriptor??
[  676.500431][ T5929] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  676.601910][ T5901] usb 1-1: new full-speed USB device number 89 using dummy_hcd
[  676.882691][ T5901] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  676.898892][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.908949][ T5901] usb 1-1: Product: syz
[  676.914510][ T5901] usb 1-1: Manufacturer: syz
[  676.919507][ T5901] usb 1-1: SerialNumber: syz
[  676.929995][ T5901] usb 1-1: config 0 descriptor??
[  676.977708][ T5901] usb 1-1: selecting invalid altsetting 3
[  676.986750][ T5901] comedi comedi5: could not set alternate setting 3 in high speed
[  677.001832][ T5901] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device.
[  677.022292][ T5901] usbdux 1-1:0.0: probe with driver usbdux failed with error -22
[  677.072414][ T5915] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  677.232061][ T5915] usb 5-1: Using ep0 maxpacket: 16
[  677.248091][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  677.269930][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  677.306990][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  677.338704][ T5915] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  677.366621][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.417136][ T5915] usb 5-1: config 0 descriptor??
[  677.423221][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  677.468599][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  677.508994][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  677.524590][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  677.581240][T13064] loop2: detected capacity change from 0 to 7
[  677.604420][ T6153] Dev loop2: unable to read RDB block 7
[  677.663203][ T6153]  loop2: unable to read partition table
[  677.669201][ T6153] loop2: partition table beyond EOD, truncated
[  677.800118][T13064] Dev loop2: unable to read RDB block 7
[  677.808478][T13064]  loop2: unable to read partition table
[  677.851557][ T5940] usb 2-1: USB disconnect, device number 92
[  677.861870][T13064] loop2: partition table beyond EOD, truncated
[  677.888430][T13064] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  677.957276][ T5915] hid-multitouch 0003:0457:07DA.003C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0
[  678.072825][T13057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  678.115680][T13057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  678.162741][T13057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  678.194899][T13057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  678.262740][ T5929] usb 5-1: USB disconnect, device number 95
[  678.534986][ T5940] usb 1-1: USB disconnect, device number 89
[  679.047895][ T5940] usb 3-1: USB disconnect, device number 80
[  679.073323][T13092] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1869'.
[  679.204004][T13098] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1870'.
[  679.264207][T13098] FAULT_INJECTION: forcing a failure.
[  679.264207][T13098] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  679.302224][T13098] CPU: 1 UID: 0 PID: 13098 Comm: syz.3.1870 Not tainted syzkaller #0 PREEMPT(full) 
[  679.302247][T13098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  679.302258][T13098] Call Trace:
[  679.302265][T13098]  <TASK>
[  679.302272][T13098]  dump_stack_lvl+0x189/0x250
[  679.302298][T13098]  ? __pfx____ratelimit+0x10/0x10
[  679.302319][T13098]  ? __pfx_dump_stack_lvl+0x10/0x10
[  679.302339][T13098]  ? __pfx__printk+0x10/0x10
[  679.302363][T13098]  should_fail_ex+0x414/0x560
[  679.302391][T13098]  _copy_to_user+0x31/0xb0
[  679.302413][T13098]  simple_read_from_buffer+0xe1/0x170
[  679.302439][T13098]  proc_fail_nth_read+0x1b3/0x220
[  679.302460][T13098]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  679.302479][T13098]  ? rw_verify_area+0x2a6/0x4d0
[  679.302501][T13098]  ? __lock_acquire+0xab9/0xd20
[  679.302517][T13098]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  679.302535][T13098]  vfs_read+0x200/0xa30
[  679.302554][T13098]  ? fdget_pos+0x247/0x320
[  679.302580][T13098]  ? __pfx___mutex_lock+0x10/0x10
[  679.302601][T13098]  ? __pfx_vfs_read+0x10/0x10
[  679.302621][T13098]  ? __fget_files+0x2a/0x420
[  679.302647][T13098]  ? __fget_files+0x3a0/0x420
[  679.302668][T13098]  ? __fget_files+0x2a/0x420
[  679.302697][T13098]  ksys_read+0x145/0x250
[  679.302719][T13098]  ? __pfx_ksys_read+0x10/0x10
[  679.302741][T13098]  ? lockdep_hardirqs_on+0x9c/0x150
[  679.302762][T13098]  __do_fast_syscall_32+0xb6/0x2b0
[  679.302782][T13098]  ? lockdep_hardirqs_on+0x9c/0x150
[  679.302803][T13098]  do_fast_syscall_32+0x34/0x80
[  679.302823][T13098]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  679.302842][T13098] RIP: 0023:0xf7f44539
[  679.302856][T13098] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  679.302870][T13098] RSP: 002b:00000000f5436590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  679.302887][T13098] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5436620
[  679.302898][T13098] RDX: 000000000000000f RSI: 00000000f73d5ff4 RDI: 0000000000000000
[  679.302907][T13098] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  679.302916][T13098] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  679.302926][T13098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  679.302947][T13098]  </TASK>
[  679.539453][    C1] vkms_vblank_simulate: vblank timer overrun
[  679.740236][T13093] openvswitch: netlink: Flow actions attr not present in new flow.
[  681.047763][T13131] IPv6: Can't replace route, no match found
[  682.124229][ T5940] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  682.302361][ T5940] usb 5-1: Using ep0 maxpacket: 16
[  682.310724][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  682.326214][ T5940] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  682.422568][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.489650][ T5940] usb 5-1: config 0 descriptor??
[  682.583130][ T5940] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  683.436694][T13154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'.
[  683.493965][T13157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.508761][T13157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.542669][T13157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.575553][T13157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.581930][T13154] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  683.618381][T13154] macvtap1: entered allmulticast mode
[  683.647171][T13154] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  683.661074][T13157] loop2: detected capacity change from 0 to 7
[  683.694723][T13157] Dev loop2: unable to read RDB block 7
[  683.714774][T13157]  loop2: unable to read partition table
[  683.780857][T13157] loop2: partition table beyond EOD, truncated
[  683.839204][T13157] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  683.940610][T13165] FAULT_INJECTION: forcing a failure.
[  683.940610][T13165] name failslab, interval 1, probability 0, space 0, times 0
[  683.959096][T13165] CPU: 1 UID: 0 PID: 13165 Comm: syz.0.1889 Not tainted syzkaller #0 PREEMPT(full) 
[  683.959129][T13165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  683.959144][T13165] Call Trace:
[  683.959154][T13165]  <TASK>
[  683.959164][T13165]  dump_stack_lvl+0x189/0x250
[  683.959199][T13165]  ? __pfx____ratelimit+0x10/0x10
[  683.959226][T13165]  ? __pfx_dump_stack_lvl+0x10/0x10
[  683.959256][T13165]  ? __pfx__printk+0x10/0x10
[  683.959284][T13165]  ? __pfx___might_resched+0x10/0x10
[  683.959316][T13165]  should_fail_ex+0x414/0x560
[  683.959363][T13165]  should_failslab+0xa8/0x100
[  683.959397][T13165]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  683.959427][T13165]  ? __alloc_skb+0x112/0x2d0
[  683.959460][T13165]  __alloc_skb+0x112/0x2d0
[  683.959493][T13165]  netlink_sendmsg+0x5c6/0xb30
[  683.959532][T13165]  ? __pfx_netlink_sendmsg+0x10/0x10
[  683.959562][T13165]  ? __lock_acquire+0xab9/0xd20
[  683.959584][T13165]  ? aa_sock_msg_perm+0xf1/0x1d0
[  683.959619][T13165]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  683.959641][T13165]  ? __pfx_netlink_sendmsg+0x10/0x10
[  683.959669][T13165]  __sock_sendmsg+0x219/0x270
[  683.959696][T13165]  sock_write_iter+0x279/0x360
[  683.959734][T13165]  ? __pfx_sock_write_iter+0x10/0x10
[  683.959780][T13165]  ? bpf_lsm_file_permission+0x9/0x20
[  683.959804][T13165]  ? security_file_permission+0x75/0x290
[  683.959841][T13165]  vfs_write+0x5c6/0xb30
[  683.959875][T13165]  ? __pfx_sock_write_iter+0x10/0x10
[  683.959911][T13165]  ? __pfx_vfs_write+0x10/0x10
[  683.959950][T13165]  ? __fget_files+0x2a/0x420
[  683.959991][T13165]  ksys_write+0x145/0x250
[  683.960023][T13165]  ? __pfx_ksys_write+0x10/0x10
[  683.960055][T13165]  ? lockdep_hardirqs_on+0x9c/0x150
[  683.960085][T13165]  __do_fast_syscall_32+0xb6/0x2b0
[  683.960114][T13165]  ? lockdep_hardirqs_on+0x9c/0x150
[  683.960144][T13165]  do_fast_syscall_32+0x34/0x80
[  683.960172][T13165]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  683.960199][T13165] RIP: 0023:0xf7ff6539
[  683.960218][T13165] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  683.960239][T13165] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  683.960263][T13165] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800035c0
[  683.960279][T13165] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000
[  683.960293][T13165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  683.960306][T13165] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  683.960320][T13165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  683.960359][T13165]  </TASK>
[  684.221518][    C1] vkms_vblank_simulate: vblank timer overrun
[  684.361965][ T5915] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  684.372495][T13171] IPv6: Can't replace route, no match found
[  684.512385][ T5915] usb 3-1: Using ep0 maxpacket: 32
[  684.545857][ T5915] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  684.561607][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0
[  684.573995][ T5915] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  684.589651][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.618370][ T5915] usb 3-1: config 0 descriptor??
[  684.743112][T13179] FAULT_INJECTION: forcing a failure.
[  684.743112][T13179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  684.764960][T13179] CPU: 0 UID: 0 PID: 13179 Comm: syz.3.1894 Not tainted syzkaller #0 PREEMPT(full) 
[  684.764984][T13179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  684.764994][T13179] Call Trace:
[  684.765001][T13179]  <TASK>
[  684.765009][T13179]  dump_stack_lvl+0x189/0x250
[  684.765049][T13179]  ? __pfx____ratelimit+0x10/0x10
[  684.765076][T13179]  ? __pfx_dump_stack_lvl+0x10/0x10
[  684.765104][T13179]  ? __pfx__printk+0x10/0x10
[  684.765123][T13179]  ? __might_fault+0xb0/0x130
[  684.765153][T13179]  should_fail_ex+0x414/0x560
[  684.765189][T13179]  _copy_from_user+0x2d/0xb0
[  684.765218][T13179]  vlan_ioctl_handler+0x9d/0x650
[  684.765258][T13179]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  684.765281][T13179]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  684.765305][T13179]  ? do_vfs_ioctl+0xbe8/0x1430
[  684.765331][T13179]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  684.765360][T13179]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  684.765387][T13179]  sock_ioctl+0x60d/0x790
[  684.765411][T13179]  ? __pfx_sock_ioctl+0x10/0x10
[  684.765431][T13179]  ? __lock_acquire+0xab9/0xd20
[  684.765457][T13179]  compat_sock_ioctl+0x285/0xc80
[  684.765477][T13179]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  684.765503][T13179]  ? __fget_files+0x3a0/0x420
[  684.765534][T13179]  ? __fget_files+0x2a/0x420
[  684.765570][T13179]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  684.765598][T13179]  __ia32_compat_sys_ioctl+0x540/0x840
[  684.765627][T13179]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  684.765654][T13179]  ? __fget_files+0x3a0/0x420
[  684.765697][T13179]  ? fput+0xa0/0xd0
[  684.765719][T13179]  ? ksys_write+0x22a/0x250
[  684.765757][T13179]  ? lockdep_hardirqs_on+0x9c/0x150
[  684.765787][T13179]  __do_fast_syscall_32+0xb6/0x2b0
[  684.765815][T13179]  ? lockdep_hardirqs_on+0x9c/0x150
[  684.765847][T13179]  do_fast_syscall_32+0x34/0x80
[  684.765873][T13179]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  684.765902][T13179] RIP: 0023:0xf7f44539
[  684.765917][T13179] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  684.765931][T13179] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  684.765947][T13179] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008982
[  684.765962][T13179] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000
[  684.765977][T13179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  684.765991][T13179] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  684.766004][T13179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  684.766034][T13179]  </TASK>
[  685.527313][T13184] FAULT_INJECTION: forcing a failure.
[  685.527313][T13184] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  685.544466][ T5902] usb 5-1: USB disconnect, device number 96
[  685.599156][T13184] CPU: 1 UID: 0 PID: 13184 Comm: syz.0.1896 Not tainted syzkaller #0 PREEMPT(full) 
[  685.599189][T13184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  685.599207][T13184] Call Trace:
[  685.599216][T13184]  <TASK>
[  685.599226][T13184]  dump_stack_lvl+0x189/0x250
[  685.599261][T13184]  ? __pfx____ratelimit+0x10/0x10
[  685.599288][T13184]  ? __pfx_dump_stack_lvl+0x10/0x10
[  685.599317][T13184]  ? __pfx__printk+0x10/0x10
[  685.599354][T13184]  should_fail_ex+0x414/0x560
[  685.599392][T13184]  _copy_to_iter+0x589/0x1790
[  685.599440][T13184]  ? __pfx__copy_to_iter+0x10/0x10
[  685.599462][T13184]  ? __skb_try_recv_from_queue+0x2b2/0x730
[  685.599501][T13184]  ? __skb_try_recv_datagram+0x3d5/0x4d0
[  685.599542][T13184]  __skb_datagram_iter+0xf8/0x990
[  685.599577][T13184]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  685.599620][T13184]  skb_copy_datagram_iter+0xc5/0x230
[  685.599658][T13184]  netlink_recvmsg+0x2ab/0xa30
[  685.599696][T13184]  ? __pfx_netlink_recvmsg+0x10/0x10
[  685.599722][T13184]  ? trace_kmalloc+0x1f/0xd0
[  685.599747][T13184]  ? __kmalloc_noprof+0x29b/0x4f0
[  685.599779][T13184]  ? aa_sock_msg_perm+0xf1/0x1d0
[  685.599815][T13184]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  685.599835][T13184]  ? security_socket_recvmsg+0x7e/0x2e0
[  685.599860][T13184]  ? __pfx_netlink_recvmsg+0x10/0x10
[  685.599888][T13184]  sock_recvmsg+0x229/0x270
[  685.599916][T13184]  ____sys_recvmsg+0x1c9/0x460
[  685.599957][T13184]  ? __pfx_____sys_recvmsg+0x10/0x10
[  685.599987][T13184]  ? get_compat_msghdr+0x37e/0x4a0
[  685.600029][T13184]  ? ktime_get_ts64+0xa2/0x3d0
[  685.600068][T13184]  ___sys_recvmsg+0x1b5/0x510
[  685.600106][T13184]  ? __pfx____sys_recvmsg+0x10/0x10
[  685.600166][T13184]  ? __fget_files+0x3a0/0x420
[  685.600209][T13184]  do_recvmmsg+0x36a/0x770
[  685.600252][T13184]  ? __pfx_do_recvmmsg+0x10/0x10
[  685.600298][T13184]  ? _copy_from_user+0x94/0xb0
[  685.600342][T13184]  __sys_recvmmsg+0x127/0x280
[  685.600377][T13184]  ? __pfx___sys_recvmmsg+0x10/0x10
[  685.600413][T13184]  ? ksys_write+0x22a/0x250
[  685.600452][T13184]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[  685.600488][T13184]  __do_fast_syscall_32+0xb6/0x2b0
[  685.600518][T13184]  ? lockdep_hardirqs_on+0x9c/0x150
[  685.600549][T13184]  do_fast_syscall_32+0x34/0x80
[  685.600577][T13184]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  685.600604][T13184] RIP: 0023:0xf7ff6539
[  685.600623][T13184] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  685.600643][T13184] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  685.600667][T13184] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0
[  685.600683][T13184] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000080003700
[  685.600697][T13184] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  685.600711][T13184] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  685.600724][T13184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  685.600756][T13184]  </TASK>
[  685.898831][    C1] vkms_vblank_simulate: vblank timer overrun
[  686.379290][T13187] input: syz0 as /devices/virtual/input/input18
[  686.400277][T13187] input: failed to attach handler leds to device input18, error: -6
[  686.427617][T13193] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  686.458732][T13190] input: syz0 as /devices/virtual/input/input19
[  687.084145][ T5915] usbhid 3-1:0.0: can't add hid device: -71
[  687.124801][ T5915] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  687.308524][ T5915] usb 3-1: USB disconnect, device number 81
[  687.755709][T13206] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  687.884411][T13206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.969278][T13206] bridge0: port 1(vlan0) entered blocking state
[  687.988728][T13206] bridge0: port 1(vlan0) entered disabled state
[  688.057446][T13206] vlan0: entered allmulticast mode
[  688.063262][T13206] bridge0: entered allmulticast mode
[  688.110310][T13206] vlan0: left allmulticast mode
[  688.172008][T13206] bridge0: left allmulticast mode
[  689.395208][T13234] openvswitch: netlink: Flow actions attr not present in new flow.
[  689.620650][T13235] netlink: 'syz.0.1910': attribute type 21 has an invalid length.
[  689.681717][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'.
[  690.240532][T13248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1914'.
[  690.662887][T13255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.707977][T13255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.841614][ T5901] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  691.435231][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  691.441862][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  692.830614][T13280] FAULT_INJECTION: forcing a failure.
[  692.830614][T13280] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  692.959995][T13280] CPU: 0 UID: 0 PID: 13280 Comm: syz.4.1922 Not tainted syzkaller #0 PREEMPT(full) 
[  692.960028][T13280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  692.960043][T13280] Call Trace:
[  692.960052][T13280]  <TASK>
[  692.960062][T13280]  dump_stack_lvl+0x189/0x250
[  692.960098][T13280]  ? __pfx____ratelimit+0x10/0x10
[  692.960124][T13280]  ? __pfx_dump_stack_lvl+0x10/0x10
[  692.960154][T13280]  ? __pfx__printk+0x10/0x10
[  692.960179][T13280]  ? __might_fault+0xb0/0x130
[  692.960216][T13280]  should_fail_ex+0x414/0x560
[  692.960254][T13280]  _copy_from_user+0x2d/0xb0
[  692.960284][T13280]  move_addr_to_kernel+0x7e/0x160
[  692.960308][T13280]  get_compat_msghdr+0x3bd/0x4a0
[  692.960345][T13280]  ? __pfx_get_compat_msghdr+0x10/0x10
[  692.960388][T13280]  ___sys_sendmsg+0x193/0x2a0
[  692.960423][T13280]  ? __pfx____sys_sendmsg+0x10/0x10
[  692.960492][T13280]  ? __fget_files+0x2a/0x420
[  692.960531][T13280]  ? __fget_files+0x3a0/0x420
[  692.960574][T13280]  __sys_sendmmsg+0x28e/0x430
[  692.960611][T13280]  ? __pfx___sys_sendmmsg+0x10/0x10
[  692.960651][T13280]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  692.960698][T13280]  ? ksys_write+0x22a/0x250
[  692.960738][T13280]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  692.960771][T13280]  __do_fast_syscall_32+0xb6/0x2b0
[  692.960801][T13280]  ? lockdep_hardirqs_on+0x9c/0x150
[  692.960831][T13280]  do_fast_syscall_32+0x34/0x80
[  692.960860][T13280]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  692.960888][T13280] RIP: 0023:0xf700e539
[  692.960906][T13280] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  692.960925][T13280] RSP: 002b:00000000f53fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  692.960949][T13280] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440
[  692.960966][T13280] RDX: 0000000000000001 RSI: 0000000020000084 RDI: 0000000000000000
[  692.960980][T13280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  692.960993][T13280] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  692.961007][T13280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  692.961038][T13280]  </TASK>
[  695.245721][T13306] openvswitch: netlink: Flow actions attr not present in new flow.
[  695.641637][ T5915] usb 3-1: new full-speed USB device number 82 using dummy_hcd
[  695.884947][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  695.901919][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  695.980371][ T5915] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  696.045601][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.097999][ T5915] usb 3-1: config 0 descriptor??
[  696.135778][T13313] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  696.404069][ T5915] microsoft 0003:045E:009D.003D: unknown main item tag 0x1
[  696.416454][ T5915] microsoft 0003:045E:009D.003D: unbalanced delimiter at end of report description
[  696.467063][ T5915] microsoft 0003:045E:009D.003D: parse failed
[  696.494263][ T5915] microsoft 0003:045E:009D.003D: probe with driver microsoft failed with error -22
[  696.617720][ T5902] usb 3-1: USB disconnect, device number 82
[  697.024272][ T5928] usb 1-1: new full-speed USB device number 90 using dummy_hcd
[  697.429792][ T5928] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  697.446293][ T5928] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  697.495561][ T5928] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  697.568924][ T5928] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  697.615644][ T5928] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  697.639178][T13345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1937'.
[  697.664605][T13346] program syz.3.1937 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  697.684437][T13345] tipc: Invalid UDP bearer configuration
[  697.684508][T13345] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  697.711519][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0
[  697.861970][ T5928] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  697.871863][ T5928] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  697.908640][ T5928] usb 1-1: Product: syz
[  697.918446][ T5928] usb 1-1: Manufacturer: syz
[  697.935561][ T5928] usb 1-1: SerialNumber: syz
[  697.967234][ T5928] usb 1-1: config 0 descriptor??
[  697.980738][T13329] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  698.005380][ T5928] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  698.036767][ T5928] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  698.261625][ T5902] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  698.464734][ T5902] usb 4-1: config 0 has an invalid interface number: 3 but max is 0
[  698.485299][ T5902] usb 4-1: config 0 has no interface number 0
[  698.535415][ T5902] usb 4-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84
[  698.576164][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.613996][ T5902] usb 4-1: Product: syz
[  698.618224][ T5902] usb 4-1: Manufacturer: syz
[  698.623081][ T5928] usb 3-1: new full-speed USB device number 83 using dummy_hcd
[  698.640256][ T5902] usb 4-1: SerialNumber: syz
[  698.682710][ T5902] usb 4-1: config 0 descriptor??
[  698.823628][ T5928] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  698.834829][ T5928] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  698.871753][ T5928] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  698.915296][ T5928] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  698.954339][ T5902] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state.
[  698.994226][ T5928] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  699.051528][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  699.089196][ T5928] usb 3-1: config 0 interface 0 has no altsetting 0
[  699.119447][ T5902] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB)
[  699.134214][ T5928] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  699.144559][ T5928] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  699.159565][ T5902] usb 4-1: media controller created
[  699.179064][ T5928] usb 3-1: Product: syz
[  699.206472][ T5928] usb 3-1: Manufacturer: syz
[  699.211173][ T5928] usb 3-1: SerialNumber: syz
[  699.260802][ T5928] usb 3-1: config 0 descriptor??
[  699.270852][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  699.297827][T13357] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  699.330407][ T5928] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  699.420199][ T5928] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  699.627660][   T10] usb 1-1: USB disconnect, device number 90
[  699.652769][   T10] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  699.902663][ T5902] DVB: Unable to find symbol dib7000p_attach()
[  699.911315][ T5902] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB'
[  699.940411][ T5915] usb 3-1: USB disconnect, device number 83
[  700.015012][ T5915] ldusb 3-1:0.0: LD USB Device #1 now disconnected
[  700.203139][ T5902] rc_core: IR keymap rc-dib0700-rc5 not found
[  700.236952][ T5902] Registered IR keymap rc-empty
[  700.267492][ T5902] dvb-usb: could not initialize remote control.
[  700.287518][ T5902] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected.
[  700.566158][T13386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1945'.
[  700.691205][ T5915] usb 4-1: USB disconnect, device number 68
[  700.766654][ T5915] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected.
[  701.480080][T13389] openvswitch: netlink: Flow actions attr not present in new flow.
[  702.076569][T13404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1951'.
[  702.370993][T13407] IPv6: NLM_F_CREATE should be specified when creating new route
[  703.451517][   T10] usb 3-1: new full-speed USB device number 84 using dummy_hcd
[  703.608386][   T10] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  703.618216][   T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  703.679635][   T10] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  703.713747][   T10] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  703.752650][   T10] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  703.773378][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  703.804586][   T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  703.814487][   T10] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  703.835124][   T10] usb 3-1: Product: syz
[  703.841880][   T10] usb 3-1: Manufacturer: syz
[  703.846541][   T10] usb 3-1: SerialNumber: syz
[  703.869301][   T10] usb 3-1: config 0 descriptor??
[  703.879726][T13422] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  703.893441][   T10] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  703.917238][   T10] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  704.401691][ T5940] usb 1-1: new full-speed USB device number 91 using dummy_hcd
[  704.578979][ T5940] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  704.598824][ T5940] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  704.624953][ T5940] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  704.640139][ T5940] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  704.661923][ T5940] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  704.683756][ T5940] usb 1-1: config 0 interface 0 has no altsetting 0
[  704.706517][ T5940] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  704.730191][ T5940] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  704.740445][ T5940] usb 1-1: Product: syz
[  704.750185][ T5940] usb 1-1: Manufacturer: syz
[  704.756511][ T5940] usb 1-1: SerialNumber: syz
[  704.783779][ T5940] usb 1-1: config 0 descriptor??
[  704.800879][T13436] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  704.850545][ T5940] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  704.880918][ T5940] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  705.543371][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'.
[  705.556729][T13424] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.592711][ T5940] usb 1-1: USB disconnect, device number 91
[  705.627868][ T5940] ldusb 1-1:0.0: LD USB Device #1 now disconnected
[  705.879965][T13445] IPv6: Can't replace route, no match found
[  706.017049][T13447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1958'.
[  706.664114][T13462] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  706.758576][    C1] ldusb 3-1:0.0: usb_submit_urb failed (-1)
[  706.765998][   T10] usb 3-1: USB disconnect, device number 84
[  706.772110][ T5929] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  706.817941][   T10] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  706.991709][ T5929] usb 4-1: Using ep0 maxpacket: 32
[  707.011356][ T5929] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  707.033735][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.320950][ T5929] usb 4-1: config 0 descriptor??
[  707.580909][T13473] openvswitch: netlink: Flow actions attr not present in new flow.
[  707.881034][    C0] raw-gadget.1 gadget.3: ignoring, device is not running
[  707.888977][ T5929] usbhid 4-1:0.0: can't add hid device: -71
[  707.895102][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  707.955493][ T5929] usb 4-1: USB disconnect, device number 69
[  708.913768][T13484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1967'.
[  709.223630][T13484] IPv6: NLM_F_CREATE should be specified when creating new route
[  710.517952][ T5915] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  710.758380][ T5915] usb 2-1: config 0 has an invalid interface number: 74 but max is 1
[  710.777615][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  710.829056][ T5915] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  710.848861][ T5915] usb 2-1: config 0 has no interface number 0
[  710.864394][ T5915] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0xE has invalid maxpacket 8960, setting to 1024
[  710.899593][ T5915] usb 2-1: config 0 interface 74 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  710.924452][ T5915] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[  710.944232][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.961617][ T5915] usb 2-1: Product: syz
[  710.988596][ T5915] usb 2-1: Manufacturer: syz
[  710.996702][ T5915] usb 2-1: SerialNumber: syz
[  711.012868][ T5915] usb 2-1: config 0 descriptor??
[  711.261677][ T5928] usb 5-1: new full-speed USB device number 97 using dummy_hcd
[  711.415212][ T5928] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  711.448046][ T5928] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  711.464406][ T5928] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  711.486969][ T5928] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  711.504828][ T5928] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  711.519288][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0
[  711.529789][ T5928] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  711.546739][ T5928] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  711.571031][ T5928] usb 5-1: Product: syz
[  711.576772][ T5928] usb 5-1: Manufacturer: syz
[  711.603975][ T5928] usb 5-1: SerialNumber: syz
[  711.623435][ T5928] usb 5-1: config 0 descriptor??
[  711.669465][T13499] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  711.690098][ T5928] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  711.735143][ T5928] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  711.877542][ T5915] cypress_m8 2-1:0.74: HID->COM RS232 Adapter converter detected
[  711.976896][ T5915] cyphidcom ttyUSB0: required endpoint is missing
[  712.018950][ T5915] usb 2-1: USB disconnect, device number 94
[  712.122861][ T5915] cypress_m8 2-1:0.74: device disconnected
[  713.736697][    C0] ldusb 5-1:0.0: usb_submit_urb failed (-1)
[  713.743800][ T5956] usb 5-1: USB disconnect, device number 97
[  713.768072][ T5956] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  714.683294][T13550] IPv6: Can't replace route, no match found
[  714.789674][T13552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1982'.
[  715.085428][T13560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1983'.
[  715.586987][T13566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'.
[  717.291168][T13588] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  717.331629][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state
[  717.338893][ T6080] bridge0: port 2(bridge_slave_1) entered forwarding state
[  717.949053][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'.
[  718.673286][T13622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2002'.
[  721.261113][T13653] IPv6: Can't replace route, no match found
[  721.381884][ T5928] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  721.471554][ T5956] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  721.554562][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  721.569338][ T5928] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  721.644708][ T5956] usb 2-1: config 0 has an invalid interface number: 48 but max is 0
[  721.644747][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  721.653899][ T5956] usb 2-1: config 0 has no interface number 0
[  721.669421][ T5956] usb 2-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  721.678796][ T5928] usb 5-1: Product: syz
[  721.697252][ T5928] usb 5-1: config 0 descriptor??
[  721.812057][T13664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2015'.
[  721.821293][ T5956] usb 2-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  722.002626][ T5956] usb 2-1: config 0 interface 48 has no altsetting 0
[  722.009644][ T5956] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  722.059808][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.106884][ T5956] usb 2-1: config 0 descriptor??
[  722.173619][ T5929] usb 4-1: new full-speed USB device number 70 using dummy_hcd
[  722.365237][ T5956] usb 2-1: string descriptor 0 read error: -71
[  722.376947][ T5929] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  722.390238][ T5929] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  722.419574][ T5956] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  722.444254][ T5902] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  722.482226][ T5929] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  722.483354][ T5956] usb 2-1: USB disconnect, device number 95
[  722.643005][ T5902] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  722.655819][ T5902] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  722.670878][ T5929] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  722.689568][ T5929] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  722.707320][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0
[  722.714482][ T5902] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  722.731171][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  722.740978][ T5902] usb 1-1: SerialNumber: syz
[  722.763919][ T5929] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  722.776734][ T5929] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  722.800824][ T5929] usb 4-1: Product: syz
[  722.809068][ T5929] usb 4-1: Manufacturer: syz
[  722.816458][ T5929] usb 4-1: SerialNumber: syz
[  723.131878][ T5929] usb 4-1: config 0 descriptor??
[  723.160783][T13665] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  723.313849][ T5929] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  723.327648][ T5929] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  723.669923][ T5928] usbhid 5-1:0.0: can't add hid device: -71
[  723.676681][ T5928] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  723.722347][ T5928] usb 5-1: USB disconnect, device number 98
[  723.958133][ T5929] usb 4-1: USB disconnect, device number 70
[  723.971431][ T5929] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  724.463945][T13688] bridge_slave_1: entered promiscuous mode
[  724.476001][T13688] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  724.504772][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2021'.
[  724.514105][T13688] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  724.523020][T13688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  724.547651][T13688] lo: entered allmulticast mode
[  725.147259][ T5902] usb 1-1: 0:2 : does not exist
[  725.175586][ T5902] usb 1-1: unit 5: unexpected type 0x0c
[  725.217925][T13697] IPv6: Can't replace route, no match found
[  725.273398][ T5902] usb 1-1: USB disconnect, device number 92
[  725.436584][ T6153] udevd[6153]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  725.641198][T13705] input: syz1 as /devices/virtual/input/input21
[  725.871604][ T5956] usb 5-1: new full-speed USB device number 99 using dummy_hcd
[  726.044157][ T5956] usb 5-1: not running at top speed; connect to a high speed hub
[  726.053625][ T5956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64
[  726.066371][ T5956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  726.079545][ T5956] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 38219, setting to 64
[  726.345923][T13718] openvswitch: netlink: Flow actions attr not present in new flow.
[  726.443283][ T5956] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  726.465829][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.490763][ T5956] usb 5-1: Product: І
[  726.558964][ T5956] usb 5-1: Manufacturer: ＝㺅绉鵤勰䆆晀㗔퀢ꂵᬊ单⁡㿕㣡疅ꎛ땑鄾걲【ꊪ䭌ገ೜旟㱠ퟛにꈁ䡛Ϋ鯶葉殞
[  726.606715][ T5956] usb 5-1: SerialNumber: И
[  726.619028][T13708] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  727.226093][ T5956] cdc_ncm 5-1:1.0: bind() failure
[  727.279200][ T5956] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  727.349974][ T5956] cdc_ncm 5-1:1.1: bind() failure
[  727.418375][ T5956] usb 5-1: USB disconnect, device number 99
[  727.785744][T13732] dlm: no locking on control device
[  728.253699][ T5956] usb 4-1: new full-speed USB device number 71 using dummy_hcd
[  728.263028][T13742] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  728.452111][ T5902] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  728.468536][ T5956] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  728.600681][ T5956] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  728.651586][ T5956] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  728.668955][T13735] syz.0.2034 (13735): drop_caches: 2
[  728.684286][ T5956] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  728.700769][ T5956] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  728.722495][ T5902] usb 3-1: Using ep0 maxpacket: 16
[  728.742889][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  728.746530][ T5956] usb 4-1: config 0 interface 0 has no altsetting 0
[  728.769826][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  728.789373][ T5956] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  728.843134][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  728.849152][ T5956] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  728.891672][ T5902] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  728.901062][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.909242][ T5956] usb 4-1: Product: syz
[  728.909267][ T5956] usb 4-1: Manufacturer: syz
[  728.927597][ T5956] usb 4-1: SerialNumber: syz
[  728.938451][ T5902] usb 3-1: config 0 descriptor??
[  728.953836][ T5956] usb 4-1: config 0 descriptor??
[  728.968044][T13738] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  728.986844][ T5956] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  729.025839][ T5956] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  729.394970][T13741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.422289][T13741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.433053][ T5956] usb 4-1: USB disconnect, device number 71
[  729.456851][ T5956] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  729.469942][T13741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.587777][T13741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.634043][T13741] loop2: detected capacity change from 0 to 7
[  729.648367][T13741] Dev loop2: unable to read RDB block 7
[  729.666104][T13741]  loop2: unable to read partition table
[  729.672749][T13741] loop2: partition table beyond EOD, truncated
[  729.695795][T13741] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  731.152235][ T5902] usbhid 3-1:0.0: can't add hid device: -71
[  731.158331][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  731.261854][ T5902] usb 3-1: USB disconnect, device number 85
[  731.315991][T13778] IPv6: Can't replace route, no match found
[  731.715993][ T5902] usb 3-1: new full-speed USB device number 86 using dummy_hcd
[  732.023298][T13790] openvswitch: netlink: Flow actions attr not present in new flow.
[  732.071305][ T5902] usb 3-1: not running at top speed; connect to a high speed hub
[  732.111119][ T5902] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64
[  732.203709][ T5902] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  732.214990][ T5902] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 38219, setting to 64
[  732.229734][ T5902] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  732.241962][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.250186][ T5902] usb 3-1: Product: І
[  732.258246][ T5902] usb 3-1: Manufacturer: ＝㺅绉鵤勰䆆晀㗔퀢ꂵᬊ单⁡㿕㣡疅ꎛ땑鄾걲【ꊪ䭌ገ೜旟㱠ퟛにꈁ䡛Ϋ鯶葉殞
[  732.451028][ T5902] usb 3-1: SerialNumber: И
[  732.474609][T13780] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  732.875134][ T5902] cdc_ncm 3-1:1.0: bind() failure
[  732.891001][ T5902] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  732.926610][ T5902] cdc_ncm 3-1:1.1: bind() failure
[  733.074045][ T5902] usb 3-1: USB disconnect, device number 86
[  734.481667][ T5902] usb 2-1: new full-speed USB device number 96 using dummy_hcd
[  734.674238][ T5902] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  734.688096][ T5902] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  734.918095][ T5902] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  734.950814][ T5902] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  734.992345][ T5902] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  735.006000][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0
[  735.016326][ T5902] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  735.026628][ T5902] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  735.035219][ T5902] usb 2-1: Product: syz
[  735.039694][ T5902] usb 2-1: Manufacturer: syz
[  735.044572][ T5902] usb 2-1: SerialNumber: syz
[  735.132279][ T5902] usb 2-1: config 0 descriptor??
[  735.159175][T13820] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  735.176442][ T5902] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  735.185949][ T5928] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  735.233637][ T5902] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  735.401446][ T5928] usb 3-1: Using ep0 maxpacket: 16
[  735.440632][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  735.459963][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  735.487851][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  735.550513][ T5928] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  735.564624][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.596322][ T5928] usb 3-1: config 0 descriptor??
[  735.597584][ T5915] usb 2-1: USB disconnect, device number 96
[  735.643580][ T5915] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  735.859722][T13828] IPv6: Can't replace route, no match found
[  736.001131][T13828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2059'.
[  736.015286][T13822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  736.024468][T13822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  736.039060][T13822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  736.050890][T13822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  736.065395][T13822] loop2: detected capacity change from 0 to 7
[  736.075175][T13822] Dev loop2: unable to read RDB block 7
[  736.080819][T13822]  loop2: unable to read partition table
[  736.088014][T13822] loop2: partition table beyond EOD, truncated
[  736.094836][T13822] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  736.388992][T13838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2060'.
[  736.539150][T13847] IPv6: NLM_F_CREATE should be specified when creating new route
[  736.781542][ T5915] usb 2-1: new full-speed USB device number 97 using dummy_hcd
[  736.944665][ T5915] usb 2-1: not running at top speed; connect to a high speed hub
[  736.957058][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64
[  736.968735][ T5915] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  736.985262][ T5915] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 38219, setting to 64
[  737.028359][ T5915] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  737.038327][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.047584][ T5915] usb 2-1: Product: І
[  737.092041][ T5915] usb 2-1: Manufacturer: ＝㺅绉鵤勰䆆晀㗔퀢ꂵᬊ单⁡㿕㣡疅ꎛ땑鄾걲【ꊪ䭌ገ೜旟㱠ퟛにꈁ䡛Ϋ鯶葉殞
[  737.106596][ T5915] usb 2-1: SerialNumber: И
[  737.128504][T13845] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  737.496402][ T5915] cdc_ncm 2-1:1.0: bind() failure
[  737.531751][ T5915] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  737.557110][ T5915] cdc_ncm 2-1:1.1: bind() failure
[  737.629111][ T5915] usb 2-1: USB disconnect, device number 97
[  738.211546][ T5928] usbhid 3-1:0.0: can't add hid device: -71
[  738.251620][ T5928] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  738.301829][ T5928] usb 3-1: USB disconnect, device number 87
[  738.407461][T13861] openvswitch: netlink: Flow actions attr not present in new flow.
[  738.690730][T13865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2070'.
[  738.737027][T13873] IPv6: Can't replace route, no match found
[  739.228321][T13873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2071'.
[  740.067356][T13892] fuse: Bad value for 'fd'
[  740.871703][ T5928] usb 5-1: new full-speed USB device number 100 using dummy_hcd
[  741.021736][ T5940] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  741.044404][ T5928] usb 5-1: not running at top speed; connect to a high speed hub
[  741.064152][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64
[  741.086326][ T5928] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  741.100884][ T5928] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 38219, setting to 64
[  741.125774][ T5928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  741.174110][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.183135][ T5928] usb 5-1: Product: І
[  741.187268][ T5928] usb 5-1: Manufacturer: ＝㺅绉鵤勰䆆晀㗔퀢ꂵᬊ单⁡㿕㣡疅ꎛ땑鄾걲【ꊪ䭌ገ೜旟㱠ퟛにꈁ䡛Ϋ鯶葉殞
[  741.223431][ T5940] usb 2-1: Using ep0 maxpacket: 16
[  741.233868][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  741.249198][ T5928] usb 5-1: SerialNumber: И
[  741.269571][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  741.274448][T13903] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  742.113865][ T5940] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  742.131334][ T5940] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  742.155002][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.181765][ T5940] usb 2-1: config 0 descriptor??
[  742.538891][T13923] IPv6: Can't replace route, no match found
[  742.600825][T13908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  742.624176][T13908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  742.705146][T13908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  742.706979][T13924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2083'.
[  742.734415][T13908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  742.777873][ T5928] cdc_ncm 5-1:1.0: bind() failure
[  742.806041][T13908] loop2: detected capacity change from 0 to 7
[  742.809785][ T5928] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  742.847347][T13908] Dev loop2: unable to read RDB block 7
[  742.847500][ T5928] cdc_ncm 5-1:1.1: bind() failure
[  742.881915][T13908]  loop2: unable to read partition table
[  742.887929][T13908] loop2: partition table beyond EOD, truncated
[  742.896844][ T5928] usb 5-1: USB disconnect, device number 100
[  742.931553][T13908] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  743.321633][   T10] usb 1-1: new full-speed USB device number 93 using dummy_hcd
[  743.517018][   T10] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  743.532056][   T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  743.582359][   T10] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  743.624271][   T10] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  743.675108][   T10] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  743.692094][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  743.702738][   T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  743.712265][   T10] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  743.751512][   T10] usb 1-1: Product: syz
[  743.755744][   T10] usb 1-1: Manufacturer: syz
[  743.776530][   T10] usb 1-1: SerialNumber: syz
[  743.809730][   T10] usb 1-1: config 0 descriptor??
[  743.825526][T13931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  743.843067][   T10] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  743.880271][   T10] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  744.167299][ T5940] usbhid 2-1:0.0: can't add hid device: -71
[  744.179631][ T5940] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  744.278129][ T5940] usb 2-1: USB disconnect, device number 98
[  744.414230][ T5902] usb 1-1: USB disconnect, device number 93
[  744.445285][ T5902] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  745.177053][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2090'.
[  745.916037][T13970] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  746.366601][T13973] fuse: Bad value for 'fd'
[  746.403720][T13976] IPv6: Can't replace route, no match found
[  746.529954][T13979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2096'.
[  746.941492][ T5902] usb 3-1: new full-speed USB device number 88 using dummy_hcd
[  747.148438][ T5902] usb 3-1: not running at top speed; connect to a high speed hub
[  747.172118][ T5902] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64
[  747.210413][ T5915] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  747.220494][ T5902] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  747.240962][ T5902] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 38219, setting to 64
[  747.273318][ T5902] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  747.282762][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.290834][ T5902] usb 3-1: Product: І
[  747.295187][ T5902] usb 3-1: Manufacturer: ＝㺅绉鵤勰䆆晀㗔퀢ꂵᬊ单⁡㿕㣡疅ꎛ땑鄾걲【ꊪ䭌ገ೜旟㱠ퟛにꈁ䡛Ϋ鯶葉殞
[  747.321507][ T5902] usb 3-1: SerialNumber: И
[  747.335615][T13981] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  747.392074][ T5915] usb 4-1: Using ep0 maxpacket: 16
[  747.428877][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  747.445760][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  747.457778][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  747.481876][ T5915] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  747.491096][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.519731][ T5915] usb 4-1: config 0 descriptor??
[  747.784418][ T5902] cdc_ncm 3-1:1.0: bind() failure
[  747.828114][ T5902] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  747.840201][ T5902] cdc_ncm 3-1:1.1: bind() failure
[  747.885606][ T5902] usb 3-1: USB disconnect, device number 88
[  747.949217][T13987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  747.976189][T13987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  748.116135][T13992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2100'.
[  748.146401][T13987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  748.202033][T13987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  748.219488][T13987] loop2: detected capacity change from 0 to 7
[  748.229675][T13987] Dev loop2: unable to read RDB block 7
[  748.235942][T13987]  loop2: unable to read partition table
[  748.242270][T13987] loop2: partition table beyond EOD, truncated
[  748.248528][T13987] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  748.468790][ T5207] Dev loop2: unable to read RDB block 7
[  748.573878][ T5207]  loop2: unable to read partition table
[  748.579854][ T5207] loop2: partition table beyond EOD, truncated
[  749.461856][ T5901] usb 2-1: new full-speed USB device number 99 using dummy_hcd
[  749.638322][ T5901] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  749.649714][ T5901] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  749.677955][ T5901] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  749.710612][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2104'.
[  749.735994][ T5901] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  749.761304][ T5901] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  749.791765][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  749.839543][ T5901] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  749.853121][ T5901] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  749.872629][ T5901] usb 2-1: Product: syz
[  749.880408][ T5901] usb 2-1: Manufacturer: syz
[  749.937508][ T5207] Dev loop2: unable to read RDB block 7
[  749.943190][ T5901] usb 2-1: SerialNumber: syz
[  749.969563][ T5901] usb 2-1: config 0 descriptor??
[  749.989558][ T5207]  loop2: unable to read partition table
[  750.008981][T14009] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  750.011812][ T5207] loop2: partition table beyond EOD, truncated
[  750.033939][ T5901] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  750.053891][ T5901] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  750.187863][ T5915] usbhid 4-1:0.0: can't add hid device: -71
[  750.262214][ T5915] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  750.300141][ T5915] usb 4-1: USB disconnect, device number 72
[  750.550425][ T5956] usb 2-1: USB disconnect, device number 99
[  750.564457][ T5956] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  751.796406][T14033] openvswitch: netlink: Flow actions attr not present in new flow.
[  752.006127][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2110'.
[  752.018523][T14037] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2110'.
[  752.098795][T14037] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2110'.
[  752.152832][T14038] IPv6: Can't replace route, no match found
[  752.282368][T14040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2109'.
[  752.314679][T14037] FAULT_INJECTION: forcing a failure.
[  752.314679][T14037] name failslab, interval 1, probability 0, space 0, times 0
[  752.351508][T14037] CPU: 0 UID: 0 PID: 14037 Comm: syz.1.2110 Not tainted syzkaller #0 PREEMPT(full) 
[  752.351539][T14037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  752.351553][T14037] Call Trace:
[  752.351562][T14037]  <TASK>
[  752.351573][T14037]  dump_stack_lvl+0x189/0x250
[  752.351610][T14037]  ? __pfx____ratelimit+0x10/0x10
[  752.351630][T14037]  ? __pfx_dump_stack_lvl+0x10/0x10
[  752.351651][T14037]  ? __pfx__printk+0x10/0x10
[  752.351671][T14037]  ? xfrm_nlmsg_multicast+0x18f/0x1f0
[  752.351697][T14037]  should_fail_ex+0x414/0x560
[  752.351724][T14037]  should_failslab+0xa8/0x100
[  752.351748][T14037]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  752.351770][T14037]  ? __alloc_skb+0x112/0x2d0
[  752.351793][T14037]  __alloc_skb+0x112/0x2d0
[  752.351816][T14037]  pfkey_send_policy_notify+0x145/0x990
[  752.351838][T14037]  ? __pfx_pfkey_send_policy_notify+0x10/0x10
[  752.351858][T14037]  km_policy_notify+0x121/0x200
[  752.351881][T14037]  ? km_policy_notify+0x28/0x200
[  752.351907][T14037]  xfrm_get_policy+0x805/0xc40
[  752.351934][T14037]  ? __pfx_xfrm_get_policy+0x10/0x10
[  752.351947][T14037]  ? irqentry_exit+0x74/0x90
[  752.351977][T14037]  ? __nla_parse+0x40/0x60
[  752.351996][T14037]  xfrm_user_rcv_msg+0x7a0/0xab0
[  752.352026][T14037]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  752.352077][T14037]  ? __pfx___mutex_trylock_common+0x10/0x10
[  752.352102][T14037]  ? rcu_is_watching+0x15/0xb0
[  752.352122][T14037]  ? trace_contention_end+0x39/0x120
[  752.352143][T14037]  ? __mutex_lock+0x335/0x1350
[  752.352168][T14037]  netlink_rcv_skb+0x205/0x470
[  752.352188][T14037]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  752.352214][T14037]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  752.352244][T14037]  ? netlink_deliver_tap+0x2e/0x1b0
[  752.352263][T14037]  ? netlink_deliver_tap+0x2e/0x1b0
[  752.352284][T14037]  xfrm_netlink_rcv+0x79/0x90
[  752.352315][T14037]  netlink_unicast+0x82f/0x9e0
[  752.352339][T14037]  ? __pfx_netlink_unicast+0x10/0x10
[  752.352357][T14037]  ? netlink_sendmsg+0x642/0xb30
[  752.352374][T14037]  ? skb_put+0x11b/0x210
[  752.352397][T14037]  netlink_sendmsg+0x805/0xb30
[  752.352424][T14037]  ? __pfx_netlink_sendmsg+0x10/0x10
[  752.352445][T14037]  ? __import_iovec+0x5d4/0x7f0
[  752.352463][T14037]  ? aa_sock_msg_perm+0xf1/0x1d0
[  752.352488][T14037]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  752.352504][T14037]  ? __pfx_netlink_sendmsg+0x10/0x10
[  752.352529][T14037]  __sock_sendmsg+0x219/0x270
[  752.352547][T14037]  ____sys_sendmsg+0x505/0x830
[  752.352575][T14037]  ? __pfx_____sys_sendmsg+0x10/0x10
[  752.352609][T14037]  ___sys_sendmsg+0x21f/0x2a0
[  752.352633][T14037]  ? __pfx____sys_sendmsg+0x10/0x10
[  752.352682][T14037]  ? __fget_files+0x2a/0x420
[  752.352704][T14037]  ? __fget_files+0x3a0/0x420
[  752.352735][T14037]  __sys_sendmsg+0x164/0x220
[  752.352758][T14037]  ? __pfx___sys_sendmsg+0x10/0x10
[  752.352793][T14037]  ? lockdep_hardirqs_on+0x9c/0x150
[  752.352813][T14037]  __do_fast_syscall_32+0xb6/0x2b0
[  752.352835][T14037]  ? lockdep_hardirqs_on+0x9c/0x150
[  752.352856][T14037]  do_fast_syscall_32+0x34/0x80
[  752.352876][T14037]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  752.352896][T14037] RIP: 0023:0xf706e539
[  752.352910][T14037] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  752.352924][T14037] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  752.352941][T14037] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480
[  752.352952][T14037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  752.352962][T14037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  752.352971][T14037] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  752.352980][T14037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  752.353002][T14037]  </TASK>
[  752.903299][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  752.911681][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  753.455501][T14046] fuse: Bad value for 'fd'
[  753.537695][ T5956] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  753.719663][T14042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  753.728945][T14042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  753.895592][ T5956] usb 3-1: unable to get BOS descriptor or descriptor too short
[  753.913585][ T5956] usb 3-1: unable to read config index 0 descriptor/start: -71
[  753.927913][ T5956] usb 3-1: can't read configurations, error -71
[  754.399432][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2116'.
[  754.616819][T14066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2117'.
[  755.245588][T14079] openvswitch: netlink: Flow actions attr not present in new flow.
[  757.154368][T14093] IPv6: Can't replace route, no match found
[  757.318128][T14096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2124'.
[  758.043914][ T5902] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  758.421645][T14106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  758.430723][T14106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  758.890616][ T5902] usb 2-1: unable to get BOS descriptor or descriptor too short
[  758.906838][ T5902] usb 2-1: unable to read config index 0 descriptor/start: -71
[  759.070849][ T5902] usb 2-1: can't read configurations, error -71
[  759.229509][T14085] syz.2.2122 (14085): drop_caches: 1
[  759.230495][T14086] syz.2.2122 (14086): drop_caches: 1
[  759.262785][   T30] audit: type=1326 audit(1759448744.506:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14116 comm="syz.3.2130" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f44539 code=0x0
[  759.718290][T14111] hsr0: entered promiscuous mode
[  759.748329][T14111] hsr0: left promiscuous mode
[  759.986189][T14138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2134'.
[  760.307303][T14143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2135'.
[  760.802348][T14149] pim6reg: entered allmulticast mode
[  760.815273][T14149] netlink: 'syz.0.2137': attribute type 25 has an invalid length.
[  760.823688][T14149] netlink: 'syz.0.2137': attribute type 28 has an invalid length.
[  760.835284][T14149] pim6reg: left allmulticast mode
[  760.970309][   T30] audit: type=1326 audit(1759448746.046:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[  761.205230][   T30] audit: type=1326 audit(1759448746.046:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[  761.701687][   T30] audit: type=1326 audit(1759448746.046:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[  761.882381][   T30] audit: type=1326 audit(1759448746.046:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[  762.241746][   T30] audit: type=1326 audit(1759448746.046:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[  762.351505][   T30] audit: type=1326 audit(1759448746.046:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[  762.561577][   T30] audit: type=1326 audit(1759448746.046:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[  762.576210][T14157] IPv6: Can't replace route, no match found
[  762.649645][   T30] audit: type=1326 audit(1759448746.056:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[  762.782410][T14160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2139'.
[  762.797025][   T30] audit: type=1326 audit(1759448746.056:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[  764.211839][ T5915] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  764.361972][ T5915] usb 4-1: Using ep0 maxpacket: 8
[  764.372696][ T5915] usb 4-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67
[  764.382163][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.452139][ T5915] usb 4-1: config 0 descriptor??
[  764.495090][ T5915] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  764.680701][ T1166] 
[  764.683081][ T1166] ============================================
[  764.689253][ T1166] WARNING: possible recursive locking detected
[  764.695413][ T1166] syzkaller #0 Not tainted
[  764.699823][ T1166] --------------------------------------------
[  764.705966][ T1166] kworker/u8:6/1166 is trying to acquire lock:
[  764.712115][ T1166] ffffe8ffffd7bfc0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80
[  764.721379][ T1166] 
[  764.721379][ T1166] but task is already holding lock:
[  764.728752][ T1166] ffffe8ffffc7d628 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80
[  764.737997][ T1166] 
[  764.737997][ T1166] other info that might help us debug this:
[  764.746061][ T1166]  Possible unsafe locking scenario:
[  764.746061][ T1166] 
[  764.753516][ T1166]        CPU0
[  764.756795][ T1166]        ----
[  764.760101][ T1166]   lock(&pd_list->lock);
[  764.764434][ T1166]   lock(&pd_list->lock);
[  764.768765][ T1166] 
[  764.768765][ T1166]  *** DEADLOCK ***
[  764.768765][ T1166] 
[  764.776904][ T1166]  May be due to missing lock nesting notation
[  764.776904][ T1166] 
[  764.785244][ T1166] 3 locks held by kworker/u8:6/1166:
[  764.790543][ T1166]  #0: ffff88801e3f3148 ((wq_completion)pdecrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  764.802471][ T1166]  #1: ffffc90003e9fbc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  764.814316][ T1166]  #2: ffffe8ffffc7d628 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80
[  764.823982][ T1166] 
[  764.823982][ T1166] stack backtrace:
[  764.829871][ T1166] CPU: 1 UID: 0 PID: 1166 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  764.829891][ T1166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  764.829905][ T1166] Workqueue: pdecrypt_parallel padata_parallel_worker
[  764.829936][ T1166] Call Trace:
[  764.829946][ T1166]  <TASK>
[  764.829954][ T1166]  dump_stack_lvl+0x189/0x250
[  764.829979][ T1166]  ? __pfx_dump_stack_lvl+0x10/0x10
[  764.830001][ T1166]  ? __pfx__printk+0x10/0x10
[  764.830018][ T1166]  ? print_lock_name+0xde/0x100
[  764.830045][ T1166]  print_deadlock_bug+0x28b/0x2a0
[  764.830067][ T1166]  validate_chain+0x1a3f/0x2140
[  764.830091][ T1166]  ? __queue_work+0x102/0xfb0
[  764.830111][ T1166]  ? look_up_lock_class+0x74/0x170
[  764.830132][ T1166]  ? register_lock_class+0x51/0x320
[  764.830147][ T1166]  ? __queue_work+0xc56/0xfb0
[  764.830167][ T1166]  __lock_acquire+0xab9/0xd20
[  764.830188][ T1166]  ? padata_do_serial+0x73e/0xb80
[  764.830207][ T1166]  lock_acquire+0x120/0x360
[  764.830222][ T1166]  ? padata_do_serial+0x73e/0xb80
[  764.830244][ T1166]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  764.830270][ T1166]  _raw_spin_lock+0x2e/0x40
[  764.830286][ T1166]  ? padata_do_serial+0x73e/0xb80
[  764.830305][ T1166]  padata_do_serial+0x73e/0xb80
[  764.830330][ T1166]  ? padata_parallel_worker+0x44/0x1d0
[  764.830350][ T1166]  padata_parallel_worker+0x75/0x1d0
[  764.830369][ T1166]  ? process_scheduled_works+0x9ef/0x17b0
[  764.830389][ T1166]  process_scheduled_works+0xade/0x17b0
[  764.830418][ T1166]  ? __pfx_process_scheduled_works+0x10/0x10
[  764.830442][ T1166]  worker_thread+0x8a0/0xda0
[  764.830462][ T1166]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  764.830482][ T1166]  ? __kthread_parkme+0x7b/0x200
[  764.830506][ T1166]  kthread+0x711/0x8a0
[  764.830530][ T1166]  ? __pfx_worker_thread+0x10/0x10
[  764.830548][ T1166]  ? __pfx_kthread+0x10/0x10
[  764.830571][ T1166]  ? _raw_spin_unlock_irq+0x23/0x50
[  764.830587][ T1166]  ? lockdep_hardirqs_on+0x9c/0x150
[  764.830604][ T1166]  ? __pfx_kthread+0x10/0x10
[  764.830627][ T1166]  ret_from_fork+0x436/0x7d0
[  764.830648][ T1166]  ? __pfx_ret_from_fork+0x10/0x10
[  764.830668][ T1166]  ? __switch_to_asm+0x39/0x70
[  764.830691][ T1166]  ? __switch_to_asm+0x33/0x70
[  764.830714][ T1166]  ? __pfx_kthread+0x10/0x10
[  764.830736][ T1166]  ret_from_fork_asm+0x1a/0x30
[  764.830766][ T1166]  </TASK>
[  765.093087][T14172] loop8: detected capacity change from 0 to 7
[  765.111553][ T6153] Dev loop8: unable to read RDB block 7
[  765.117360][ T6153]  loop8: AHDI p1 p2 p3
[  765.122599][ T6153] loop8: partition table partially beyond EOD, truncated
[  765.134469][ T6153] loop8: p1 start 1601398130 is beyond EOD, truncated
[  765.142665][ T6153] loop8: p2 start 1702059890 is beyond EOD, truncated
[  765.150501][T14172] Dev loop8: unable to read RDB block 7
[  765.172493][T14172]  loop8: AHDI p1 p2 p3
[  765.213222][T14172] loop8: partition table partially beyond EOD, truncated
[  765.235227][T14172] loop8: p1 start 1601398130 is beyond EOD, truncated
[  765.244325][T14172] loop8: p2 start 1702059890 is beyond EOD, truncated
[  765.255185][ T6153] Dev loop8: unable to read RDB block 7
[  765.260899][ T6153]  loop8: AHDI p1 p2 p3
[  765.269886][ T6153] loop8: partition table partially beyond EOD, truncated
[  765.319691][ T6153] loop8: p1 start 1601398130 is beyond EOD, truncated
[  765.343898][ T6153] loop8: p2 start 1702059890 is beyond EOD, truncated
[  765.354970][T14184] Dev loop8: unable to read RDB block 7
[  765.360616][T14184]  loop8: AHDI p1 p2 p3
[  765.365058][T14184] loop8: partition table partially beyond EOD, truncated
[  765.374326][T14184] loop8: p1 start 1601398130 is beyond EOD, truncated
[  765.411615][T14184] loop8: p2 start 1702059890 is beyond EOD, truncated
[  765.428741][ T5915] usb 4-1: qt2_attach - failed to power on unit: -71
[  765.446834][ T5915] quatech2 4-1:0.0: probe with driver quatech2 failed with error -71
[  765.463381][ T5915] usb 4-1: USB disconnect, device number 73
[  773.352170][   T24] kworker/1:0 (24) used greatest stack depth: 13736 bytes left