last executing test programs:

12.070884214s ago: executing program 1 (id=2400):
landlock_create_ruleset(&(0x7f0000000140)={0xeb32, 0x3, 0x3}, 0x18, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffefb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x800d4, 0xc, 0x5, 0x40000000, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x4, 0x20000000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x48cc45e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0)

11.921372165s ago: executing program 4 (id=2402):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x6)
read$watch_queue(r1, &(0x7f0000000540)=""/4096, 0x1000)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702"], 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000e400)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x1f, 0x7, 0x10408, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000000c0)='./file0\x00', 0x20300, 0xf4)
syz_fuse_handle_req(r3, &(0x7f00000021c0)="510af2e4518d489290ba6ce85dba0ba16308c9ab6beeaa264d6b1c79f0998ba3855f0846540211c7e313121e318d1a2b26e73eb4eda5ab82b3af5df8a2f1269ee7089161c88e49db38de010e6dfc0477c8a69cfdd22fe46720f7f1abd718dd2b89d713418a2454560b0e105518120b9af0235655d31b95fe90a0dc3d2021143ebc27eaa071c36570cf01ddb16c936d4ee42a52264afc40c5205b8ffe42fa5cb484bc0c6e523e04083ecf6a2b882188e59081720b4a5717ff48ee185185197125f99dd6e8d43ad6507ac835f9102bde18708700024f2c498ca85861ba4249616308a887bf1c61e650f4a42bbb72ceee6d13aafdb910c07ce086ea20bb8635fc83f750ff822033e8b85f4abf7af6805f4970c54e518aa228060b28d41cb42a070f21d97357b82d2df406e824863acb5b57a56d802ef8a3391086676f7b54cb563ac8508be430f5ca0611fb5d201e410ec4d70bdca6689d3ec05649c4d03f916a20dade288f20fd5c6e2f5a26c4af48c213ce22db77491e8f4dc140089306a9bb407f1022743beb82fbaf4926c75ff2c6c2d72e2095c07c8de9e68a00c2c63d4ce8c7c17a76ceaadc75333769d810574eaf19f170864859121572bac6f010f1125d2fb937984f3943127a3393310e441a9b05179031a994a8f11798e5b8ec5133702890061fa4be633386d9d4e1f9f100d019200e032dd6a31f798ea55cc6a9bd9b573baac4455055984ce58ab54f8243168825811f1f0bcde0febcb9c519171b528a4ef888632cd0508c48e6f8610aacb84f3339dee98c85dd2d827af29295ed6dd299e14b261f195a1694237d51a84e3e9780e59e9a6301b0d2a16f566e71e560cec9f02e33b130cf7ac331228b4b32ce29a38a947eca24a9da4bd3165e3bec4773d7682f7a5be57361d35e392020d4e228bdc51019e66e35aa0c41c9b98691adcb6890e8240957c5c8e7986ebecab4148f63be4da5b212fc6c25e341f1ee83d7862c32faab9cb01e23820fde031c8c0380860f0bb4e538d3b25671b4522382d6c2efb802f50e0478f2f449514c599f179b7ab7511ce483848e16d816dc55a5848d268f604231dfe2efe4b92e7e4f8e4e1cc947f41c5d4f9e8764360fcfc0a73cb45f0e5659f55b47a834b6c9f0f8308bda8b5148b5adb979a8ed022942c36eb560d7f2563fcfdc7a81593decc081020018d053f20ca3ff9f44364fa9b24e2b468f960306d2831b61fb911c66d7cdbb55251d1b7bd05bb73bf74fe0e64c935a54a79cfb42c1abbf2b92fed10de1b99291b5f30661d2b36b6bdad14eb205775a9c33b3a1f606e4ed7f31082d600ac84a68b9a70ef98662caae0f8cb8d8ff29eb8ef2b8f3df4a0221425692ea9389b30152fa62a47c183bea715e2c161587be5d0b14a3fb4af737e0e71dd81ed1a619e65a05e385797e82f8eb02f3b60f8f984166d815f185fcf859b7bbf8efe96e2a05be76fdadd7ba5446519cb5d4ca2090acbe085362962e5f6fcad11a954554e95cad544491b8eb01e773df8eeda21a2369581be0abf50619e03f537ccffc1a429488d66eda1f2ce2ef560827b603967d1c593cc2949842623b4c85cfeb9e2bf564b36b10b522119f631a1db456367df22046a41ea67ea7a1ab4384dd4842f1f94baa87e17ae4ce4789edad0df063a2ce27652a963f2c81eb0d8100fd4ea05a54b6f21d18523c590794bf21a05e9bd2ef281932a9d642aab631457141af432331f714327d4c72a96eacfb8d2aa848ce76fb752963911ed7feae4c45bc6637365ca085c8d9b31431656d8bf45fa2d85737c6b1c396cba982d648c0d39a6175da43add1ca976296370ef5c6dc9e39e0d7f2028ceba8f858746b736ad4ab94d8e6ac932d45175f177b6633212043cee868d7c01f9d0c4786c6f07ad96728df39fcba3b04d3d331c8d98a9d6e562b93ab52c0c722ae65cf1c500bc4de3ac255345225cc382383b7b0f59200c3b0bbdfbb5fd33218137a670e186de70c4fd47e472ead7efad2f5675b2b611a543187068a0560aeab817a37bab4abc10a47ebf9b1e4a5cf3f357e894ccf818b52b84fa700ee869a4589201e25bf756890503e0636698d454e374d24a69e61f228945227fbd67d869fb02dbf0e1e699a3efa5f378a026107b06930c463d1436a881d936f6baf91f9d3396acfb9f81ee59e9322bfaca0a2a07f59d18f510b4d84574d8c73609ec5d2a089bd76ad9959504c58c732c393d944fcee8f2510935fddd197eac11b9644b7a7d04061564e5b4e51fa3e1475014e31c6022286c509bfdb7ccc1e386ed23e211419c4582dc133425967451501d6587f3d205b3c8a71975d61940f8d75c4ffe4d48c8619e510655cd1dd460133a4bb80865da4325210ffe0c69a3c76996a97069adb7dea6e740ba16dd1008321cd9ae8841a5c99649ca302ca32fdef902f01ff0b01c917cbae0bcd1021a4eed3f6533a06563f432fc4238f8644a774842989d3ea6cddcbcc474aa57606dd9418f422270d812b128e55a757484bebc3da5829c63247a85c454fdec56a866b34cac0658317eb8ca628c18ddd073ff1be919cc8bbd2292f143a083d92f699fcd0969296d9051dd52f201b4554de76010f01398e4f6e6080adfd0f42ab228efd22f87837c98081845592bcbbe642b09c166badc800f45dcdcc089c5280af172d9312b2800fecab7c5b903cb6f91ff8a025ecf4d9e46ae618b3b1f5e502310d28e77421582c29ebec9d954b44867c15ac2e690a65da1e93a42bf9428ad848ef7a767253a69cda6d0d46c4f8127af79965acd6e294bc97eaea79ea7061823d8d873242b5fb3a228eb97a0c5eaece7dcc005f4ea6286c4d80bd4d5b9cab2fdf5ac3eea332a784a6e0d338f72d629fd6fd0d679979a3cda888b8e5c63a16b29e33459ca8802768fbb0d0f42cc6db317dba2d6c22505baa0c380ab1669e291d2e454628271fe116f21f4dd6b29cfa652648c0f8a71319358a32dde44e8ab6834f3dae8b1162403fb89e24e47e4079cbc8b5fd69d189710b02ea503e4eb0a15a7a656f48b60d4d4759c6ec1fd85621aace3b8a8e32d7842098a92229f4e98d0252e62a64b9c638d5d3fa0b284711d2b7991cce437eb8d900fd6a4d42ecf0999581bb292130b83c2bdd40196a34b81e07a56627e948b075bab69fc53b07f73b6be13cae67822e61d2dcf22674ea82cec3164c1afdf74199cfc6a9a89e8a72ba80acc3cd34040a27afc9f1b3105e5a7c72c91bd05c593b39415f23ca42ad02cfcf70d7812f34346128e804211d82693ce1e49c23d6cba97f336ac5c79ca23894eb5221a80062768a62014b7b3975892eaf62d5baca51b1f2cc83cfeb1a1dfd41706c04dcd9edc93b27b6b5446b39f5e1fecf3a0089e43b29738661fb6a335d05e35134e9c82a360d89f78e9179ffdc8ea8996c2301e57fc9207089db272715e81743cb0c2121c8b1893e6ed94345393d6b7953f62b9d4815a73553a8083789bcf445973fc6bcb681598181c0dffea7d7dc451dd294cff9b83188ab0c22078739cd1fd3fa399bc8c0616632fa5577bef05a6382619b5b5b13ccb8f4a6d869d08400d03e348e1f4f6ec3bab3463deacff8379558f2373f69e545436e1cac52e933c561449143b0ffd713ae6c6a8f3bbf7cc669d5835711c9f0f812d27e0c8de4ec796e6cce658bc6e3a2c1233fd4fa510611b85381f7a78be2d7e3be99d7d621b80d0925c45dfdf83599ac5608e2487f9c186e7a6b76539096e4af6f9a0ba550a7803115d7a8090ca42423575527310f8e829e7fa00c1885e119c1013ff71728fabceedf944b20c696bb3fbe5f8dc3227b0f6004c3b3353afe3bbc1b5228cefbbd8da827df088ede87cd455a372649b15485aa430110502ec18444d1bf0f90a0025141b56689a21c4012f775cae47828310709aa622c1120e8580b895cee3e04c143418de61b629331e7c7c41dede93c871e1c9e82b347f94f6b2e08f5332e836479f2be7a23f07b95c2865cd9516570f1d82b882ddaf425ba8db273a77187762b5e02183c0686729bcdeb3946688e5ca702c68869c5a72596aa4b69c2c946b5d1b3d585878501cf3babc996cef83152938229da821d99363a95bc7799b6e4174f0cefefa9a0aab4b97fe9d18d1c75e2318b1c54eba352883f0eeaeaf3f860c5fae1a4477f0382a2e7e2653d3bb58045d85d92a8aae5fc1393198b2bd87c8b0493e7133ddeb07c7061b5f001878c1daff98dc8a9b1c443b7510e2e40c56b844e95a6b9940b2b475db7b913d54bbfeb1f489bbe64b74b086b3cb19bd29df2fa614074d215cb83f4c2aa27c6e5cda1287c703a9638b98463773a673a6fcd5577a630ccb65b653f69c953d0edefe7f4db0660aa97c553491ca9ad1e6d937fe0d89e3e10ac25c2c9a2b48720c0adc91f3077d18ee164b397619a3f54c29111b039135c7741fb17891515e9515d92a7ac983fec660bc8bdc7eee6147e1ae54221e16517f5c6ba1e321d704ae8012706d47661ddb8e27247ba6a9badcb5267dd1a00615ca0f8ebba766a352b013229bfee4a66d7b334253e278e647acba1ff1411d73952e2835606a7de32ac3f70940d20fc271d01617fb43141135511248b0c2cddc4302ba29f52bad0e7dc75658468f67a13d1332559a123b1297778bb53cd63e8e6db377b52afd7129e267c70fa6060157570a07995c900bef2fe6642190d9b9de609196276404763ea4580c272961606cc2bdb0fb76cb66d2b4d97a2adfe7894dd58a160fe4ef5665dbba4943878f8090aa548ba0e52d4e98b0d93a91c9c0724f1ba121cc87f162b93810618df7ffbedc0327915c4ae5e826481175953c5d530fdb8df2586ebad4383a99bdbf437a892d33e437ef4941258d7fefc5ca9988d4aa1c0e0d01f79ce2d0568990498d06c77a764222861b0619c00e0766af5f305a31b19ad38bcab3ff6ca10436170f746646bbb7cbc05749fde19c769b6094af2374b340cf00b1f5fe6fa923ee2b1a8810f0e504d808d43a54310f6c660597dc8bc75f4757aa55c23c6990cddb6f6094da8c1436edf2638aceaa5b7b2a74877eb65a85c83de5746457120a8ef68c9a52a4b9673d2c2133a83feb5f973c187dd1a649b73e56f1be2b31324e5606ded6cea97dd791606174a5660a20f5777312a7259497f785e8691469794b2d47876bec484942c514ad54ce28d66fabb75e534f7a11e8de8d47b031827d5356e064147a0db90a850a478cf0856f0a2162e5ad51046d1e3ea6940bd37c7e0f7bfa925c9c9051b2fa14584b7da686d5a2a2b16490980d31ea61d40ebc67785513e0911a18c448f822575f68499260b482b29a492d9ab7b608236db3891102801c990bcddc0541504167f37c589fb94c5e4a6bfcca8e36baf48383a04addb6e1129ef1f47c72f9328299bb8cdeb884064addcca07e086fba3c7c4e5cd17de97e42746b569741382a9be0293888759c631cd7a74f682ef7bc2157215ce0b6bda2a5ef82a7e582d35ce983e113e93dc8b9da0b33a5155d17314f468b6ee5df5871f7f52d8913fe7c9eaf80d2786503995faf5ed86125baa8ead8fc78b1cb0cdd2e6bc2e0bfb3bc4ccf99ca041317044756dd71b05b9dc7d3332084ef26d35651295364ea652de1aec199ef8bb15a7c2d473a1dc452dedbbc02e4c69c49ae36de973720aab1136c9b24c346acc9e6d2af89dab91cee7d189fd6fa7ab61a3c71dcfa6231f614c24ade9bfde76cbed90680f255e72294a276114f6d536f805f38f632dca7d762c4350478dd7aae99ca0aebbe57c1ee225eae2494061e647f8c3b69983c51ed4106b4b427760cc3885ac30a6009b3190a7a1c0478f99c922f26f81ec05137e23f606913fc842a2b5ba121b62a08ab875f23acd22ab493e9b35042ce9685396bd88f91615e2f31ba163d903ac39c7c8c9c4f6e7444dc84f536df770e18562bf93b15df21d6070a3010f1a65c646a7430b2660d637b169b883f545952ad5dac587f051b9f649391f9949cdd8746a0d677918ab279a6478248a02ac3b75a8ec179a0ab181e8127921b6a7284968a5e9583fa2b355569b21b06ee5c6436066a4ecd96fc261314e131f7b69fab7c0e6d57ef57192f590d3281f3403b5715fcece833bf24f4391b63b5aeed36e60e98e59e1c780ac176fedab1895af142600f9ee8ebf6f6a7a646fb6576ae11fcffec5ad6ab0aebce7abc4ae3b04ca95d4326f90570e51fbb6c45e0ed18faced0347d0abd34bccd9714088017da76395802d8b90aaff3d22cef64b47010c87be459196451d9e9d0ff5b9dca6d9e9b84170e8d4807c313dd7799102505bd8dbc6bea2aeffd7b515a0d9b432d285720d7af58f253ed1c2645396a5d0f07af616d1d032ca891516dcc1c5ceebb2ef0df63e54f7f4bce5f8b90075119271a0aada3c41366a967229f6b53f2f77d9043d6675fa3024d3f4547a66804ef33c62e1df293bb03781a9a6b5ecf694399d068cb0cf0d4df6347cd1d38c7f0f2ecbe434dcc68ae400aa14b129ae0f72dd1f00f5d14058d45c9904f3fe4a5f63a45878b603da0dc3ab8bbd7591f867e90c1b17fb31ffee7522e50eb6d45ba5a68a3b7a299532a4f990e2baa136b210ad9a9407d7823b5131124e22008f1c21ff1832ea1a48115166aaa973cfea206c0f57318efacf3d57c956b51a2e09e9516d19a9df5e95e8e87183051023d2fd1e082acc724e485db2c3b62d22cdbba7e0a1f7d587408428dc951addb4c4fd327542ee0e8caffb43bb388561469d10f2d6a7c1065453e7f9eb8ebebc85aaefa144c2dae2c50ea24b1ec6992a292387e8d29fa01bdb1358cb3b41d868df1bb5509d32b8abbf57277454118bfd0999f76fe340cd5936505a8844775a5dae947cfa27e3885355e7e0173b33d018451f62ab9622ebfed5a81d1ba8fdbdb5d8a6a653a1fb8454c75d7d463a736797642c38f22ab5fd2b9681f6e9bfd44ba0da8049caec79cfa96f7dde079273c8141eadf17944c6e8f482da46e325e08af416a2ada68c0fab30c8992e6e114a553869e2396485dbc6af9b6f199f3c1d76c165c8eaf095161b54ada9f4691b5702da14621f89c27d17fc5b1e3c4ba4836f8979efa72de769a3747dead505566826c4ddf2e7cb28c18af01b146d40d4527ea3ffe4ad06abb24e9bef0c9557e1c00e3bedc3826932471236bba1d460eecdc671df3fc4609d0571268de88e4d5b6080a92a446e4bf56d2332a2d629f7a61e9ba014e65abd3dcff3bc672d8eaf80383340566795f20cb95528fe3024224ea6c943423bd4a2db0efbf03c3c1d184bcdd1b209520d26a29537e636a687b8f772f5103d1a192f86645303b846510436b509c772ad0dc8da1b44b4de4b4368eb931eddc5475b01eb21e6e9e9541b9eb781798ee714ec0c0a306823e7cc743b31bdd612aefadba14d91f6deaacd6e08155f0285773a2490971f51967d43dc9963ab39bc7c4a142f375c111ed4de5a8d7db7d2918a090bc82c009c8d8fc5fc266b01129993c71253db7ff219eaea52c50a2b0798d209cdfe73c55b2dfa85f57dc865c61f5fc0c1a1715d13858403fe8724a4fbe93f9be6a50294dbf96611116be3753e346e2776e48ee47cafe29e19e4302c80e13e25d83064ffd6470f4e277a3d3ff4b9ea4608d9b5e69b1b36a07c42e9e8d0f367c923a7427b2ad703940858592335b1cdbea2aa585a41f63e5d1bdbca8270ffaa3589fd6f53be895412cf957b9012b75ceea834ab626e9a9cbf637f9cbcab63fc28f2f223d720bb91076fc49b753751358e688d088e852f806413aeaf99553a3fe7ed06574abd8c60a1b62edd6000dd06c105100967c9c1135c4a6e0c2bbf57696ec458f61f5094f81ac27f6e07abe83337b098d8d7306427be330e71c13a7b7ccd2b982fa12e8e88048a8ee381ec6d61bcfa62158f1909d7eeee10d4ca40da817e4a841e885a6fa3c04fa30b932e75d8e6c9ce0ea50958e43c1668d3093a1b2756f39ea618d497c450dfee36aecf7fc6eb2c84e3b39ac654a5a6083a4c7ae27d6caf3b21c81d57bc0b016a10b059b0322c29c0acb4a1b7c092e263b9d9cd60f53c0a98187b8de3cc6755c1fa652384e505f3c6cc631025b7e2c250ceafd0691ff1e1b4ed018b6ccbc0e1b2266500ed9ed0cbcd001fc75cf8ae1fba916d2740a442b50a234075bcd6071d0b20a5aa92545816746aaa4e75d3b1a5ede3e627728b138adf2c4e1ca80d57c536012b08859fc56fb07adc093ae914b87a01e79692fd2044bac940fa18319bf965cb47d3e876576e78292680d95bf70c9feee60664a7854d92816625974db38852bc0e87bc2496ae81e02fa72e4efe4ecc5add24b87ee4aff5ceaa32981ee0638269e5a3cde239aacf1e9931bf821616e91a3d47a18993ea9f4a3fe1944b49226f6e016cd9a23f0d2198354da15aba93260e0b99984c18d12b5588ad08c9d2fdc5d9f70e3c886b20987c952b6f81e64b85ee7a4761aabe3658c5a2aa2073de5d008fc269bbaf28cb969b891cc20d4702cb9af65867b7c2780d492af6cbf1000679ddc71ff4ff47ec0d646436b319f1e3e78d90a454c8de5686c82834a288a347217df69d8361334736419ae9b86771d661f3ad8e04ad92b792879a989a4158d854ef3839cb2166ae4c484e6f7b7d4549a9fe208213d0645dc5c3e6b3e07a1225e9ffeec30c26ad9657f94b2839f39821947d7b66f02ae9efa4a131c4a048117ebcd405c658ef2f7c87cdff0f595652eed543a3611f9a0ed1d9704d27bac30ca5f96a07aba85e83f5ff2e6348b8833a5af63aaedbed58ecc32baaf2a5f162a95d9fb93c81727f15e7dfd05ee19244e03ad0cf131335927b0ac7b1502defc060d58234bdfa0d4dd642190b6069ffc519e7984c0aa5e7275e63ed5eb8e0d8ce0fb2137bf4a78b94e08325c1eae2b65dd364c052ab2814300adf0589f147031a6fb3dd4db1158959bba422ead94eeb854af315d04e5fbc7542e83537cd07b4784823fcc6f39b2dd57860b7b24ff6904861136ac21779de0dd670d18cbd0a46839a50694fa9b3d76ce7d9c86f125c869120ff09d026604e20b08cc3a515f33590b8ce23c0860005b69a996981aa6cadb4018b7fa46a98c47933e946c7c81840f550b7ba1c178cd8770887fbfff12783b2d0ab93df716c522eac15776654fa966c0b8c1605c16a0084066da45b5121f4efb076b87ddef5ff562e0bb58a03f7ff72a862a4b672e1f66f3c4a2860e20faf06d64af0c07b5f83a037768c58ecf4b448e8895599b8e34726357ffc22ac5a3b936135c01f148df3a3650cd8ad6ff3ab885b983db861e7b08051a35c9ab561c9ea66f4a1579412bf478f136ac594fac1c9e34a82d83a090ee541d983bf538f15fc7b14bef31f5b52f04d85a9e2a81ae7914fdaf132e10b7925fae4d535c37124376682ddfaf3fd7cb5c26ea1f1a3b5e429d8417dff6eaac18268e6ce5e8ece5aa66719c1d04f8bae986d2d20031944ae068d557bb8de36b92a277f3294374495853efab6db9f2a5d3dd5cd4ae1b2d1a296d8baab81a37e9200c4030fc38e8dee2e8ea00a926bb295e973ab0fd520f16a056d6d4abe4337e42fd3b6d9b5995d4d51617da54817927b044116bb76879dd3bcacd0b5f76b24be069636a5f0a1a578eea3dfc30375a63c34ea612aefc79dbce5f101eefda0870c098a45dd378f02378bc32c6751cc96792c8b1854adc7a5212ac0e8295f51a15f968aa91fca2e93c0dbb07b978c7d22316d482e383ca02c5d24ae8e8fb39baaef3373724794c45f78bbf5102d9c5af63c8304006ec77dc78b93eb44d08e0f7d57385ae5587b3f8e3a2f1cee12cc5f2b20046a9e1e9b654346a3ca63e0b56c7c6026f824df6ffaaa8d0f19f7179231bc44909bf90cf09f7dc730d5a8495f8e769744169d3d5d3e3963c296e18ad2e2f29e438c87a825b6c41da6fdb160909371683082dc2cb942cea56b91ed11b55608b01818197ea1cdda529e091c9abdd4f009848c3c15ac9d0b4fa4683fb02664be526a1c0e9cf9eb3811837bbae4846e762b42a28ebc7b10bc8d6d5ba97ecdf2a0dd3b1540cfe02e8e75e0ed68e2da32c206b676b47937bc77acf875b0a8a5bfd542960c17020bbfe2dca86405155070c54966ed4450e496dcc0bf596fada3408e4e543f4c20b78770e8d45333c88f830b778e27609a232847b1f1888d9c64a1cfc4e74cc5aaec7501571e7a9fc64dd66d1061deee5d722b7b40c1b78957ff10be6daeaca207888ae23bddea0a2af99eaae13e74712ecf61c4b52eb3b3a33c5d0b2c59b2b88fe01222623b0314e0f97da475062a5be537f3116b84bfbf82af1b4109d55da3e046fef0d433c10ca5f0ec1032d8974aaeb5e663609198c0f739e7312ddf52d71ec87e3fa2275e13c153a4f7be176d2bd12a86d966a024854d503604609eeeb164dc6c7ac1fbdaa667c104d6cfb1f2eef6693d7ce0d65d93b0fa6dadc747cc322a01d4903458c82aa813c97ddbd9cdb107a4b137d1808727088bf7adf933c81733188253c1b1c0486c4d2a4d98d99a1d83afb9bffbac00bb849426fd3702a67b0d62c94a7171dab2eded0601654f906b8fd98035dd0799112c436f07db588f162afe9e889fee50463cf2aafff2e021f436cbe7039d31ed18a785efda2ee63ee238ac96ec57a1738342b2b9b443873e0a33cf6f4d517f2a16e040249da8dfa448f64b7b39b535e8a074ee2c7b6702fa3d13dbf08c00ee2bd89fd7ac30a1ced1a43b4e33ad93363ae12086b07e76437d8f345c02e1013808e9e6a346433a4a9f165088eea47f63528415e0c19f34e37b1b6ba6ab12e553e9ec5cbecab4eee7cb7090c444901aeaf3f75084ea77325383e2dec70c23349d9778500cd21be7f8e769abf3dcc3bb4d3b6bac770122ef9cc2849244d410c01d5b3e155eee0889ad196afdb23e2e9fe914e296b6572cb3aeb620b3cada7543e6228257acc34998726693774fbb5ddd420daf629d09b86ec99de0fbc1da5e48f95dfeea7c81f954312d42abbe3bcfd7f164b6a72a9166685547d90661f348dee02e0fe8e4827e9b8f4ce9f7a8d1c66bcb1ef063b6ae34ff86ce02ba21c6bbfb6dbe409f85ad992a14a401c59dbd2b69eaf855d23d828e6e153f00749c12e8dc46eadd1e7d91ddd828fc0c70467f651d054ce9e26348bb4964a5854d439a5a293f23d4343021cb7492865b6169977f45a6608edc49cffc8c863279267627a422b3aaea3038b61856852aa2aa5d06ae4b93b159ccf50390325523b99432cc4263dfd388bbe37b61c0de4e2761ffbe960b9bc4c2001935bdba7b9c10d33b2f1f05fc7dc4dd03641e737fe0e021885b0fcd0b11ca9620299e2265246e3728868ddd646a153a594a02ec36e1d1f97d159c100941ca4c15ca1ad2ee4fb1f1657d377cd7ade84bce28c8680fd1553ccfac65bab8921bfdefe6e8ce2cfbdcc277deaece05dd4b34d3be898d8e9df90059aa66aa4cb3fb324a859f7a4c08dbcdaca05b5c5703a0dbc117b075adf877ac0a896a894fca2c90d832d46417332fdcdf94d1e4471b2d290600f19beead9cd0c87d4f8f12df98c360ac89ce6f", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x18, 0x0, 0x4c, {0x134}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
umount2(&(0x7f00000001c0)='./file0\x00', 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0)
r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

11.826675241s ago: executing program 1 (id=2404):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x19)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=<r3=>r2, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0)
socket(0x10, 0x803, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x21, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000030000007b00100000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x88141, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000000)=0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0xd, 0xa}, {0x7, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000200)=0x7)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0xfffffffb, "340b7832ceefd131b8e6490125f50fad9987ffe93bbabd18cf50192700000010"})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010028bd00"/14], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800)
pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x9, 0x4, 0x0, 0xffffffff, 0x8}, 0x0, &(0x7f0000000080)={0x7fc, 0x2, 0x4000000000800000, 0xfffffffffffffffc, 0x0, 0xc3ad}, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

11.094834366s ago: executing program 4 (id=2409):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7fff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x109ac2, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x1c9, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00')
lseek(r3, 0x36, 0x1)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000200)=0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r6, 0x4048aecb, &(0x7f0000001440)={{0x0, 0x0, 0x80, {0xffffffffffffffff, 0x1}}, "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", "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"})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x2, 0x5, 0xbfdffffc}, &(0x7f0000000000)=<r10=>0x0, &(0x7f0000000280)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r9, 0x0, &(0x7f0000000040)='./file0\x00', 0x65, 0x183000, 0x12345})
openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_uring_enter(r9, 0x47f6, 0x40, 0x2, 0x0, 0x0)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

8.606204409s ago: executing program 1 (id=2414):
landlock_create_ruleset(&(0x7f0000000140)={0xeb32, 0x3, 0x3}, 0x18, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffefb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x800d4, 0xc, 0x5, 0x81000000, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x4, 0x20000000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x48cc45e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0)

8.312052659s ago: executing program 1 (id=2416):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x13, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x2810)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x80146, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
io_setup(0x2, &(0x7f0000002400)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x2}])
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000180f3ffffff000000000700000a140000001100010000000000000300000000000aecd487ab8f176933c2eab8db73812891861298"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x400)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x10542, 0x0)
openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
r5 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, &(0x7f0000001600)={0x24, &(0x7f0000001440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$UHID_DESTROY(r6, &(0x7f0000000180), 0x4)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
unshare(0x24020400)
unshare(0x22020600)
openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
ioctl$EVIOCGMASK(r7, 0x5b02, 0x0)

7.195455235s ago: executing program 3 (id=2420):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="ffff800000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)

7.128642155s ago: executing program 3 (id=2422):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x104}}, 0x0)

6.507939628s ago: executing program 0 (id=2425):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4004)
ptrace(0x10, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x10003, 0x4, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f001d6426f30f09660f3a0b378a660f668516bfba2100ecc1d9790f793af4669d640f01c5", 0x25}], 0x1, 0x53, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

5.132578702s ago: executing program 1 (id=2428):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc})
syz_emit_ethernet(0x42, &(0x7f0000000340)={@broadcast, @random="000000000400", @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x3, 0x34, 0x64, 0x0, 0x5, 0x6, 0x0, @empty, @empty}, @payload_direct={{{{0x20, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x2, 0x8, 0x4, 0x3, 0x8000, 0x4936, 0x0, 0x4e23, 0x4e21}, 0x3, 0x3}}}}}}}, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x802, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="68000000130001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c000180080021000000000020000a80"], 0x68}}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000))
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r6 = syz_usb_connect$cdc_ecm(0x6, 0x75, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x8, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, "dc68ee"}, {0x5, 0x24, 0x0, 0x32}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x40, 0x0, 0x5c}, [@mbim={0xc, 0x24, 0x1b, 0x10, 0x1, 0x10, 0x9, 0x2, 0x60}, @obex={0x5, 0x24, 0x15, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xc}, @ncm={0x6, 0x24, 0x1a, 0x4d}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x9, 0x14}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x9d, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x5, 0x2}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xf, 0x7, 0x8, 0x10, 0x7}, 0x10, &(0x7f0000000240)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x14, 0x80, 0x2, 0x6c, 0x7ff, 0x3}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x421}}, {0x93, &(0x7f0000000680)=@string={0x93, 0x3, "99e2fe1ea1ddf7b4b1b8cbd4ce714228c5973ca463f1c844256f27a73402c07ab699a342dc563ee8a08d499adff9987b77c333abd877ab36801713b65ee7287ffc16b6c7164e05074e850c2f49c73b693ddb0cf14bb9e29dc201b528b78cc964641e456e8c57fd396444822be111e1f1d7028ece580299738406325ef979b703b789f09e0883bcf71b489b4ff9c4529bbd"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2809}}]})
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)

4.81892459s ago: executing program 0 (id=2429):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xe0, 0xa6, 0x73, 0x20, 0x582, 0xecd6, 0x6b1b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0xff, 0x4f, 0x8, 0x0, [], [{{0x9, 0x5, 0x8a, 0x3}}]}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x6, 0xe3, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0x8, 0x10, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100}, [@processing_unit={0x9, 0x24, 0x7, 0x4, 0x2, 0x0, '\n('}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0x4, 0xae}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x5, 0x3, 0x7}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0x5, "c62b0f"}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0xbe, "2b0c9c68"}, @extension_unit={0xd, 0x24, 0x8, 0x3, 0x7fff, 0x57, "132b5e31a591"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x58, 0x2, 0x3, 0x2, "c3ad8f30"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x6, 0x6, {0x7, 0x25, 0x1, 0x2, 0x71, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x88, 0x2}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xfd, 0x1, 0x3, 0x76, '\rm'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x0, 0x80, "8bf3bbcf6aefed"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x8, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x85, 0xf, 0x80, {0x7, 0x25, 0x1, 0x3, 0x49, 0x7f}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x9, 0x0, 0x1, 0x8, 0x8}, 0x58, &(0x7f0000000180)={0x5, 0xf, 0x58, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xf, 0x7, 0x155d}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x10000, 0xf00, 0x4, [0xff00, 0xffc000]}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0x9, 0x1}, @ssp_cap={0x1c, 0x10, 0xa, 0x4c, 0x4, 0x6, 0xf00, 0xd, [0x0, 0xc000, 0xff1f8f, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4c, 0x7f, 0x9f, 0x0, 0xd}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3, 0x3}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x438}}, {0x86, &(0x7f0000000240)=@string={0x86, 0x3, "9a9387d15a8428e205baf43342abe568e587ec45b5d14b2b981614b12d044a8ac782fb7b1474e3076976f84bdd2a3c59ea304098f94ac6704c7c82b8f534c8d2143716120047b3db9ef8b0216cf2a1c743cf64e082387cab2190e9d80514b72726652c7e8bb80d9b78dce4ea474143ecdcbfdd3d6951e77cdb168eeccfbf32b9652965d1"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x411}}, {0xc0, &(0x7f0000000340)=@string={0xc0, 0x3, "038d1df78086640592edce8ed8de576413bd04414d0b4935c6dd1e8830a8d40a56fac112764722b46e227f5e5cea2c2c7efcb2198b80bac991dcde714e055395305662145b6523f9a54ff6a48f1e0a459fc732a6783a7becc5da6a0b246ff896d2d7c0cd22779b3125a23db22068616d08d2a98bfb4198464807eeaa8c3faad7a42b836f75ee331bfc1f3d8dc395f7dc80f8b0aff77f6d3b6c5396b64f241117b1890f575f2d35b7103c32f486604216ed45bc4b9d8ddec5ef5aca5d68ca"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2c01}}, {0x6e, &(0x7f0000000440)=@string={0x6e, 0x3, "8a5bac2e8bb83dacb15d7999c32a31f5674b44cf3f17c373cf3cad8dff5253925cfdaaa26b508f671a485af65f470e28adbf8464d72e5911d44b6dbb8bd1d2756f8910c703340b8017f81b3230da24cd67db10f601d50a5eef5acc704c54d18f9d89862734ea07b0e30683e7"}}]})

4.32785788s ago: executing program 2 (id=2430):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004300)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x4c}}, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000009cc0), 0x0, 0x0)
ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, 0x0)

4.114619608s ago: executing program 0 (id=2431):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
io_setup(0x9, &(0x7f0000000b80)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}])
write$binfmt_script(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002f80)={0x1c, &(0x7f0000000e80)={0x20, 0x11}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000300)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

3.941395366s ago: executing program 2 (id=2432):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000100000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)

3.827387403s ago: executing program 4 (id=2433):
syz_emit_ethernet(0x3b6, &(0x7f0000000780)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf8, 0xfffffffc, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000280ff0000000000000000000000008879e66485201a0015ca8374000000000000000000fe001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

3.610651008s ago: executing program 2 (id=2434):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1f2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x5a8fe2e2], [0x88000001, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x800000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x400, 0x2, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x44], [0x0, 0xffffffff, 0x3, 0x0, 0xefe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x6, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10)
syz_emit_ethernet(0x82, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x40, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x5, "91ec92"}]}]}}}}}}}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r2, 0x0, 0x16, 0x0, 0x0)
signalfd4(r2, &(0x7f0000000100)={[0x4]}, 0x8, 0x800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRESOCT=r2, @ANYBLOB="d00000000a000100000000000000001008000f00010000"], 0x30}, 0x1, 0x0, 0x0, 0x4004009}, 0x200240c4)

3.589333338s ago: executing program 4 (id=2435):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000d00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

3.435545233s ago: executing program 3 (id=2436):
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f050440000009058303", @ANYRES16=0x0], 0x0)

3.314589335s ago: executing program 2 (id=2437):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011c00772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
io_setup(0x6, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000240)={0x2000000b})
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x6})
r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
write$FUSE_INIT(r6, 0x0, 0x0)
close(r6)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700), 0x982, 0x0)
io_submit(r2, 0xa, &(0x7f0000000d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0xc00, r5, &(0x7f0000000c80)="f42b9dc786ad23527b009c57d4299bd17fdd76861360eb13badd9907d298d2f911eeeda4ac72b6d5904499d50bd35c270b", 0x31, 0x1, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f0000000380)="6de62146623b817dd3aed2bf4a78e0701fe60ffae70b17c069b0c0eaeeb36fab4bf6013a04000000000000005802ad615b5867dd1f8d2d8cf7bed50f56b9613d599fd655ca0c0a4203e6df614698303eb6820d1fbec3c40ee2e12e34a9462814e984eddbda1765d1929c38afccf72d3fece41ece2dc38fb62767b4e77d0a6ba9f891d64941c827e8250eb8f2d5d79730067e2195d5575d716a5d7cbb4c788f2423b3b5ea8c4e31d017a2a7eb8548252eaa47628c2a12816ac1dfc81a8cf91dfab5479b1968d6784448a39a71a342999d5b269c16a3b37760a110d0127d3eedea413e88", 0xe3, 0x5, 0x0, 0x1, r7}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x9, r6, &(0x7f0000000580)="9514b3955b431596fcf2ddb3049a77fe8f5130291bcb75bcb3066d2c1cf2525da28a694f7ac9bf2702eaede4f5e51f43b1bf3b2ab6b7523758fe9b6d40e1054fdd614afe1e621cb336f1863f12286fd7541689190fb3a9d5c571d87106084d65cefde0b7e1663abacbc77937b2ee18b78b42f12aa37a1e31c0cf0bf2f0ba8ab590678a551e74232cd207f70ab039e74e7a43d9f7fd0b04a6855a1ffd9282c9560338a66eb2bf82b55ac3b39a190da37e3636627109d8f0346e57549ad32e6d964a7fc4de119c11fe3f988538af5a5d0a8e7329ffafd0909876e9fc6f391725c41fb565c8ffa5226de7116b927756131284e0ce395f36", 0xf6, 0x6, 0x0, 0x2, r6}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xb, 0x3, r4, &(0x7f0000000f80)="8d372bce14436b39e44786dfd87fddaf3b5a1c8be4f0b0f49d537f4b14e71b37202fac02f4ac2e5a96ae0ee18816785a778495bf4ea9eb29694b508ac7c19562c69bd8932e12851d1d623a54aaa1df4b4891bdb3d916fbe1cf8528ccf7fbf7e71aea17b459373248689f7355", 0x6c, 0x0, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000680)="89ba94e3361351b57985d1168b2a221d9f4c2a4eba80ee1f97e1b03466604f1bf8d7fce3c797e963ffe6bd58f5eb28e12237b6215c3fb8f14b1ecdbadcd29770795aabeacf8bde812323a4bbff633eaf99b0ef1874bc56bf663ee3f7234e5e", 0x5f, 0x6, 0x0, 0x3, r6}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x6, r1, &(0x7f0000000780)="56eb1f9e78ece34f934ac126f24ab6fac3f8b4ec8a9f569741cc14e8df1a7b358b4fa7c4197520c663d35f42b2978e80ec647c8be97a2bd4013f466c7ee24c7da57599fc3e9967e45f3ca0e9931eed5b17cefc3d9aee603d426575aa8fad2ab7e5dfeccc3a2d48739461e800bad6cc530ed3e9305f97dc629daf6e36a362e2284ef00e5d76e9d912e6216612338f59550e8458bdc6eb9f146ce10383d907f61633b8a10eb0983c76578a", 0xaa, 0x4, 0x0, 0xf2dc697f8bc2b717}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x6, 0xfffa, r1, &(0x7f0000000880)="5670cc09bd1a2e86bf67c7227b237a5f885687936311c886c468bae7e8ee8f3581d385b4aee8f6", 0x27, 0x763, 0x0, 0x3, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x5, r3, &(0x7f00000009c0)="489ab8a9b4892fcd800228e4bc1202d1280caeab509820e87072f76d38c709575a25d250ee3702c92adac211d31cff1b793c21f4a1eff7970f9b5fe2cc694b6dc51fe5854dc718ba872d2aa3bdb0b7aa350a17ec98043fc94d8739fb345acde97b79c4b50f4db189aba6fef10d1bd38ba564f173a8a0f392096c7c235b22e3201c8beffd1054c8f5027d2b3a2587517ab02fca4e5614534f0f60374497a401f7d50305d217c3703d996a20caca47ed527d", 0xb1, 0xd7, 0x0, 0x1, r4}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x8, 0x10, r4, &(0x7f0000000ac0)="db7f3c6fd764f4fa5760d4ee1f25bcaeeef8c0739556ac71ff140abe53d95a4ee28e957dc50c2945a99e6777617d5572ebca17297396781c367aac7fcfdcb07abd0b5b41f512be", 0x47, 0x6, 0x0, 0x2, r6}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x5, 0x1, r3, &(0x7f0000000d80)="ef762839edd2e73be351c9319868d7dbb7071a85f84037d65ee4d0fae70db8eed786d591a1ad69d5c08af7445342b8f8ed8dac7f8b6b58e5a5792b34e5c8648942b170bd2786de69b545c9ef61c8e2741871b41a464a448f8053836b559deab9b47b057038d04881b917443ee111d991add83d38be2d03fb329878b152005f9a6e3f85229166d58faf43f2332cd6c08474e240c8d3105fa03bfc458f", 0x9c, 0x8, 0x0, 0x3, r7}])
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000b80)=""/92, 0x80a0000})
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)=0x80000003)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000001080017"], 0x44}}, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000003, 0x110, r3, 0xc6905000)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r10, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000e40)={0x20, 0x17, 0x100, "490200004a48f8da56cc29b049e2df1ad27b75dab5af86750e1864ea9f96d9dd07000000bf65a4f2f043818e01db2d5de7acf08fa5143a275ffd9dc98fbe2c062dc0aa2f355720ca2c022f29e8c454d972a0c60dd347e8f32b01dac5568ba5b0066c7b806b064332e170049083a4e8eb3ce3d630ddf32ece7e207b0bea2cec73c869dc317ab583a7cefd0169a577c8d63beca088e608e5c90f3ee910972e454488439295e5e05d353d51cd5b5484b29a0e09cd6680a34bbe49a95efe32c82a4748abe2e9a7fa4d5fab7ba776584d651400d6e9779a0a558543ce885dd6e64252a1b9d6d823b6c2f29d14a3816db0f16a2e1b3700"/256}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.197199946s ago: executing program 4 (id=2438):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={r4, 0x80}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r4, 0x3}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='pimreg0\x00', 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="ed"], 0x20)

3.14649756s ago: executing program 0 (id=2439):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0xbaf5, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$kcm(0x11, 0x2, 0x300)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x69, 0x3, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x8000, 0x6, 0x3602ec0}})
r7 = socket$tipc(0x1e, 0x2, 0x0)
syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad4, 0x0, 0x0, 0x80}, &(0x7f00000003c0)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000})
creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)

2.48666653s ago: executing program 3 (id=2440):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100001002bbd7000f4dbdf2500000000", @ANYRES32=r3, @ANYBLOB="0000000008000200"], 0x38}}, 0x40)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x200000d0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000001480))
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66643dfbb597fb311a71441c3322b1388839adce3673f8", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000002400)={0x2020, 0x0, <r5=>0x0}, 0xfffffeef)
write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x8695c3813a9bd78d}}, 0x50)
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x3fb, 0x0, 0xc000, 0xffb, 0x0, 0xee00, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000003e000b01fcfffffffddbdf25047c0000040036800c000180060006008e0a00003947213e5b6ad92cbee8ec9500c114464908d2563797c401f890ecfa6c567f4f0499c89afd76428d30f7d76390d505795bd396f5ba306e31bcf51a8cb4d47ef7efe73cbe601556e39705208028214a"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4004, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0xd, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x103, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x52f, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4, 0x9, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}})
unlink(&(0x7f00000000c0)='./file0\x00')
socket$inet_smc(0x2b, 0x1, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.741509147s ago: executing program 1 (id=2441):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x5, 0x7, 0x2, 0x77}]})
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x2404c040}, 0x8040)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0)
ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
unshare(0x68040200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit={0x95, 0x0, 0x7b00}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
connect$qrtr(r6, &(0x7f00000005c0)={0x2a, 0x3, 0x2}, 0xc)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x81, 0x4000105, 0x9, 0xfffe, 0x5]}, &(0x7f0000000400)=0x54)
accept4(r4, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x6c, 0x87400, {0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x56, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}]}, 0x60}, 0x1, 0x40afc, 0x0, 0x40010}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x4)
r9 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x0, 0x100)
write$snddsp(r9, &(0x7f0000000540)="53e5b7a9a0d2fe00253a54024794807bacb91d53f1dfef3fab702ab83e46406c253f75604d5bc3973245f8b39d519f5535a7b066c951f427fa555e70a32759d01e34d6b06b52fc31166f2a6c447e962c48afce828e60884cca4478", 0x5b)

1.297665601s ago: executing program 0 (id=2442):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x88ff, 0x81)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x20, r2, 0x1, 0x70bd2a, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0xd0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r3, 0x3, {0x1, 0x1}, 0xfe}, 0x18)

1.04270954s ago: executing program 0 (id=2443):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x83, 0x0, 0xfffbfffffffffffe, 0x3}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000240)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000140)=0xc7, 0x12)
writev(r2, &(0x7f0000004900), 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, 0x0, 0x0)
connect$rxrpc(r6, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x38, 0x4c00}, 0x0)
connect$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e27, @local}}, 0x24)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
syz_open_procfs(0x0, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'geneve0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000001000000400000004000000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000002c00009f1d3e0fed829de100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, 0x0, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0)

407.775407ms ago: executing program 3 (id=2444):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000e5ff00000000000020a00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000000c0)={{0xcb, 0x2}, 'port1\x00', 0x4, 0x80020, 0x400, 0x101, 0x7, 0x6, 0x40, 0x0, 0x3, 0x4b}) (async)
r0 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r1 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}) (async)
io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x12) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r5 = socket(0x1e, 0x803, 0x0) (rerun: 32)
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x8, [0x2, 0xb0, 0x3, 0xfffffffffffffff7, 0x4, 0xffff]})
r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0)
r8 = socket(0x22, 0x2, 0x3)
close_range(r7, 0xffffffffffffffff, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001f80), 0x101040, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async)
setsockopt$sock_int(r6, 0x1, 0x29, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000003000)=[{{&(0x7f0000000040)=@ax25={{0x3, @default}, [@null, @default, @null, @default, @default, @null, @default, @bcast]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000200)=""/59, 0x3b}], 0x2, &(0x7f00000003c0)=""/252, 0xfc}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/96, 0x60}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000540)=""/39, 0x27}, {&(0x7f0000000580)=""/29, 0x1d}, {&(0x7f00000005c0)=""/241, 0xf1}, {&(0x7f00000006c0)=""/179, 0xb3}], 0x6, &(0x7f0000000800)=""/35, 0x23}, 0x1}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/113, 0x71}, {&(0x7f00000008c0)=""/225, 0xe1}, {&(0x7f00000009c0)=""/199, 0xc7}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f0000000bc0)=""/255, 0xff}, {&(0x7f0000000cc0)=""/76, 0x4c}, {&(0x7f0000000d40)=""/8, 0x8}], 0x7, &(0x7f0000000e00)=""/139, 0x8b}, 0x8001}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000ec0)=""/87, 0x57}, {&(0x7f0000000f40)=""/160, 0xa0}, {&(0x7f0000001000)=""/41, 0x29}, {&(0x7f0000001040)=""/251, 0xfb}, {&(0x7f0000001140)=""/126, 0x7e}, {&(0x7f00000011c0)=""/199, 0xc7}, {&(0x7f00000012c0)=""/221, 0xdd}, {&(0x7f00000013c0)=""/158, 0x9e}, {&(0x7f0000001480)=""/121, 0x79}, {&(0x7f0000001500)=""/57, 0x39}], 0xa, &(0x7f0000001600)}, 0x4}, {{&(0x7f0000001640)=@xdp, 0x80, &(0x7f00000017c0)=[{&(0x7f00000016c0)=""/202, 0xca}], 0x1, &(0x7f0000001800)=""/75, 0x4b}, 0x7}, {{&(0x7f0000001880)=@sco={0x1f, @none}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001900)=""/111, 0x6f}, {&(0x7f0000001980)=""/249, 0xf9}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/171, 0xab}, {&(0x7f0000001b40)=""/183, 0xb7}, {&(0x7f0000001c00)=""/100, 0x64}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)=""/106, 0x6a}, {&(0x7f0000001d40)=""/166, 0xa6}], 0x9, &(0x7f0000001ec0)=""/45, 0x2d}, 0x3ff}], 0x6, 0x10001, &(0x7f0000001f00)={0x0, 0x3938700}) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r11, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async, rerun: 32)
sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000003300)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000032c0)={&(0x7f00000031c0)={0x100, r11, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @empty, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xe, @local, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0xc811) (async, rerun: 32)
r12 = open_tree(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r12, 0xc01064c8, &(0x7f0000001f40)={0x4, 0x0, &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0]}) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012000000000280100004800c000100020000008100000006000100fe0f000008000500"/56, @ANYRES32=r10, @ANYBLOB], 0x54}}, 0x8000)

312.543602ms ago: executing program 2 (id=2445):
syz_emit_ethernet(0x3b6, &(0x7f0000000780)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf8, 0xfffffffc, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000280ff0000000000000000000000008879e66485201a0015ca8374000000000000000005fe001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

78.667056ms ago: executing program 2 (id=2446):
epoll_create(0x401)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0)
brk(0x400000ffc000)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000380)={0x4, 0x81, 0x10000, 0x0, '\x00', '\x00', '\x00', 0x1, 0x8, 0xffffffff, 0x3, "b0dad8367d8b45e8a626dbe29350220a"})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xa}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44080)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x8000)
sendmmsg$alg(r6, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000007c0)=[@iv={0x110, 0x117, 0x2, 0xf7, "2bd868b0ff1407e000d1f92fc38a767dfebe4ae632bfe82b6cd4e873fc72d8527c44759c03074c0099f77a991bf0c50f241a0fc022b517a258b76bf26a6da867f90b7b6aed64a86e2454c9222234a59df0d65d9a62b39838b6f3a4eec8b0c7320263cb12590a6e3405e212dc71ccaf51542841cf69b5a075672b8f4e8bb2bb01503d7577c987c2429df6dd917a08adfbbb7823b0b025bcb571d1e9758cc0b5c60b81c129c87eb183ab35aa0d60c2e8989f07a1fffc5c58574a12a01794e03efc8324c2cf4120aeb69dd3cb5095f841fda3a78f1e77a053b1763e86fadca2b9b4d07bfa697c74d035db3febebc648712cf361de4cab00d1"}], 0x110, 0x20040000}, {0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000140)="d34f1a", 0x3}, {&(0x7f0000000540)="9ed56938ba34675d5298d86dfc0c110808c8444731e0f700523d6b8ab187e731d2282511922f05e1354ff3679e0c14526ba9759650fca2042037e20f2e7a9c0c00bc6dd5ddf88b04752eb35450d3fc2d6cfe", 0x52}, {&(0x7f0000000600)="ba363ea055a2ed53d66b114c9168983d92aaf3a14f163094be536bed251115e61ebdedf3c8082f33ca891317a0ca6f706d4714730d582e775bcc1d4350d57eae901367262bc3b4eb19cbec092ff486719c3646523cfa32ef05068e8a71bd5fae502524d4e4362a7d5c7ad3849416aa3c8db88a83258737a08911bef2968a8356f644b142d2df59f386ebbfb309dd2611d944afe0d90b3f430611495506ebd2846a865fb3b2dff7167338018ff1d5590743d7decb114d2800f4cbb0cf291a52dfe11049f1a2bae35a8627a1bbfde83870f79d16f916e1bc9d7d229babaff986a9ac8e68961147", 0xe6}, {&(0x7f0000000740)="bc1466728a7567", 0x7}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)}, {&(0x7f0000001940)="6f2024995593b9ac4359ad88b5dba2bc4dce0eebf12c453cb7ae62d2aa1ccd3f04082aed7a33956381debf0c8d58b6418dd7076f3a40d5e609793419fd44a4ffc57e18c28a993cc3cf474ff12865d2753560b4920c1824d3ae001f8429ce76dc85d4a399aa061d326c3f326daf2c710de365233a7e9a8ab86e0e0b8d81771a39c7682df6a5ba4e03fb0fef4d61954eec9b8d8fe29258aa5e9006c6c0cc721d161c04ac866f80ba689fb7731ebad815bb274643cbf051f8b11871d9670d4ea2e0c6ec0db397c9245f4c588237cfd36c8d8c2cc4cb65c1abf8a657f558fb9c4f2999ad", 0xe2}, {&(0x7f0000001a40)="7e77ab7b655aad6c0a7d2a5171aebe75a5f45d8f4fdd02dcc35fc7ddb9b3331b720f9785a83f59d6e3040ed5efb5e18c4b1371bf58e48b16f27d7df1e2484ff414b826df645b02ea6f930fefb90fab2b6c523c7910c976c969ca861ffdc22314e714e2bc1c94148ef3f457c71849e3252d7643808c5759b84b3a9c1b90e808bed2f3bdaf7c85b92d0448acffcc83635be75689de65a9261ebfa581416c20eb513295367993fb81f85ba7a2a554cf85078036afb802d83fdeca0903f958479d7c74bb6d2e30b6b312577772bf51d6ac4f06b84f6c93be61a17f16a236aa66d50933f19300117eb966db9c431ca9a63c923f3b93c6ed2f2358", 0xf8}], 0x8, &(0x7f0000001bc0)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x2, 0x488c1)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0)

5.084355ms ago: executing program 3 (id=2447):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 64)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async)
r3 = accept4(r2, 0x0, 0x0, 0x0)
read$alg(r3, &(0x7f0000000780)=""/148, 0x94) (async, rerun: 64)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000000c0)=@newtclass={0x24, 0x28, 0x8, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xfff1}, {0x2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4048000) (async, rerun: 64)
sendmsg$nl_netfilter(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000007380)=ANY=[], 0x74}}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f0000001780)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x41, 0x9, 0x2, 0x1, 0x10, 0x6d}, 0xf4, &(0x7f0000001700)=ANY=[], 0x2, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x500a}}, {0x0, 0x0}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async)
r7 = syz_open_dev$dri(&(0x7f0000000200), 0x3, 0x1cf8c2)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r8=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000002c0)={r8, <r9=>0x0, <r10=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000600)=[0x0], 0x1, r9, r10, 0x3, 0x0, 0xffffffff, 0x0, {0xac7c, 0x8001, 0x3, 0x69, 0xf4b, 0x1, 0x2, 0x8, 0x412f, 0xe154, 0x1000, 0x5, 0x6, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) (async)
sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fddbdf251b000000200001801400020064766d72703000000000000000000000080001"], 0x34}}, 0x20040010) (async)
syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") (async)
getsockopt$netlink(r4, 0x10e, 0x9, &(0x7f0000000140)=""/9, &(0x7f0000000180)=0x9)

0s ago: executing program 4 (id=2448):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000be5a94100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

kernel console output (not intermixed with test programs):

has no interface number 0
[  625.831132][ T5926] usb 1-1: too many endpoints for config 0 interface 32 altsetting 109: 97, using maximum allowed: 30
[  625.881734][ T5926] usb 1-1: config 0 interface 32 altsetting 109 has 0 endpoint descriptors, different from the interface descriptor's value: 97
[  625.916594][ T5926] usb 1-1: config 0 interface 32 has no altsetting 0
[  625.955915][ T5926] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  625.990561][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.010206][ T5926] usb 1-1: Product: syz
[  626.015117][ T5926] usb 1-1: Manufacturer: syz
[  626.019763][ T5926] usb 1-1: SerialNumber: syz
[  626.042630][ T5926] usb 1-1: config 0 descriptor??
[  626.321841][ T5909] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[  626.385909][T13048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1865'.
[  626.409683][T13050] random: crng reseeded on system resumption
[  626.429056][T13050] warning: `syz.0.1858' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  626.461552][    T9] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  626.471514][ T5909] usb 4-1: Using ep0 maxpacket: 32
[  626.479703][ T5909] usb 4-1: config 0 has an invalid interface number: 184 but max is 11
[  626.490522][ T5909] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 12
[  626.507315][ T5909] usb 4-1: config 0 has no interface number 0
[  626.514943][ T5909] usb 4-1: config 0 interface 184 has no altsetting 0
[  626.535167][T13052] TCP: TCP_TX_DELAY enabled
[  626.547929][ T5909] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  626.557633][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.566013][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  626.574418][ T5909] usb 4-1: Product: syz
[  626.578632][ T5909] usb 4-1: Manufacturer: syz
[  626.586206][ T5909] usb 4-1: SerialNumber: syz
[  626.605828][ T5909] usb 4-1: config 0 descriptor??
[  626.613447][    T9] usb 2-1: Invalid ep0 maxpacket: 64
[  626.628381][ T5909] smsc75xx v1.0.0
[  626.711736][   T10] usb 3-1: device descriptor read/64, error -71
[  626.751636][    T9] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  626.921588][    T9] usb 2-1: Invalid ep0 maxpacket: 64
[  626.928144][    T9] usb usb2-port1: attempt power cycle
[  626.961624][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  627.102253][   T10] usb 3-1: device descriptor read/64, error -71
[  627.222185][   T10] usb usb3-port1: attempt power cycle
[  627.237473][ T5909] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  627.257702][ T5909] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  627.274997][ T5909] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  627.286290][    T9] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[  627.298497][ T5909] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  627.310807][ T5909] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  627.321619][ T5909] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[  627.333243][    T9] usb 2-1: Invalid ep0 maxpacket: 64
[  627.341067][ T5909] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32
[  627.456124][T13055] loop6: detected capacity change from 0 to 7
[  627.463134][    T9] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[  627.474700][T13055] Dev loop6: unable to read RDB block 7
[  627.480462][T13055]  loop6: unable to read partition table
[  627.487046][T13055] loop6: partition table beyond EOD, truncated
[  627.496441][T13055] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  627.520112][    T9] usb 2-1: Invalid ep0 maxpacket: 64
[  627.529571][    T9] usb usb2-port1: unable to enumerate USB device
[  627.621854][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  627.653785][   T10] usb 3-1: device descriptor read/8, error -71
[  627.911663][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  627.946579][   T10] usb 3-1: device descriptor read/8, error -71
[  628.072047][   T10] usb usb3-port1: unable to enumerate USB device
[  628.367352][ T5926] usb 1-1: USB disconnect, device number 118
[  628.389032][    T9] usb 4-1: USB disconnect, device number 117
[  628.470327][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1869'.
[  629.396227][T13090] input: syz0 as /devices/virtual/input/input44
[  629.592512][T13095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1878'.
[  629.641689][ T5926] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  629.776433][T13102] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1877'.
[  629.787075][T13102] gretap0: entered promiscuous mode
[  629.794221][T13102] gretap0: left promiscuous mode
[  629.832695][ T5926] usb 2-1: device descriptor read/64, error -71
[  629.932744][ T5930] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  630.081565][ T5926] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  630.091583][ T5930] usb 1-1: Using ep0 maxpacket: 8
[  630.098710][ T5930] usb 1-1: unable to get BOS descriptor or descriptor too short
[  630.111809][    T9] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[  630.112363][ T5930] usb 1-1: config 4 has an invalid interface number: 147 but max is 0
[  630.131656][ T5930] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  630.141508][ T5930] usb 1-1: config 4 has no interface number 0
[  630.154737][ T5930] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  630.164287][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.179175][ T5930] usb 1-1: Product: syz
[  630.183979][ T5930] usb 1-1: Manufacturer: syz
[  630.188709][ T5930] usb 1-1: SerialNumber: syz
[  630.211577][ T5926] usb 2-1: device descriptor read/64, error -71
[  630.241705][    T9] usb 4-1: device descriptor read/64, error -71
[  630.321999][ T5926] usb usb2-port1: attempt power cycle
[  630.521907][ T5930] usb 1-1: Found UVC 0.02 device syz (04f2:b746)
[  630.528441][ T5930] usb 1-1: No valid video chain found.
[  630.534524][    T9] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[  630.542495][ T5930] usb 1-1: USB disconnect, device number 119
[  630.757250][    T9] usb 4-1: device descriptor read/64, error -71
[  630.771861][ T5926] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  630.842403][ T5926] usb 2-1: device descriptor read/8, error -71
[  630.881882][    T9] usb usb4-port1: attempt power cycle
[  630.884147][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'.
[  631.101768][ T5926] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  631.122567][ T5926] usb 2-1: device descriptor read/8, error -71
[  631.219810][T13110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  631.221978][    T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[  631.253363][ T5926] usb usb2-port1: unable to enumerate USB device
[  631.293035][    T9] usb 4-1: device descriptor read/8, error -71
[  631.394810][T13116] loop2: detected capacity change from 0 to 7
[  631.410884][T13116] Dev loop2: unable to read RDB block 7
[  631.417485][T13116]  loop2: AHDI p1 p2 p3
[  631.425980][T13116] loop2: partition table partially beyond EOD, truncated
[  631.433527][T13116] loop2: p1 start 1601398130 is beyond EOD, truncated
[  631.440387][T13116] loop2: p2 start 1702059890 is beyond EOD, truncated
[  631.541624][    T9] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[  631.592204][    T9] usb 4-1: device descriptor read/8, error -71
[  631.701805][    T9] usb usb4-port1: unable to enumerate USB device
[  631.835059][T13127] PKCS7: Unknown OID: [5] (bad)
[  631.840117][T13127] PKCS7: Only support pkcs7_signedData type
[  632.430574][T13132] netlink: 'syz.0.1888': attribute type 12 has an invalid length.
[  632.977686][T13142] program syz.1.1890 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  634.011477][    T9] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[  634.277764][    T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  634.290552][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.299417][    T9] usb 4-1: Product: syz
[  634.310535][T13181] FAULT_INJECTION: forcing a failure.
[  634.310535][T13181] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  634.324305][T13181] CPU: 1 UID: 0 PID: 13181 Comm: syz.0.1901 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[  634.324336][T13181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  634.324350][T13181] Call Trace:
[  634.324360][T13181]  <TASK>
[  634.324369][T13181]  dump_stack_lvl+0x189/0x250
[  634.324417][T13181]  ? __pfx____ratelimit+0x10/0x10
[  634.324449][T13181]  ? __pfx_dump_stack_lvl+0x10/0x10
[  634.324482][T13181]  ? __pfx__printk+0x10/0x10
[  634.324505][T13181]  ? __might_fault+0xb0/0x130
[  634.324538][T13181]  should_fail_ex+0x414/0x560
[  634.324569][T13181]  _copy_from_user+0x2d/0xb0
[  634.324591][T13181]  ___sys_sendmsg+0x158/0x2a0
[  634.324621][T13181]  ? __pfx____sys_sendmsg+0x10/0x10
[  634.324673][T13181]  ? __fget_files+0x2a/0x420
[  634.324690][T13181]  ? __fget_files+0x3a0/0x420
[  634.324717][T13181]  __x64_sys_sendmsg+0x19b/0x260
[  634.324740][T13181]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  634.324770][T13181]  ? __pfx_ksys_write+0x10/0x10
[  634.324784][T13181]  ? rcu_is_watching+0x15/0xb0
[  634.324814][T13181]  ? do_syscall_64+0xbe/0x3b0
[  634.324832][T13181]  do_syscall_64+0xfa/0x3b0
[  634.324846][T13181]  ? lockdep_hardirqs_on+0x9c/0x150
[  634.324871][T13181]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.324887][T13181]  ? clear_bhb_loop+0x60/0xb0
[  634.324908][T13181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.324924][T13181] RIP: 0033:0x7f2801b8e929
[  634.324938][T13181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  634.324953][T13181] RSP: 002b:00007f27ff9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  634.324971][T13181] RAX: ffffffffffffffda RBX: 00007f2801db6080 RCX: 00007f2801b8e929
[  634.324984][T13181] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  634.324995][T13181] RBP: 00007f27ff9f6090 R08: 0000000000000000 R09: 0000000000000000
[  634.325006][T13181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  634.325016][T13181] R13: 0000000000000000 R14: 00007f2801db6080 R15: 00007f2801edfa28
[  634.325040][T13181]  </TASK>
[  634.538806][    C1] vkms_vblank_simulate: vblank timer overrun
[  634.557385][    T9] usb 4-1: Manufacturer: syz
[  634.562740][    T9] usb 4-1: SerialNumber: syz
[  634.577607][    T9] usb 4-1: config 0 descriptor??
[  634.601630][ T5909] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  634.772811][ T5909] usb 2-1: device descriptor read/64, error -71
[  635.022145][ T5909] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  635.303954][ T5930] usb 4-1: USB disconnect, device number 122
[  635.406058][T13187] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1902'.
[  635.415473][ T5909] usb 2-1: device descriptor read/64, error -71
[  635.458742][T13188] xt_hashlimit: max too large, truncated to 1048576
[  635.468279][T13188] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  635.553665][ T5909] usb usb2-port1: attempt power cycle
[  636.101536][ T5909] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  636.162202][ T5909] usb 2-1: device descriptor read/8, error -71
[  636.451504][ T5909] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  636.572923][ T5909] usb 2-1: device descriptor read/8, error -71
[  636.624865][   T30] audit: type=1326 audit(1750381202.732:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.2.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00dd8e929 code=0x7ffc0000
[  636.647265][    C1] vkms_vblank_simulate: vblank timer overrun
[  636.673615][   T30] audit: type=1326 audit(1750381202.732:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.2.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa00dd8e929 code=0x7ffc0000
[  636.702048][ T5909] usb usb2-port1: unable to enumerate USB device
[  636.707934][   T30] audit: type=1326 audit(1750381202.732:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.2.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00dd8e929 code=0x7ffc0000
[  636.730797][    C1] vkms_vblank_simulate: vblank timer overrun
[  636.742234][   T30] audit: type=1326 audit(1750381202.732:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.2.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fa00dd8e929 code=0x7ffc0000
[  636.764571][    C1] vkms_vblank_simulate: vblank timer overrun
[  636.774649][   T30] audit: type=1326 audit(1750381202.732:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.2.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00dd8e929 code=0x7ffc0000
[  636.800686][   T30] audit: type=1326 audit(1750381202.732:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.2.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa00dd8e929 code=0x7ffc0000
[  636.835825][   T30] audit: type=1326 audit(1750381202.732:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.2.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00dd8e929 code=0x7ffc0000
[  636.863135][   T30] audit: type=1326 audit(1750381202.732:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.2.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa00dd8e929 code=0x7ffc0000
[  636.885410][    C1] vkms_vblank_simulate: vblank timer overrun
[  636.899633][   T30] audit: type=1326 audit(1750381202.732:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.2.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00dd8e929 code=0x7ffc0000
[  636.926215][   T30] audit: type=1326 audit(1750381202.732:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.2.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa00dd8d3df code=0x7ffc0000
[  636.948378][    C1] vkms_vblank_simulate: vblank timer overrun
[  637.207608][T13217] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1908'.
[  637.250631][T13219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1909'.
[  637.323789][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'.
[  637.513327][T13226] PKCS7: Unknown OID: [5] (bad)
[  637.518305][T13226] PKCS7: Only support pkcs7_signedData type
[  638.091592][ T5930] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  638.164340][T13239] FAULT_INJECTION: forcing a failure.
[  638.164340][T13239] name failslab, interval 1, probability 0, space 0, times 0
[  638.200608][T13239] CPU: 0 UID: 0 PID: 13239 Comm: syz.4.1914 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[  638.200640][T13239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  638.200653][T13239] Call Trace:
[  638.200662][T13239]  <TASK>
[  638.200676][T13239]  dump_stack_lvl+0x189/0x250
[  638.200713][T13239]  ? __pfx____ratelimit+0x10/0x10
[  638.200745][T13239]  ? __pfx_dump_stack_lvl+0x10/0x10
[  638.200778][T13239]  ? __pfx__printk+0x10/0x10
[  638.200808][T13239]  ? __pfx___might_resched+0x10/0x10
[  638.200845][T13239]  should_fail_ex+0x414/0x560
[  638.200877][T13239]  should_failslab+0xa8/0x100
[  638.200901][T13239]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  638.200923][T13239]  ? __alloc_skb+0x112/0x2d0
[  638.200956][T13239]  __alloc_skb+0x112/0x2d0
[  638.200978][T13239]  netlink_sendmsg+0x5c6/0xb30
[  638.201006][T13239]  ? __pfx_netlink_sendmsg+0x10/0x10
[  638.201029][T13239]  ? aa_sock_msg_perm+0x94/0x160
[  638.201053][T13239]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  638.201074][T13239]  ? __pfx_netlink_sendmsg+0x10/0x10
[  638.201095][T13239]  __sock_sendmsg+0x21c/0x270
[  638.201125][T13239]  ____sys_sendmsg+0x505/0x830
[  638.201151][T13239]  ? __pfx_____sys_sendmsg+0x10/0x10
[  638.201179][T13239]  ? import_iovec+0x74/0xa0
[  638.201200][T13239]  ___sys_sendmsg+0x21f/0x2a0
[  638.201224][T13239]  ? __pfx____sys_sendmsg+0x10/0x10
[  638.201273][T13239]  ? __fget_files+0x2a/0x420
[  638.201291][T13239]  ? __fget_files+0x3a0/0x420
[  638.201317][T13239]  __x64_sys_sendmsg+0x19b/0x260
[  638.201341][T13239]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  638.201374][T13239]  ? __pfx_ksys_write+0x10/0x10
[  638.201390][T13239]  ? rcu_is_watching+0x15/0xb0
[  638.201426][T13239]  ? do_syscall_64+0xbe/0x3b0
[  638.201449][T13239]  do_syscall_64+0xfa/0x3b0
[  638.201467][T13239]  ? lockdep_hardirqs_on+0x9c/0x150
[  638.201498][T13239]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.201518][T13239]  ? clear_bhb_loop+0x60/0xb0
[  638.201544][T13239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.201564][T13239] RIP: 0033:0x7f0fa218e929
[  638.201582][T13239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  638.201600][T13239] RSP: 002b:00007f0fa303a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  638.201622][T13239] RAX: ffffffffffffffda RBX: 00007f0fa23b6080 RCX: 00007f0fa218e929
[  638.201635][T13239] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  638.201646][T13239] RBP: 00007f0fa303a090 R08: 0000000000000000 R09: 0000000000000000
[  638.201657][T13239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  638.201667][T13239] R13: 0000000000000000 R14: 00007f0fa23b6080 R15: 00007f0fa24dfa28
[  638.201692][T13239]  </TASK>
[  638.864352][ T5930] usb 3-1: Using ep0 maxpacket: 16
[  638.891056][ T5930] usb 3-1: unable to get BOS descriptor or descriptor too short
[  639.220251][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.308464][ T5930] usb 3-1: config 0 has no interfaces?
[  639.335471][ T5930] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  639.345101][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.382923][ T5930] usb 3-1: Product: syz
[  639.457353][ T5930] usb 3-1: Manufacturer: syz
[  639.485291][ T5930] usb 3-1: SerialNumber: syz
[  639.518628][ T5930] usb 3-1: config 0 descriptor??
[  640.741538][ T5909] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  640.928487][ T5909] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  640.952458][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.982188][ T5909] usb 2-1: Product: syz
[  640.991009][ T5909] usb 2-1: Manufacturer: syz
[  641.012879][ T5909] usb 2-1: SerialNumber: syz
[  641.029668][ T5909] usb 2-1: config 0 descriptor??
[  641.508792][ T5930] usb 2-1: USB disconnect, device number 16
[  641.561996][ T5909] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  641.660136][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'.
[  641.690919][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'.
[  641.705446][T13261] netlink: 'syz.0.1919': attribute type 11 has an invalid length.
[  641.717179][T13261] netlink: 'syz.0.1919': attribute type 14 has an invalid length.
[  641.731777][ T5909] usb 4-1: Using ep0 maxpacket: 8
[  641.753961][ T5909] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  641.783988][ T5909] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.797713][ T5909] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  641.811764][ T5909] usb 4-1: config 0 interface 0 has no altsetting 0
[  641.818651][ T5909] usb 4-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00
[  641.831661][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.851163][ T5909] usb 4-1: config 0 descriptor??
[  641.867160][ T5909] usbhid 4-1:0.0: can't add hid device: -22
[  641.878749][ T5909] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[  641.935465][ T5930] usb 3-1: USB disconnect, device number 14
[  642.103018][ T5909] usb 4-1: USB disconnect, device number 123
[  643.793711][T11375] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  643.863328][T13302] PKCS7: Unknown OID: [5] (bad)
[  643.868366][T13302] PKCS7: Only support pkcs7_signedData type
[  644.003916][T11375] usb 1-1: Using ep0 maxpacket: 16
[  644.012827][T11375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  644.084276][T11375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  644.113983][T11375] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  644.141510][T11375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.219299][T11375] usb 1-1: config 0 descriptor??
[  645.347532][T11375] usbhid 1-1:0.0: can't add hid device: -71
[  645.371634][T11375] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  645.406875][T11375] usb 1-1: USB disconnect, device number 120
[  645.899579][T13313] loop6: detected capacity change from 0 to 7
[  645.944400][ T5846] Dev loop6: unable to read RDB block 7
[  645.952843][ T5846]  loop6: unable to read partition table
[  645.967712][ T5846] loop6: partition table beyond EOD, truncated
[  645.996799][T13313] Dev loop6: unable to read RDB block 7
[  646.008188][T13313]  loop6: unable to read partition table
[  646.014693][T13313] loop6: partition table beyond EOD, truncated
[  646.021211][T13313] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  646.366684][T13321] input: syz0 as /devices/virtual/input/input45
[  646.521950][T13045] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  646.671881][T13045] usb 3-1: device descriptor read/64, error -71
[  646.711722][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  646.836003][T13330] binder: 13326:13330 ioctl c0306201 0 returned -14
[  646.986633][T13045] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  647.491977][   T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  647.564107][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.578458][   T10] usb 2-1: Product: syz
[  647.584939][   T10] usb 2-1: Manufacturer: syz
[  647.591708][   T10] usb 2-1: SerialNumber: syz
[  647.606427][   T10] usb 2-1: config 0 descriptor??
[  647.631511][T13045] usb 3-1: device descriptor read/64, error -71
[  647.683320][T13333] FAULT_INJECTION: forcing a failure.
[  647.683320][T13333] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  647.742626][T13045] usb usb3-port1: attempt power cycle
[  647.769187][T13333] CPU: 1 UID: 0 PID: 13333 Comm: syz.4.1939 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[  647.769217][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  647.769231][T13333] Call Trace:
[  647.769240][T13333]  <TASK>
[  647.769249][T13333]  dump_stack_lvl+0x189/0x250
[  647.769288][T13333]  ? __pfx____ratelimit+0x10/0x10
[  647.769320][T13333]  ? __pfx_dump_stack_lvl+0x10/0x10
[  647.769353][T13333]  ? __pfx__printk+0x10/0x10
[  647.769389][T13333]  should_fail_ex+0x414/0x560
[  647.769422][T13333]  _copy_to_user+0x31/0xb0
[  647.769447][T13333]  simple_read_from_buffer+0xe1/0x170
[  647.769474][T13333]  proc_fail_nth_read+0x1df/0x250
[  647.769512][T13333]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  647.769541][T13333]  ? rw_verify_area+0x258/0x650
[  647.769572][T13333]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  647.769600][T13333]  vfs_read+0x1fd/0x980
[  647.769637][T13333]  ? __pfx___mutex_lock+0x10/0x10
[  647.769658][T13333]  ? __pfx_vfs_read+0x10/0x10
[  647.769690][T13333]  ? __fget_files+0x2a/0x420
[  647.769718][T13333]  ? __fget_files+0x3a0/0x420
[  647.769748][T13333]  ? __fget_files+0x2a/0x420
[  647.769781][T13333]  ksys_read+0x145/0x250
[  647.769798][T13333]  ? __fget_files+0x3a0/0x420
[  647.769822][T13333]  ? __pfx_ksys_read+0x10/0x10
[  647.769860][T13333]  ? do_syscall_64+0xbe/0x3b0
[  647.769884][T13333]  do_syscall_64+0xfa/0x3b0
[  647.769902][T13333]  ? lockdep_hardirqs_on+0x9c/0x150
[  647.769932][T13333]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.769953][T13333]  ? clear_bhb_loop+0x60/0xb0
[  647.769979][T13333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.769999][T13333] RIP: 0033:0x7f0fa218d33c
[  647.770018][T13333] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  647.770036][T13333] RSP: 002b:00007f0fa305b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  647.770059][T13333] RAX: ffffffffffffffda RBX: 00007f0fa23b5fa0 RCX: 00007f0fa218d33c
[  647.770074][T13333] RDX: 000000000000000f RSI: 00007f0fa305b0a0 RDI: 0000000000000004
[  647.770087][T13333] RBP: 00007f0fa305b090 R08: 0000000000000000 R09: 0000000000000000
[  647.770100][T13333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  647.770112][T13333] R13: 0000000000000000 R14: 00007f0fa23b5fa0 R15: 00007f0fa24dfa28
[  647.770144][T13333]  </TASK>
[  648.002808][    C1] vkms_vblank_simulate: vblank timer overrun
[  648.265981][   T10] usb 2-1: USB disconnect, device number 17
[  648.292189][T13045] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  648.382256][T13045] usb 3-1: device descriptor read/8, error -71
[  648.651706][T13045] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  648.696437][T13045] usb 3-1: device descriptor read/8, error -71
[  648.822188][T13045] usb usb3-port1: unable to enumerate USB device
[  649.217525][T13345] netlink: 'syz.1.1943': attribute type 7 has an invalid length.
[  649.590619][T13354] PKCS7: Unknown OID: [5] (bad)
[  649.602057][T13354] PKCS7: Only support pkcs7_signedData type
[  651.062575][T13045] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  651.282200][T13045] usb 3-1: config 0 has no interfaces?
[  651.409399][T13045] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  651.454497][T13045] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.512848][T13045] usb 3-1: Product: syz
[  651.556790][T13045] usb 3-1: Manufacturer: syz
[  651.641598][T11375] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  651.652263][T13045] usb 3-1: SerialNumber: syz
[  651.762843][T13045] usb 3-1: config 0 descriptor??
[  651.862197][T11375] usb 1-1: Using ep0 maxpacket: 16
[  651.916793][T11375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  652.008213][T11375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  652.046281][T11375] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  652.110838][T11375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.153382][T11375] usb 1-1: config 0 descriptor??
[  652.539324][T13330] syz.3.1938 (13330): drop_caches: 1
[  653.448159][T11375] usbhid 1-1:0.0: can't add hid device: -71
[  653.464053][T11375] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  653.517056][T11375] usb 1-1: USB disconnect, device number 121
[  654.201775][T13045] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  654.406201][T13045] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  654.463176][T13045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.471254][T13045] usb 2-1: Product: syz
[  654.537742][T13045] usb 2-1: Manufacturer: syz
[  654.547523][T13045] usb 2-1: SerialNumber: syz
[  654.563251][T13045] usb 2-1: config 0 descriptor??
[  654.634124][ T5926] usb 3-1: USB disconnect, device number 19
[  655.066221][ T5841] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  655.143323][T13045] usb 2-1: USB disconnect, device number 18
[  655.173493][ T5841] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[  655.297733][ T5841] usb 5-1: USB disconnect, device number 101
[  655.605201][ T5926] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  655.781778][ T5926] usb 3-1: Using ep0 maxpacket: 16
[  655.794869][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  655.851512][T11375] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  655.900007][ T5926] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  655.958607][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.998068][ T5926] usb 3-1: config 0 descriptor??
[  656.071456][T11375] usb 4-1: Using ep0 maxpacket: 16
[  656.122770][T11375] usb 4-1: unable to get BOS descriptor or descriptor too short
[  656.141469][T11375] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  656.212406][T11375] usb 4-1: config 0 has no interfaces?
[  656.404604][T11375] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  656.414927][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1959'.
[  656.423947][T11375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.457206][ T5926] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  656.477158][T11375] usb 4-1: Product: syz
[  656.498395][T11375] usb 4-1: Manufacturer: syz
[  656.514084][T11375] usb 4-1: SerialNumber: syz
[  656.664586][T11375] usb 4-1: config 0 descriptor??
[  656.852927][T11375] usb 3-1: USB disconnect, device number 20
[  657.696866][   T30] kauditd_printk_skb: 73 callbacks suppressed
[  657.696886][   T30] audit: type=1326 audit(1750381223.802:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13423 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  657.961527][   T30] audit: type=1326 audit(1750381223.802:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13423 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  658.103357][   T30] audit: type=1326 audit(1750381223.802:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13423 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  658.253226][   T30] audit: type=1326 audit(1750381223.822:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13423 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  658.341481][   T30] audit: type=1326 audit(1750381223.822:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13423 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  658.363869][    C1] vkms_vblank_simulate: vblank timer overrun
[  658.398018][   T30] audit: type=1326 audit(1750381223.822:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13423 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  658.430184][   T30] audit: type=1326 audit(1750381223.822:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13423 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  658.454718][   T30] audit: type=1326 audit(1750381223.822:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13423 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  658.477220][    C1] vkms_vblank_simulate: vblank timer overrun
[  658.484712][   T30] audit: type=1326 audit(1750381223.822:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13423 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  658.508129][   T30] audit: type=1326 audit(1750381223.822:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13423 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  658.530521][    C1] vkms_vblank_simulate: vblank timer overrun
[  658.874032][T13446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1970'.
[  659.166937][T13448] fuse: Bad value for 'fd'
[  659.681159][    T9] usb 4-1: USB disconnect, device number 124
[  659.801547][ T5841] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  659.961871][ T5841] usb 3-1: Using ep0 maxpacket: 16
[  659.971546][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  660.015476][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  660.055744][ T5841] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  660.091327][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.170592][ T5841] usb 3-1: config 0 descriptor??
[  660.863322][    T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  661.045870][    T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  661.069700][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.090560][T13478] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1977'.
[  661.113748][    T9] usb 2-1: Product: syz
[  661.132969][    T9] usb 2-1: Manufacturer: syz
[  661.188952][    T9] usb 2-1: SerialNumber: syz
[  661.218123][    T9] usb 2-1: config 0 descriptor??
[  661.226969][ T5841] usbhid 3-1:0.0: can't add hid device: -71
[  661.260673][ T5841] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  661.525388][ T5841] usb 3-1: USB disconnect, device number 21
[  661.746068][ T5841] usb 2-1: USB disconnect, device number 19
[  663.401488][T13045] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  663.410493][T13504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1984'.
[  663.704729][T13045] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  663.713997][T13045] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.723770][T13505] fuse: Bad value for 'fd'
[  664.122311][T13045] usb 2-1: config 0 descriptor??
[  664.520673][T13515] loop3: detected capacity change from 0 to 1
[  664.531925][T13512] binder: 13511:13512 ioctl c0383e04 200000000300 returned -22
[  664.579138][T13515] Dev loop3: unable to read RDB block 1
[  664.606479][T13515]  loop3: unable to read partition table
[  664.982983][T13515] loop3: partition table beyond EOD, truncated
[  664.990453][T13515] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  665.106937][T13517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1982'.
[  665.144409][T13517] vlan2: entered promiscuous mode
[  665.149890][T13517] gretap0: entered promiscuous mode
[  665.351594][T13045] ath6kl: Failed to submit usb control message: -110
[  665.491795][T13045] ath6kl: unable to send the bmi data to the device: -110
[  665.511443][T13045] ath6kl: Unable to send get target info: -110
[  665.541897][T13045] ath6kl: Failed to init ath6kl core: -110
[  665.556419][T13045] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110
[  666.729798][T13045] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  666.961173][T13537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1990'.
[  666.993731][T13045] usb 3-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config
[  667.018077][T13045] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  667.032088][T13045] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0
[  667.048467][T13045] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0
[  667.060416][T13045] usb 3-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  667.076893][T13045] usb 3-1: config 48 interface 0 has no altsetting 0
[  667.121075][T13045] usb 3-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f
[  667.136177][T13045] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.149972][T13045] usb 3-1: Product: syz
[  667.158826][T13045] usb 3-1: Manufacturer: syz
[  667.304493][T13045] usb 3-1: SerialNumber: syz
[  668.221725][ T5909] usb 5-1: new full-speed USB device number 102 using dummy_hcd
[  668.431151][ T5909] usb 5-1: config 0 has an invalid interface number: 147 but max is 0
[  668.439912][ T5909] usb 5-1: config 0 has no interface number 0
[  668.484336][ T5909] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  668.547499][ T5909] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03
[  668.559159][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.593559][ T5909] usb 5-1: Product: syz
[  668.609875][ T5909] usb 5-1: Manufacturer: syz
[  668.660044][ T5909] usb 5-1: SerialNumber: syz
[  668.703394][ T5909] usb 5-1: config 0 descriptor??
[  668.735942][T13537] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  668.775320][ T5909] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  668.955062][   T60] usb 5-1: Failed to submit usb control message: -71
[  668.970897][ T5909] usb 5-1: USB disconnect, device number 102
[  669.012533][   T60] usb 5-1: unable to send the bmi data to the device: -71
[  669.045013][   T60] usb 5-1: unable to get target info from device
[  669.063142][   T60] usb 5-1: could not get target info (-71)
[  669.069086][   T60] usb 5-1: could not probe fw (-71)
[  669.332385][ T5841] usb 2-1: USB disconnect, device number 20
[  669.918471][T13045] usb 3-1: USB disconnect, device number 22
[  670.031324][ T5909] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  670.046283][T13558] netlink: 'syz.0.1993': attribute type 4 has an invalid length.
[  670.183285][T13564] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  670.369248][ T5909] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  670.379391][ T5909] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  670.389343][ T5909] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  670.405766][ T5909] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  670.416736][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  670.428004][ T5909] usb 5-1: Product: syz
[  670.441604][ T5909] usb 5-1: Manufacturer: syz
[  670.451947][ T5909] usb 5-1: SerialNumber: syz
[  670.593132][T13566] loop3: detected capacity change from 0 to 1
[  670.600403][T13566] Dev loop3: unable to read RDB block 1
[  670.609241][T13566]  loop3: unable to read partition table
[  670.631290][T13566] loop3: partition table beyond EOD, truncated
[  670.664940][T13566] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  670.696259][ T5909] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 103 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  670.952724][T13576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1995'.
[  671.011454][ T5841] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[  671.033423][T11375] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  671.191975][T11375] usb 2-1: Using ep0 maxpacket: 16
[  671.201837][ T5841] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  671.216252][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.225654][ T5841] usb 4-1: Product: syz
[  671.229909][ T5841] usb 4-1: Manufacturer: syz
[  671.236337][ T5841] usb 4-1: SerialNumber: syz
[  671.245572][T11375] usb 2-1: config 0 has no interfaces?
[  671.251275][T11375] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  671.262953][ T5841] usb 4-1: config 0 descriptor??
[  671.282114][T11375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.308496][T11375] usb 2-1: config 0 descriptor??
[  671.441642][   T43] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  671.631670][   T43] usb 3-1: Using ep0 maxpacket: 8
[  671.638760][   T43] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  671.648437][   T43] usb 3-1: config 0 has no interface number 0
[  671.657788][   T43] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  671.688959][   T43] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  671.700893][   T43] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  671.715107][   T43] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  671.947799][   T43] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  672.035855][T13587] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  672.266588][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.332223][   T43] usb 3-1: config 0 descriptor??
[  672.366064][   T43] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  672.416748][T13590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  672.432165][T13590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  672.550858][T13579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  672.563959][   T43] usb 3-1: USB disconnect, device number 23
[  672.578640][   T43] ldusb 3-1:0.55: LD USB Device #1 now disconnected
[  672.671942][T13045] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  672.699215][T13596] netlink: 'syz.3.2004': attribute type 12 has an invalid length.
[  672.792635][ T5909] usb 5-1: USB disconnect, device number 103
[  672.800779][ T5909] usblp0: removed
[  672.804587][T13045] usb 1-1: device descriptor read/64, error -71
[  672.898859][T13598] loop6: detected capacity change from 0 to 7
[  672.906803][T13598] Dev loop6: unable to read RDB block 7
[  672.913393][T13598]  loop6: unable to read partition table
[  672.919400][T13598] loop6: partition table beyond EOD, truncated
[  672.928419][T13598] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  673.051541][T13045] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  673.182216][T13045] usb 1-1: device descriptor read/64, error -71
[  673.307195][T13045] usb usb1-port1: attempt power cycle
[  673.350934][T13609] netlink: 'syz.4.2007': attribute type 27 has an invalid length.
[  673.439351][T13609] tipc: Resetting bearer <eth:syz_tun>
[  673.577663][T13609] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.585373][T13609] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.671997][T13045] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  673.702629][T13045] usb 1-1: device descriptor read/8, error -71
[  673.892665][   T43] usb 2-1: USB disconnect, device number 21
[  673.961807][T13045] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  674.115022][T13619] PKCS7: Unknown OID: [5] (bad)
[  674.120154][T13619] PKCS7: Only support pkcs7_signedData type
[  674.382995][T13609] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  674.413295][T13045] usb 1-1: device descriptor read/8, error -71
[  674.544224][T13045] usb usb1-port1: unable to enumerate USB device
[  674.964571][T13609] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  674.973869][T13609] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  674.987484][T13609] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  674.996949][T13609] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  675.113653][T13609] sit1: left promiscuous mode
[  675.145407][T13609] bond1: left promiscuous mode
[  675.150449][T13609] bond1: left allmulticast mode
[  675.161998][T13609] bond2: left promiscuous mode
[  675.182858][T13609] bond3: left promiscuous mode
[  675.187950][T13609] dummy0: left promiscuous mode
[  675.212317][T13611] netlink: 'syz.4.2007': attribute type 1 has an invalid length.
[  675.244515][T13609] syz.4.2007 (13609) used greatest stack depth: 19144 bytes left
[  675.730311][T13623] netlink: 'syz.0.2011': attribute type 1 has an invalid length.
[  675.893350][T13627] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  675.903839][T13627] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  675.913742][T13627] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  675.923468][T13627] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  676.068589][T13627] bond3: (slave geneve2): making interface the new active one
[  676.078455][T13627] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  676.115211][T13631] PKCS7: Unknown OID: [5] (bad)
[  676.120282][T13631] PKCS7: Only support pkcs7_signedData type
[  676.353241][T13627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2011'.
[  676.555824][T13627] 8021q: adding VLAN 0 to HW filter on device bond3
[  677.392010][   T43] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  677.581581][T11375] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  677.598456][   T43] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  677.614944][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.701850][   T43] usb 3-1: Product: syz
[  677.717548][   T43] usb 3-1: Manufacturer: syz
[  677.727060][   T43] usb 3-1: SerialNumber: syz
[  677.745212][T11375] usb 2-1: device descriptor read/64, error -71
[  677.765791][   T43] usb 3-1: config 0 descriptor??
[  678.001809][T11375] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  678.153527][T11375] usb 2-1: device descriptor read/64, error -71
[  678.304224][T11375] usb usb2-port1: attempt power cycle
[  678.582322][T13659] loop6: detected capacity change from 0 to 7
[  678.610502][T13659] Dev loop6: unable to read RDB block 7
[  678.621168][T13660] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  678.626984][T13659]  loop6: unable to read partition table
[  678.627815][T13660] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  678.634612][T13659] loop6: partition table beyond EOD, 
[  678.640898][    C1] vkms_vblank_simulate: vblank timer overrun
[  678.652481][T13659] truncated
[  678.655642][T13659] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  678.677693][T13660] vhci_hcd vhci_hcd.0: Device attached
[  678.731647][T11375] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  678.787139][T11375] usb 2-1: device descriptor read/8, error -71
[  678.845215][T13668] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  678.869367][ T5926] vhci_hcd: vhci_device speed not set
[  679.002429][ T5926] usb 41-1: new full-speed USB device number 3 using vhci_hcd
[  679.144233][T11375] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  679.159059][T13671] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  679.188469][T11375] usb 2-1: device descriptor read/8, error -71
[  679.302257][T11375] usb usb2-port1: unable to enumerate USB device
[  679.336545][T13676] xt_limit: Overflow, try lower: 184549376/256
[  679.421830][T13661] vhci_hcd: connection reset by peer
[  679.717247][ T1014] vhci_hcd: stop threads
[  679.723029][ T1014] vhci_hcd: release socket
[  679.737429][ T1014] vhci_hcd: disconnect device
[  679.811460][T13045] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[  679.833127][T13681] 8021q: adding VLAN 0 to HW filter on device bond0
[  679.877420][T13681] bond0: (slave wireguard2): The slave device specified does not support setting the MAC address
[  679.973524][T13681] bond0: (slave wireguard2): Error -95 calling set_mac_address
[  679.982001][T13045] usb 1-1: Using ep0 maxpacket: 16
[  680.000651][T13045] usb 1-1: unable to get BOS descriptor or descriptor too short
[  680.010742][T13045] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  680.032800][T13045] usb 1-1: config 0 has no interfaces?
[  680.056293][T13045] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  680.069611][T13045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.085155][T13045] usb 1-1: Product: syz
[  680.098369][T13045] usb 1-1: Manufacturer: syz
[  680.108430][T13045] usb 1-1: SerialNumber: syz
[  680.124327][T13045] usb 1-1: config 0 descriptor??
[  681.711820][ T5909] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  681.887018][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  681.927024][ T5909] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  681.964594][ T5909] usb 2-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.60
[  681.997755][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.013173][T13696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  682.093004][ T5909] usb 2-1: config 0 descriptor??
[  682.110982][T13696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  682.523457][   T43] usb 1-1: USB disconnect, device number 126
[  682.571776][T11375] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  682.578238][ T5909] usb 2-1: USB disconnect, device number 26
[  682.751680][T11375] usb 5-1: Using ep0 maxpacket: 16
[  682.766118][T11375] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  682.776315][T11375] usb 5-1: config 0 has no interface number 0
[  682.786114][T11375] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  682.803712][T11375] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  682.816075][T11375] usb 5-1: config 0 interface 41 has no altsetting 0
[  682.852120][T11375] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  682.866144][T11375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.877201][T11375] usb 5-1: Product: syz
[  682.884546][T11375] usb 5-1: Manufacturer: syz
[  682.889746][T11375] usb 5-1: SerialNumber: syz
[  683.210395][T11375] usb 5-1: config 0 descriptor??
[  683.250171][T13703] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  683.261730][T13703] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  683.530470][T13703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.561262][T13703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.639164][T13703] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  683.659195][T13703] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  683.913153][T13703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.961982][T13703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  684.022919][T11375] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  684.047896][T11375] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[  684.098781][T11375] usb 5-1: USB disconnect, device number 104
[  684.171623][ T5926] vhci_hcd: vhci_device speed not set
[  684.411757][T13715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  684.453010][T13715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  684.689323][T13723] dlm: non-version read from control device 36
[  684.747651][T13723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2034'.
[  684.805669][T13726] dlm: non-version read from control device 36
[  684.821266][T13723] vlan2: entered promiscuous mode
[  684.836079][T13723] ip6gretap0: entered promiscuous mode
[  684.856070][T13729] fuse: Unknown parameter 'ÿÿ'
[  684.902724][T13724] PKCS7: Unknown OID: [5] (bad)
[  684.907631][T13724] PKCS7: Only support pkcs7_signedData type
[  685.159283][T13739] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  685.159316][T13739] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  685.159419][T13739] vhci_hcd vhci_hcd.0: Device attached
[  685.192252][T13733] can: request_module (can-proto-0) failed.
[  685.281764][T13744] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  685.351717][ T5909] vhci_hcd: vhci_device speed not set
[  685.377336][T13045] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  685.432724][ T5909] usb 33-1: new full-speed USB device number 4 using vhci_hcd
[  685.565089][T13045] usb 5-1: Using ep0 maxpacket: 16
[  685.573482][T13045] usb 5-1: config 8 has an invalid interface number: 39 but max is 0
[  685.573510][T13045] usb 5-1: config 8 has no interface number 0
[  685.573547][T13045] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  685.573566][T13045] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0
[  685.573583][T13045] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0
[  685.573600][T13045] usb 5-1: config 8 interface 39 has no altsetting 0
[  685.575952][T13045] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77
[  685.575981][T13045] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.575997][T13045] usb 5-1: Product: syz
[  685.576009][T13045] usb 5-1: Manufacturer: syz
[  685.576020][T13045] usb 5-1: SerialNumber: syz
[  685.786722][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  685.786815][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  685.962598][T13740] vhci_hcd: connection reset by peer
[  685.971585][   T13] vhci_hcd: stop threads
[  685.975903][   T13] vhci_hcd: release socket
[  685.990670][T13752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  686.003247][   T13] vhci_hcd: disconnect device
[  686.014321][T13752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  686.027546][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'.
[  686.284705][T13751] syzkaller1: entered promiscuous mode
[  686.311578][T13751] syzkaller1: entered allmulticast mode
[  686.455507][T13045] ipheth 5-1:8.39: ipheth_get_macaddr: usb_control_msg: -71
[  686.465331][T13045] ipheth 5-1:8.39: probe with driver ipheth failed with error -71
[  686.499978][T13045] usb 5-1: USB disconnect, device number 105
[  686.740909][T13762] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2045'.
[  686.755883][T13762] netlink: 'syz.4.2045': attribute type 2 has an invalid length.
[  687.080721][T13769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.103813][T13769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.581651][T11375] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[  687.745904][T11375] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  687.769472][T13788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.779008][T11375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.792504][T11375] usb 1-1: Product: syz
[  687.796740][T11375] usb 1-1: Manufacturer: syz
[  687.801129][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'.
[  687.811570][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2053'.
[  687.821722][T13788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.828659][T11375] usb 1-1: SerialNumber: syz
[  687.832152][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2053'.
[  687.925868][T11375] usb 1-1: config 0 descriptor??
[  688.222405][T13793] loop6: detected capacity change from 0 to 7
[  688.248822][T13793] Dev loop6: unable to read RDB block 7
[  688.271740][T13793]  loop6: unable to read partition table
[  688.285450][T13793] loop6: partition table beyond EOD, truncated
[  688.296363][T13793] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  688.311891][T13796] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  688.318553][T13796] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  688.341734][T13796] vhci_hcd vhci_hcd.0: Device attached
[  688.550945][T11375] vhci_hcd: vhci_device speed not set
[  688.656721][T11375] usb 35-1: new full-speed USB device number 5 using vhci_hcd
[  689.099638][T13797] vhci_hcd: connection reset by peer
[  689.115117][T13807] sctp: [Deprecated]: syz.2.2060 (pid 13807) Use of int in max_burst socket option.
[  689.115117][T13807] Use struct sctp_assoc_value instead
[  689.130255][ T1150] vhci_hcd: stop threads
[  689.156802][ T1150] vhci_hcd: release socket
[  689.165823][ T1150] vhci_hcd: disconnect device
[  689.241562][ T5926] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  689.429386][T13812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  689.444806][T13812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  689.543718][ T5926] usb 5-1: config 0 has no interfaces?
[  689.641620][ T5926] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  689.650742][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.668682][T13815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  689.698017][T13815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  689.745593][ T5926] usb 5-1: Product: syz
[  689.749828][ T5926] usb 5-1: Manufacturer: syz
[  689.776316][ T5926] usb 5-1: SerialNumber: syz
[  689.824809][T13817] openvswitch: netlink: IP tunnel dst address not specified
[  689.833980][ T5926] usb 5-1: config 0 descriptor??
[  690.094575][T13805] pimreg: entered allmulticast mode
[  690.120909][T13805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  690.174266][T13820] bridge0: entered promiscuous mode
[  690.190934][T13820] macvlan2: entered promiscuous mode
[  690.571628][ T5909] vhci_hcd: vhci_device speed not set
[  690.888892][T13843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.898578][T13843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  691.953397][ T5909] usb 5-1: USB disconnect, device number 106
[  692.317453][T13861] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  692.631572][ T1212] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  693.112279][ T1212] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  693.130372][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.149713][ T1212] usb 2-1: Product: syz
[  693.158572][ T1212] usb 2-1: Manufacturer: syz
[  693.198722][ T1212] usb 2-1: SerialNumber: syz
[  693.217472][ T1212] usb 2-1: config 0 descriptor??
[  693.771848][T11375] vhci_hcd: vhci_device speed not set
[  693.803434][T13870] can: request_module (can-proto-0) failed.
[  693.868650][ T5841] usb 2-1: USB disconnect, device number 27
[  694.117928][T13883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  694.152359][T13883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  694.195024][T13883] tipc: Enabled bearer <udp:syz2>, priority 0
[  694.318218][T13883] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  694.362344][T13883] tipc: Enabled bearer <udp:syz0>, priority 0
[  694.420881][T13887] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  694.427468][T13887] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  694.460864][T13887] vhci_hcd vhci_hcd.0: Device attached
[  694.483596][T13892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  694.523461][T13892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  694.741730][ T5841] vhci_hcd: vhci_device speed not set
[  694.821647][ T5841] usb 41-1: new full-speed USB device number 4 using vhci_hcd
[  694.872131][T13906] fuse: Unknown parameter 'use00000000000000000000'
[  695.311893][T13911] program syz.0.2087 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  695.332115][T13905] program syz.1.2084 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  695.494090][T13045] tipc: Node number set to 43690
[  695.500706][T13888] vhci_hcd: connection reset by peer
[  695.542968][ T6233] vhci_hcd: stop threads
[  695.581584][ T6233] vhci_hcd: release socket
[  695.595591][ T6233] vhci_hcd: disconnect device
[  695.685443][T13915] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2088'.
[  695.971527][ T1212] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  696.161937][ T1212] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  696.189081][ T1212] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  696.202504][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.215681][ T1212] usb 2-1: Product: syz
[  696.221091][ T1212] usb 2-1: Manufacturer: syz
[  696.225946][ T1212] usb 2-1: SerialNumber: syz
[  696.238877][T13925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.355877][T13925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.399154][T13929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.439291][T13929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.454290][ T1212] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  696.655771][ T1212] usb 2-1: USB disconnect, device number 28
[  696.737846][T13937] random: crng reseeded on system resumption
[  696.982430][T13916] usblp0: removed
[  697.008365][T13936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  697.070851][T13936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  697.110831][T13936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  697.149182][T13936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  697.667678][T13949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2097'.
[  697.993735][T13951] kvm: pic: non byte write
[  698.596357][T13956] fuse: Unknown parameter 'use00000000000000000000'
[  699.233698][T13970] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  699.387783][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2104'.
[  699.472638][ T1212] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  699.671514][ T1212] usb 2-1: device descriptor read/64, error -71
[  699.885029][T13989] loop6: detected capacity change from 0 to 7
[  699.903600][T13989] Dev loop6: unable to read RDB block 7
[  699.910605][T13989]  loop6: unable to read partition table
[  699.917303][T13989] loop6: partition table beyond EOD, truncated
[  699.921577][ T1212] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  699.924939][T13989] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  699.951204][ T5841] vhci_hcd: vhci_device speed not set
[  700.011122][T13990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  700.020342][T13990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  700.061716][ T1212] usb 2-1: device descriptor read/64, error -71
[  700.174083][ T1212] usb usb2-port1: attempt power cycle
[  700.333550][T14001] fuse: Unknown parameter 'use00000000000000000000'
[  700.532549][ T1212] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  700.556689][ T1212] usb 2-1: device descriptor read/8, error -71
[  700.663817][T14014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  700.702505][T14014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  700.801667][ T1212] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  700.823146][ T1212] usb 2-1: device descriptor read/8, error -71
[  700.944182][ T1212] usb usb2-port1: unable to enumerate USB device
[  701.825929][ T5841] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  701.909145][T14026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.918216][T14026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.937584][T14028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.947266][T14028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.981651][ T5841] usb 5-1: Using ep0 maxpacket: 8
[  701.988562][ T5841] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[  701.997370][ T5841] usb 5-1: config 2 has no interface number 0
[  702.003711][ T5841] usb 5-1: config 2 interface 31 has no altsetting 0
[  702.012799][ T5841] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  702.022080][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.030089][ T5841] usb 5-1: Product: syz
[  702.034398][ T5841] usb 5-1: Manufacturer: syz
[  702.039035][ T5841] usb 5-1: SerialNumber: syz
[  702.193449][T14033] loop6: detected capacity change from 0 to 7
[  702.205962][ T5846] Dev loop6: unable to read RDB block 7
[  702.212340][ T5846]  loop6: unable to read partition table
[  702.218660][ T5846] loop6: partition table beyond EOD, truncated
[  702.228583][T14033] Dev loop6: unable to read RDB block 7
[  702.236007][T14033]  loop6: unable to read partition table
[  702.250056][T14033] loop6: partition table beyond EOD, truncated
[  702.256897][T14033] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  702.673859][ T1212] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  702.680196][ T5841] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22
[  702.707371][ T5841] usb 5-1: USB disconnect, device number 107
[  702.839060][T14042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  702.849902][T14042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  702.858801][ T1212] usb 2-1: Using ep0 maxpacket: 16
[  702.867010][ T1212] usb 2-1: config index 0 descriptor too short (expected 65316, got 36)
[  702.879557][ T1212] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  702.888623][ T1212] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  702.899521][ T1212] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  702.911000][ T1212] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  702.920970][ T1212] usb 2-1: config 0 interface 0 has no altsetting 0
[  702.929212][ T1212] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  702.938544][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.985777][ T1212] usb 2-1: config 0 descriptor??
[  703.190512][T14051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2131'.
[  703.209656][T14051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2131'.
[  703.411238][T14035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  703.422198][T14035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  703.448880][T14035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  703.486024][T14035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  704.149691][T14083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  704.164471][T14083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  704.219983][T14035] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  704.281759][ T5841] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  704.324840][ T1212] usbhid 2-1:0.0: can't add hid device: -71
[  704.324937][ T1212] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  704.328664][ T1212] usb 2-1: USB disconnect, device number 33
[  704.638990][ T5841] usb 5-1: device descriptor read/64, error -71
[  704.931522][ T5841] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  704.948306][T14092] loop3: detected capacity change from 0 to 1
[  704.957628][T14092] Dev loop3: unable to read RDB block 1
[  704.964599][T14092]  loop3: unable to read partition table
[  704.970697][T14092] loop3: partition table beyond EOD, truncated
[  704.978527][T14092] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  705.072064][ T5841] usb 5-1: device descriptor read/64, error -71
[  705.209522][ T5841] usb usb5-port1: attempt power cycle
[  705.551545][ T5841] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  705.572830][ T5841] usb 5-1: device descriptor read/8, error -71
[  705.843552][T14111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  705.853045][ T5841] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  705.977643][ T5841] usb 5-1: device descriptor read/8, error -71
[  706.283290][ T5841] usb usb5-port1: unable to enumerate USB device
[  706.427646][T14111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  706.965187][T14125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  706.979784][T14125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.008766][T14125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  707.023134][T14125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.753871][ T5930] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  707.815210][T14134] fuse: Unknown parameter 'user_i00000000000000000000'
[  707.962799][ T5930] usb 2-1: device descriptor read/64, error -71
[  708.264026][ T5930] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  708.454336][ T5930] usb 2-1: device descriptor read/64, error -71
[  708.565715][ T5930] usb usb2-port1: attempt power cycle
[  708.751505][T13045] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  708.902565][T13045] usb 5-1: Using ep0 maxpacket: 16
[  708.911720][ T5930] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  708.912490][T13045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  708.936877][T13045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  708.951626][T13045] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  708.966010][ T5930] usb 2-1: device descriptor read/8, error -71
[  708.981069][T13045] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  708.990956][T13045] usb 5-1: New USB device strings: Mfr=225, Product=0, SerialNumber=0
[  709.006111][T13045] usb 5-1: Manufacturer: syz
[  709.027990][T13045] usb 5-1: config 0 descriptor??
[  709.211542][ T5930] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  709.262497][ T5930] usb 2-1: device descriptor read/8, error -71
[  709.372182][ T5930] usb usb2-port1: unable to enumerate USB device
[  709.515044][T13045] ryos 0003:1E7D:3138.0020: unknown main item tag 0x0
[  709.516745][T14145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  709.532398][T13045] ryos 0003:1E7D:3138.0020: unknown main item tag 0x0
[  709.539256][T13045] ryos 0003:1E7D:3138.0020: unknown main item tag 0x0
[  709.569815][T14145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  709.597451][T13045] ryos 0003:1E7D:3138.0020: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  709.750141][T14143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  709.808289][T14143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  709.907878][T14143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  709.930835][T14143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  709.980969][T13045] usb 5-1: USB disconnect, device number 112
[  710.139083][T14148] fido_id[14148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  710.887669][T14150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  710.914065][T14150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  711.069915][T14171] fuse: Unknown parameter 'user_id00000000000000000000'
[  712.151548][T13045] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  712.291551][T13045] usb 5-1: device descriptor read/64, error -71
[  712.532379][T13045] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  712.705206][T13045] usb 5-1: device descriptor read/64, error -71
[  712.831883][T13045] usb usb5-port1: attempt power cycle
[  713.172098][T13045] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  713.194528][T13045] usb 5-1: device descriptor read/8, error -71
[  713.441569][T13045] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  713.500174][T13045] usb 5-1: device descriptor read/8, error -71
[  713.612278][T13045] usb usb5-port1: unable to enumerate USB device
[  713.621078][T14194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.645702][T14194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.736826][T14202] fuse: Unknown parameter 'user_id00000000000000000000'
[  714.126974][T14218] loop6: detected capacity change from 0 to 7
[  714.151098][T14218] Dev loop6: unable to read RDB block 7
[  714.157833][T14218]  loop6: unable to read partition table
[  714.169049][T14218] loop6: partition table beyond EOD, truncated
[  714.181506][T14218] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  714.326017][T14225] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  714.332598][T14225] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  714.348502][T14225] vhci_hcd vhci_hcd.0: Device attached
[  714.546670][T13045] vhci_hcd: vhci_device speed not set
[  714.617726][T14232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  714.627159][T14232] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  714.631449][T13045] usb 39-1: new full-speed USB device number 6 using vhci_hcd
[  714.668073][T14232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  714.677672][T14232] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  715.268902][T14226] vhci_hcd: connection reset by peer
[  715.281630][ T6234] vhci_hcd: stop threads
[  715.286018][ T6234] vhci_hcd: release socket
[  715.290584][ T6234] vhci_hcd: disconnect device
[  715.411200][T14245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  715.422369][T14245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  715.431627][ T5909] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  715.648673][ T5909] usb 2-1: Using ep0 maxpacket: 16
[  715.695418][ T5909] usb 2-1: unable to get BOS descriptor or descriptor too short
[  715.777596][T14242] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2194'.
[  715.791510][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  715.820245][ T5909] usb 2-1: config 0 has no interfaces?
[  715.874315][ T5909] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  715.939360][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.058317][ T5909] usb 2-1: Product: syz
[  716.069147][ T5909] usb 2-1: Manufacturer: syz
[  716.124592][ T5909] usb 2-1: SerialNumber: syz
[  716.135599][ T5909] usb 2-1: config 0 descriptor??
[  717.319905][T14249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  717.905508][T14267] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.2199'.
[  717.920201][T14267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  717.932886][T14267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  719.073326][T14269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  719.101988][T14269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  719.341252][ T1212] usb 2-1: USB disconnect, device number 38
[  719.854431][T14281] input: syz0 as /devices/virtual/input/input48
[  719.861844][T13045] vhci_hcd: vhci_device speed not set
[  719.901979][   T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  719.968970][T14281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.011910][T14281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.043209][   T10] usb 2-1: device descriptor read/64, error -71
[  720.301771][   T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  720.614362][   T10] usb 2-1: device descriptor read/64, error -71
[  720.722257][   T10] usb usb2-port1: attempt power cycle
[  721.101838][   T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  721.143736][   T10] usb 2-1: device descriptor read/8, error -71
[  721.281286][T14300] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  721.287860][T14300] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  721.313192][T14300] vhci_hcd vhci_hcd.0: Device attached
[  721.382471][   T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  721.414476][   T10] usb 2-1: device descriptor read/8, error -71
[  721.504280][ T5841] vhci_hcd: vhci_device speed not set
[  721.532121][   T10] usb usb2-port1: unable to enumerate USB device
[  721.561977][ T5841] usb 33-1: new full-speed USB device number 5 using vhci_hcd
[  721.952036][T14311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  721.961638][T14311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  722.145007][T14301] vhci_hcd: connection reset by peer
[  722.154937][ T6233] vhci_hcd: stop threads
[  722.159405][ T6233] vhci_hcd: release socket
[  722.167333][ T6233] vhci_hcd: disconnect device
[  723.738553][T14328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  723.747956][T14328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  725.241683][   T30] audit: type=1326 audit(1750381291.332:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14348 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa218e929 code=0x7ffc0000
[  725.287028][   T30] audit: type=1326 audit(1750381291.332:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14348 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa218e929 code=0x7ffc0000
[  725.313953][T14350] ipvlan2: entered promiscuous mode
[  725.328666][T14350] bridge0: port 3(ipvlan2) entered blocking state
[  725.335937][T14350] bridge0: port 3(ipvlan2) entered disabled state
[  725.343436][T14350] ipvlan2: entered allmulticast mode
[  725.349158][   T30] audit: type=1326 audit(1750381291.332:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14348 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f0fa218e929 code=0x7ffc0000
[  725.374078][T14350] bridge0: entered allmulticast mode
[  725.391074][T14350] ipvlan2: left allmulticast mode
[  725.398883][T14350] bridge0: left allmulticast mode
[  725.412130][   T30] audit: type=1326 audit(1750381291.332:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14348 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa218e929 code=0x7ffc0000
[  725.443772][   T30] audit: type=1326 audit(1750381291.332:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14348 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa218e929 code=0x7ffc0000
[  725.471066][   T30] audit: type=1326 audit(1750381291.342:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14348 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0fa218e929 code=0x7ffc0000
[  725.538371][   T30] audit: type=1326 audit(1750381291.342:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14348 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa218e929 code=0x7ffc0000
[  725.578202][   T30] audit: type=1326 audit(1750381291.342:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14348 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa218e929 code=0x7ffc0000
[  725.622069][   T30] audit: type=1326 audit(1750381291.382:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14348 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0fa218e929 code=0x7ffc0000
[  725.655105][   T30] audit: type=1326 audit(1750381291.382:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14348 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa218e929 code=0x7ffc0000
[  726.051833][T14355] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  726.058441][T14355] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  726.161874][T14355] vhci_hcd vhci_hcd.0: Device attached
[  726.371501][ T1212] vhci_hcd: vhci_device speed not set
[  726.444567][ T1212] usb 35-1: new full-speed USB device number 6 using vhci_hcd
[  726.721853][T14360] vhci_hcd: connection reset by peer
[  726.731644][ T5841] vhci_hcd: vhci_device speed not set
[  726.770555][ T6233] vhci_hcd: stop threads
[  726.775029][ T6233] vhci_hcd: release socket
[  726.814490][ T6233] vhci_hcd: disconnect device
[  727.959296][T14388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  728.000091][T14390] netlink: 'syz.3.2232': attribute type 4 has an invalid length.
[  728.002576][T14388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  728.056003][T14391] netlink: 'syz.3.2232': attribute type 4 has an invalid length.
[  728.197361][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2232'.
[  728.393639][T14398] loop6: detected capacity change from 0 to 7
[  728.402837][ T5840] Dev loop6: unable to read RDB block 7
[  728.408545][ T5840]  loop6: unable to read partition table
[  728.417528][ T5840] loop6: partition table beyond EOD, truncated
[  728.445682][T14398] Dev loop6: unable to read RDB block 7
[  728.455571][T14398]  loop6: unable to read partition table
[  728.461695][T14398] loop6: partition table beyond EOD, truncated
[  728.467905][T14398] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  729.246525][ T5841] hid-generic 0008:0006:0003.0021: unknown main item tag 0x3
[  729.282061][T14417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.293854][ T5841] hid-generic 0008:0006:0003.0021: item fetching failed at offset 24/62
[  729.306039][T14417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.316800][ T5841] hid-generic 0008:0006:0003.0021: probe with driver hid-generic failed with error -22
[  729.330060][T14414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.339018][T14414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.820443][T14423] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2241'.
[  729.835788][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2241'.
[  729.981638][ T5841] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  729.982065][T14432] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  729.995807][T14432] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  730.007224][T14432] vhci_hcd vhci_hcd.0: Device attached
[  730.168849][ T5841] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  730.178277][ T5841] usb 2-1: config 0 has no interface number 0
[  730.201437][ T5841] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  730.222166][   T10] vhci_hcd: vhci_device speed not set
[  730.228079][ T5841] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  730.249830][ T5841] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59853, setting to 64
[  730.291820][   T10] usb 33-1: new full-speed USB device number 6 using vhci_hcd
[  730.468901][ T5841] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  730.488396][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  730.509848][ T5841] usb 2-1: Product: syz
[  730.515775][ T5841] usb 2-1: SerialNumber: syz
[  730.532399][ T5841] usb 2-1: config 0 descriptor??
[  730.541032][T14424] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  730.553910][ T5841] cm109 2-1:0.8: invalid payload size 64, expected 4
[  730.574932][ T5841] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input49
[  730.670502][T14439] loop6: detected capacity change from 0 to 7
[  730.686552][T14439] Dev loop6: unable to read RDB block 7
[  730.725090][T14439]  loop6: unable to read partition table
[  730.766851][T14439] loop6: partition table beyond EOD, truncated
[  730.773735][T14439] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  730.863938][T14433] vhci_hcd: connection reset by peer
[  730.892522][ T6234] vhci_hcd: stop threads
[  730.896884][ T6234] vhci_hcd: release socket
[  730.902172][ T6234] vhci_hcd: disconnect device
[  731.080685][T14441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  731.097452][T14441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  731.111092][T14441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  731.128046][T14441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  731.148391][T14441] FAULT_INJECTION: forcing a failure.
[  731.148391][T14441] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  731.171163][T14441] CPU: 1 UID: 0 PID: 14441 Comm: syz.2.2245 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[  731.171191][T14441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  731.171202][T14441] Call Trace:
[  731.171208][T14441]  <TASK>
[  731.171216][T14441]  dump_stack_lvl+0x189/0x250
[  731.171245][T14441]  ? __pfx____ratelimit+0x10/0x10
[  731.171271][T14441]  ? __pfx_dump_stack_lvl+0x10/0x10
[  731.171295][T14441]  ? __pfx__printk+0x10/0x10
[  731.171312][T14441]  ? __might_fault+0xb0/0x130
[  731.171343][T14441]  should_fail_ex+0x414/0x560
[  731.171375][T14441]  _copy_from_user+0x2d/0xb0
[  731.171417][T14441]  core_sys_select+0x4b7/0xa20
[  731.171450][T14441]  ? __pfx_core_sys_select+0x10/0x10
[  731.171495][T14441]  ? __pfx_set_user_sigmask+0x10/0x10
[  731.171539][T14441]  __se_sys_pselect6+0x27a/0x300
[  731.171567][T14441]  ? __pfx___se_sys_pselect6+0x10/0x10
[  731.171597][T14441]  ? __x64_sys_pselect6+0x21/0xf0
[  731.171631][T14441]  do_syscall_64+0xfa/0x3b0
[  731.171651][T14441]  ? lockdep_hardirqs_on+0x9c/0x150
[  731.171680][T14441]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  731.171700][T14441]  ? clear_bhb_loop+0x60/0xb0
[  731.171726][T14441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  731.171747][T14441] RIP: 0033:0x7fa00dd8e929
[  731.171767][T14441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  731.171785][T14441] RSP: 002b:00007fa00ec4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  731.171807][T14441] RAX: ffffffffffffffda RBX: 00007fa00dfb5fa0 RCX: 00007fa00dd8e929
[  731.171823][T14441] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000040
[  731.171837][T14441] RBP: 00007fa00ec4c090 R08: 0000000000000000 R09: 0000000000000000
[  731.171850][T14441] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  731.171863][T14441] R13: 0000000000000000 R14: 00007fa00dfb5fa0 R15: 00007fa00e0dfa28
[  731.171895][T14441]  </TASK>
[  731.672984][ T1212] vhci_hcd: vhci_device speed not set
[  731.893016][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  731.902880][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  731.910091][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  731.917313][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  731.924529][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  731.931797][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  731.939041][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  731.946235][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  731.953502][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  731.961808][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  731.969240][T11375] usb 2-1: USB disconnect, device number 43
[  731.969307][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  732.000149][T11375] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  732.533922][T14459] netlink: 'syz.0.2252': attribute type 9 has an invalid length.
[  732.542454][T14459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2252'.
[  732.558709][T14459] hsr0: entered promiscuous mode
[  732.570339][T14459] macvlan3: entered promiscuous mode
[  732.596773][T14459] macvlan3: entered allmulticast mode
[  732.608074][T14459] hsr0: entered allmulticast mode
[  732.613784][T14459] hsr_slave_0: entered allmulticast mode
[  732.619722][T14459] hsr_slave_1: entered allmulticast mode
[  733.211522][T11375] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[  733.255976][T14476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  733.295214][T14476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  733.330289][T14476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  733.354076][T14476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  733.422696][T11375] usb 5-1: config 0 has no interfaces?
[  733.687752][T11375] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  733.871589][T11375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.879826][T11375] usb 5-1: Product: syz
[  733.884550][T11375] usb 5-1: Manufacturer: syz
[  733.889290][T11375] usb 5-1: SerialNumber: syz
[  733.897237][T11375] usb 5-1: config 0 descriptor??
[  734.271408][T14466] pimreg: left allmulticast mode
[  734.950723][T14490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2256'.
[  735.381616][   T10] vhci_hcd: vhci_device speed not set
[  736.444616][T11375] usb 5-1: USB disconnect, device number 117
[  736.828356][T14507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  736.886765][T14507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  737.007226][T14507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2262'.
[  737.994343][T14510] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  738.663938][T14534] loop6: detected capacity change from 0 to 7
[  738.679110][ T5840] Dev loop6: unable to read RDB block 7
[  738.732943][ T5840]  loop6: unable to read partition table
[  738.755211][ T5840] loop6: partition table beyond EOD, truncated
[  738.772079][T14534] Dev loop6: unable to read RDB block 7
[  738.778099][T14534]  loop6: unable to read partition table
[  738.788327][T14534] loop6: partition table beyond EOD, truncated
[  738.895361][T14534] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  740.189236][T14547] pim6reg: entered allmulticast mode
[  740.460538][T14553] loop6: detected capacity change from 0 to 7
[  740.488158][T14544] pim6reg: left allmulticast mode
[  740.510657][T14553] Dev loop6: unable to read RDB block 7
[  740.511790][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  740.536572][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  740.537627][T14553]  loop6: unable to read partition table
[  740.578500][T14553] loop6: partition table beyond EOD, truncated
[  740.586158][T14553] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  741.219363][T14574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  741.230089][T14574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  741.298556][T14576] loop6: detected capacity change from 0 to 7
[  741.315687][T14576] Dev loop6: unable to read RDB block 7
[  741.321522][   T10] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  741.332559][T14576]  loop6: unable to read partition table
[  741.338389][T14576] loop6: partition table beyond EOD, truncated
[  741.365061][T14576] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  741.493622][   T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  741.606391][   T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  741.641252][   T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  741.654714][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.677382][T14564] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22
[  741.709211][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  741.840155][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  741.885983][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  741.907998][T11375] usb 5-1: USB disconnect, device number 118
[  742.008069][T14555] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[14555]
[  742.020115][T14587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  742.109709][T14587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  743.534144][T14605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  743.571975][T14605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  743.583661][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  743.583683][   T30] audit: type=1326 audit(1750381309.672:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  743.671893][T14605] netlink: 'syz.0.2289': attribute type 21 has an invalid length.
[  743.692673][T14605] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2289'.
[  743.712804][   T30] audit: type=1326 audit(1750381309.672:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  743.770962][T14605] netlink: 'syz.0.2289': attribute type 5 has an invalid length.
[  743.781797][   T30] audit: type=1326 audit(1750381309.672:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  743.810708][T14605] netlink: 'syz.0.2289': attribute type 6 has an invalid length.
[  743.849846][T14605] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2289'.
[  743.925222][   T30] audit: type=1326 audit(1750381309.682:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  743.979314][T14612] capability: warning: `syz.1.2291' uses 32-bit capabilities (legacy support in use)
[  744.016950][   T30] audit: type=1326 audit(1750381309.732:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  744.110827][   T30] audit: type=1326 audit(1750381309.732:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  744.188786][T14621] loop6: detected capacity change from 0 to 7
[  744.211385][   T30] audit: type=1326 audit(1750381309.732:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  744.253937][ T5840] Dev loop6: unable to read RDB block 7
[  744.273011][ T5840]  loop6: unable to read partition table
[  744.291258][ T5840] loop6: partition table beyond EOD, truncated
[  744.312004][   T30] audit: type=1326 audit(1750381309.732:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  744.350190][T14621] Dev loop6: unable to read RDB block 7
[  744.363216][T14621]  loop6: unable to read partition table
[  744.391710][T14621] loop6: partition table beyond EOD, truncated
[  744.441287][   T30] audit: type=1326 audit(1750381309.732:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  744.445805][T14621] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  744.468556][   T30] audit: type=1326 audit(1750381309.732:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7ef8e929 code=0x7ffc0000
[  744.988987][T14630] loop6: detected capacity change from 0 to 7
[  744.990855][T14627] tun0: tun_chr_ioctl cmd 2147767517
[  745.003711][ T5840] Dev loop6: unable to read RDB block 7
[  745.010328][ T5840]  loop6: unable to read partition table
[  745.019635][ T5840] loop6: partition table beyond EOD, truncated
[  745.084328][T14630] Dev loop6: unable to read RDB block 7
[  745.108766][T14630]  loop6: unable to read partition table
[  745.149178][T14630] loop6: partition table beyond EOD, truncated
[  745.161542][T14630] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  745.565271][T14645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2301'.
[  745.647440][T14645] fuse: Bad value for 'fd'
[  745.757446][T14650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  745.777099][T14650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  747.011683][ T5909] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[  747.229443][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  747.236085][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  747.254663][ T5909] usb 5-1: Using ep0 maxpacket: 16
[  747.392415][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short
[  747.601851][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  747.707848][T14691] loop6: detected capacity change from 0 to 7
[  747.728849][T14691] Dev loop6: unable to read RDB block 7
[  747.767978][ T5909] usb 5-1: config 0 has no interfaces?
[  747.778348][T14691]  loop6: unable to read partition table
[  747.809393][T14691] loop6: partition table beyond EOD, truncated
[  747.850567][T14691] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  747.895064][ T5909] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  747.985544][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.025960][ T5909] usb 5-1: Product: syz
[  748.046246][ T5909] usb 5-1: Manufacturer: syz
[  748.094049][ T5909] usb 5-1: SerialNumber: syz
[  748.191056][ T5909] usb 5-1: config 0 descriptor??
[  748.829578][T14698] block device autoloading is deprecated and will be removed.
[  748.859594][T14698] syz.3.2313: attempt to access beyond end of device
[  748.859594][T14698] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  748.909652][T14699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  748.945267][T14700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  748.978016][T14699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  749.009673][T14700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  749.064805][T14699] xt_time: invalid argument - start or stop time greater than 23:59:59
[  749.074370][T14698] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2313'.
[  749.083581][T14699] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2313'.
[  749.172723][T14699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  749.205719][T14699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  749.549932][T14708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  749.586049][T14708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  749.682913][ T5930] usb 5-1: USB disconnect, device number 119
[  749.936333][T14717] openvswitch: netlink: Duplicate or invalid key (type 0).
[  749.975520][T14717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  750.019913][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2316'.
[  750.149159][T14722] openvswitch: netlink: Flow key attr not present in new flow.
[  751.711565][   T10] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  751.834978][T14744] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2326'.
[  751.863880][   T10] usb 2-1: config 0 has an invalid interface number: 23 but max is 0
[  751.875635][   T10] usb 2-1: config 0 has no interface number 0
[  751.885527][   T10] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b
[  751.895133][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.904239][   T10] usb 2-1: Product: syz
[  751.908513][   T10] usb 2-1: Manufacturer: syz
[  751.916169][   T10] usb 2-1: SerialNumber: syz
[  751.924296][   T10] usb 2-1: config 0 descriptor??
[  752.248519][T14757] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2330'.
[  752.271539][T14757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2330'.
[  752.298254][T14757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  752.308040][T14757] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  752.665829][   T10] ftdi_sio 2-1:0.23: FTDI USB Serial Device converter detected
[  752.674982][T14765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  752.694143][   T10] usb 2-1: Detected SIO
[  752.699747][   T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  752.699978][T14765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  752.717386][   T10] usb 2-1: USB disconnect, device number 44
[  752.738654][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  752.777733][   T10] ftdi_sio 2-1:0.23: device disconnected
[  752.799875][T14767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  752.840579][T14767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  752.978683][T14777] loop6: detected capacity change from 0 to 7
[  752.990173][ T5840] Dev loop6: unable to read RDB block 7
[  753.004181][ T5840]  loop6: unable to read partition table
[  753.020366][ T5840] loop6: partition table beyond EOD, truncated
[  753.033733][T14777] Dev loop6: unable to read RDB block 7
[  753.039405][T14777]  loop6: unable to read partition table
[  753.081599][T14777] loop6: partition table beyond EOD, truncated
[  753.093964][T14777] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  753.217855][T14783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  753.261111][T14783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  753.333058][T14788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  753.344366][T14788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  753.357780][T14786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  753.367658][T14786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  753.384477][T14786] xt_TCPMSS: Only works on TCP SYN packets
[  754.136579][T14806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  754.151119][T14806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  754.226382][T14808] IPv6: Can't replace route, no match found
[  754.251580][ T5930] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  754.433651][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  754.446365][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  754.456957][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  754.500227][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  754.606306][ T5930] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  754.635445][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  754.678153][ T5930] usb 2-1: config 0 descriptor??
[  755.147820][ T5841] usb 2-1: USB disconnect, device number 45
[  756.068279][T14818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  756.097493][T14818] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  756.708185][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2349'.
[  756.766642][T14822] veth0_to_bond: entered allmulticast mode
[  756.800325][T14822] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  756.841657][ T5930] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  756.940083][T14824] loop6: detected capacity change from 0 to 7
[  756.955710][T14824] Dev loop6: unable to read RDB block 7
[  756.973426][T14824]  loop6: unable to read partition table
[  756.989825][T14824] loop6: partition table beyond EOD, truncated
[  757.011814][ T5930] usb 2-1: Using ep0 maxpacket: 8
[  757.091483][T14824] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  757.115046][ T5930] usb 2-1: config 2 has an invalid interface number: 138 but max is 0
[  757.137090][ T5930] usb 2-1: config 2 has no interface number 0
[  757.157856][ T5930] usb 2-1: config 2 interface 138 has no altsetting 0
[  757.187554][ T5930] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010e, bcdDevice=e8.14
[  757.233690][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.258921][ T5930] usb 2-1: Product: syz
[  757.272711][ T5930] usb 2-1: Manufacturer: syz
[  757.285307][ T5930] usb 2-1: SerialNumber: syz
[  757.296478][T14828] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2352'.
[  757.526762][T14817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2348'.
[  757.598049][T14817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  757.611809][T14817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  757.631705][T14817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  757.650876][T14817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  758.251852][ T5930] kvaser_usb 2-1:2.138: error -ENODEV: Cannot get usb endpoint(s)
[  758.300001][ T5930] usb 2-1: USB disconnect, device number 46
[  759.080051][T14863] loop6: detected capacity change from 0 to 7
[  759.102321][T14863] Dev loop6: unable to read RDB block 7
[  759.107990][T14863]  loop6: unable to read partition table
[  759.157427][T14863] loop6: partition table beyond EOD, truncated
[  759.167277][T14863] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  760.281716][T11375] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  760.446997][T11375] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  760.478274][T11375] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  760.510691][T11375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  760.541559][T11375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  760.571650][T11375] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  760.668094][T11375] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  760.697882][T11375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  760.751495][T11375] usb 2-1: Product: syz
[  760.755750][T11375] usb 2-1: Manufacturer: syz
[  760.760393][T11375] usb 2-1: SerialNumber: syz
[  760.849963][T11375] usb 2-1: config 0 descriptor??
[  761.094249][T11375] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  761.152201][T11375] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  761.434457][T11375] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71
[  761.473960][T11375] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  761.521798][T11375] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[  761.532604][T14887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2366'.
[  761.571781][T11375] usb 2-1: USB disconnect, device number 47
[  761.625412][T14887] fuse: Bad value for 'fd'
[  763.327989][T14911] loop6: detected capacity change from 0 to 7
[  763.338798][T14911] Dev loop6: unable to read RDB block 7
[  763.353850][T14911]  loop6: unable to read partition table
[  763.370322][T14911] loop6: partition table beyond EOD, truncated
[  763.390112][T14911] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  763.461930][ T5930] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  763.641629][ T5930] usb 2-1: Using ep0 maxpacket: 32
[  763.654962][ T5930] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  763.673760][ T5930] usb 2-1: config 0 has no interface number 0
[  763.679947][ T5930] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  763.750181][ T5930] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  763.767778][T14921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  763.801228][ T5930] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  763.822309][T14921] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  763.832565][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.853108][ T5930] usb 2-1: Product: syz
[  763.865890][ T5930] usb 2-1: Manufacturer: syz
[  763.876191][ T5930] usb 2-1: SerialNumber: syz
[  763.894802][ T5930] usb 2-1: config 0 descriptor??
[  764.119667][T14904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  764.138951][T14904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  764.176454][ T5930] radio-si470x 2-1:0.35: this is not a si470x device.
[  764.271816][   T10] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  764.406098][ T5930] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  764.436580][ T5930] usb 2-1: USB disconnect, device number 48
[  764.461465][   T10] usb 5-1: Using ep0 maxpacket: 16
[  764.525255][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  764.561519][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  764.580643][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  764.608374][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.636992][   T10] usb 5-1: config 0 descriptor??
[  764.844688][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2379'.
[  764.906212][T14931] ipvlan2: entered allmulticast mode
[  764.936766][T14931] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  764.970596][T14934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  764.980049][T14934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  765.360880][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  765.367855][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  765.400053][   T10] usb 5-1: USB disconnect, device number 120
[  765.480819][T14941] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  765.512225][T14941] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2383'.
[  765.598223][T14946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2384'.
[  765.610056][T14946] fuse: Bad value for 'fd'
[  766.046803][T14950] loop6: detected capacity change from 0 to 7
[  766.123532][ T5840] Dev loop6: unable to read RDB block 7
[  766.146438][ T5840]  loop6: unable to read partition table
[  766.175800][ T5840] loop6: partition table beyond EOD, truncated
[  766.199807][T14950] Dev loop6: unable to read RDB block 7
[  766.209701][T14950]  loop6: unable to read partition table
[  766.224957][T14953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  766.252707][T14950] loop6: partition table beyond EOD, truncated
[  766.279187][T14953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.294634][T14950] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  766.766750][T14957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  766.829514][T14957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.897671][T14957] netlink: 'syz.3.2387': attribute type 4 has an invalid length.
[  767.081625][ T5841] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[  767.240817][T14966] loop6: detected capacity change from 0 to 7
[  767.249405][ T5841] usb 5-1: Using ep0 maxpacket: 32
[  767.256631][T14966] Dev loop6: unable to read RDB block 7
[  767.263427][T14966]  loop6: unable to read partition table
[  767.264675][ T5841] usb 5-1: config 1 has an invalid interface number: 191 but max is 0
[  767.279582][T14966] loop6: partition table beyond EOD, truncated
[  767.286639][ T5841] usb 5-1: config 1 has an invalid descriptor of length 41, skipping remainder of the config
[  767.298774][T14966] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  767.311411][ T5841] usb 5-1: config 1 has no interface number 0
[  767.323741][ T5841] usb 5-1: config 1 interface 191 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  767.337520][ T5841] usb 5-1: config 1 interface 191 has no altsetting 0
[  767.356476][ T5841] usb 5-1: New USB device found, idVendor=0499, idProduct=2000, bcdDevice=9a.b0
[  767.368612][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.385731][ T5841] usb 5-1: Product: syz
[  767.396852][ T5841] usb 5-1: Manufacturer: syz
[  767.407774][ T5841] usb 5-1: SerialNumber: syz
[  767.565561][T14974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.600692][T14974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.760787][ T5841] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  767.864862][ T5841] snd-usb-audio 5-1:1.191: probe with driver snd-usb-audio failed with error -2
[  767.902201][ T5841] usb 5-1: USB disconnect, device number 121
[  767.955725][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.191/sound/card6/controlC6/../uevent} for writing: No such file or directory
[  768.246363][T14989] loop6: detected capacity change from 0 to 7
[  768.290640][T14989] Dev loop6: unable to read RDB block 7
[  768.312445][T14989]  loop6: unable to read partition table
[  768.332910][T14989] loop6: partition table beyond EOD, truncated
[  768.339341][T14989] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  768.797544][T15000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2399'.
[  768.808489][T15000] fuse: Bad value for 'fd'
[  770.403905][T15004] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  770.813523][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'.
[  770.842027][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'.
[  770.876106][T15018] ALSA: seq fatal error: cannot create timer (-22)
[  771.051461][   T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  771.145058][T15022] sctp: [Deprecated]: syz.3.2401 (pid 15022) Use of int in maxseg socket option.
[  771.145058][T15022] Use struct sctp_assoc_value instead
[  771.153044][T15026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  771.184378][   T10] usb 2-1: device descriptor read/64, error -71
[  771.202000][T15026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  771.267920][T15028] vlan2: entered promiscuous mode
[  771.332471][T15028] vlan2: entered allmulticast mode
[  771.344503][T15028] bridge0: entered allmulticast mode
[  771.431544][   T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  771.459663][T15029] vlan3: entered promiscuous mode
[  771.484517][T15029] bond0: entered promiscuous mode
[  771.629763][   T10] usb 2-1: device descriptor read/64, error -71
[  771.798975][   T10] usb usb2-port1: attempt power cycle
[  772.214627][T15039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  772.242919][T15039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  772.271810][   T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  772.295100][   T10] usb 2-1: device descriptor read/8, error -71
[  772.411824][T15041] fuse: Bad value for 'user_id'
[  772.420676][T15041] fuse: Bad value for 'user_id'
[  772.541478][   T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  772.575606][   T10] usb 2-1: device descriptor read/8, error -71
[  772.695283][   T10] usb usb2-port1: unable to enumerate USB device
[  772.727949][T15049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2411'.
[  772.745490][T15050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2412'.
[  772.764259][T15049] fuse: Bad value for 'fd'
[  773.322649][T15050] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2412'.
[  773.976396][T15063] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  774.441580][ T5841] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  774.633765][ T5841] usb 2-1: Using ep0 maxpacket: 8
[  774.650100][ T5841] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  774.680238][ T5841] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  774.707696][ T5841] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  774.717925][ T5841] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  774.728069][ T5841] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  774.743047][ T5841] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  774.752272][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.955224][T15075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  774.982913][ T5841] usb 2-1: usb_control_msg returned -32
[  774.998835][ T5841] usbtmc 2-1:16.0: can't read capabilities
[  775.038215][T15075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  775.119495][T15080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  775.174094][T15080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  775.332054][T15087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  775.353872][T15087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  775.429518][T15091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  775.451208][T15091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  775.598048][T15095] loop6: detected capacity change from 0 to 7
[  775.615158][ T5840] Dev loop6: unable to read RDB block 7
[  775.625581][ T5840]  loop6: unable to read partition table
[  775.632852][ T5840] loop6: partition table beyond EOD, truncated
[  775.641125][T15095] Dev loop6: unable to read RDB block 7
[  775.671551][T15095]  loop6: unable to read partition table
[  775.677467][T15095] loop6: partition table beyond EOD, truncated
[  775.684708][T15095] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  775.822051][T15097] usbtmc 2-1:16.0: usb_clear_halt returned -32
[  776.353042][T15109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2427'.
[  776.375914][T15109] fuse: Bad value for 'fd'
[  776.889745][ T5909] usb 2-1: USB disconnect, device number 53
[  777.588523][T15115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  777.615601][T15115] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  777.721548][ T5841] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  777.945599][ T5841] usb 2-1: Using ep0 maxpacket: 8
[  777.978976][ T5841] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  777.998597][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.053806][ T5841] usb 2-1: Product: syz
[  778.058059][ T5841] usb 2-1: Manufacturer: syz
[  778.076173][ T5841] usb 2-1: SerialNumber: syz
[  778.188630][ T5841] usb 2-1: config 0 descriptor??
[  778.308282][T15119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  778.360528][T15120] QAT: failed to copy from user cfg_data.
[  778.384539][T15119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  778.476523][ T5841] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  778.928609][T15127] loop6: detected capacity change from 0 to 7
[  778.946722][ T5840] Dev loop6: unable to read RDB block 7
[  778.956581][ T5840]  loop6: unable to read partition table
[  778.996451][ T5840] loop6: partition table beyond EOD, truncated
[  779.006440][T15127] Dev loop6: unable to read RDB block 7
[  779.015573][T15127]  loop6: unable to read partition table
[  779.031804][T15127] loop6: partition table beyond EOD, truncated
[  779.075859][T15127] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  779.103208][T15132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  779.160060][T15133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  779.191903][T15132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  779.211982][T15133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  779.521453][ T5930] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[  779.685082][ T5930] usb 5-1: config 0 has an invalid interface number: 98 but max is 0
[  779.711857][ T5930] usb 5-1: config 0 has no interface number 0
[  779.718697][ T5930] usb 5-1: config 0 interface 98 has no altsetting 0
[  779.772662][ T5930] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[  779.798444][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.847802][ T5930] usb 5-1: Product: syz
[  779.876225][ T5930] usb 5-1: Manufacturer: syz
[  779.894497][ T5930] usb 5-1: SerialNumber: syz
[  779.920516][ T5841] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  779.942453][ T5930] usb 5-1: config 0 descriptor??
[  780.012279][ T5841] usb 2-1: USB disconnect, device number 54
[  780.116861][T15145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2440'.
[  780.229983][ T5930] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[  780.255134][T15145] fuse: Bad value for 'fd'
[  780.733664][ T5930] usb 5-1: reset high-speed USB device number 122 using dummy_hcd
[  780.870596][T15150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  780.998440][T15153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2441'.
[  781.194518][T15157] netlink: 'syz.0.2442': attribute type 1 has an invalid length.
[  781.214643][T15153] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2441'.
[  781.529828][T15165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  781.538962][T15165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  782.361434][ T5930] usb 5-1: failed to restore interface 98 altsetting 4 (error=-71)
[  782.438719][ T5930] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware
[  782.469344][ T5930] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  782.496423][ T5841] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[  782.510551][ T5930] usb 5-1: USB disconnect, device number 122
[  782.531192][ T5841] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[  782.804643][ T5841] ------------[ cut here ]------------
[  782.810650][ T5841] WARNING: CPU: 1 PID: 5841 at fs/kernfs/dir.c:537 kernfs_new_node+0x1b5/0x210
[  782.820208][ T5841] Modules linked in:
[  782.825235][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: kworker/1:4 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[  782.837787][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  782.848262][ T5841] Workqueue: events request_firmware_work_func
[  782.855717][ T5841] RIP: 0010:kernfs_new_node+0x1b5/0x210
[  782.862254][ T5841] Code: 74 08 4c 89 ff e8 2b 43 c6 ff 49 89 1f 4c 89 f0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d2 90 0b 09 cc e8 fc c3 62 ff 90 <0f> 0b 90 eb 97 89 e9 80 e1 07 fe c1 38 c1 0f 8c 85 fe ff ff 48 89
[  782.882471][ T5841] RSP: 0018:ffffc900040af4b8 EFLAGS: 00010293
[  782.888590][ T5841] RAX: ffffffff825d9854 RBX: ffff88807feb12d0 RCX: ffff88807b349e00
[  782.897070][ T5841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  782.905275][ T5841] RBP: 0000000000000000 R08: ffff88807feb12d3 R09: 1ffff1100ffd625a
[  782.909196][T15181] loop6: detected capacity change from 0 to 7
[  782.913468][ T5841] R10: dffffc0000000000 R11: ffffed100ffd625b R12: 00000000000041ed
[  782.913575][ T5841] R13: 0000000000000000 R14: ffff88806a21f1e0 R15: dffffc0000000000
[  782.913595][ T5841] FS:  0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000
[  782.913613][ T5841] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  782.913629][ T5841] CR2: 000000110c29ef3e CR3: 0000000044772000 CR4: 00000000003526f0
[  782.913650][ T5841] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  782.913665][ T5841] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  782.976499][ T5841] Call Trace:
[  782.979842][ T5841]  <TASK>
[  782.982864][ T5841]  kernfs_create_dir_ns+0x44/0x130
[  782.988026][ T5841]  sysfs_create_dir_ns+0x123/0x280
[  782.993196][ T5841]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  782.998847][ T5841]  ? do_raw_spin_unlock+0x122/0x240
[  783.004197][ T5841]  kobject_add_internal+0x59f/0xb40
[  783.009422][ T5841]  kobject_add+0x155/0x220
[  783.013891][ T5841]  ? __pfx_kobject_add+0x10/0x10
[  783.018852][ T5841]  ? kobject_init+0x83/0x1e0
[  783.023537][ T5841]  get_device_parent+0x316/0x3a0
[  783.028496][ T5841]  device_add+0x2e1/0xb50
[  783.032904][ T5841]  firmware_fallback_sysfs+0x2e4/0x9b0
[  783.038399][ T5841]  _request_firmware+0xf83/0x15b0
[  783.043512][ T5841]  ? __pfx__request_firmware+0x10/0x10
[  783.049085][ T5841]  ? process_scheduled_works+0x9ef/0x17b0
[  783.055583][ T5841]  request_firmware_work_func+0xaf/0x1c0
[  783.061270][ T5841]  ? process_scheduled_works+0x9ef/0x17b0
[  783.067679][ T5841]  process_scheduled_works+0xae1/0x17b0
[  783.073510][ T5841]  ? __pfx_process_scheduled_works+0x10/0x10
[  783.079528][ T5841]  worker_thread+0x8a0/0xda0
[  783.084215][ T5841]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  783.090573][ T5841]  ? __kthread_parkme+0x7b/0x200
[  783.095636][ T5841]  kthread+0x70e/0x8a0
[  783.099728][ T5841]  ? __pfx_worker_thread+0x10/0x10
[  783.104945][ T5841]  ? __pfx_kthread+0x10/0x10
[  783.109554][ T5841]  ? _raw_spin_unlock_irq+0x23/0x50
[  783.114823][ T5841]  ? lockdep_hardirqs_on+0x9c/0x150
[  783.120046][ T5841]  ? __pfx_kthread+0x10/0x10
[  783.124754][ T5841]  ret_from_fork+0x3f9/0x770
[  783.129472][ T5841]  ? __pfx_ret_from_fork+0x10/0x10
[  783.134756][ T5841]  ? __switch_to_asm+0x39/0x70
[  783.139573][ T5841]  ? __switch_to_asm+0x33/0x70
[  783.144647][ T5841]  ? __pfx_kthread+0x10/0x10
[  783.149288][ T5841]  ret_from_fork_asm+0x1a/0x30
[  783.154196][ T5841]  </TASK>
[  783.157858][ T5841] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  783.165168][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: kworker/1:4 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[  783.177245][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  783.187317][ T5841] Workqueue: events request_firmware_work_func
[  783.193509][ T5841] Call Trace:
[  783.196804][ T5841]  <TASK>
[  783.199777][ T5841]  dump_stack_lvl+0x99/0x250
[  783.204397][ T5841]  ? __asan_memcpy+0x40/0x70
[  783.209007][ T5841]  ? __pfx_dump_stack_lvl+0x10/0x10
[  783.214254][ T5841]  ? __pfx__printk+0x10/0x10
[  783.218907][ T5841]  panic+0x2db/0x790
[  783.222852][ T5841]  ? __pfx_panic+0x10/0x10
[  783.227308][ T5841]  ? ret_from_fork_asm+0x1a/0x30
[  783.232265][ T5841]  __warn+0x31b/0x4b0
[  783.236263][ T5841]  ? kernfs_new_node+0x1b5/0x210
[  783.241218][ T5841]  ? kernfs_new_node+0x1b5/0x210
[  783.246173][ T5841]  report_bug+0x2be/0x4f0
[  783.250521][ T5841]  ? kernfs_new_node+0x1b5/0x210
[  783.255476][ T5841]  ? kernfs_new_node+0x1b5/0x210
[  783.260447][ T5841]  ? kernfs_new_node+0x1b7/0x210
[  783.265426][ T5841]  handle_bug+0x84/0x160
[  783.269698][ T5841]  exc_invalid_op+0x1a/0x50
[  783.274218][ T5841]  asm_exc_invalid_op+0x1a/0x20
[  783.279086][ T5841] RIP: 0010:kernfs_new_node+0x1b5/0x210
[  783.284654][ T5841] Code: 74 08 4c 89 ff e8 2b 43 c6 ff 49 89 1f 4c 89 f0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d2 90 0b 09 cc e8 fc c3 62 ff 90 <0f> 0b 90 eb 97 89 e9 80 e1 07 fe c1 38 c1 0f 8c 85 fe ff ff 48 89
[  783.304273][ T5841] RSP: 0018:ffffc900040af4b8 EFLAGS: 00010293
[  783.310361][ T5841] RAX: ffffffff825d9854 RBX: ffff88807feb12d0 RCX: ffff88807b349e00
[  783.318348][ T5841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  783.326337][ T5841] RBP: 0000000000000000 R08: ffff88807feb12d3 R09: 1ffff1100ffd625a
[  783.334322][ T5841] R10: dffffc0000000000 R11: ffffed100ffd625b R12: 00000000000041ed
[  783.342310][ T5841] R13: 0000000000000000 R14: ffff88806a21f1e0 R15: dffffc0000000000
[  783.350306][ T5841]  ? kernfs_new_node+0x1b4/0x210
[  783.355282][ T5841]  ? kernfs_new_node+0x1b4/0x210
[  783.360267][ T5841]  kernfs_create_dir_ns+0x44/0x130
[  783.365407][ T5841]  sysfs_create_dir_ns+0x123/0x280
[  783.370547][ T5841]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  783.376199][ T5841]  ? do_raw_spin_unlock+0x122/0x240
[  783.381442][ T5841]  kobject_add_internal+0x59f/0xb40
[  783.386769][ T5841]  kobject_add+0x155/0x220
[  783.391299][ T5841]  ? __pfx_kobject_add+0x10/0x10
[  783.396285][ T5841]  ? kobject_init+0x83/0x1e0
[  783.400902][ T5841]  get_device_parent+0x316/0x3a0
[  783.405898][ T5841]  device_add+0x2e1/0xb50
[  783.410369][ T5841]  firmware_fallback_sysfs+0x2e4/0x9b0
[  783.415973][ T5841]  _request_firmware+0xf83/0x15b0
[  783.421072][ T5841]  ? __pfx__request_firmware+0x10/0x10
[  783.426591][ T5841]  ? process_scheduled_works+0x9ef/0x17b0
[  783.432341][ T5841]  request_firmware_work_func+0xaf/0x1c0
[  783.437998][ T5841]  ? process_scheduled_works+0x9ef/0x17b0
[  783.443840][ T5841]  process_scheduled_works+0xae1/0x17b0
[  783.449466][ T5841]  ? __pfx_process_scheduled_works+0x10/0x10
[  783.455494][ T5841]  worker_thread+0x8a0/0xda0
[  783.460193][ T5841]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  783.466561][ T5841]  ? __kthread_parkme+0x7b/0x200
[  783.471537][ T5841]  kthread+0x70e/0x8a0
[  783.475731][ T5841]  ? __pfx_worker_thread+0x10/0x10
[  783.480963][ T5841]  ? __pfx_kthread+0x10/0x10
[  783.485584][ T5841]  ? _raw_spin_unlock_irq+0x23/0x50
[  783.490804][ T5841]  ? lockdep_hardirqs_on+0x9c/0x150
[  783.496023][ T5841]  ? __pfx_kthread+0x10/0x10
[  783.500635][ T5841]  ret_from_fork+0x3f9/0x770
[  783.505269][ T5841]  ? __pfx_ret_from_fork+0x10/0x10
[  783.510407][ T5841]  ? __switch_to_asm+0x39/0x70
[  783.515184][ T5841]  ? __switch_to_asm+0x33/0x70
[  783.519966][ T5841]  ? __pfx_kthread+0x10/0x10
[  783.524576][ T5841]  ret_from_fork_asm+0x1a/0x30
[  783.529375][ T5841]  </TASK>
[  783.532660][ T5841] Kernel Offset: disabled
[  783.537005][ T5841] Rebooting in 86400 seconds..