last executing test programs:

49.572504629s ago: executing program 3 (id=725):
r0 = socket(0x10, 0x3, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000000)='\x00\x00MB\xcdl\xf5\b\x00\x00\x00\x00\x00\x00\x00\xf5^\xdb=')
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10)
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20040, 0x4)
fcntl$lock(r2, 0x3, &(0x7f0000001800)={0x2, 0x0, 0x4, 0x5a60})
ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000000c0)=""/218)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r1, 0xc3d33000)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000a80"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

49.462300362s ago: executing program 3 (id=726):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x80012, r1, 0x80000000)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x8, 0x0, 0x7fffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4, @ANYBLOB="cd44aee55a9251ab"], 0x20}}, 0x4084)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>r0, {0x8d4e}}, './file0\x00'})
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0185502, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000100))

48.642930393s ago: executing program 3 (id=730):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f00000001c0)=[{0x0}], 0x1, 0x1e})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000055aa00", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}})

48.342341003s ago: executing program 3 (id=732):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000021c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_DIRENT(r0, &(0x7f0000002180)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r4, @ANYBLOB="0700000000000014"], 0x58)

47.399090549s ago: executing program 3 (id=737):
r0 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r3, 0x80184153, &(0x7f00000001c0)={0x0, &(0x7f0000000200)})
add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc2}, &(0x7f00000008c0)={0x0, "ed426d436179868323920a5adc54a31b3a64a11b7374298d6245e8c488f527db189552c04e929ebde52f12a666c99a8d8493c5dca674a46be2fb61d699aee7af", 0x39}, 0x48, r0)
keyctl$read(0xb, r0, &(0x7f0000000200)=""/4, 0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0xa0200, 0x0)
ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f00000024c0)={0x8, 0x1ff, 0x10dc, 0x800, 0x5, "7351dfca92a349e196849991ccb31c3c480384", 0x6, 0x5})
close(r5)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000240)="2c385aa3d49100dc6626c892b6bc436a55346a1f1560276011b524ea942e65b3375be07d5e87c8cc09e51d46f243c2475a755cc3b9f4828954ad0e8776fe988eade02ff276a2737d0c27df9cdcbafe99", 0x50)
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000000c0)={&(0x7f0000001300)=[{0x7ff, 0x810, 0x0, 0x0}], 0x1})
r8 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5801, 0x0, 0x0}], 0x1})
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
accept4(r4, 0x0, 0x0, 0x80000)

47.053908893s ago: executing program 3 (id=742):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f00000001c0)=[{0x0}], 0x1, 0x1e})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000056ab00", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}})

46.785833259s ago: executing program 32 (id=742):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f00000001c0)=[{0x0}], 0x1, 0x1e})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000056ab00", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}})

8.596464161s ago: executing program 4 (id=901):
r0 = syz_clone(0x2801aa80, &(0x7f0000000000)="fe2a0ae9a7b226895418b7af5c197f25847b684ea969eb3b9948623b877878bb5e80e1dfb2e71d1d7c57280c0892145d95bfd547af592704cc904b3fd2800804176c54464e", 0x45, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="6f7a48dd10a9c6c4dd8ba2ad17d6fb52be1ef826c677")
r1 = dup(0xffffffffffffffff)
read(r1, &(0x7f0000000140)=""/97, 0x61)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0))
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000200)={r0, 0x0, 0x25})
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r3=>r1, {0x5}}, './file0\x00'})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={<r4=>0x0, @in6={{0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000}}, [0x116f, 0x6815, 0x1, 0x7, 0x91, 0xbf6, 0xcc4d, 0xfffffffffffffff1, 0xb, 0x4, 0x3, 0xa, 0x6, 0x7, 0x5]}, &(0x7f00000003c0)=0x100)
ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000400))
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000440)=0x1)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000480))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000500)={r4, 0x0, &(0x7f00000004c0)}, &(0x7f0000000540)=0x10)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000001640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001600)={&(0x7f00000005c0)={0x1010, 0x453, 0x200, 0x70bd25, 0x25dfdbff, "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", ["", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000001680))
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f00000016c0)={r1, r3, 0xffff})
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001740)=@o_path={&(0x7f0000001700)='./file1\x00', 0x0, 0x4010, r1}, 0x18)
ioctl$SCSI_IOCTL_SYNC(r3, 0x4)
getpeername$tipc(r1, &(0x7f0000001780), &(0x7f00000017c0)=0x10)
fremovexattr(r2, &(0x7f0000001800)=@known='trusted.syz\x00')
ioctl$int_in(r1, 0x5452, &(0x7f0000001840)=0x40000000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001880)={{0x1, 0x1, 0x18, r3, {0x69e7}}, './file1\x00'})
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000018c0)={0x1, 0x37, 0xfffffffffffffffe, 0x3, 0x1, 0x4})
prctl$PR_SET_PTRACER(0x59616d61, r0)
ioctl$TCGETS(r1, 0x5401, &(0x7f0000001900))
r6 = syz_open_dev$mouse(&(0x7f0000001940), 0x0, 0x800)
write$vga_arbiter(r1, &(0x7f0000001980)=@unlock_all, 0xb)
ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000019c0))
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x18, 0x37, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff0000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x5, 0x7, 0x6, 0xff, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x905}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001bc0)='GPL\x00', 0x171, 0x0, 0x0, 0x41000, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001cc0)={0x3, 0x0, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d00)=[r6], 0x0, 0x10, 0x40}, 0x94)

8.548361684s ago: executing program 4 (id=903):
r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0)
r1 = socket(0x18, 0x2, 0x4)
ioctl$SIOCSIFMTU(r1, 0x541b, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (rerun: 32)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async, rerun: 64)
r5 = socket(0x10, 0x80002, 0x0) (rerun: 64)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="59e274c092d6c5fe931c02d04520d745ed580d4539a9fdefbb88f4e5e066063d5e250b443d7dd7cd220e7d196a5230a94f7cad0d9441c01f12412915ad5efeabd21c4befdce3e402f484dab94e44", @ANYRES8=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008804) (async)
ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000001380)={0x3ff, 0xfffffffffffffdcd, "7f05ecbb3db4b102b4250a282f1be92462dc8137fe91e2f33d8f0750099eb9c6bf93a72019c23b8417a2e0a6abbc19ed9d4362c3f00b31f84c79bc533c885cd8aac8c31bc62f1b251c55123915940568e615bbbd44876f79ab3bf43d48435faa0817a4f80c5f51aa569df347650775f04f0de221adafebf7deed12501444d630db1a8d37f2878242d2bd382aae917c9562890456e8e2d9814bd87f879e281c21d969783a07068c089001"})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000140)) (async, rerun: 32)
sendmsg$nl_route(r7, 0x0, 0x0) (async, rerun: 32)
recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) (async)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000300)={0x2, 0x100, 0x7, {0x9, 0x4, 0x0, 0x4}}) (async)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) (async)
write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24)

7.188464445s ago: executing program 4 (id=904):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', <r1=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYRES64=r1], 0x24}}, 0x48000)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0)
r7 = syz_io_uring_setup(0x1f87, &(0x7f00000003c0)={0x0, 0x0, 0x13580}, &(0x7f0000000440)=<r8=>0x0, &(0x7f0000000380)=<r9=>0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x4, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, {0x0, r10}})
io_uring_enter(r7, 0x6b4d, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c0007800500bdb831a70000050005006e0e0000000000000700000005000400000000000900020073797a310000000010000300686173683a69702c6d616300"], 0x54}}, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000002c0)={0x2, 0x3, 0x6})

6.435782111s ago: executing program 1 (id=907):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
syz_usb_connect(0x6, 0x649, &(0x7f0000000ac0)={{0x12, 0x1, 0x300, 0x49, 0x16, 0x3c, 0x40, 0x10c4, 0x1601, 0x190f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x637, 0x3, 0xa7, 0xfb, 0x20, 0x1, [{{0x9, 0x4, 0x52, 0x8b, 0x2, 0xa8, 0xa7, 0x4e, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'a'}, {0x5, 0x24, 0x0, 0x3fab}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xb, 0x1, 0xf3}, [@mbim={0xc, 0x24, 0x1b, 0xb0, 0x8, 0x8, 0x7, 0x2, 0xf}, @acm={0x4, 0x24, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0x9, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x42}, @country_functional={0x6, 0x24, 0x7, 0x6, 0x4}]}, @generic={0xa2, 0x21, "269ca0d36b879ce4d8eed514cadccebe7f55d4d2f51c0fe3335f04950b3fdc8e4af363de4d01d37bf430882c3441c923efc326511bb17a4758ce6f0c1407df8bfdccb0a64988b5c4acd58505384e727292a4c3c42d90cf73cd712f0194351c49dbda293fbd9e586b5dee373985d1ee627ebfc1bc856f90d7d40b5aad0a2da1539aefe4f597267808f5540445d2d3260d90c1edb0ad28f8660fae8916d01c60da"}], [{{0x9, 0x5, 0xc, 0x10, 0x8, 0x8, 0xf2, 0x7, [@generic={0xbf, 0x2, "517c5cabe00d2f9e71a649563a873c446ed5f5ed647a9d020c5af3661425e9563ae3763b77cb03d0cb8da4a5ff2c0789a11daa29d39a9a6c078382c6486ebffcd9b797d1f1190f042b9196b8816a915d0938f8afa97eb3fa0edabd5adacdc1e5fe7ab9810c9e94d1c151e1a2722f44416c0693ec851e2c76d13509288b5e8d1d5e712aecad667e46a880ec453f1ec52bad65a00027db7bc9951fdbc1546459905e23ef8415dc8207acebc81e715babff5b94bccf239d1974317510b9c2"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81}]}}, {{0x9, 0x5, 0x7, 0xc, 0x47b348dd2fdb715e, 0x3, 0x8, 0x9, [@generic={0xbb, 0xb, "6da37a6ebb7c3b2339ea7665dc8f80773c43c33491cb587345d479436d4b933f865df979b0f89433498b5c48583135936ab70192fb6249211256f66baee1052b7c641d11d94c39cbc5f1ed7fa66bb95da11db3c2cd8c4fa2d449a94a100d07fd289434c1ff0bdb6d83020fb95d271383ad6aa1d1dc3395dc56145069fbf10172dd776637fcebd66872e761ed73b27ec14c9f56603c8a4cf36177071ef4092f2955f41163fa58afa75c124a0652b12f1cd11e2ef4daf58a335f"}]}}]}}, {{0x9, 0x4, 0xa9, 0x6, 0xc, 0x6a, 0xb4, 0xf7, 0x7, [], [{{0x9, 0x5, 0x9, 0x1, 0x200, 0xd, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x401}]}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0xff, 0x56, 0x6}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xe4, 0x6, 0x3, [@generic={0x5d, 0x31, "03a46141fe4c656f4787272c9769bb863629adc15293990e987fee437fa9b87f0955e5b0f651137b68874e9132ad2a037169bd35a6e640b1288340d0b1527656e567860360bd72df6211df3eeb31b9005724c079a6e001593476c6"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x8, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x6}]}}, {{0x9, 0x5, 0x1, 0xc, 0x418, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0xb, 0x47, 0xfc, [@generic={0x31, 0x0, "c1aec2567d7148dbafb9c9a19281729e9173f83cfe736d71f5e45ff181de546887ecf44bbf90b3de2aa74aa7afb212"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x3, 0xa7, 0x7}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0xff, 0x1, 0x22}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x1, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x3}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x7, 0xf, 0x1}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x3, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x7}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0xb, 0x1, 0x4, [@generic={0x1c, 0xa, "20e3a2caf17aa95134d2539a367918d39b0cb99507d58205d1ea"}]}}]}}, {{0x9, 0x4, 0x80, 0x93, 0xa, 0xff, 0xff, 0xff, 0x9, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "84e7"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x6, 0x2, 0x3}, [@ncm={0x6, 0x24, 0x1a, 0x6, 0x1}, @mdlm_detail={0x4b, 0x24, 0x13, 0x0, "2313604459f2bb3cb3b39a564cf733f4f263a224de7521191393c0398575a6bdca2fb5e0748642fb83df0721bdb02331558dc91118e0d5da61c583b02e8a337eddc8917dde4956"}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x2c, 0x80, 0x2}]}], [{{0x9, 0x5, 0x2, 0xc, 0x440, 0x2, 0x6, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x0, 0x0, 0xf3}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x2, 0x9, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x8}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x3, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}, @generic={0xba, 0x4, "0bd528eaacd3096937e273cfa745e23866b36e6b6ab79c21e31968456a7359221f7fcd75b9f4eb115e1fa00fe0c76c47918d5f8f772a9f5f6456928b63c662365af14effb23469fba8f843a939568f9a0319e095c00715fcf53f1bce8b7e4d13751a7b92cc1979d18b6e150c07f91f765c3940c85f8d034517677b5223c57d76032e442fd7134b2448ea89d1127984fd510f82ed35cee499cb5bf11ee968f52dd020a84a0f1216b79eb3bc577a7498394e8f80fa4997baeb"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xac, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x9, 0x5, 0x4, [@generic={0xa0, 0x7, "67da6ef82b0dc6dad096350dda6f6df27b6801176a956c7f705d65e5a5cff46ccfe46ec7303dac9b7e2375af407d1d3f213c3b38bf605eca0c48946198d548c94001eafee5ec092af14f101389b26ab721d3b43ce89f120e4dfa8f225096482eb100f558078ad827971aea63fab41bcc572f48512c848a012631b877aeb5dbdda22734dfd493e3972b8c5349af40c8f77c1f0f8b37c06b893c8200c786be"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x9}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0xd, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc1}]}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0x1, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x3}]}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0xf8, 0x5, 0x4}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0xcf, 0x0, 0x5}}]}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x7, 0x3, 0x6, 0x20, 0x1e}, 0x8, &(0x7f00000001c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0xda, &(0x7f0000000300)=@string={0xda, 0x3, "85d3e0a3b814cce1ff8fddeaacc5ca8728acd9afb6ba136f11c55fdf5fbbfc3af5cf9fdb2a6e4f1c4ab65fe80db33d4fa736e5be79a8490be5a7434725c05fdd8a97c38cc491343db5e3a2a0ea695bb35b48390b2a2935b917941d0d0301737e05f74ec045f05b6680c7e0dd0af619229dd0ccf2d689e15e5c41645ca753a5b3cf7b174175b34428d101fd7e967e30de3d7ee81122554de62cd4d2de0f63d67178ae9d965c7971e7ec747e3f8d27b5af9d17a7f8792e063b49c4a6591bacfc9f0aa3f406136d95ea381950b6d1a183b41dc1328ff3ff1518"}}, {0x70, &(0x7f0000000200)=@string={0x70, 0x3, "193f13cc0f518e29a6eae0acda36bc5f227a0b7559c72c87d6ca40f4e1f286c0e4b65a3f8f1f36c11fabc6bb7b5e91ebd4d63a1c9320db33da6563292e41dddf04cd555f4f44f39a1ab4c88bde1d8e27b0e881c5f6f5d094a21c05f82858871ded88d1323f627212c35889d3dd23"}}]})
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
syz_usb_connect(0x5, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001966d0f0887805a0a2c5f0102030109027d0002a200003f0904f604037e84e55b0a24010a00060201020c2408050600070d0a329ce2090586100004f408040905000040008103ff072501031000600905091b08000c27800904f5010437b08b03090509000000030004090502020002f78106090503c6"], 0x0)
r2 = accept4$alg(r1, 0x0, 0x0, 0x80800)
sendmsg(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="90", 0x1}], 0x1}, 0x49010)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0x0, 0x6}, 0x1d, [0x8000, 0x78, 0xf, 0x9, 0x80, 0x2, 0x203, 0x7e, 0x6, 0x4b, 0x39cc1919, 0x41, 0x9, 0x5, 0xffff2d37, 0xffffffff, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5b, 0x4, 0x4, 0x9, 0x3, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0x407, 0x5, 0x7, 0x5, 0x9, 0x3a, 0x7, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4, 0x9, 0x8, 0x7, 0x21, 0x40], [0x10000007, 0x1, 0x800, 0x401, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x81, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0x40009e, 0x4312, 0x78, 0xea4, 0x0, 0x4, 0x24, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x6, 0x5, 0x9, 0x8, 0x800000d, 0x6, 0x2007, 0xd, 0x1, 0xfe000000, 0xffff, 0x9, 0x7b, 0x9, 0x1, 0x3, 0x9, 0x1, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0xffff], [0x7, 0x3, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x3fd, 0xfffffffe, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x4, 0x5, 0x8, 0x83, 0x3, 0x0, 0x3e7, 0xa, 0x10000, 0x200, 0x5, 0x3, 0x7, 0x8000008, 0x6cfc, 0x5, 0x39, 0x800003, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x6, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x3, 0xcc, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xffff, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0x3, 0x7fffffff, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9602, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0x4, 0x5, 0x2bf, 0x3, 0x3, 0xffff3441, 0x2]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022d00010000000009040000035883b200090589000000000000090585"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x23, 0x4, 0xa, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$alg(r3, &(0x7f0000000a00)=[{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000008c0)="86e67979cc19b2dd8d374eefed7d7e4cc208df1a52b64dc78705138aefd6487506d21be80fa73b975e66a052712dbf2e0f5fd4413fcab92817fd45b2f54497ba3b0ea6278116ba20a79cb737f230e65872f4e50077f5942e7e8c374d2e0a88f65895a5dc623df9bf047c7c2d8838e541863a9687d13c24af", 0x78}, {&(0x7f0000001140)="d523395fcb8177dbd536c399e2b2efaea7a9214e568c2f7742e1a4dff9fd5ec90c6c7f738ea65752287f7eb06d7ff13debd29b094ce8aa0b8518fb4e203b4a7df1a10cd17c93ecb4244127ca043c9dfda94fdc0b02074ad3c7773ca9e96a02ff4e34b77dfd3d588b23edff19f06e9425141cc69113bb51f1bc7cf329b68c5a596d16826d1b26212eff9a3f0a8175e5d37c4a7b616fd742e2b36e9cb88e08fb876b3aa3dd675976462ec1889c0c412f4f1f70961a8f9bc631f872a66bc75cef9add0854d0601978ba889d8704c5524032ffc98a61a5be3c81242c78647a6598f81eb8ba10c363690d089e47c18704076d96aa6f6ee49dab3b59acde543a34b8c1a4ff893564d7046b75c5502435d2d04a6002f70b3ddae54e4c4ee4612f3f2c6096941da08ee4b3e526dff94cd8732b6505553126cda95254f2332273b781ed872723ecebc01e892dc0a2da2edd143b6095fc4a845d39ad2cc7f05178582ee287dd552913c76129c4de3dd004d67140cc404216a903bd210fe5637c1f4fb28e40ebcf982422ff90272bd9101404ea67bfbd9745c44afb2aee835fe983fe1c909a9b072898f097882a647865928922aa188d6462fb648547ff176101ea0e1e0487d8f34dba7de54dbd5140857ab154e9068d6d3ace2cc491ea4db86f462f845f78e8015802e88b37b64e3edf56f2b2b487e59c3706d3cc43835fbfeb0e488c18925c6cf2e575b6b8934a01e776b2a1d40a32d2beb845c3ac46ab3f7f793c3318823fa59ab2474c810cd062080508cbf66353c67a761382cab45c1b7327ca64aa79940fdd277e624f2fb62f2ce27733fd1a0f60092d72fbb411fffcc78aa9da8e1183cf5c1506d51482638b89342b47dc8a30fea480a0f7d96ba6831dc901353a4d38c0b5a44f5b104a8e6313e99f41ef791286d9e40ccc0a1540272831504f675860c968c15737b04e30ab29eec09b1939e978122b9f3a6a50a1a1224ffc8b22f94c44e16039bc106bec177af159a34419a49e846176ced70a3a45693b070bad561d10da56f54df391848cc2f1bb1558dbc26363c8d92a6eeb24eaf76e5fed3a20c289799f604a137245e85cf85078db3702f38682813be8b105f16cafd2a13bb21386a21ed1bd7e35e3324344cc7c65174cca06407083cea63949c7836aa0c3151c0dd63ed97c90d352a3ddfa2cd2d24023047ec1c52a9ea9db948467172ff4a21999956d0577672ad65021fd5d7924ef147bda9aefeb2361d148ecb97357a8721e4e9f336454dcff4a9fd0f53d2d9b3fa26ae6834ea2af027db0d7cb6b8cc8179dfe72990396facab81a5505458baffd55ab4ec6fb0564783f8124821ca322f68e138cda8dc9ff498d72a5f9c03d58633b63ede51e5bcbf6ce6837caa3e7e32fe83cc2a66106f602e34a596e266ecb6bed62d525511f3c77f16e0fc10d4bb0f4e3ebfc535f6154d3648a7c80910a06c7852585dd24a7492bd346d26b175500b42a50ae0468cff939f18b6c1e03bba8c9204d55cfe363a8cbed537873c92bf54e18a5cceecba8391ce419a0b9351f28a9b15313aa0b1cfff0923eb1258744652fad16e9f4787ebee9abc30a3708ec3a2774d751db31b2bd126a55c95d3075fc6494af2d21e671f8f4c3d94df5846abbfb3999c5b2b62f08381bbec79b59e7a72f4f7f9165e59ed16632aa934eff68a6d877a62ce495b8a7fac67fa5fee0d39d32ccb2c0549b0f88c803c9b54fcaf92d53f533932cd16634a5ccaa3ca72ffa8a9123f1083d402ea55a5ae252d60b9360f6b6c121cf736b1c362a0b7caabd8dc72c3456242d5d016e6c221a5cd05c26859a6df5179c8ec9b1f67487d9790cb303530b6785bf9a351235424e382b0e5b6ea452aeb224d23fd9347f5bc7732ab112c5dafba34a1cd6f52d57b04434892107b8b27b6da6193a935e07db87ffa76f40eb332bf274f41e8e44d8ef36029e637c682234986b2f602fc4da1772ddd9449e4eae17f62399afe7a144ae9996da968c482e9bef9da5b417323d8a5cb895487fd7090fd89e2e46035adcf9b9f46e2c28ca34ce4157908347adfbb712aa7ef30bc0710d14325bfce27d4be77c027705c3b1ada74cb03fbf705910ef8229a7726c4ca19566f880ad667e459d9f79d5ca3a2dfb0a7456dff031230a31aebd63d4aafdf4285b24656e36d4517f11c1356d8a1cd7831c1f32c179aded479d79737e1d13adf9d0a4658d123f6819809ab765173eb6f84ca41a662be19d7a18dc13f18b56e11554132bc942bd7fd9caede1f51c0028af20f56a584de69c677151803915eba4aecfcc076e0df7e9835b180aad36c510b808171b3d49628bab5a4e579e17a6b8d138013a299a214f47367599810ebf9c03e6da86417bd5f4bd2263c2cfe4a5eefb8aba45dfd1fb4bdd4492d8bef2312a1dbae4bb2e3696988e1f4139d35bd5e11dc2b9d54e6cf27006ee1a96b91a7f98c3e846e4190e4dd31544ad77746a5860dbc9332138b334325de40794626ea5e666471d2788e6823d0d38f9617cfa8aac8d6f5af4b15764ce9d7fad260aac22a4210df0dd0c68fc54f67ef295d39f57cf98d7b72ebb897c77a3976772a0d213474025a10a9932dfe9a5c1b09541f63a30be368dd2c0c085c4ef51246f73e8411803e5c87e48ff6cc9fb83877ba92151574cdd7df6d9c47001f837ce7805d383e1bb4a5d96b964817fc3fd68cc0d00422c9678a34c2e728cb0c3d769a9c5436a546af50b40145d197c16ba6027ac47e9ba3f4e02b07c6fd28538f1ab84c98896205ba1a4f5d93ed8d7d3ddeb0118aa255c1d91ae024a720f85cf90bda4b53b7d0a7a88f21a0413470ae2e3c75f3507c8978ee681f5cbba53fb6dab1e4304bc99f450786ee7396af1bf8f167a4f133a78b5bf0576632be2c27bf601a62589472e59eee4ffde3c5f521be048fea131ca1e2fb85368ecbf8ab3e4d0f8f5f758844dfe1b4817769f149a6cf9cd3fdadeed73a8ae38a54f7018787d891e967bd06ef245a415157e04e3cab772adb4f81a71dc6973284a36b41c51ebdbbcb9f405c6f9d4736b0f3f7087b2b89e72aa4c9619807cb160afeaa9f9cd9bff5db4cde44cb63a793a920978101006c89fea5b341c247fa97e21d482d1dcf246049c5643ac6f99da34b95bfe620b3af78972e49ab52c44ef28a91202d1275c33ece79838debade6535adeb4bacfdbae01de75bbc5bf44f437bc31bb525628f40587d496ef4a4cc7d686dc371a0ae101dd06dee27a9ab947f0abe4eb834b6ce0321ee39414565956fa3c1a49ac17b509a383a79805f284c1ba8b94e4b2fcf580afbdeb8bbb162e117fe3881fa0d5ec8297d706a61b0e529c74e6a4f2ad347f8510061a14983d4daf0cb602e35f25585b5838012765a1b7fb4fe09c7d568b2683720d4bea53c16fe766305579eb1704769cd518c945d9591ab2b9acac9edfe564f06e44b1fa960c1a2526a481d89e3725cb0f2f6c41f7d7571070d53c9fed50057ec0e5e437634286571fc69d4ee9bd876ce7f45789503bb76582b92206f630471c50277b71d96e88f4dbe62768450ea599bb9f5997b0b51560882db5ed85dc19149c7ad9e26b05e444ebcd779cea27949a17f299057aee31b8019e9324326e602c9543777beca06352300988d910c89acef2307e367a182271da50b17a9464be157dcefb5fe69a2d50ec2be619239b23cd15a13bf8448f1c899f4033c4d09cb7448c17527faa535a13636a3ba1b92d60ecc5075dcc13893e0662f8b11f86e4c865ba90959a5b30a64b4dd4627288392b035c10588c36bce52df4fc5e2529641405fc4aa11e25bb0dac3a23adf6359f7238ee1c33993520efa47a1db6195066c91f32bc265b664218a8685113694b547ad0be529cf20e0a750b0a8b18526da76942fc3850b7169772786979b19d22801761c129890389947483e37675b441f50480e699d424fb6848ce912faec6fde25607ba4fcc9c3a659dd65233ea956c1e97de6f7c3d600f08918d5db184b3e7e1e7074adefeca303ba2fde350269b5ed3f7593885ce59e4606b8d409f1b814642668c8b3994ba94dac1e982a77e4c4217a0aba1bc9076351c55a355c65a4ea5e269be137e91fd28f24406085efd870ea96f8fd0592ba4157a736a10aca4c8c490884c1d5296982f1cfb21e022875f6818d8d8fed7cb6eba583cd8a614ad2401bbfbfb1c9265bf70b22ff4412cc0d265babf884302a470d6d42da5a76d7ceb61bbbf01105a11d81361920944e5b7ae8fdec6782ca8a65e61e570a56074763f66d4443e6bb58e2a10215a2c2516088182977085b683142f0fa3b9ab38754f13fb67c003a052dbcbfc5278b9a3cdbf9c16f36126fdae772fdeb0bcbd9cff82d442e37b7fd2c6f58d9bc67e14467fc87af42f0e372ec650c828c9207ed41ac87b9a047db2e8921d7f0f09c0f3ab068c916d5f66f307552bffb0892fbda70a346873e6b1c8ae3ac20b6476d46731f8fa9cbd060f0f018aea7e9d8c44841f81280e4f996851c04e9f95cc47ec5dcad217493d72a6061b18a28d225c7de75dc64bbafa9be5fe8a2ad01ffdc6d1dc28d9d97db0b8f078026f021002dad5836e8cce8a0fd6a7748fa0cec7fa04da909e687d03c03a217991b5f46d18b9acdfdda7584fe7bae222987524dd1b47036591be999f938aea40890cd3a3d51ddd845fc30c4e2104c06e91ea1c495fff4833c8fe8eaf7ab486f2bfd6ae420e04fae11ac7370ae091d42f798aa0752a43cbb748b551e08bbc2677b8238e1c251e3ed79e081cfafb1b90cf60b7c9da6c9d5d13f559df0a70ae85544cbcb718e757c8521349cd7a83b3671142c3e156655e5f81e1919f90870bc52144db9ac113f6042218b6bcd27e940d59ddf0552aaa408a37d4362c76d246e290d78e9873f627c52cece6636d8b940f214fafc34767f435f08edc128dd2ab3787bb2aa1153c436a27a283288f602a7713e6946c3b1246e0ddd25c03cd236f5677cdab44e4427d7efb3d3331319458863ecc385e237a03db8d0264f6c058b093d0fa63e3df25582fa98a4ed29b5b9f75f6d2febc446605121eb120957208d08d1371465af32d7d94ef9135d9f05b29c5a75cc1aeb1a3901e3fc6c265c6d9b719f0c82fe9026a9ae92c3bbef4b8c4cffa923d364d9e4d8f3a63fd9699af827b91475274d6d97e26388599446dca7230a235a71878a36b50117c1fd2e5d47df4ea54cfc9f3b017220bfc717475e274028b97e83a593687920a5aa1e131a1017cdb3c102ec87de3dacf5e429cb1b67b5ff9db22e50da77dc72b60337987c0cce29706866baf73c087a1ed0ab34486748463e5c27d26059c00baac209d1fe5857f2978aec11309c756daf06f0a6a53668bb126c65d41012c2ecb49dd547c6eb43a6e91477eb5707ff7eb39534e1ff15c4ebf1e0bda73d1a60724588363bc93545c078865e51ebf1f3b9870ab8faaa548a0550cb4400e5508080e33581e49aa2a7ca3576d513eb76b506ffbd72f024d71cbd9a275fcfd04597e008aead55e9843af00739f00ea22ac1b139a26f9e4caa442ea23317ece26d8b669f17417e3e88ef933621c556a86a856312c3356ddc676422463ef604f1e03d2e954b1c354f19eaa7a33bb66568e44c6699852cedc3cbc924c3be3ea09351b30feb4b811a7226500a44687ea0de4ff46293eb9f0e40b842403e9da77c204c22019937e9a53cb9239b5a8b16d3e49fba022d362dd7f9e7992d8f778f3ebcd4a418eaf268b713caa592c98b56ed14738e15bb82030b20802c36bbe411ac62d74b", 0x1000}, {&(0x7f0000000940)="575dbe29c93c67a38acffa025003ec6dbbbe32cbdcb7ffe2cd220210600196adcbf4cce04af2822b8092440d286f34b66894fde02b0bb7f9fbb74a8cb46dd7250ddff6b0e059cd40659dc225c79179ac9cd70aa27b9a5e3724b554027ce39c4bacc7bed9b21665b799c61eba46da60b375e184f1244a08033bb070e16c69607fe991db77d8042ec83d862a9b8fd0f1503a68c19c1993cb77a08f4940d8f2a573", 0xa0}, {&(0x7f0000002140)="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", 0x1000}, {&(0x7f0000003140)="d00b9e30e6f07a2cf01f8f285c0d1b153eec5b4e190e79f6990f436f9b208e870e0595cf35537037394135a8fbbe99e37138a9316524a50a304f09d040f3643c96252a595f54db72340966c26af619f1575626b13f4bc67de230267cab0f3860bc5dc8b9b8379883274b4b745d4ad8bf", 0x70}, {&(0x7f00000031c0)="ff7a64e891605fb536a654fcd60cd44aa995f172fe065d17e221eae0eebf9b46ef0882a91f964273f5b4f273f9b7b7de334f12af86eaf296ea2473ea68ddcec306076a2fa097a32fb701431221d0fa6f12cd5fba998e594d5fcaebce5d2ae608274f3bd95c2e56ea4f16c43af018c5f9011b2280b75b", 0x76}, {&(0x7f0000003240)="6c732a0534ed36e7ffd272b0be15fc800342427dd234152fea46d6576eb7caf8c50eef3cc7ac5970244401cd426dfcb801fb89cd7f259262e469643d522ece595eb38c7ac0a20e95e1807ee1d2", 0x4d}], 0x7, 0x0, 0x0, 0x1}], 0x1, 0x80)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x80)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28)
sendto$inet6(r5, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0)
close(r5)
r7 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000002c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0})

5.750579266s ago: executing program 4 (id=911):
r0 = syz_open_dev$usbfs(0x0, 0x201, 0xa401)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x1, 0x2f00, 0x0, 0x3, 0x0})
syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c90"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x15f1, 0xff98, 0x69, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000280)={0x0, 0x16, 0x6, "20fc94453a41"}, 0x0, 0x0, 0x0, 0x0})

5.435290763s ago: executing program 2 (id=912):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x1, 0xfffc}, 0xf, [0x4, 0x101, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x4, 0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x1, 0x3, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10000, 0x5f1], [0xfffffff8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8eb1baa, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x200, 0x0, 0x2, 0x26, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x9, 0xffff], [0x4, 0x3, 0x8f58, 0x465b, 0x0, 0xb67f75c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x7fffffff, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0xa5f, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x41, 0x0, 0x0, 0xbd, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0xb, 0x0, 0x1, 0x4000, 0xdffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r1, 0x5501)
r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)={0x3, 'ip_vti0\x00', {}, 0xf})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000048601, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r5, 0xc1004111, &(0x7f0000000e00)={0x6, [0x3, 0x1, 0x200], [{0xe, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x4, 0xe}, {0x0, 0xff, 0x0, 0x1, 0x0, 0x1}, {0x8, 0xffff, 0x0, 0x1, 0x1, 0x1}, {0x3, 0xd1f, 0x1, 0x1}, {0x3, 0x5, 0x1, 0x1, 0x0, 0x1}, {0xfffffff9, 0xcf26, 0x1, 0x0, 0x1}, {0x8f, 0xcb0, 0x0, 0x1}, {0x9, 0x1}, {0x7, 0x7, 0x1, 0x1, 0x1}, {0x5, 0x4, 0x1}, {0x1000, 0x10, 0x1, 0x0, 0x1}], 0x6})
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
syz_usb_connect(0x2, 0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501", @ANYRES64=r0], 0x0)
write$snapshot(r0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000000c0))
setitimer(0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
unshare(0x42040200)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x2, 0x8001, 0x8000, 0x7, 0x3882, 0x6, 0x8, 0x0, 0x8, 0xdac})

4.837902293s ago: executing program 1 (id=914):
syz_usb_connect(0x2, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101efff020dbc123c050d4951bcca3fca6f3bebc2afe9"], 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x10, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0xf, {{0xb, 0x24, 0x6, 0x0, 0x0, "47bfb1e87de4"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7f, 0x61, 0x4e}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x14}, @ncm={0x6, 0x24, 0x1a, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x6a}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x81, 0x20, 0xb2}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x5, 0x40, 0x2, 0x0, 0x8}, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="050f34000403100b03100b032d8e1a41ade146885fb18a3c452775aa"], 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x414}}]})
syz_usb_connect(0x2, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101efff020dbc123c050d4951bcca3fca6f3bebc2afe9"], 0x0) (async)
syz_usb_connect$cdc_ecm(0x3, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x10, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0xf, {{0xb, 0x24, 0x6, 0x0, 0x0, "47bfb1e87de4"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7f, 0x61, 0x4e}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x14}, @ncm={0x6, 0x24, 0x1a, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x6a}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x81, 0x20, 0xb2}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x5, 0x40, 0x2, 0x0, 0x8}, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="050f34000403100b03100b032d8e1a41ade146885fb18a3c452775aa"], 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x414}}]}) (async)

4.48994853s ago: executing program 5 (id=918):
r0 = syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="4018780000007be4ae"], 0x0, 0x0, 0x0, 0x0}) (async)
close(0x4) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x2000019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd', @ANYBLOB=',rootmode=00000000000000000040000,u'], 0xfc, 0x0, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4d, 0x0, 0x1}, {0x4, 0xfd}, {0x6}]})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
r5 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xc70, 0xf00d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x84, 0x40, 0xf9, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x0, 0xa, {0x9, 0x21, 0x5, 0x46, 0x1, {0x22, 0x76}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xa9, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x7df, 0x9, 0x1, 0x94}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x4, 0x6f, 0x5, 0x8, 0xdd}, 0x3a, &(0x7f00000002c0)={0x5, 0xf, 0x3a, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x90, 0xd, 0x2, 0x0, 0x2}, @ssp_cap={0x24, 0x10, 0xa, 0xfb, 0x6, 0x4, 0xf0f, 0x5, [0xff30, 0x0, 0xff0000, 0x0, 0xff30, 0xc000]}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4}}, {0xb4, &(0x7f0000000400)=@string={0xb4, 0x3, "81be7e4145bf2ff41f0c380d2f0ed2df528a643b28650fd62663ed1819e9ed1132432ee1aac3db82603e929b17ed22846e8a6157dba8315cb637d87e6190284eb909a6fe0abe71273e69ae04cb9c99b3c87e3ed33297e612501316440d45c1f6ad73ee5e5eb5c264a2e7581b30e183ecea8e880d993db81158e983439df77296aac40abc46e5e6a48193a5fcfe70e5984f507fd248cb3a6303aee0968fa88a927228d6b2b9c6e1235a655aa9fadbc0c1b019"}}]})
syz_usb_control_io$hid(r5, &(0x7f0000000600)={0x24, &(0x7f0000000500)={0x20, 0x4, 0xe, {0xe, 0x30, "ec34122b93f0d0cc8810aa09"}}, &(0x7f0000000540)={0x0, 0x3, 0x32, @string={0x32, 0x3, "9b0eeba6eb1949cc153c0b4a1fe4dc267917a41f002dc3a48b16ef701e3124dd3c1fa3dd1236fdec4b3ad711807092f2"}}, &(0x7f0000000580)={0x0, 0x22, 0x17, {[@local=@item_012={0x2, 0x2, 0x2, "b3c1"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_012={0x0, 0x2, 0x5}, @global=@item_4={0x3, 0x1, 0xa, "c812a051"}, @global=@item_4={0x3, 0x1, 0x8, "8cd66c8f"}, @main=@item_012={0x2, 0x0, 0x9, '7h'}, @global=@item_4={0x3, 0x1, 0x1, "30850c4f"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x7, 0x1, {0x22, 0xecd}}}}, &(0x7f0000000800)={0x2c, &(0x7f00000006c0)={0x20, 0x17, 0x91, "5d1a935a6d82de6829879ec7fae6c0d73b9e3d4debb0743fc5c471cf27c23f854f1b5f9791dd7bf523eeae3cf6a89089847006732cc062d6c6adb5116a4962b3591df95416f0a876df603bdec123df8f00789add57e1aa1b99423e53e32630c517327187e3d72334541bcb318847f107c9e0a8978b42354b519470ecfdacf648c35d8e072933c2df16cb593b181d97d0ef"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x91}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000880)={0x20, 0x1, 0xc9, "01db8fd8b28050237e88ffb477d447737ffedc41c7fd16d4aab22edd9918253908d06f65c960d3efacf9b1db465341b305eecd1b2cbe62b7013c55d86e891f89f26f262334436ce6d8e9489ff63dee6b679a148554ea0269cd58984f068537e735cc1d5e2f969ab5e5a783559785684d631481e9279aafdd31a9eb8c73d45106cb2a83a7d7acd7c2e23e074dca11110c0a7f3cdaaae65250234ec4c16a085df001b5cdfc137fbe0efbee8d00abccb4a31920adee5bc505bd71661fddffe611e92dd7b3f2e7d3a64101"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x2}}) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc53f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x30, 0xfa, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x958}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf2, 0xee, 0xa}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x300, 0x3, 0x4, 0xf4, 0xff, 0xee}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x10, &(0x7f00000001c0)=@string={0x10, 0x3, "3814b7cee2ed90fafbf09f7b0615"}}]}) (async)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000003c0)={0x0, 0xe, 0x15, "4eeaa84d5a047b8d9a65feb19a4ab05d8b18f120d2"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

4.400219121s ago: executing program 0 (id=919):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)={0x70, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]]}, 0x70}}, 0x40)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r8 = socket(0x10, 0x3, 0x0)
close(r7)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4.397507352s ago: executing program 4 (id=920):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10000000000, 0x80041)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0)
mq_open(0x0, 0x0, 0x0, 0x0)
prctl$PR_GET_DUMPABLE(0x3)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x800)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x4, 0xfff, 0xfffffe0010000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="228759f8fadbc1928108ac278e2a1b5cb469eccaeb5354a20039a2510728b4d5b470774bb30f118494891c0c3fca75e3d61fbea33e9967e3b69e65092427d26f424ba6b328158c487f54a609341cd19bec41686492e797898113490df702"], 0x113c}}, 0x48004)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)

4.197590742s ago: executing program 0 (id=921):
r0 = socket$nl_route(0x10, 0x3, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'syz_tun\x00', {0x8a6f7609}, 0x1})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
memfd_create(&(0x7f0000000480)='-&:\xd6\v\x00\x00;\x0f\xb2\x86NV6&\xb8=\x94Z}\xfaW~\xae\x87\x88\xea\xde\xa2=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x19 \x8a\x8aG\x1b\xacD-\x99JD/~\xd6\xb5m\xac\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xc9\x158Mq\x01\xe1\xf6#\xc3\xaa\x9a\x9be\xcd\xf2\xde\xccx\x1f\x0fnV\xe8C\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\x00\xe8W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\\%\xbb\va\xab\b\x05\x7f\xaa\x92\x87.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a', 0xe)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$cgroup_procs(r3, &(0x7f0000000140)='tasks\x00', 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0x41f6, 0x8000, 0xfffffffe, 0x183})
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
eventfd2(0x7, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_buf(r4, 0x1, 0x37, 0x0, &(0x7f0000000280))
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r5, 0x0, 0x3})
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, 0x0, &(0x7f00000000c0)=@tcp6}, 0x20)

3.45850121s ago: executing program 1 (id=922):
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r0=>0x0})
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0xfffffffffffffe88, <r3=>r2, {0x9}}, './file0\x00'})
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000640)='westwood', 0x8)
bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x8000000}}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20045005}, 0xc000)
r4 = syz_open_procfs(r0, &(0x7f0000000080)='sched\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x1ff, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c410901000000000000109022400010000000009040000010300a22e062c9caffa0000092100000001405d9d1149"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x34d4ddce7c5c73c0}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x20}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000580)={0x0, @hci={0x1f, 0x1, 0x3}, @isdn={0x22, 0x0, 0x2}, @vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x752, 0x50d})
syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0})
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0})
syz_usb_control_io(r5, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)
r7 = socket(0x10, 0x80002, 0x2)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40090)
bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmmsg$inet6(r7, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000100)="9a", 0x1}], 0x1}}], 0x1, 0x0)
syz_usb_control_io$hid(r5, &(0x7f00000003c0)={0x24, &(0x7f0000000040)={0x20, 0xf, 0x27, {0x27, 0xa, "7a5541909618a6c24e44fc01529dcdcca01b66bf2bc733021f8c1098d92dcc8487437290ad"}}, &(0x7f0000000240)={0x0, 0x3, 0xc9, @string={0xffffffffffffff58, 0x3, "a33ab277c66047dc842802156b7e4c943c4f1b2eaa3b732a8105a2ed7b0dc01a8da912e7f036a1ce4390daef69a515d92dfb6f5afe4557c535b155d162c4e632c62c13014e943152d81c4b4b0511260bee3df4c6a1b5122ab44b76a0625b00f087f70d8d3ce7feb778c086f9f41ea49d397525159b3e28b5f0a25da31163af3a92b0ba13de8e18051ce6d4aa58d86b057f1ef1bef9032910a6b6a9ad12ba9564b1706519b6703d3daae9f26a59e5f36022eb3b0d6fbc61b18f09795c47754578c322b551e34c0a"}}, &(0x7f0000000680)=ANY=[@ANYBLOB="00221500e50093b3d3bf774962412f47910700000000000000000032cb93ffc1eb0a8c3528f550"], &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x3, 0x1, {0x22, 0x42e}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x20, 0xd, 0x3a, "4dcf2a9e3d75ab2832205f8484009cb29061385b87ad3e77d66e87c5c71f3a6b969386f35db8379747d0dabe6195088da8ff2f7e4d0882fdcd8d"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0xe, "ad89bdb1c45db8301da01f0e76ec"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x8}})

3.256183632s ago: executing program 0 (id=923):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async, rerun: 64)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x3, @loopback}, 0x1c) (async, rerun: 64)
set_mempolicy(0x4002, &(0x7f00000000c0)=0x4, 0x100000000) (async)
shutdown(r0, 0x2)

3.215838403s ago: executing program 0 (id=924):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000020a01010000000000000000010000000900010073797a30000000000900"], 0x248}}, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
close(r0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="d80000000103010100000000000000000a00000418000b80140016000000800500000286000000014c00000000ac000f80060081bd70660000080009400000000613000b0063616c6c666f7277617264696e67000008000840000000027c0002800c000280050001001100000006000340000200000c0002800500010011f477329800018008000100e000000208000200ac1414aa0c00028005000100010000000c000280050001003a0000002c00018014000300fc01000000000000000000000000000014000400000000000000006b0000000000000001"], 0xd8}, 0x1, 0x0, 0x0, 0x20000005}, 0x8014) (async, rerun: 64)
r1 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) (rerun: 64)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRESOCT=r0], 0x1df) (async)
write$binfmt_misc(r2, &(0x7f0000000000)="94f95010614676c0904776e2204a895b01f1fc7e942ffcdd84bdf9afb02940214a5e29", 0x23)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x100000000000000c, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be6c1c551265406c7f306003d8a000000000f1ffffff00"}})

3.0902619s ago: executing program 0 (id=925):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_newneigh={0x34, 0x1c, 0x401, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0x40, 0x9ffac2705d37b0b7, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @NDA_IFINDEX={0x8, 0x8, r2}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x20000040)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32=r2, @ANYRES8=r1, @ANYRES32=r1, @ANYRES64=r2, @ANYRESDEC=r2, @ANYRES64=r1], 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32=r2, @ANYRES8=r1, @ANYRES32=r1, @ANYRES64=r2, @ANYRESDEC=r2, @ANYRES64=r1], 0x0)

3.019908105s ago: executing program 5 (id=926):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x0, 0x3}, 0x20)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0xc, 0x3, 0x4, {0x3, 0xbde, 0xb, 0x10000}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x24, 0x3f, 0x1, 0x70bd2c, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xa}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8)
sendmsg$sock(r6, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7})
r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000)
preadv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000400)=""/193, 0xc1}, {&(0x7f00000006c0)=""/224, 0xe0}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f00000007c0)=""/241, 0xf1}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f0000000600)=""/98, 0x62}], 0x9, 0x2, 0x6)

2.377867206s ago: executing program 2 (id=927):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000006b00000000000000000000239a00e60000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0xf, &(0x7f00000004c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xd87}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], &(0x7f00000002c0)='GPL\x00', 0xfffffdfe, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000006c0)=""/128)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r5, 0x400, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
r6 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000180)=<r8=>0x0)
socket$l2tp6(0xa, 0x2, 0x73)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c)
writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="7024a58cd229cd709d5a64898afb463fa0a199c09c98ad8eea9eca1460f5bb1b55661e9fef6abf69c34c0d0d9527e6599959aa14d2f34bf5793aa6b950ce2a3e5018ebf78a4533a0457a42b1b341c6209fd6145f232b7de421", 0x59}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000540))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f0000000240))
syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x12141})
io_uring_enter(r6, 0x75fa, 0xe475, 0x0, 0x0, 0x0)

2.067226892s ago: executing program 2 (id=928):
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) (async)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bridge\x00', 0xfc37d2a745cda5ca) (async)
socket(0x2, 0x80805, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x20000004) (async)
r0 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1}) (async)
io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) (async)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffeca}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000808) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.711524497s ago: executing program 2 (id=929):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000111400012bbd7000fddbdf2508004b002800000008003e000000000008004a00366baf6608004b002800000008003e000000080003000100000008004b002800000008000300000000000800f3cb846c000008004b00000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x48004}, 0x4041)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x10, 0x0, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0xffffffffffffff9c, 0x3, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001000/0x4000)=nil, 0x7fff, 0x0, 0x0, 0xffffffffffffffed, 0xc, 0x0, 0x0, 0x24})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", <r6=>0xffffffffffffffff}) (async, rerun: 32)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000000c0)={0x3, "5a1a3fb958ff552002c2b9afdfc2f8295f5258e6bb806cb5da2125fcc727ec29"}) (rerun: 32)
dup3(r6, r5, 0x0)
r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000004480), 0x101200, 0x0)
preadv(r7, &(0x7f0000005580)=[{&(0x7f0000004500)=""/49, 0x31}], 0x1, 0x4, 0x3) (async)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xbc}}, 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000280)=ANY=[@ANYRES16=r2], 0x0) (async)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40)

1.620799214s ago: executing program 1 (id=930):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
fadvise64(r0, 0x408c, 0x5, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x4b3, &(0x7f00000001c0)={0x0, 0x80086e1, 0x2, 0x8, 0x1}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b04705820"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)

1.548820418s ago: executing program 5 (id=931):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0x8000, 0x4) (async)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r1)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000006ffe0b000180000003001100400000000000010070636900000002003030303a30303a31302e300000000000000b00a2fb00000000110005000000000001007063690000000200303030303a30303a31302e300000000000000b4ca84be20000001100ffff0000000001007063690000000200303030303a30303a31302e300000000000000b000080000000001100020000216c1b224847da615a7a3e4f61445c00"], 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40010) (async)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace(0x10, r4) (async)
ptrace$peeksig(0x4209, r4, &(0x7f0000000700)={0x0, 0x0, 0x1}, &(0x7f0000000fc0)=[{}]) (async)
r5 = fcntl$getown(0xffffffffffffffff, 0x9) (async)
r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='#(:.', 0x0) (async)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) (async)
listen(r7, 0x0) (async)
getsockopt$inet_mptcp_buf(r7, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) (async)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r8, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) (async)
r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/mnt\x00') (async)
r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="64010000", @ANYRES16=r3, @ANYBLOB="000829bd7000fddbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r4, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d300000df89602e", @ANYRES32=r5, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r8, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r9, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r10, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0004000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0002000000"], 0x164}, 0x1, 0x0, 0x0, 0x40}, 0x200448d0) (async)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})

1.500209366s ago: executing program 2 (id=932):
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x591942, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xaa}]}}]}, 0x68}}, 0x4000010)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket(0x10, 0x3, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0x1, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x3000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd1000, 0xdddd1000, 0x8, 0x3, 0x0, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xd5dd4000, 0x2000, 0xe, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0xa2000, 0x800a004, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x5, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="000014000a0001000180c2000000000008000f00"], 0x30}}, 0x0)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000003c0)={0x8}, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = dup(r4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c)
sendto$inet6(r4, &(0x7f0000000100)="cd1a27", 0x3, 0x40004, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c)
sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r6 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x13, 0x2, 0x2, "9611ba5a0000000000000000e8f7fa00e9ffffffffffffff83df00", 0x20493859})
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x2d}}, {@remote, 0xfffffffd}, {@private}, {@dev}, {@rand_addr=0x64010101}, {@local}, {@dev={0xac, 0x14, 0x14, 0x12}}]}]}}}}}}}, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)

1.347951042s ago: executing program 4 (id=933):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x5, 0x401, 0x0, &(0x7f0000048000), 0x21000000)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5)
setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000280)=@gcm_256={{}, "5462cea39b7c1140", "c9a3315839c227100427fbb86ae6a41547451cdf2031bd38385f6ba0bf0705a4", "5d3e853f", "33fa4a8f2198c12e"}, 0x38)
setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0)
getsockopt$inet_tcp_buf(r4, 0x6, 0xe, &(0x7f0000000140)=""/104, &(0x7f00000001c0)=0x68)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404)
write$sequencer(r5, &(0x7f0000000040)=[@t={0x81, 0x8, 0x0, 0x9}], 0x8)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe)
setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4)
shutdown(r2, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000101c0003"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000440))
recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)

1.317449178s ago: executing program 5 (id=934):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x20000091)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69000000001406fffe800080000000000000000000000039fe8000000000000000000000000000aa4e204e24", @ANYRES32=0x41424344, @ANYRES32=<r1=>0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r3, &(0x7f0000000380)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'BF\x8a\xf0\x13\xec\xb8\xb8\t\xfe\xca\xba\r\x9f\f\x92p\xf8\xe6\x9f\xb8s.\x97\xdfD\xcb\xf0Vr\xdb=\xc36\xbf\xbb\xbb\b\xbf8t\xf8~\xd4V\xf1K\xf6\xf4\xafi\xa7V\x98\x0e\xc9\xc7D\xcd\x05\x00\x00\x00\x93\xbfS\f\x81\xae\x8c\xcc9e-\x03N\xcfZ8\f\xb5\x87\x83\x80\x90\x16U\x81s\xb8}\xed\xd1\x95^\xb6i{b\xbf\xcf9\xa6\xf1\xb74\xd2\xa5\x05-\x82\t\x10\xdei\xd7', 0x3a, '\\', 0x3a, './file0'}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}})
r4 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'veth0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r4, @ANYRES32=<r6=>r1, @ANYBLOB="003000000000000014001a80100004", @ANYRES16=r1, @ANYRES64=0x0], 0x34}, 0x1, 0x0, 0x0, 0x2800c000}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="50000000100001040000000000000000000000003a1266f4cafb9467b6013dec20eefbfc72e4cdd400e7adb3274a8686fc7908ed36ffed2d5875139a784a049cbc043fd5435c7883382ece5b93cf9e9da26a69b0726506c6626927aae087dc65f12d3d8b8598b195fcd830bccae44d4c39c0e547433def12fb8cfb5f6565640206c3df128594841b2c9fbcb93e93a6fd1c4628801c36e10e26758de7c57401b681e7ca5a69222d8b498dc7aa9318be32b8b2190cf4ac87caa2838455a76dcdbc5ce6e652eddf", @ANYRES32=0x0, @ANYBLOB="3f00000000000000300012800b00010062726964676500002000028005002600000000000c002e0003000000030000000500260001000000"], 0x50}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r8 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x3cfa, 0x0, 0xffffffff, 0x69}, &(0x7f0000000200)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000480)={0x0, @ethernet={0x306, @local}, @qipcrtr={0x2a, 0x1, 0x2}, @nl=@unspec, 0x3ff, 0x0, 0x0, 0x0, 0x83, &(0x7f0000000100)='ip6gre0\x00', 0x3, 0x7, 0xfffb})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r8, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r7, 0x5501)
write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="5201f000", @ANYRES8=0x0, @ANYBLOB="00042cbd7000fbdbdf25020000000c00018008030700", @ANYRESDEC=r9, @ANYRES64=r8, @ANYRES32=r5, @ANYRES16=r11, @ANYRES32=r5, @ANYBLOB="08000300080000001400018008000700", @ANYRES32=r5, @ANYBLOB="05000200430000000c000180060005004e240000080004000500000005000500030000004800018008000700", @ANYRES32=r5, @ANYRES8=r11, @ANYRES32=r7, @ANYBLOB="06000100f88a00000500020000000000060005004e22000005000200040000002400068008000700", @ANYRES32=0x0, @ANYRES16=r7], 0x38}, 0x1, 0x0, 0x0, 0x48804}, 0x4008800)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="03000000c010060020001280080001007369740014000280080003000a01010208000c0004000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)

1.184359019s ago: executing program 1 (id=935):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x800}, [@map_fd, @map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xea, &(0x7f0000000340)=""/234}, 0x17)
r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7)
r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r3, &(0x7f0000000180)=r4, 0x12)
r5 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000100)='syz1\x00', 0x1ff)
write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, 0x0, &(0x7f0000000200))
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf10002000000a0c2000100000000002000"})
r8 = syz_open_pts(r7, 0x101)
ioctl$TIOCGETD(r8, 0x5424, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff}, 0x111, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xf4, @empty, 0x1}, {0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe48d}, r9, 0x9}}, 0x48)

1.151281264s ago: executing program 2 (id=936):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
io_setup(0x23, &(0x7f0000000280)) (async)
io_setup(0x23, &(0x7f0000000280))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002) (async)
r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002)
io_setup(0x8, &(0x7f0000004200)) (async)
io_setup(0x8, &(0x7f0000004200)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r4, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r3, 0x0}]) (async)
io_submit(r4, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r3, 0x0}])
syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x101301)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0) (async)
sched_setattr(0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xdc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000093d11fc1ce5000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}}, 0x24000000) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000093d11fc1ce5000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c)
socket$kcm(0xa, 0x2, 0x0) (async)
r6 = socket$kcm(0xa, 0x2, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc72b60b26946113d"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) (async)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc72b60b26946113d"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84)

712.757478ms ago: executing program 1 (id=937):
r0 = socket(0x11, 0x80000, 0x4)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x8, 0x10, 0x20000, 0x4959, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x66, 0x0, 0x1, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @private=0xa010101}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'gretap0\x00', <r1=>0x0, 0x8, 0x10, 0x20000, 0x4959, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x66, 0x0, 0x1, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @private=0xa010101}}}})
lsm_get_self_attr(0x65, 0x0, &(0x7f0000000180), 0x0) (async)
lsm_get_self_attr(0x65, 0x0, &(0x7f0000000180), 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getchain={0x2c, 0x66, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff7, 0xfffc}, {0xb, 0x5}, {0xfff2, 0x9}}, [{0x8, 0xb, 0x23e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x609, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x3c}}, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0) (async)
syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r2, 0x40095505, 0x0)

163.017704ms ago: executing program 5 (id=938):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263d", 0x7d, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000fe0100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}})

33.335577ms ago: executing program 5 (id=939):
r0 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000001580)={0x0, [], [{0x48a8, 0x5}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x101}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0xfffffffc}]})
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
ioctl$RTC_ALM_READ(r1, 0x40187013, &(0x7f00000000c0))
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x25, 0x0, 0x7ffc, 0x1, 0x4, 0x0, 0x5, 0x0, 0x1, 0x9})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port1\x00', 0x89, 0x14, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b2d})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000010009044400012eafb20009058102ff03000000"], 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x400, 0x70bd2a, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408d5}, 0x800)

0s ago: executing program 0 (id=940):
r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xd, 0x2)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000f40)='ns/mnt\x00')
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
pipe(0x0)
io_setup(0x3ff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x0, 0x0, {0xffffffff, 0xbdf, 0xa121, 0x10000}})
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYRES16=r0, @ANYRES32=r0, @ANYRES16=r1, @ANYRESHEX=r1], 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000100)=""/101)

kernel console output (not intermixed with test programs):

hid device: -71
[  231.500221][ T5907] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  231.516204][ T5907] usb 2-1: USB disconnect, device number 38
[  231.539027][ T5906] usb 5-1: Using ep0 maxpacket: 16
[  231.549092][ T5906] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  231.574770][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  231.596982][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  231.619450][ T5906] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  231.629547][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  231.953790][ T5906] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  231.968304][ T5906] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  231.986671][ T5906] usb 5-1: Manufacturer: syz
[  231.997467][ T5906] usb 5-1: config 0 descriptor??
[  232.088346][ T5907] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  232.258719][ T5907] usb 2-1: Using ep0 maxpacket: 32
[  232.270437][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.433835][ T5932] usb 1-1: USB disconnect, device number 40
[  232.445516][ T5907] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  232.471086][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.510922][ T5907] usb 2-1: config 0 descriptor??
[  232.530438][ T5907] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  232.573494][ T5907] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  232.609857][ T5906] rc_core: IR keymap rc-hauppauge not found
[  232.615825][ T5906] Registered IR keymap rc-empty
[  232.658831][ T5906] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.708738][ T5906] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.735303][ T5907] usb 2-1: USB disconnect, device number 39
[  232.741610][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  232.749895][ T5906] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  232.771884][ T5907] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  232.783807][ T5906] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19
[  232.808135][ T5906] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.824436][ T8144] FAULT_INJECTION: forcing a failure.
[  232.824436][ T8144] name failslab, interval 1, probability 0, space 0, times 0
[  232.829902][ T5906] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.837560][ T8144] CPU: 0 UID: 0 PID: 8144 Comm: syz.2.547 Not tainted syzkaller #0 PREEMPT(full) 
[  232.837586][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  232.837597][ T8144] Call Trace:
[  232.837605][ T8144]  <TASK>
[  232.837614][ T8144]  dump_stack_lvl+0x189/0x250
[  232.837641][ T8144]  ? __pfx____ratelimit+0x10/0x10
[  232.837670][ T8144]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.837691][ T8144]  ? __pfx__printk+0x10/0x10
[  232.837707][ T8144]  ? __sock_sendmsg+0x21c/0x270
[  232.837741][ T8144]  ? do_syscall_64+0xfa/0xfa0
[  232.837769][ T8144]  should_fail_ex+0x414/0x560
[  232.837804][ T8144]  should_failslab+0xa8/0x100
[  232.837830][ T8144]  kmem_cache_alloc_noprof+0x74/0x6e0
[  232.837851][ T8144]  ? skb_clone+0x212/0x3a0
[  232.837875][ T8144]  skb_clone+0x212/0x3a0
[  232.837899][ T8144]  __netlink_deliver_tap+0x404/0x850
[  232.837938][ T8144]  ? netlink_deliver_tap+0x2e/0x1b0
[  232.837965][ T8144]  netlink_deliver_tap+0x19c/0x1b0
[  232.837993][ T8144]  netlink_sendskb+0x68/0x140
[  232.838020][ T8144]  netlink_unicast+0x397/0x9e0
[  232.838042][ T8144]  ? __asan_memcpy+0x40/0x70
[  232.838069][ T8144]  ? __pfx_netlink_unicast+0x10/0x10
[  232.838104][ T8144]  netlink_rcv_skb+0x28c/0x470
[  232.838130][ T8144]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  232.838159][ T8144]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  232.838203][ T8144]  ? netlink_deliver_tap+0x2e/0x1b0
[  232.838237][ T8144]  netlink_unicast+0x82f/0x9e0
[  232.838270][ T8144]  ? __pfx_netlink_unicast+0x10/0x10
[  232.838296][ T8144]  ? netlink_sendmsg+0x642/0xb30
[  232.838328][ T8144]  netlink_sendmsg+0x805/0xb30
[  232.838364][ T8144]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.838393][ T8144]  ? __lock_acquire+0xab9/0xd20
[  232.838416][ T8144]  ? aa_sock_msg_perm+0xf1/0x1d0
[  232.838439][ T8144]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  232.838461][ T8144]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.838489][ T8144]  __sock_sendmsg+0x21c/0x270
[  232.838515][ T8144]  ____sys_sendmsg+0x505/0x830
[  232.838540][ T8144]  ? __pfx_____sys_sendmsg+0x10/0x10
[  232.838578][ T8144]  ? import_iovec+0x74/0xa0
[  232.838606][ T8144]  ___sys_sendmsg+0x21f/0x2a0
[  232.838627][ T8144]  ? __pfx____sys_sendmsg+0x10/0x10
[  232.838683][ T8144]  ? __fget_files+0x2a/0x420
[  232.838705][ T8144]  ? __fget_files+0x3a0/0x420
[  232.838745][ T8144]  __x64_sys_sendmsg+0x19b/0x260
[  232.838767][ T8144]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  232.838796][ T8144]  ? __pfx_ksys_write+0x10/0x10
[  232.838820][ T8144]  ? do_syscall_64+0xbe/0xfa0
[  232.838843][ T8144]  do_syscall_64+0xfa/0xfa0
[  232.838860][ T8144]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.838879][ T8144]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.838897][ T8144]  ? clear_bhb_loop+0x60/0xb0
[  232.838920][ T8144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.838939][ T8144] RIP: 0033:0x7f65c478eec9
[  232.838957][ T8144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.838972][ T8144] RSP: 002b:00007f65c55c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  232.838994][ T8144] RAX: ffffffffffffffda RBX: 00007f65c49e5fa0 RCX: 00007f65c478eec9
[  232.839008][ T8144] RDX: 0000000004044080 RSI: 0000200000001b80 RDI: 0000000000000004
[  232.839021][ T8144] RBP: 00007f65c55c8090 R08: 0000000000000000 R09: 0000000000000000
[  232.839033][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.839045][ T8144] R13: 00007f65c49e6038 R14: 00007f65c49e5fa0 R15: 00007f65c4b0fa28
[  232.839077][ T8144]  </TASK>
[  232.972381][ T8147] loop6: detected capacity change from 0 to 7
[  232.978483][ T8126] ldusb: No device or device unplugged -19
[  233.004199][ T8147] Dev loop6: unable to read RDB block 7
[  233.218527][ T5906] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  233.250104][ T8147]  loop6: unable to read partition table
[  233.265716][ T8147] loop6: partition table beyond EOD, truncated
[  233.272202][ T8147] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  233.298669][ T5906] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  233.330696][ T5906] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  233.349165][ T5906] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  233.378407][ T5906] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  233.402067][ T5906] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  233.429497][ T5906] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  233.458508][ T5906] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  233.479495][ T5906] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  233.503140][ T5906] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  233.511725][ T5906] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  233.528373][ T5907] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  233.546847][ T5906] usb 5-1: USB disconnect, device number 30
[  233.675182][ T8153] netlink: 'syz.3.551': attribute type 12 has an invalid length.
[  233.684620][ T8153] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.551'.
[  233.698578][ T5907] usb 1-1: Using ep0 maxpacket: 8
[  233.705541][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.716450][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1
[  233.730066][ T5907] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  233.744267][ T5907] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  233.775363][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.801861][ T5907] usb 1-1: Product: syz
[  233.813105][ T5907] usb 1-1: Manufacturer: syz
[  233.817697][ T8156] trusted_key: encrypted_key: insufficient parameters specified
[  233.817924][ T5907] usb 1-1: SerialNumber: syz
[  233.852025][ T8149] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  234.158881][ T8173] loop9: detected capacity change from 0 to 7
[  234.166713][ T8173] Dev loop9: unable to read RDB block 7
[  234.175884][ T8173]  loop9: unable to read partition table
[  234.184688][ T8173] loop9: partition table beyond EOD, truncated
[  234.188636][ T1071] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  234.199443][ T8173] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  234.356791][ T1071] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.377400][ T1071] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  234.393922][ T1071] usb 2-1: config 1 has no interface number 0
[  234.894033][ T1071] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.906193][ T1071] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  234.940213][ T1071] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  235.121232][ T8149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.151840][ T1071] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  235.296327][ T5907] cdc_ncm 1-1:1.0: bind() failure
[  235.306003][ T8149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.311335][ T5907] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  235.321414][ T1071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.368371][ T1071] usb 2-1: Product: syz
[  235.617374][ T5907] cdc_ncm 1-1:1.1: bind() failure
[  235.638521][ T1071] usb 2-1: Manufacturer: syz
[  235.647119][ T5907] usb 1-1: USB disconnect, device number 41
[  235.653321][ T1071] usb 2-1: SerialNumber: syz
[  235.801921][ T8194] program syz.4.561 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  235.864395][ T8194] syz.4.561 (8194): drop_caches: 2
[  235.936672][ T8195] loop6: detected capacity change from 0 to 7
[  235.944155][ T8195] Dev loop6: unable to read RDB block 7
[  235.950422][ T8195]  loop6: unable to read partition table
[  235.967555][ T8195] loop6: partition table beyond EOD, truncated
[  236.078387][ T8195] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  236.298232][ T1071] cdc_ncm 2-1:1.1: bind() failure
[  236.308885][ T1071] usb 2-1: USB disconnect, device number 40
[  236.704025][ T8197] trusted_key: encrypted_key: insufficient parameters specified
[  236.787427][ T8200] sg_write: process 427 (syz.3.563) changed security contexts after opening file descriptor, this is not allowed.
[  238.598403][ T5932] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  238.688311][ T5970] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  238.868780][ T5932] usb 4-1: Using ep0 maxpacket: 32
[  238.881308][ T5932] usb 4-1: config 0 has an invalid interface number: 184 but max is 11
[  238.889806][ T5932] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 12
[  238.900991][ T5932] usb 4-1: config 0 has no interface number 0
[  238.907132][ T5932] usb 4-1: config 0 interface 184 has no altsetting 0
[  238.917572][ T5932] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  238.926981][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.935301][ T5932] usb 4-1: Product: syz
[  239.104667][ T5934] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  239.112718][ T5932] usb 4-1: Manufacturer: syz
[  239.119201][ T5932] usb 4-1: SerialNumber: syz
[  239.130098][ T5932] usb 4-1: config 0 descriptor??
[  239.140732][ T5932] smsc75xx v1.0.0
[  239.248366][ T5934] usb 2-1: device descriptor read/64, error -71
[  239.369401][   T30] kauditd_printk_skb: 63 callbacks suppressed
[  239.369423][   T30] audit: type=1326 audit(1760686608.861:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.3.572" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e01f8eec9 code=0x0
[  239.469582][   T30] audit: type=1326 audit(1760686608.971:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.3.572" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e01f8eec9 code=0x0
[  239.528448][ T5934] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  239.675758][ T5934] usb 2-1: device descriptor read/64, error -71
[  239.758466][ T5970] usb 1-1: device descriptor read/64, error -71
[  239.897072][ T5934] usb usb2-port1: attempt power cycle
[  239.901977][ T8244] loop9: detected capacity change from 0 to 7
[  239.911481][ T6381] Dev loop9: unable to read RDB block 7
[  239.917101][ T6381]  loop9: AHDI p2 p3 p4
[  239.923653][ T6381] loop9: partition table partially beyond EOD, truncated
[  239.932048][ T6381] loop9: p3 size 4227858431 extends beyond EOD, truncated
[  239.964744][ T8244] Dev loop9: unable to read RDB block 7
[  239.989632][ T8244]  loop9: AHDI p2 p3 p4
[  239.993916][ T8244] loop9: partition table partially beyond EOD, truncated
[  240.004723][ T8244] loop9: p3 size 4227858431 extends beyond EOD, truncated
[  240.018460][ T5970] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  240.026730][ T5932] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  240.038456][ T5932] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  240.050905][ T5932] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  240.096431][ T6381] udevd[6381]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  240.107498][ T5932] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32
[  240.237437][ T6381] udevd[6381]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  240.294436][ T8246] netlink: 176 bytes leftover after parsing attributes in process `syz.4.577'.
[  240.305268][ T8246] ip6gretap0: entered promiscuous mode
[  240.312677][ T8246] netlink: 176 bytes leftover after parsing attributes in process `syz.4.577'.
[  240.318311][ T5934] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  240.340396][ T5970] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  240.351401][ T5970] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  240.363736][ T5934] usb 2-1: device descriptor read/8, error -71
[  240.405118][ T5970] usb 1-1: config 1 has no interface number 0
[  240.467752][ T5970] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.478876][ T5970] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  240.490397][ T5970] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  240.519271][ T8250] trusted_key: encrypted_key: insufficient parameters specified
[  240.525677][ T5970] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  240.541667][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.550136][ T5970] usb 1-1: Product: syz
[  240.554371][ T5970] usb 1-1: Manufacturer: syz
[  240.559085][ T5970] usb 1-1: SerialNumber: syz
[  240.698438][ T5934] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  240.719630][ T5934] usb 2-1: device descriptor read/8, error -71
[  240.829069][ T5934] usb usb2-port1: unable to enumerate USB device
[  241.061956][ T5970] cdc_ncm 1-1:1.1: bind() failure
[  241.085558][ T5970] usb 1-1: USB disconnect, device number 43
[  241.193893][ T8255] delete_channel: no stack
[  241.583510][ T5970] usb 4-1: USB disconnect, device number 47
[  241.719134][ T5932] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  241.908349][ T5932] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5
[  241.928964][ T5932] usb 5-1: config 0 has no interface number 0
[  242.072391][ T5932] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.327466][ T5932] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.548654][ T5932] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  242.615084][ T8288] vivid-000: disconnect
[  243.204376][ T8268] vivid-000: reconnect
[  243.234385][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.868074][ T5932] usb 5-1: config 0 descriptor??
[  244.608596][ T5934] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  244.728349][ T5970] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  244.787157][ T5934] usb 4-1: Using ep0 maxpacket: 16
[  244.788818][ T8309] trusted_key: encrypted_key: insufficient parameters specified
[  244.826859][ T5934] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66
[  244.847262][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.874932][ T5934] usb 4-1: config 0 descriptor??
[  244.918690][ T5970] usb 2-1: Using ep0 maxpacket: 32
[  244.927374][ T5934] usb 4-1: invalid MIDI EP
[  244.933706][ T5970] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  244.949675][ T5970] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  244.959704][ T5934] usb 4-1: snd-bcd2000: error during probing
[  244.966739][ T5934] snd-bcd2000 4-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  244.976064][ T5970] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  244.995208][ T5970] usb 2-1: config 1 has no interface number 0
[  245.007954][ T5970] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  245.019363][ T5970] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  245.029766][ T5970] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  245.043245][ T5970] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  245.053462][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.085459][ T5970] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  245.148311][ T1071] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  245.300926][ T1071] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  245.316586][ T1071] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  245.329965][ T5970] snd_usb_pod 2-1:1.1: set_interface failed
[  245.343558][ T1071] usb 1-1: config 1 has no interface number 0
[  245.347106][ T5970] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  245.352160][ T1071] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.358531][ T5970] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71
[  245.404452][ T5932] usbhid 5-1:0.1: can't add hid device: -71
[  245.412120][ T5932] usbhid 5-1:0.1: probe with driver usbhid failed with error -71
[  245.424735][ T5970] usb 2-1: USB disconnect, device number 45
[  245.437567][ T5932] usb 5-1: USB disconnect, device number 31
[  245.466997][ T1071] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  245.488561][ T1071] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  245.520985][ T1071] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  245.530829][ T1071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.548757][ T1071] usb 1-1: Product: syz
[  245.561078][ T1071] usb 1-1: Manufacturer: syz
[  245.566303][ T1071] usb 1-1: SerialNumber: syz
[  245.983552][ T1071] cdc_ncm 1-1:1.1: bind() failure
[  246.029139][ T1071] usb 1-1: USB disconnect, device number 44
[  246.348061][ T5970] usb 4-1: USB disconnect, device number 48
[  246.458760][ T5932] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  246.632046][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.646631][ T5932] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  246.657392][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.700031][ T5932] usb 2-1: config 0 descriptor??
[  246.723410][ T5932] pwc: Askey VC010 type 2 USB webcam detected.
[  246.829072][ T5970] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  247.128332][ T5970] usb 5-1: Using ep0 maxpacket: 32
[  247.137301][ T5970] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  247.147151][ T5970] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  247.166172][ T5970] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  247.208502][ T5970] usb 5-1: config 1 has no interface number 0
[  247.238398][ T5970] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  247.324715][ T5970] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024
[  247.431041][ T5970] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  247.628125][ T5970] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  247.638074][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.651565][ T8324] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  247.675321][ T5970] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  247.866886][ T8324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.875799][ T8335] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  247.887024][ T8324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.899220][ T5970] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  247.932438][ T5970] usb 5-1: USB disconnect, device number 32
[  247.988809][ T5970] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  248.232255][ T5932] pwc: send_video_command error -71
[  248.260738][ T5932] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  248.288366][ T5932] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  248.346706][ T5932] usb 2-1: USB disconnect, device number 46
[  248.668289][ T5932] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  248.730493][ T8350] loop6: detected capacity change from 0 to 7
[  248.749960][ T8350] Dev loop6: unable to read RDB block 7
[  248.755600][ T8350]  loop6: AHDI p1 p2 p3
[  248.761048][ T8350] loop6: partition table partially beyond EOD, truncated
[  248.768999][ T8350] loop6: p1 start 4217409618 is beyond EOD, truncated
[  248.776541][ T8350] loop6: p2 start 3821584243 is beyond EOD, truncated
[  248.839150][ T5932] usb 2-1: Using ep0 maxpacket: 8
[  248.852554][ T5932] usb 2-1: config 0 has an invalid interface number: 153 but max is 0
[  248.885676][ T5932] usb 2-1: config 0 has no interface number 0
[  248.917695][ T5932] usb 2-1: New USB device found, idVendor=05ac, idProduct=9218, bcdDevice=9d.8d
[  248.928131][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.948349][ T5932] usb 2-1: Product: syz
[  248.954857][ T5932] usb 2-1: Manufacturer: syz
[  248.967055][ T5932] usb 2-1: SerialNumber: syz
[  248.985545][ T5932] usb 2-1: config 0 descriptor??
[  249.001779][ T5932] appledisplay 2-1:0.153: Could not find int-in endpoint
[  249.014453][ T5932] usbhid 2-1:0.153: couldn't find an input interrupt endpoint
[  249.207765][ T1071] usb 2-1: USB disconnect, device number 47
[  249.372941][ T5932] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  249.548425][ T5932] usb 5-1: Using ep0 maxpacket: 16
[  249.555190][ T5932] usb 5-1: config 0 interface 0 has no altsetting 0
[  249.563371][ T5932] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00
[  249.572627][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.586763][ T5932] usb 5-1: config 0 descriptor??
[  249.728300][ T1071] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  249.795720][ T8353] netlink: 'syz.4.603': attribute type 21 has an invalid length.
[  249.806517][ T8353] netlink: 160 bytes leftover after parsing attributes in process `syz.4.603'.
[  249.829656][ T5932] usbhid 5-1:0.0: can't add hid device: -71
[  249.835748][ T5932] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  249.863181][ T5932] usb 5-1: USB disconnect, device number 33
[  249.890769][ T1071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.985059][ T1071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.999376][ T8362] netlink: 'syz.1.605': attribute type 8 has an invalid length.
[  250.019745][ T1071] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  250.033935][ T1071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.065263][ T1071] usb 4-1: config 0 descriptor??
[  250.444143][ T8365] macsec1: entered promiscuous mode
[  250.450093][ T8365] macsec1: entered allmulticast mode
[  250.485431][ T1071] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0
[  250.848338][ T5932] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  250.923327][ T1071] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device
[  250.934321][ T1071] pyra 0003:1E7D:2CF6.000A: couldn't install mouse
[  250.950432][ T1071] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71
[  250.971857][ T1071] usb 4-1: USB disconnect, device number 49
[  251.167239][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'.
[  251.186058][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.198269][ T5932] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  251.231117][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.266400][ T5932] usb 5-1: config 0 descriptor??
[  251.418537][   T30] audit: type=1326 audit(1760686620.911:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  251.478412][   T30] audit: type=1326 audit(1760686620.911:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  251.830089][   T30] audit: type=1326 audit(1760686620.911:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  251.883530][ T5932] usbhid 5-1:0.0: can't add hid device: -71
[  251.894391][ T5932] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  251.905526][   T30] audit: type=1326 audit(1760686620.911:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  251.935344][ T5932] usb 5-1: USB disconnect, device number 34
[  251.979091][   T30] audit: type=1326 audit(1760686620.921:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  252.024061][   T30] audit: type=1326 audit(1760686620.921:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  252.051754][   T30] audit: type=1326 audit(1760686620.921:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  252.109790][   T30] audit: type=1326 audit(1760686620.941:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  252.127520][ T8392] loop9: detected capacity change from 0 to 7
[  252.180193][ T8392] Dev loop9: unable to read RDB block 7
[  252.186241][ T8392]  loop9: unable to read partition table
[  252.192498][ T8392] loop9: partition table beyond EOD, truncated
[  252.209437][   T30] audit: type=1326 audit(1760686620.941:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  252.212681][ T8392] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  252.242015][ T1071] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  252.372085][   T30] audit: type=1326 audit(1760686620.941:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  252.438984][ T1071] usb 4-1: Using ep0 maxpacket: 8
[  252.466227][ T1071] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  252.483578][ T1071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.513974][ T1071] usb 4-1: Product: syz
[  252.528343][ T1071] usb 4-1: Manufacturer: syz
[  252.538351][ T1071] usb 4-1: SerialNumber: syz
[  252.564208][ T1071] usb 4-1: config 0 descriptor??
[  252.568345][ T5932] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  252.734324][ T5932] usb 5-1: Using ep0 maxpacket: 16
[  252.750207][ T5932] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66
[  252.763911][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.783318][ T5932] usb 5-1: config 0 descriptor??
[  252.789598][ T1071] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  252.801613][ T5932] usb 5-1: invalid MIDI EP
[  252.807284][ T5932] usb 5-1: snd-bcd2000: error during probing
[  252.816501][ T5932] snd-bcd2000 5-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  252.938304][ T5907] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[  253.144581][ T5907] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  253.153961][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.673485][ T8390] kvm: kvm [8388]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x3030
[  253.683412][ T5907] usb 1-1: Product: syz
[  253.688740][ T5907] usb 1-1: Manufacturer: syz
[  253.694217][ T5907] usb 1-1: SerialNumber: syz
[  253.702971][ T5907] usb 1-1: config 0 descriptor??
[  254.306812][   T24] usb 5-1: USB disconnect, device number 35
[  254.413356][ T5907] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  254.761060][ T5907] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  255.168853][ T5907] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  255.200509][ T1071] usb write operation failed. (-71)
[  255.211293][ T1071] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  255.228639][ T5921] usb 1-1: USB disconnect, device number 45
[  255.250456][ T1071] dvbdev: DVB: registering new adapter (Terratec H7)
[  255.276663][ T1071] usb 4-1: media controller created
[  255.289849][ T1071] usb read operation failed. (-71)
[  255.305791][ T1071] usb write operation failed. (-71)
[  255.323786][ T1071] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  255.345701][ T1071] usb 4-1: USB disconnect, device number 50
[  255.366125][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  255.386430][ T5907] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  255.409694][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.425959][ T5907] usb 2-1: Product: syz
[  255.433287][ T5907] usb 2-1: Manufacturer: syz
[  255.442220][ T5907] usb 2-1: SerialNumber: syz
[  255.457865][ T5907] usb 2-1: config 0 descriptor??
[  255.627527][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  255.637736][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  255.698834][ T5921] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  255.857127][ T5921] usb 1-1: device descriptor read/64, error -71
[  255.973807][ T5932] usb 2-1: USB disconnect, device number 48
[  256.015185][ T8436] loop6: detected capacity change from 0 to 7
[  256.034706][ T8436] Dev loop6: unable to read RDB block 7
[  256.049613][ T8436]  loop6: AHDI p1 p2 p3
[  256.112318][ T8436] loop6: partition table partially beyond EOD, truncated
[  256.143267][ T8436] loop6: p1 start 4217409618 is beyond EOD, truncated
[  256.175727][ T8436] loop6: p2 start 3821584243 is beyond EOD, truncated
[  256.198427][ T5921] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  256.323047][ T8442] xt_TCPMSS: Only works on TCP SYN packets
[  256.348310][ T5921] usb 1-1: device descriptor read/64, error -71
[  256.459396][ T5921] usb usb1-port1: attempt power cycle
[  256.508339][ T5932] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  256.708280][ T5932] usb 2-1: Using ep0 maxpacket: 16
[  256.737110][ T5932] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  256.745631][ T5932] usb 2-1: config 0 has no interface number 0
[  256.758256][ T5932] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  256.778972][ T5932] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  256.809507][ T5932] usb 2-1: config 0 interface 41 has no altsetting 0
[  256.829435][ T5932] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  256.858434][ T5921] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  256.858445][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.858464][ T5932] usb 2-1: Product: syz
[  256.889642][ T5921] usb 1-1: device descriptor read/8, error -71
[  256.938254][ T5932] usb 2-1: Manufacturer: syz
[  256.957329][ T5932] usb 2-1: SerialNumber: syz
[  256.975207][ T5932] usb 2-1: config 0 descriptor??
[  256.990815][ T8440] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  256.998940][ T8440] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  257.138522][ T5921] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  257.169750][ T5921] usb 1-1: device descriptor read/8, error -71
[  257.226766][ T8440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.236600][ T8440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.276254][ T5932] dm9601 2-1:0.41: probe with driver dm9601 failed with error -71
[  257.294525][ T5932] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71
[  257.312194][ T5921] usb usb1-port1: unable to enumerate USB device
[  257.332217][ T5932] usb 2-1: USB disconnect, device number 49
[  257.389529][ T8455] pim6reg: entered allmulticast mode
[  257.658289][ T5921] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  258.178377][ T5921] usb 4-1: Using ep0 maxpacket: 16
[  258.183337][ T8466] syzkaller1: entered promiscuous mode
[  258.189905][ T8466] syzkaller1: entered allmulticast mode
[  258.204839][ T5921] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66
[  258.927451][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.940969][ T5921] usb 4-1: config 0 descriptor??
[  258.952527][ T5921] usb 4-1: invalid MIDI EP
[  258.957678][ T5921] usb 4-1: snd-bcd2000: error during probing
[  258.970282][ T5921] snd-bcd2000 4-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  259.155986][ T5907] usb 4-1: USB disconnect, device number 51
[  259.590065][ T8491] netlink: 92 bytes leftover after parsing attributes in process `syz.2.638'.
[  260.027498][ T8498] netlink: zone id is out of range
[  260.032817][ T8498] netlink: zone id is out of range
[  260.038061][ T8498] netlink: zone id is out of range
[  260.043307][ T8498] netlink: zone id is out of range
[  260.048574][ T8498] netlink: zone id is out of range
[  260.053808][ T8498] netlink: zone id is out of range
[  260.058988][ T8498] netlink: zone id is out of range
[  260.065339][ T8498] netlink: zone id is out of range
[  260.070606][ T8498] netlink: zone id is out of range
[  260.075785][ T8498] netlink: zone id is out of range
[  260.888292][ T1071] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  261.068270][ T1071] usb 2-1: device descriptor read/64, error -71
[  261.319732][ T1071] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  261.478311][ T1071] usb 2-1: device descriptor read/64, error -71
[  261.598702][ T1071] usb usb2-port1: attempt power cycle
[  261.698373][ T5921] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  261.847631][ T8528] loop9: detected capacity change from 0 to 7
[  261.856464][ T8528] Dev loop9: unable to read RDB block 7
[  261.863779][ T5921] usb 5-1: Using ep0 maxpacket: 8
[  261.864576][ T8528]  loop9: unable to read partition table
[  261.876491][ T8528] loop9: partition table beyond EOD, truncated
[  261.883037][ T5921] usb 5-1: config 2 has an invalid interface number: 241 but max is 0
[  261.885971][ T8528] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  261.902416][ T5921] usb 5-1: config 2 has no interface number 0
[  261.938464][ T5921] usb 5-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  261.953958][ T5921] usb 5-1: config 2 interface 241 has no altsetting 0
[  261.961111][ T1071] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  261.973557][ T5921] usb 5-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3
[  261.992625][ T1071] usb 2-1: device descriptor read/8, error -71
[  262.001766][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.010633][ T5921] usb 5-1: Product: syz
[  262.014929][ T5921] usb 5-1: Manufacturer: syz
[  262.020155][ T5921] usb 5-1: SerialNumber: syz
[  262.037707][ T5921] ti_usb_3410_5052 5-1:2.241: TI USB 3410 1 port adapter converter detected
[  262.048557][ T5921] ti_usb_3410_5052 5-1:2.241: missing endpoints
[  262.238312][ T1071] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  262.248156][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.270835][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.280447][ T1071] usb 2-1: device descriptor read/8, error -71
[  262.281748][ T5932] usb 5-1: USB disconnect, device number 36
[  262.395837][ T1071] usb usb2-port1: unable to enumerate USB device
[  262.680737][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  262.680755][   T30] audit: type=1800 audit(1760686632.181:234): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.652" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  262.838684][ T1071] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  262.998409][ T1071] usb 1-1: Using ep0 maxpacket: 16
[  263.017038][ T1071] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66
[  263.041210][ T1071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.071134][ T1071] usb 1-1: config 0 descriptor??
[  263.087080][ T1071] usb 1-1: invalid MIDI EP
[  263.095371][ T1071] usb 1-1: snd-bcd2000: error during probing
[  263.103210][ T1071] snd-bcd2000 1-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  263.379104][ T8552] netlink: 100 bytes leftover after parsing attributes in process `syz.3.656'.
[  263.461031][ T8552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.656'.
[  264.180574][ T5932] usb 1-1: USB disconnect, device number 50
[  264.393860][ T8564] loop9: detected capacity change from 0 to 7
[  264.404379][ T5840] Dev loop9: unable to read RDB block 7
[  264.428480][ T5840]  loop9: unable to read partition table
[  264.434587][ T5840] loop9: partition table beyond EOD, truncated
[  264.478993][ T8564] Dev loop9: unable to read RDB block 7
[  264.484685][ T8564]  loop9: unable to read partition table
[  264.491156][ T8564] loop9: partition table beyond EOD, truncated
[  264.497389][ T8564] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  264.908349][   T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  264.974126][ T8581] bridge1: entered allmulticast mode
[  265.058347][   T24] usb 5-1: Using ep0 maxpacket: 8
[  265.066268][   T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  265.076937][   T24] usb 5-1: config 179 has no interface number 0
[  265.094740][   T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  265.125404][   T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  265.166030][   T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  265.203262][   T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  265.221533][   T24] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  265.235814][   T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  265.250818][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.280775][ T8571] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  265.501062][ T5932] usb 5-1: USB disconnect, device number 37
[  265.501170][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  265.515898][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  265.785637][ T8600] loop6: detected capacity change from 0 to 7
[  265.795409][ T5840] Dev loop6: unable to read RDB block 7
[  265.802736][ T5840]  loop6: unable to read partition table
[  265.808774][ T5840] loop6: partition table beyond EOD, truncated
[  265.819200][ T8600] Dev loop6: unable to read RDB block 7
[  265.825107][ T8600]  loop6: unable to read partition table
[  265.832303][ T8600] loop6: partition table beyond EOD, truncated
[  265.838927][ T8600] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  265.859078][ T5970] usb 1-1: new low-speed USB device number 51 using dummy_hcd
[  265.867023][ T5946] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  266.009546][ T5970] usb 1-1: device descriptor read/64, error -71
[  266.034023][ T5946] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb
[  266.057462][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.089135][ T5946] usb 4-1: config 0 descriptor??
[  266.091003][ T8606] loop9: detected capacity change from 0 to 7
[  266.114302][ T5946] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[  266.137509][ T8606] Dev loop9: unable to read RDB block 7
[  266.150290][ T5946] dvb-usb: bulk message failed: -22 (3/0)
[  266.169044][ T8606]  loop9: unable to read partition table
[  266.176222][ T5946] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  266.198581][ T5946] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[  266.207197][ T8606] loop9: partition table beyond EOD, truncated
[  266.215340][ T5946] usb 4-1: media controller created
[  266.223807][ T5946] dvb-usb: bulk message failed: -22 (5/0)
[  266.230179][ T8606] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  266.241296][ T5946] dvb-usb: MAC address reading failed.
[  266.254143][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  266.278294][ T5970] usb 1-1: new low-speed USB device number 52 using dummy_hcd
[  266.290759][ T5946] dvb-usb: bulk message failed: -22 (6/0)
[  266.314484][ T5946] dvb-usb: bulk message failed: -22 (6/0)
[  266.331150][ T5946] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[  266.366464][ T5946] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20
[  266.409932][ T5946] dvb-usb: schedule remote query interval to 100 msecs.
[  266.420757][ T5946] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[  266.448617][ T5970] usb 1-1: device descriptor read/64, error -71
[  266.459445][ T5946] usb 4-1: USB disconnect, device number 52
[  266.470052][ T5907] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  266.541886][ T5946] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[  266.583300][ T5970] usb usb1-port1: attempt power cycle
[  266.629197][ T5907] usb 5-1: Using ep0 maxpacket: 8
[  266.639634][ T5907] usb 5-1: config 0 has an invalid interface number: 29 but max is 0
[  266.647972][ T5907] usb 5-1: config 0 has no interface number 0
[  266.668405][ T5907] usb 5-1: config 0 interface 29 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  266.688287][ T5907] usb 5-1: config 0 interface 29 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  266.708264][ T5907] usb 5-1: config 0 interface 29 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  266.724582][ T5907] usb 5-1: config 0 interface 29 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  266.734740][ T5907] usb 5-1: config 0 interface 29 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  266.744661][ T5907] usb 5-1: config 0 interface 29 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  266.744691][ T5907] usb 5-1: config 0 interface 29 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  266.747051][ T5907] usb 5-1: New USB device found, idVendor=03f0, idProduct=0207, bcdDevice= a.01
[  266.778930][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.787056][ T5907] usb 5-1: Product: syz
[  266.791830][ T5907] usb 5-1: Manufacturer: syz
[  266.796778][ T5907] usb 5-1: SerialNumber: syz
[  266.808363][ T5907] usb 5-1: config 0 descriptor??
[  266.814412][ T8608] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  266.888746][ T5934] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  266.938769][ T5970] usb 1-1: new low-speed USB device number 53 using dummy_hcd
[  266.973501][ T8617] geneve2: entered promiscuous mode
[  266.985010][ T8617] geneve2: entered allmulticast mode
[  266.999119][ T5970] usb 1-1: device descriptor read/8, error -71
[  267.062535][ T5934] usb 2-1: Using ep0 maxpacket: 8
[  267.071818][ T5934] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  267.081425][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.106554][ T5934] usb 2-1: Product: syz
[  267.112675][ T5934] usb 2-1: Manufacturer: syz
[  267.117486][ T5934] usb 2-1: SerialNumber: syz
[  267.131546][ T5934] usb 2-1: config 0 descriptor??
[  267.162201][ T5934] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  267.288421][ T5970] usb 1-1: new low-speed USB device number 54 using dummy_hcd
[  267.309116][ T5970] usb 1-1: device descriptor read/8, error -71
[  267.429255][ T5970] usb usb1-port1: unable to enumerate USB device
[  267.589222][   T24] usb 5-1: USB disconnect, device number 38
[  267.683423][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'.
[  267.929154][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803212b800: rx timeout, send abort
[  267.939253][ T5934] gspca_sonixj: reg_r err -32
[  267.944816][ T5934] sonixj 2-1:0.0: probe with driver sonixj failed with error -32
[  268.336544][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.679'.
[  268.677183][ T1071] usb 2-1: USB disconnect, device number 54
[  269.101450][ T8646] input: syz0 as /devices/virtual/input/input21
[  269.235369][ T8649] loop6: detected capacity change from 0 to 7
[  269.312797][ T8649] Dev loop6: unable to read RDB block 7
[  269.360223][ T8649]  loop6: unable to read partition table
[  269.374231][ T8649] loop6: partition table beyond EOD, truncated
[  269.416691][ T8649] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  269.585320][ T8655] loop9: detected capacity change from 0 to 7
[  269.614673][ T8655] Dev loop9: unable to read RDB block 7
[  269.662684][ T8655]  loop9: unable to read partition table
[  269.706168][ T8655] loop9: partition table beyond EOD, truncated
[  269.738427][ T8655] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  269.916034][ T8661] Cannot find add_set index 0 as target
[  270.059717][ T8664] capability: warning: `syz.0.688' uses 32-bit capabilities (legacy support in use)
[  270.883529][ T8682] pim6reg: entered allmulticast mode
[  272.124021][ T8692] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0
[  272.232366][ T8696] loop6: detected capacity change from 0 to 7
[  272.260762][ T8696] Dev loop6: unable to read RDB block 7
[  272.276727][ T8696]  loop6: unable to read partition table
[  272.287275][ T8696] loop6: partition table beyond EOD, truncated
[  272.327694][ T8696] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  272.778651][ T5934] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  272.880600][ T1071] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  272.949279][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.960447][ T5934] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  272.970646][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.981739][ T5934] usb 2-1: config 0 descriptor??
[  273.050329][ T1071] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  273.061490][ T1071] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  273.076038][ T1071] usb 1-1: config 1 has no interface number 0
[  273.082786][ T1071] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.094494][ T1071] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  273.103760][    T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  273.123272][ T1071] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  273.140049][ T1071] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  273.149425][ T1071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.157446][ T1071] usb 1-1: Product: syz
[  273.162220][ T1071] usb 1-1: Manufacturer: syz
[  273.167923][ T1071] usb 1-1: SerialNumber: syz
[  273.248579][    T9] usb 4-1: Using ep0 maxpacket: 16
[  273.261079][    T9] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66
[  273.274413][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.287342][    T9] usb 4-1: config 0 descriptor??
[  273.300128][    T9] usb 4-1: invalid MIDI EP
[  273.305008][    T9] usb 4-1: snd-bcd2000: error during probing
[  273.312224][    T9] snd-bcd2000 4-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  273.391057][ T1071] cdc_ncm 1-1:1.1: bind() failure
[  273.404212][ T5934] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor
[  273.408833][ T1071] usb 1-1: USB disconnect, device number 55
[  273.438048][ T5934] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input22
[  273.578648][ T5934] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  273.636654][    C0] Mem-Info:
[  273.640121][    C0] active_anon:7816 inactive_anon:0 isolated_anon:0
[  273.640121][    C0]  active_file:12743 inactive_file:39980 isolated_file:0
[  273.640121][    C0]  unevictable:768 dirty:111 writeback:0
[  273.640121][    C0]  slab_reclaimable:6413 slab_unreclaimable:101866
[  273.640121][    C0]  mapped:30869 shmem:1358 pagetables:1613
[  273.640121][    C0]  sec_pagetables:0 bounce:0
[  273.640121][    C0]  kernel_misc_reclaimable:0
[  273.640121][    C0]  free:1306971 free_pcp:17341 free_cma:0
[  273.686207][    C0] Node 0 active_anon:31764kB inactive_anon:0kB active_file:50964kB inactive_file:159716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123568kB dirty:440kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13196kB pagetables:6416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  273.718300][    C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  273.748273][    C0] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  273.778975][    C0] lowmem_reserve[]: 0 2501 2503 2503 2503
[  273.784751][    C0] Node 0 DMA32 free:1327768kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31264kB inactive_anon:0kB active_file:50964kB inactive_file:159716kB unevictable:1536kB writepending:440kB zspages:0kB present:3129332kB managed:2561596kB mlocked:0kB bounce:0kB free_pcp:38660kB local_pcp:20876kB free_cma:0kB
[  273.818567][    C0] lowmem_reserve[]: 0 0 1 1 1
[  273.823394][    C0] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  273.853578][    C0] lowmem_reserve[]: 0 0 0 0 0
[  273.858479][    C0] Node 1 Normal free:3884756kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:30436kB local_pcp:18760kB free_cma:0kB
[  273.890823][    C0] lowmem_reserve[]: 0 0 0 0 0
[  273.895742][    C0] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  273.908519][    C0] Node 0 DMA32: 560*4kB (UME) 527*8kB (UME) 290*16kB (UME) 524*32kB (UME) 217*64kB (UME) 121*128kB (UME) 73*256kB (ME) 35*512kB (UME) 11*1024kB (M) 3*2048kB (M) 297*4096kB (UM) = 1327768kB
[  273.927592][    C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  273.939088][    C0] Node 1 Normal: 103*4kB (UME) 51*8kB (UME) 42*16kB (UME) 78*32kB (UM) 21*64kB (UME) 6*128kB (UME) 5*256kB (UM) 3*512kB (UM) 5*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3884756kB
[  273.957707][    C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  273.967428][    C0] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  273.976715][    C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  273.986781][    C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  273.996266][    C0] 54077 total pagecache pages
[  274.001136][    C0] 0 pages in swap cache
[  274.005299][    C0] Free swap  = 124996kB
[  274.009461][    C0] Total swap = 124996kB
[  274.013614][    C0] 2097051 pages RAM
[  274.017461][    C0] 0 pages HighMem/MovableOnly
[  274.022392][    C0] 424562 pages reserved
[  274.026549][    C0] 0 pages cma reserved
[  274.060101][   T24] usb 2-1: USB disconnect, device number 55
[  274.178361][ T5907] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  274.328391][ T5907] usb 5-1: Using ep0 maxpacket: 32
[  274.336524][ T5907] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  274.346222][ T5907] usb 5-1: config 0 has no interface number 0
[  274.353292][ T5907] usb 5-1: config 0 interface 12 has no altsetting 0
[  274.365238][ T5907] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  274.375906][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.384603][ T5907] usb 5-1: Product: syz
[  274.389499][ T5907] usb 5-1: Manufacturer: syz
[  274.394201][ T5907] usb 5-1: SerialNumber: syz
[  274.408996][ T5907] usb 5-1: config 0 descriptor??
[  274.673916][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'.
[  274.687518][    T9] usb 4-1: USB disconnect, device number 53
[  274.797340][   T24] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  274.821660][   T24] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  274.988318][ T5921] usb 2-1: new full-speed USB device number 56 using dummy_hcd
[  275.118408][ T5921] usb 2-1: device descriptor read/64, error -71
[  275.130927][ T8740] Cannot find add_set index 2 as target
[  275.366099][ T5921] usb 2-1: new full-speed USB device number 57 using dummy_hcd
[  275.488713][ T1071] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  275.521163][ T8718] fuse: Unknown parameter 'mGN‡8o«ad'
[  275.528333][ T5921] usb 2-1: device descriptor read/64, error -71
[  275.608776][ T5946] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  275.648878][ T1071] usb 1-1: device descriptor read/64, error -71
[  275.668851][ T5921] usb usb2-port1: attempt power cycle
[  275.790433][ T5946] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  275.801728][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.823018][ T5946] usb 4-1: config 0 descriptor??
[  275.845882][ T5946] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  276.018366][ T5921] usb 2-1: new full-speed USB device number 58 using dummy_hcd
[  276.048955][ T5921] usb 2-1: device descriptor read/8, error -71
[  276.068662][ T5946] usb 4-1: USB disconnect, device number 54
[  276.141833][ T5907] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  276.150670][ T5907] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  276.163481][ T5907] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  276.178002][ T5907] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  276.186210][ T1071] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  276.203075][ T5907] usb 5-1: USB disconnect, device number 39
[  276.220386][ T5840] udevd[5840]: setting owner of /dev/bus/usb/005/039 to uid=0, gid=0 failed: No such file or directory
[  276.288481][ T5921] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  276.319052][ T5921] usb 2-1: device descriptor read/8, error -71
[  276.350685][ T1071] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  276.377652][ T1071] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  276.387673][ T1071] usb 1-1: config 1 has no interface number 0
[  276.393906][ T1071] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.405126][ T1071] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  276.414635][ T1071] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  276.428852][ T5921] usb usb2-port1: unable to enumerate USB device
[  276.438903][ T1071] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  276.448323][ T1071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.456559][ T1071] usb 1-1: Product: syz
[  276.460965][ T1071] usb 1-1: Manufacturer: syz
[  276.465604][ T1071] usb 1-1: SerialNumber: syz
[  276.648353][ T5907] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  276.799741][ T5907] usb 5-1: Using ep0 maxpacket: 32
[  276.807559][ T5907] usb 5-1: config 0 has an invalid interface number: 209 but max is 0
[  276.817165][ T5907] usb 5-1: config 0 has no interface number 0
[  276.823723][ T5907] usb 5-1: config 0 interface 209 has no altsetting 0
[  276.834865][ T5907] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23
[  276.844546][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.852897][ T5907] usb 5-1: Product: syz
[  276.857234][ T5907] usb 5-1: Manufacturer: syz
[  276.862517][ T5907] usb 5-1: SerialNumber: syz
[  276.879166][ T5907] usb 5-1: config 0 descriptor??
[  276.898722][ T1071] cdc_ncm 1-1:1.1: bind() failure
[  276.926922][ T1071] usb 1-1: USB disconnect, device number 57
[  277.142980][ T5907] usb 5-1: USB disconnect, device number 40
[  277.478057][ T8789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.724'.
[  278.048585][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  278.280509][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_0
[  278.519774][ T8817] loop9: detected capacity change from 0 to 7
[  278.550581][ T8817] Dev loop9: unable to read RDB block 7
[  278.556176][ T8817]  loop9: unable to read partition table
[  278.579944][ T8817] loop9: partition table beyond EOD, truncated
[  278.607737][ T8817] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  278.905150][ T8822] bond1: entered allmulticast mode
[  278.928979][ T8822] 8021q: adding VLAN 0 to HW filter on device bond1
[  278.959048][ T8822] bridge0: port 3(bond1) entered blocking state
[  278.998999][ T8825] CUSE: DEVNAME unspecified
[  279.006373][ T8822] bridge0: port 3(bond1) entered disabled state
[  279.025610][ T8822] bond1: entered promiscuous mode
[  279.044489][ T8822] bridge0: port 3(bond1) entered blocking state
[  279.051254][ T8822] bridge0: port 3(bond1) entered forwarding state
[  279.471729][ T7758] bridge0: port 3(bond1) entered disabled state
[  279.606759][ T8833] netlink: 'syz.0.735': attribute type 9 has an invalid length.
[  279.920219][ T6755] bond0: (slave syz_tun): Releasing backup interface
[  280.013591][ T8843] fuse: Bad value for 'fd'
[  280.013594][ T8844] fuse: Bad value for 'fd'
[  280.126423][ T8847] capability: warning: `syz.4.741' uses deprecated v2 capabilities in a way that may be insecure
[  280.206931][ T1093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.292250][ T1093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.460226][ T8860] program syz.4.746 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  280.472122][ T1093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.484559][   T30] audit: type=1326 audit(1760686649.981:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50f8eec9 code=0x7ffc0000
[  280.582907][   T30] audit: type=1326 audit(1760686649.981:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50f8eec9 code=0x7ffc0000
[  280.636797][   T30] audit: type=1326 audit(1760686649.981:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f8c50f45aa7 code=0x7ffc0000
[  280.673054][   T30] audit: type=1326 audit(1760686649.981:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8c50f45b06 code=0x7ffc0000
[  280.697664][   T30] audit: type=1326 audit(1760686649.981:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8c50f8eec9 code=0x7ffc0000
[  280.697740][ T1093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.722433][   T30] audit: type=1326 audit(1760686649.981:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50f8eec9 code=0x7ffc0000
[  280.761215][   T30] audit: type=1326 audit(1760686649.981:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50f8eec9 code=0x7ffc0000
[  280.786854][   T30] audit: type=1326 audit(1760686650.011:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50f8eec9 code=0x7ffc0000
[  280.813575][   T30] audit: type=1326 audit(1760686650.011:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50f8eec9 code=0x7ffc0000
[  280.838807][   T30] audit: type=1326 audit(1760686650.011:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c50f8eec9 code=0x7ffc0000
[  280.910178][ T8861] net_ratelimit: 16 callbacks suppressed
[  280.910199][ T8861] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0800:0000:0000:0000 with DS=0x5
[  280.929819][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  280.934362][ T8860] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0800:0000:0000:0000 with DS=0x5
[  280.942137][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  280.956437][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  280.965317][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  280.975736][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  281.111869][ T8873] loop9: detected capacity change from 0 to 7
[  281.122561][ T8873] Dev loop9: unable to read RDB block 7
[  281.130410][ T8873]  loop9: AHDI p2 p3 p4
[  281.134769][ T8873] loop9: partition table partially beyond EOD, truncated
[  281.143957][ T8873] loop9: p3 size 4227858431 extends beyond EOD, truncated
[  281.283339][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  281.389897][ T1093] bridge_slave_1: left allmulticast mode
[  281.404118][ T1093] bridge_slave_1: left promiscuous mode
[  281.416711][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.440062][ T1093] bridge_slave_0: left allmulticast mode
[  281.446019][ T1093] bridge_slave_0: left promiscuous mode
[  281.459506][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.998300][ T5907] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  282.094164][ T5970] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  282.153056][ T5907] usb 2-1: device descriptor read/64, error -71
[  282.248347][ T5970] usb 5-1: Using ep0 maxpacket: 32
[  282.275314][ T5970] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  282.291750][ T5970] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  282.302275][ T5970] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 2
[  282.340862][ T5970] usb 5-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=10.8f
[  282.355521][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.364449][ T5970] usb 5-1: Product: syz
[  282.369431][ T5970] usb 5-1: Manufacturer: syz
[  282.374263][ T5970] usb 5-1: SerialNumber: syz
[  282.387539][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  282.404614][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  282.413818][ T5907] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  282.423527][ T1093] bond0 (unregistering): Released all slaves
[  282.549752][ T1093] IPVS: stopping master sync thread 6016 ...
[  282.564104][ T5907] usb 2-1: device descriptor read/64, error -71
[  282.699879][ T5907] usb usb2-port1: attempt power cycle
[  282.826759][ T8910] loop9: detected capacity change from 0 to 7
[  282.849179][ T6381] Dev loop9: unable to read RDB block 7
[  282.942551][ T6381]  loop9: unable to read partition table
[  282.960619][ T6381] loop9: partition table beyond EOD, truncated
[  282.976951][ T8910] Dev loop9: unable to read RDB block 7
[  282.986754][ T8871] chnl_net:caif_netlink_parms(): no params data found
[  282.993939][ T8910]  loop9: unable to read partition table
[  283.005092][ T8910] loop9: partition table beyond EOD, truncated
[  283.030535][ T8910] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  283.060503][ T5839] Bluetooth: hci3: command tx timeout
[  283.068403][ T5907] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  283.139850][ T5907] usb 2-1: device descriptor read/8, error -71
[  283.378931][ T5907] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  283.398962][ T5907] usb 2-1: device descriptor read/8, error -71
[  283.508949][ T5907] usb usb2-port1: unable to enumerate USB device
[  283.767749][ T1093] hsr_slave_0: left promiscuous mode
[  283.787508][ T1093] hsr_slave_1: left promiscuous mode
[  283.802339][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.812712][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.867099][ T1093] veth1_macvtap: left promiscuous mode
[  283.881464][ T1093] veth0_macvtap: left promiscuous mode
[  283.901097][ T1093] veth1_vlan: left promiscuous mode
[  283.916607][ T1093] veth0_vlan: left promiscuous mode
[  284.183655][ T1093] pim6reg (unregistering): left allmulticast mode
[  284.509268][ T5970] usb 5-1: USB disconnect, device number 41
[  284.781624][ T8943] loop9: detected capacity change from 0 to 7
[  284.798367][ T8943] Dev loop9: unable to read RDB block 7
[  284.808405][ T8943]  loop9: AHDI p2 p3 p4
[  284.842847][ T8943] loop9: partition table partially beyond EOD, truncated
[  284.860720][ T8943] loop9: p3 size 4227858431 extends beyond EOD, truncated
[  284.932619][ T1093] team0 (unregistering): Port device team_slave_1 removed
[  285.072371][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  285.138400][ T5839] Bluetooth: hci3: command tx timeout
[  285.175299][ T1093] team0 (unregistering): Port device team_slave_0 removed
[  285.184735][ T5970] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  285.351143][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.392293][ T5970] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  285.409994][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.495554][ T5970] usb 2-1: config 0 descriptor??
[  285.705951][ T5970] usbhid 2-1:0.0: can't add hid device: -71
[  285.732877][ T5970] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  285.761702][ T5970] usb 2-1: USB disconnect, device number 64
[  286.475205][ T5970] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  286.526870][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.558568][ T8871] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.566772][ T8871] bridge_slave_0: entered allmulticast mode
[  286.574219][ T8871] bridge_slave_0: entered promiscuous mode
[  286.592872][ T8871] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.609270][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.657262][ T5970] usb 2-1: Using ep0 maxpacket: 32
[  286.718084][ T8871] bridge_slave_1: entered allmulticast mode
[  286.728603][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.778289][ T5970] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  286.799764][ T8871] bridge_slave_1: entered promiscuous mode
[  286.807189][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.865161][ T5970] usb 2-1: config 0 descriptor??
[  286.889481][ T5970] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  286.912397][ T5970] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  287.092996][ T8871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.116847][ T5970] usb 2-1: USB disconnect, device number 65
[  287.133130][ T8871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.170433][ T5970] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  287.220769][ T5839] Bluetooth: hci3: command tx timeout
[  287.421034][ T8871] team0: Port device team_slave_0 added
[  287.465704][ T8871] team0: Port device team_slave_1 added
[  287.565558][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.574011][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.619598][    T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  287.682148][ T8871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.702405][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.718194][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.744489][ T8871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.779442][    T9] usb 1-1: too many configurations: 234, using maximum allowed: 8
[  287.797803][    T9] usb 1-1: config index 0 descriptor too short (expected 65470, got 45)
[  287.820473][    T9] usb 1-1: config index 1 descriptor too short (expected 65470, got 45)
[  287.847085][ T8963] loop9: detected capacity change from 0 to 7
[  287.851109][    T9] usb 1-1: config index 2 descriptor too short (expected 65470, got 45)
[  287.880358][    T9] usb 1-1: config index 3 descriptor too short (expected 65470, got 45)
[  287.889469][ T8963] Dev loop9: unable to read RDB block 7
[  287.895446][ T8963]  loop9: unable to read partition table
[  287.904419][    T9] usb 1-1: config index 4 descriptor too short (expected 65470, got 45)
[  287.928488][    T9] usb 1-1: config index 5 descriptor too short (expected 65470, got 45)
[  287.957544][ T8963] loop9: partition table beyond EOD, truncated
[  287.975418][    T9] usb 1-1: config index 6 descriptor too short (expected 65470, got 45)
[  287.999779][ T8963] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  288.015040][    T9] usb 1-1: config index 7 descriptor too short (expected 65470, got 45)
[  288.038682][    T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  288.048329][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.056577][    T9] usb 1-1: Product: syz
[  288.077009][    T9] usb 1-1: Manufacturer: syz
[  288.086046][    T9] usb 1-1: SerialNumber: syz
[  288.107568][ T8871] hsr_slave_0: entered promiscuous mode
[  288.132086][ T8871] hsr_slave_1: entered promiscuous mode
[  288.177234][ T8871] debugfs: 'hsr0' already exists in 'hsr'
[  288.199878][ T8871] Cannot create hsr debugfs directory
[  288.351775][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  288.424142][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  288.458696][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  288.484931][    T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  288.540006][    T9] usb 1-1: USB disconnect, device number 58
[  288.659197][ T5934] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  288.842040][ T5934] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  288.881822][ T5934] usb 5-1: config 0 has no interface number 0
[  288.888040][ T5934] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.930381][ T5934] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.978648][ T5934] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  289.006495][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.020959][ T5934] usb 5-1: config 0 descriptor??
[  289.170179][ T8994] loop9: detected capacity change from 0 to 7
[  289.188376][ T8871] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  289.200613][ T8994] Dev loop9: unable to read RDB block 7
[  289.236954][ T8871] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  289.257879][ T8994]  loop9: AHDI p2 p3 p4
[  289.272030][ T8871] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  289.288377][ T8994] loop9: partition table partially beyond EOD, truncated
[  289.298574][ T5839] Bluetooth: hci3: command tx timeout
[  289.323758][ T8871] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  289.332517][ T8994] loop9: p3 size 4227858431 extends beyond EOD, truncated
[  289.510241][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  289.657016][ T8871] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.667847][ T5934] usbhid 5-1:0.1: can't add hid device: -71
[  289.674456][ T5934] usbhid 5-1:0.1: probe with driver usbhid failed with error -71
[  289.713655][ T5934] usb 5-1: USB disconnect, device number 42
[  289.741597][ T8871] 8021q: adding VLAN 0 to HW filter on device team0
[  289.775172][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.782345][ T7277] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.823421][ T7276] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.830772][ T7276] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.046865][ T8871] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.184239][ T9018] vivid-000: disconnect
[  290.423260][ T8871] veth0_vlan: entered promiscuous mode
[  290.481162][ T8871] veth1_vlan: entered promiscuous mode
[  291.034512][ T9022] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  291.037824][ T9025] fuse: Unknown parameter 'rl͈·ode'
[  291.151789][ T8871] veth0_macvtap: entered promiscuous mode
[  291.190671][ T8871] veth1_macvtap: entered promiscuous mode
[  291.255210][ T8871] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.290551][ T8871] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.315001][ T7280] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.325191][ T7280] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.345019][ T7280] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.355544][ T5907] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  291.390919][ T7280] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.530170][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.554536][ T5907] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  291.595054][ T7758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.604996][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.616691][ T7758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.660641][ T5907] usb 5-1: config 0 descriptor??
[  291.732753][   T30] kauditd_printk_skb: 148 callbacks suppressed
[  291.732773][   T30] audit: type=1326 audit(1760686661.231:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a998eec9 code=0x7ffc0000
[  291.774792][ T7276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.810705][ T7276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.861142][   T30] audit: type=1326 audit(1760686661.231:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc7a998eec9 code=0x7ffc0000
[  291.897986][   T30] audit: type=1326 audit(1760686661.231:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a998eec9 code=0x7ffc0000
[  291.921124][ T5907] usbhid 5-1:0.0: can't add hid device: -71
[  291.934662][ T5907] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  291.947620][ T5907] usb 5-1: USB disconnect, device number 43
[  291.960995][ T9053] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  291.971901][   T30] audit: type=1326 audit(1760686661.231:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc7a998eec9 code=0x7ffc0000
[  292.015129][   T30] audit: type=1326 audit(1760686661.231:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a998eec9 code=0x7ffc0000
[  292.067602][   T30] audit: type=1326 audit(1760686661.231:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a998eec9 code=0x7ffc0000
[  292.449070][ T5907] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  292.658556][ T5907] usb 5-1: Using ep0 maxpacket: 32
[  292.665259][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.677898][ T5907] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  292.688696][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.751340][ T5907] usb 5-1: config 0 descriptor??
[  292.771662][ T5907] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  292.798331][ T5907] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  292.932470][ T9071] loop9: detected capacity change from 0 to 7
[  292.964098][ T9071] Dev loop9: unable to read RDB block 7
[  292.972208][ T9071]  loop9: AHDI p2 p3 p4
[  292.976790][ T9071] loop9: partition table partially beyond EOD, truncated
[  292.995626][ T9071] loop9: p3 size 4227858431 extends beyond EOD, truncated
[  293.014119][ T5934] usb 5-1: USB disconnect, device number 44
[  293.034976][ T5934] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  293.195629][ T9076] trusted_key: encrypted_key: insufficient parameters specified
[  293.287549][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  293.346532][ T9008] vivid-000: reconnect
[  294.021863][ T9073] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  294.278454][    T9] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  294.443541][    T9] usb 5-1: config 4 has an invalid interface number: 9 but max is 0
[  294.497174][    T9] usb 5-1: config 4 has no interface number 0
[  294.691099][    T9] usb 5-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=d7.0c
[  294.738522][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.766094][    T9] usb 5-1: Product: syz
[  294.782978][    T9] usb 5-1: Manufacturer: syz
[  294.803554][    T9] usb 5-1: SerialNumber: syz
[  294.864788][    T9] gspca_main: spca505-2.14.0 probing 0733:0430
[  295.116824][ T9105] netlink: 16 bytes leftover after parsing attributes in process `syz.5.789'.
[  295.215555][ T9105] veth2: entered promiscuous mode
[  295.250474][    T9] gspca_spca505: reg write: error -71
[  295.254691][ T9105] veth2: entered allmulticast mode
[  295.267933][    T9] spca505 5-1:4.9: probe with driver spca505 failed with error -5
[  295.293692][    T9] usb 5-1: USB disconnect, device number 45
[  295.711833][ T9112] =======================================================
[  295.711833][ T9112] WARNING: The mand mount option has been deprecated and
[  295.711833][ T9112]          and is ignored by this kernel. Remove the mand
[  295.711833][ T9112]          option from the mount to silence this warning.
[  295.711833][ T9112] =======================================================
[  295.746713][    C1] vkms_vblank_simulate: vblank timer overrun
[  295.987742][ T9120] sch_tbf: burst 14 is lower than device lo mtu (81) !
[  296.745582][ T9145] fuse: Unknown parameter '@2׆©ÆҔ줈¼_ðS'
[  296.758411][ T5921] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  296.910079][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.921758][ T5921] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  296.931169][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.943172][ T5921] usb 5-1: config 0 descriptor??
[  297.080360][ T9150] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3965544961 (63448719376 ns) > initial count (51650093520 ns). Using initial count to start timer.
[  297.108329][ T5907] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  297.170818][ T5921] usbhid 5-1:0.0: can't add hid device: -71
[  297.198864][ T5921] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  297.221057][ T5921] usb 5-1: USB disconnect, device number 46
[  297.259582][ T5907] usb 6-1: Using ep0 maxpacket: 8
[  297.266771][ T5907] usb 6-1: unable to get BOS descriptor or descriptor too short
[  297.276104][ T5907] usb 6-1: config 64 has an invalid interface number: 103 but max is 0
[  297.284508][ T5907] usb 6-1: config 64 has no interface number 0
[  297.291384][ T5907] usb 6-1: config 64 interface 103 has no altsetting 0
[  297.309696][ T5907] usb 6-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=8d.88
[  297.318985][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.542102][ T9147] netlink: 24 bytes leftover after parsing attributes in process `syz.5.800'.
[  297.552800][ T9157] loop6: detected capacity change from 0 to 7
[  297.571242][ T9157] Dev loop6: unable to read RDB block 7
[  297.580892][ T9157]  loop6: unable to read partition table
[  297.586574][ T5907] snd-usb-audio 6-1:64.103: probe with driver snd-usb-audio failed with error -71
[  297.587444][ T9157] loop6: partition table beyond EOD, truncated
[  297.611002][ T9157] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  297.624860][ T5907] usb 6-1: USB disconnect, device number 2
[  298.395167][ T9175] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20001
[  298.518360][ T5970] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  298.680968][ T5970] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  298.698216][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.727555][ T5970] usb 5-1: config 0 descriptor??
[  298.947218][ T5970] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  299.115113][   T30] audit: type=1326 audit(1760686668.611:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  299.149001][ T5970] [drm:udl_init] *ERROR* Selecting channel failed
[  299.171284][   T30] audit: type=1326 audit(1760686668.631:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  299.226993][ T5970] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  299.245002][ T5970] [drm] Initialized udl on minor 2
[  299.265237][ T5970] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  299.266971][   T30] audit: type=1326 audit(1760686668.641:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  299.301099][   T30] audit: type=1326 audit(1760686668.641:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  299.329912][ T5970] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  299.346047][ T5932] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  299.365930][ T5970] usb 5-1: USB disconnect, device number 47
[  299.372906][ T5932] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  299.394890][   T30] audit: type=1326 audit(1760686668.641:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  299.450352][   T30] audit: type=1326 audit(1760686668.641:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  299.474475][   T30] audit: type=1326 audit(1760686668.641:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  299.508536][   T30] audit: type=1326 audit(1760686668.651:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  299.561098][   T30] audit: type=1326 audit(1760686668.651:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  299.596596][   T30] audit: type=1326 audit(1760686668.651:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  299.844364][ T9204] xt_hashlimit: max too large, truncated to 1048576
[  300.188282][ T5907] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  300.196012][ T5921] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  300.359993][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.373854][ T5921] usb 6-1: Using ep0 maxpacket: 8
[  300.382156][ T5907] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  300.394857][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.403559][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  300.431663][ T5907] usb 5-1: config 0 descriptor??
[  300.437386][ T5921] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  300.446987][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.489296][ T5921] usb 6-1: config 0 descriptor??
[  300.699491][ T5907] usbhid 5-1:0.0: can't add hid device: -71
[  300.708394][ T5921] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  300.738532][ T5907] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  300.778319][ T5907] usb 5-1: USB disconnect, device number 48
[  300.945569][ T9209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.956092][ T9209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.066406][ T5970] usb 6-1: USB disconnect, device number 3
[  301.148817][ T5906] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  301.320213][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  301.338308][ T5906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  301.358244][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  301.381399][ T5906] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  301.396183][ T5906] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  301.419212][ T5906] usb 1-1: Manufacturer: syz
[  301.437824][ T5906] usb 1-1: config 0 descriptor??
[  301.472857][ T5906] smsusb:smsusb_probe: board id=9, interface number 0
[  301.492195][ T5906] smsusb:smsusb_probe: Device initialized with return code -19
[  301.701800][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'.
[  301.726897][ T9215] program syz.0.818 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  301.850263][ T5970] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  301.882605][ T9241] netlink: 36 bytes leftover after parsing attributes in process `syz.0.818'.
[  302.010256][ T5970] usb 5-1: config 0 has an invalid interface number: 204 but max is 0
[  302.010279][ T5970] usb 5-1: config 0 has no interface number 0
[  302.011964][ T5970] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d
[  302.011995][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.012017][ T5970] usb 5-1: Product: syz
[  302.012033][ T5970] usb 5-1: Manufacturer: syz
[  302.012048][ T5970] usb 5-1: SerialNumber: syz
[  302.013786][ T5970] usb 5-1: config 0 descriptor??
[  302.015742][ T5970] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  302.015964][ T5970] ems_usb 5-1:0.204: probe with driver ems_usb failed with error -22
[  302.187466][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.827'.
[  302.225611][ T5970] usb 5-1: USB disconnect, device number 49
[  302.239187][ T5906] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  302.408311][ T5906] usb 6-1: Using ep0 maxpacket: 32
[  302.415044][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  302.429327][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  302.441182][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  302.452599][ T5906] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  302.462076][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.476111][ T5906] usb 6-1: config 0 descriptor??
[  302.482831][ T9251] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  302.502020][ T5906] hub 6-1:0.0: USB hub found
[  302.703143][ T5906] hub 6-1:0.0: 2 ports detected
[  303.083197][ T9280] netlink: 'syz.2.833': attribute type 1 has an invalid length.
[  303.094207][ T9279] binder: 9277:9279 unknown command 0
[  303.100102][ T9279] binder: 9277:9279 ioctl c0306201 200000000080 returned -22
[  303.911836][ T9302] netlink: 220 bytes leftover after parsing attributes in process `syz.2.835'.
[  303.925892][ T9302] netlink: 220 bytes leftover after parsing attributes in process `syz.2.835'.
[  303.935191][ T9302] netlink: 32 bytes leftover after parsing attributes in process `syz.2.835'.
[  303.966552][ T9302] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  304.008316][    T9] usb 1-1: USB disconnect, device number 59
[  304.032240][ T9300] netlink: 'syz.1.836': attribute type 3 has an invalid length.
[  304.060364][ T9300] netlink: 666 bytes leftover after parsing attributes in process `syz.1.836'.
[  304.319705][ T5906] hub 6-1:0.0: hub_ext_port_status failed (err = -32)
[  304.401200][    T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  304.475823][ T9309] loop9: detected capacity change from 0 to 7
[  304.494211][ T9309] Dev loop9: unable to read RDB block 7
[  304.504785][ T9309]  loop9: unable to read partition table
[  304.520409][ T9309] loop9: partition table beyond EOD, truncated
[  304.541091][ T9309] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  304.584841][    T9] usb 1-1: Using ep0 maxpacket: 8
[  304.597198][    T9] usb 1-1: no configurations
[  304.619152][    T9] usb 1-1: can't read configurations, error -22
[  304.789553][    T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  305.038270][    T9] usb 1-1: Using ep0 maxpacket: 8
[  305.113770][    T9] usb 1-1: no configurations
[  305.132460][ T5907] usb 6-1: USB disconnect, device number 4
[  305.148277][    T9] usb 1-1: can't read configurations, error -22
[  305.173698][    T9] usb usb1-port1: attempt power cycle
[  305.568307][    T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  305.620712][    T9] usb 1-1: Using ep0 maxpacket: 8
[  305.631773][    T9] usb 1-1: no configurations
[  305.648504][    T9] usb 1-1: can't read configurations, error -22
[  305.819875][    T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  305.869185][    T9] usb 1-1: Using ep0 maxpacket: 8
[  305.899539][    T9] usb 1-1: no configurations
[  305.904206][    T9] usb 1-1: can't read configurations, error -22
[  305.929204][    T9] usb usb1-port1: unable to enumerate USB device
[  305.977260][ T9341] netlink: 'syz.5.844': attribute type 4 has an invalid length.
[  305.985315][ T9341] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.844'.
[  306.226821][ T9344] bond2: option lp_interval: invalid value (0)
[  306.233600][ T9344] bond2: option lp_interval: allowed values 1 - 2147483647
[  306.266960][ T9344] bond2 (unregistering): Released all slaves
[  306.295434][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'.
[  306.356944][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'.
[  306.448444][ T9351] netlink: 'syz.1.845': attribute type 19 has an invalid length.
[  306.459652][ T9359] fuse: Unknown parameter '”óaë¦Ðfd'
[  307.014609][ T9376] trusted_key: syz.4.850 sent an empty control message without MSG_MORE.
[  307.809504][    T9] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  307.907900][   T30] kauditd_printk_skb: 41 callbacks suppressed
[  307.907920][   T30] audit: type=1326 audit(1760686677.401:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  308.020264][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  308.057259][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  308.069488][   T30] audit: type=1326 audit(1760686677.451:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  308.095257][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  308.118531][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  308.143519][   T30] audit: type=1326 audit(1760686677.451:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  308.165743][    C0] vkms_vblank_simulate: vblank timer overrun
[  308.179638][   T30] audit: type=1326 audit(1760686677.451:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  308.207460][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  308.216840][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.226245][    T9] usb 5-1: Product: syz
[  308.230749][    T9] usb 5-1: Manufacturer: syz
[  308.235341][    T9] usb 5-1: SerialNumber: syz
[  308.240223][   T30] audit: type=1326 audit(1760686677.451:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  308.262428][    C0] vkms_vblank_simulate: vblank timer overrun
[  308.289083][ T9400] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  308.298605][   T30] audit: type=1326 audit(1760686677.451:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  308.324308][    T9] cdc_mbim 5-1:1.0: skipping garbage
[  308.335020][   T30] audit: type=1326 audit(1760686677.451:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  308.417912][   T30] audit: type=1326 audit(1760686677.451:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  308.518318][   T30] audit: type=1326 audit(1760686677.451:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  308.541989][ T9400] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  308.578737][ T9400] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  308.667421][   T30] audit: type=1326 audit(1760686677.451:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54678eec9 code=0x7ffc0000
[  309.007880][ T9400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.035095][ T9400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.139237][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.208465][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.228758][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.273616][ T9441] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  309.474205][ T9441] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  309.486838][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.507368][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.535378][    T9] cdc_mbim 5-1:1.0: dwNtbInMaxSize=170 is too small. Using 2048
[  309.543761][    T9] cdc_mbim 5-1:1.0: setting rx_max = 2048
[  309.550641][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.570122][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.582682][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.761566][    T9] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[  309.832957][    T9] wwan wwan0: port wwan0mbim0 attached
[  309.847121][    T9] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, ce:62:f3:19:1b:6e
[  310.391812][ T9470] loop6: detected capacity change from 0 to 7
[  310.403324][ T9470] Dev loop6: unable to read RDB block 7
[  310.426875][ T9470]  loop6: unable to read partition table
[  310.448523][    T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  310.455157][ T9470] loop6: partition table beyond EOD, truncated
[  310.463554][ T9470] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  310.654085][    T9] usb 2-1: Using ep0 maxpacket: 16
[  310.671450][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  310.686719][ T5932] usb 5-1: USB disconnect, device number 50
[  310.705039][ T5932] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[  310.715397][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  310.744607][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  310.771562][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.797766][    T9] usb 2-1: config 0 descriptor??
[  310.854878][ T9485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.906040][ T9485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.911300][ T5932] wwan wwan0: port wwan0mbim0 disconnected
[  311.246923][    T9] apple 0003:05AC:024B.000D: unknown global tag 0xe
[  311.270070][    T9] apple 0003:05AC:024B.000D: item 0 1 1 14 parsing failed
[  311.279552][ T5932] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  311.307457][    T9] apple 0003:05AC:024B.000D: parse failed
[  311.339864][    T9] apple 0003:05AC:024B.000D: probe with driver apple failed with error -22
[  311.447606][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.456247][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.634295][    T9] usb 2-1: USB disconnect, device number 66
[  311.923265][ T9504] sch_tbf: burst 2976 is lower than device lo mtu (65550) !
[  312.768263][ T5932] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  313.060937][ T5932] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  313.071618][ T5932] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  313.118300][ T5921] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  313.185488][ T5932] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  313.212143][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.268740][ T5932] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  313.270247][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  313.366750][ T5932] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[  313.376951][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  313.475240][ T9513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.489121][ T9513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.498365][ T5921] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  313.515898][ T5932] usb 5-1: USB disconnect, device number 52
[  313.587069][ T5921] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  313.612247][ T5921] usb 2-1: config 0 interface 0 has no altsetting 0
[  313.628234][ T5921] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  313.667748][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.707671][ T5921] usb 2-1: config 0 descriptor??
[  314.244628][ T5921] nti 0003:0757:0A00.000E: unknown main item tag 0x0
[  314.272793][ T5921] nti 0003:0757:0A00.000E: unknown main item tag 0x0
[  314.300076][ T5921] nti 0003:0757:0A00.000E: unknown main item tag 0x0
[  314.325823][ T5921] nti 0003:0757:0A00.000E: unknown main item tag 0x0
[  314.363096][ T5921] nti 0003:0757:0A00.000E: unknown main item tag 0x0
[  314.391302][ T5921] nti 0003:0757:0A00.000E: unknown main item tag 0x0
[  314.400069][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.409930][ T9542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.428003][ T5921] nti 0003:0757:0A00.000E: unknown main item tag 0x0
[  314.467187][ T5921] nti 0003:0757:0A00.000E: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.1-1/input0
[  314.492586][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.528051][ T9542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.617007][ T9549] loop6: detected capacity change from 0 to 7
[  314.625332][ T9549] Dev loop6: unable to read RDB block 7
[  314.632154][ T9549]  loop6: unable to read partition table
[  314.647267][ T9549] loop6: partition table beyond EOD, truncated
[  314.663786][ T9519] netlink: 1312 bytes leftover after parsing attributes in process `syz.1.877'.
[  314.705275][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.730379][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.766805][ T9549] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  315.341460][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'.
[  315.419045][ T5932] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  315.598470][ T5921] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  315.605314][ T5932] usb 6-1: config 0 has no interfaces?
[  315.612889][ T5932] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  315.625063][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.638869][ T5932] usb 6-1: config 0 descriptor??
[  315.748273][ T5921] usb 5-1: Using ep0 maxpacket: 8
[  315.756477][ T5921] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  315.765940][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.774210][ T5921] usb 5-1: Product: syz
[  315.778592][ T5921] usb 5-1: Manufacturer: syz
[  315.783517][ T5921] usb 5-1: SerialNumber: syz
[  315.791094][ T5921] usb 5-1: config 0 descriptor??
[  315.798301][ T5921] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  315.852476][ T9551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.858538][ T5906] usb 2-1: USB disconnect, device number 67
[  315.862305][ T9551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.960413][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  315.960435][   T30] audit: type=1800 audit(1760686685.461:487): pid=9571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.889" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  316.079406][ T5932] usb 6-1: USB disconnect, device number 5
[  316.297265][   T30] audit: type=1400 audit(1760686685.761:488): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=9570 comm="syz.1.889"
[  316.988542][ T5921] gspca_sonixj: reg_r err -110
[  316.993665][ T5921] sonixj 5-1:0.0: probe with driver sonixj failed with error -110
[  317.073758][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  317.098251][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  317.521436][ T9595] loop6: detected capacity change from 0 to 7
[  317.529363][ T9595] Dev loop6: unable to read RDB block 7
[  317.542062][ T9594] binder: BINDER_SET_CONTEXT_MGR already set
[  317.547213][ T9595]  loop6: unable to read partition table
[  317.549720][ T9594] binder: 9590:9594 ioctl 4018620d 200000004a80 returned -16
[  317.555822][ T9595] loop6: partition table beyond EOD, truncated
[  317.637252][ T9595] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  318.028416][ T5932] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  318.178868][ T5932] usb 2-1: Using ep0 maxpacket: 8
[  318.185831][ T5932] usb 2-1: config 3 has an invalid interface number: 80 but max is 0
[  318.194275][ T5932] usb 2-1: config 3 has no interface number 0
[  318.200483][ T5932] usb 2-1: config 3 interface 80 altsetting 246 bulk endpoint 0xF has invalid maxpacket 256
[  318.211143][ T5932] usb 2-1: config 3 interface 80 has no altsetting 0
[  318.221656][ T5932] usb 2-1: New USB device found, idVendor=0ac8, idProduct=332d, bcdDevice=87.31
[  318.230841][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.243256][ T5932] usb 2-1: Product: syz
[  318.253222][ T5932] usb 2-1: Manufacturer: syz
[  318.270383][ T5932] usb 2-1: SerialNumber: syz
[  318.297680][ T9606] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  318.361751][    T9] usb 5-1: USB disconnect, device number 53
[  318.600138][ T5932] uvcvideo 2-1:3.80: Found UVC 0.00 device syz (0ac8:332d)
[  318.607508][ T5932] uvcvideo 2-1:3.80: No valid video chain found.
[  318.713564][ T5932] usb 2-1: USB disconnect, device number 68
[  320.045489][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'.
[  320.055175][ T9633] netlink: 16 bytes leftover after parsing attributes in process `syz.4.904'.
[  320.161590][ T9636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.905'.
[  320.183701][ T9634] netlink: 44 bytes leftover after parsing attributes in process `syz.4.904'.
[  320.381780][ T9639] sctp: [Deprecated]: syz.1.906 (pid 9639) Use of int in maxseg socket option.
[  320.381780][ T9639] Use struct sctp_assoc_value instead
[  320.898686][    T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  321.035710][ T9649] gretap1: entered promiscuous mode
[  321.048237][    T9] usb 2-1: Using ep0 maxpacket: 8
[  321.067165][    T9] usb 2-1: config 162 has an invalid interface number: 246 but max is 1
[  321.097471][    T9] usb 2-1: config 162 has an invalid interface number: 245 but max is 1
[  321.144016][    T9] usb 2-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config
[  321.154835][    T9] usb 2-1: config 162 has no interface number 0
[  321.162489][    T9] usb 2-1: config 162 has no interface number 1
[  321.168913][    T9] usb 2-1: config 162 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  321.183391][    T9] usb 2-1: config 162 interface 245 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  321.196070][ T9652] loop6: detected capacity change from 0 to 7
[  321.204137][ T9652] Dev loop6: unable to read RDB block 7
[  321.211121][ T9652]  loop6: unable to read partition table
[  321.216850][    T9] usb 2-1: config 162 interface 245 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  321.227430][ T9652] loop6: partition table beyond EOD, truncated
[  321.233921][    T9] usb 2-1: config 162 interface 245 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  321.244320][ T9652] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  321.268247][    T9] usb 2-1: config 162 interface 245 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  321.294179][    T9] usb 2-1: config 162 interface 246 has no altsetting 0
[  321.303592][    T9] usb 2-1: config 162 interface 245 has no altsetting 0
[  321.314352][    T9] usb 2-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c
[  321.324540][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.333547][    T9] usb 2-1: Product: syz
[  321.338898][    T9] usb 2-1: Manufacturer: syz
[  321.343720][    T9] usb 2-1: SerialNumber: syz
[  321.570343][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.580006][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.622212][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.633444][ T5921] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  321.646752][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.682191][ T9656] random: crng reseeded on system resumption
[  321.687132][    T9] usb 2-1: USB disconnect, device number 69
[  321.798621][ T5921] usb 5-1: Using ep0 maxpacket: 8
[  321.805689][ T5921] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  321.814311][ T5921] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  321.825080][ T5921] usb 5-1: config 135 has no interface number 0
[  321.832052][ T5921] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  321.848021][ T5921] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  321.858590][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.874701][ T5921] usb 5-1: Product: syz
[  321.879844][ T5921] usb 5-1: Manufacturer: syz
[  321.884623][ T5921] usb 5-1: SerialNumber: syz
[  321.897002][ T5921] uvcvideo 5-1:135.230: Found Unit with invalid ID 0
[  321.904498][ T5921] uvcvideo 5-1:135.230: Found UVC 0.00 device syz (18ec:3288)
[  321.912232][ T5921] uvcvideo 5-1:135.230: No valid video chain found.
[  322.096767][ T9654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.105870][ T9654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.127261][ T5921] usb 5-1: USB disconnect, device number 54
[  322.538728][    T9] usb 2-1: new full-speed USB device number 70 using dummy_hcd
[  322.698937][ T9674] tipc: Started in network mode
[  322.700360][    T9] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  322.703877][ T9674] tipc: Node identity 46cd40321b44, cluster identity 4711
[  322.720492][ T9674] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.725062][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  322.732779][ T9674] syzkaller0: entered promiscuous mode
[  322.737852][    T9] usb 2-1: config 0 has no interface number 0
[  322.748400][ T9674] syzkaller0: entered allmulticast mode
[  322.764121][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  322.773723][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.782095][    T9] usb 2-1: Product: syz
[  322.786322][    T9] usb 2-1: Manufacturer: syz
[  322.790004][ T9674] tipc: Resetting bearer <eth:syzkaller0>
[  322.795191][    T9] usb 2-1: SerialNumber: syz
[  322.801746][ T9673] tipc: Resetting bearer <eth:syzkaller0>
[  322.812161][    T9] usb 2-1: config 0 descriptor??
[  322.823624][    T9] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  322.831777][    T9] uvcvideo 2-1:0.105: No valid video chain found.
[  322.841091][ T9673] tipc: Disabling bearer <eth:syzkaller0>
[  322.869109][ T5921] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  322.978356][ T5906] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  323.020591][ T9664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.029685][ T9664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.032086][ T5921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.041718][ T9664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.052045][ T5921] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  323.062429][ T9664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.067432][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.084370][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.086655][ T5921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  323.100810][    T9] usb 2-1: USB disconnect, device number 70
[  323.102668][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.116182][ T5921] usb 6-1: Product: syz
[  323.121781][ T5921] usb 6-1: Manufacturer: syz
[  323.126431][ T5921] usb 6-1: SerialNumber: syz
[  323.142262][ T5921] cdc_mbim 6-1:1.0: skipping garbage
[  323.160897][ T5906] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  323.170386][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.181542][ T5906] usb 5-1: config 0 descriptor??
[  323.337745][ T9672] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  323.749497][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.765898][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.799661][   T30] audit: type=1326 audit(1760686693.291:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.5.918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d0258eec9 code=0x0
[  323.911223][    T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  323.933484][ T9694] loop6: detected capacity change from 0 to 1
[  323.945539][ T9694] Dev loop6: unable to read RDB block 1
[  323.951749][ T9694]  loop6: unable to read partition table
[  323.957669][ T9694] loop6: partition table beyond EOD, truncated
[  323.964404][ T9694] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  324.019737][ T5921] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS
[  324.032120][ T5921] cdc_mbim 6-1:1.0: bind() failure
[  324.056316][ T5921] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  324.069317][ T5921] cdc_ncm 6-1:1.1: bind() failure
[  324.080161][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  324.106623][ T5921] usb 6-1: USB disconnect, device number 6
[  324.119893][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  324.151747][    T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=1090, bcdDevice= 0.00
[  324.161328][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.177295][    T9] usb 2-1: config 0 descriptor??
[  324.274390][ T9701] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2
[  324.388282][ T1071] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  324.552898][ T1071] usb 1-1: config 0 has an invalid interface number: 98 but max is 0
[  324.567796][ T1071] usb 1-1: config 0 has no interface number 0
[  324.574895][ T1071] usb 1-1: config 0 interface 98 has no altsetting 0
[  324.603966][ T1071] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[  324.616061][ T1071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.656591][ T1071] usb 1-1: Product: syz
[  324.663274][ T1071] usb 1-1: Manufacturer: syz
[  324.702953][ T1071] usb 1-1: SerialNumber: syz
[  324.722837][ T1071] usb 1-1: config 0 descriptor??
[  324.903232][    T9] usb 2-1: string descriptor 0 read error: -71
[  324.923905][    T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  324.946861][ T1071] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[  325.029863][    T9] usb 2-1: USB disconnect, device number 71
[  325.210671][ T9699] bridge_slave_0: default FDB implementation only supports local addresses
[  325.235158][ T9709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.368831][ T9709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.651973][ T1071] usb 1-1: reset high-speed USB device number 64 using dummy_hcd
[  325.740704][ T5906] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  325.773149][ T5906] [drm:udl_init] *ERROR* Selecting channel failed
[  325.809288][ T1071] usb 1-1: device descriptor read/64, error -71
[  325.834824][ T5906] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  325.882469][ T5906] [drm] Initialized udl on minor 2
[  325.922833][ T5906] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  325.965576][ T5906] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  325.974289][ T5921] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  326.013909][ T5921] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  326.043709][ T5906] usb 5-1: USB disconnect, device number 55
[  326.070678][ T9728] netlink: 48 bytes leftover after parsing attributes in process `syz.5.934'.
[  326.098388][ T1071] usb 1-1: reset high-speed USB device number 64 using dummy_hcd
[  326.099886][ T9732] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  326.107827][ T5921] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  326.302144][ T1071] usb 1-1: device descriptor read/64, error -71
[  326.568272][ T1071] usb 1-1: reset high-speed USB device number 64 using dummy_hcd
[  326.599944][ T1071] usb 1-1: device descriptor read/8, error -71
[  326.611670][ T9746] bridge1: entered promiscuous mode
[  326.659110][ T9746] bridge1: entered allmulticast mode
[  326.881077][ T1071] usb 1-1: reset high-speed USB device number 64 using dummy_hcd
[  326.909705][ T1071] usb 1-1: device descriptor read/8, error -71
[  326.919328][ T9748] loop9: detected capacity change from 0 to 7
[  326.926825][ T9748] Dev loop9: unable to read RDB block 7
[  326.935062][ T9748]  loop9: AHDI p2 p3 p4
[  326.939740][ T9748] loop9: partition table partially beyond EOD, truncated
[  326.952795][ T9748] loop9: p3 size 4227858431 extends beyond EOD, truncated
[  327.110318][ T1071] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware
[  327.158334][ T1071] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  327.187993][ T5907] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[  327.219147][ T1071] usb 1-1: USB disconnect, device number 64
[  327.225209][ T5907] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[  327.233837][ T6381] udevd[6381]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  327.279357][ T5907] ------------[ cut here ]------------
[  327.285296][ T5907] WARNING: CPU: 1 PID: 5907 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90
[  327.293724][ T5907] Modules linked in:
[  327.297838][ T5907] CPU: 1 UID: 0 PID: 5907 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) 
[  327.308701][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  327.319281][ T5907] Workqueue: events request_firmware_work_func
[  327.325458][ T5907] RIP: 0010:kernfs_get+0x72/0x90
[  327.330563][ T5907] Code: e8 83 90 5f ff 48 89 df be 04 00 00 00 e8 36 43 c5 ff f0 ff 03 eb 05 e8 6c 90 5f ff 5b 5d e9 15 b1 ee 08 cc e8 5f 90 5f ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 35
[  327.350216][ T5907] RSP: 0018:ffffc90004a575c0 EFLAGS: 00010293
[  327.356516][ T5907] RAX: ffffffff8260b391 RBX: ffff888056fdd0f0 RCX: ffff88802eab0000
[  327.364936][ T5907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  327.373190][ T5907] RBP: 0000000000000000 R08: ffff888056fdd0f3 R09: 1ffff1100adfba1e
[  327.381413][ T5907] R10: dffffc0000000000 R11: ffffed100adfba1f R12: ffff8880307d3628
[  327.389557][ T5907] R13: 1ffff110060fa6c6 R14: ffff8880307d3630 R15: 1ffff110060fa6c5
[  327.390012][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  327.397661][ T5907] FS:  0000000000000000(0000) GS:ffff888125e0b000(0000) knlGS:0000000000000000
[  327.397760][ T5907] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  327.421622][ T5907] CR2: 00002000002f3030 CR3: 00000000701ba000 CR4: 00000000003526f0
[  327.429773][ T5907] Call Trace:
[  327.433091][ T5907]  <TASK>
[  327.436133][ T5907]  kobject_add_internal+0x632/0xb40
[  327.441751][ T5907]  kobject_add+0x155/0x220
[  327.446386][ T5907]  ? __pfx_kobject_add+0x10/0x10
[  327.451502][ T5907]  ? __kasan_kmalloc+0x93/0xb0
[  327.456608][ T5907]  ? kobject_init+0x83/0x1e0
[  327.462323][ T5907]  get_device_parent+0x316/0x3a0
[  327.467424][ T5907]  device_add+0x2e1/0xb50
[  327.471884][ T5907]  firmware_fallback_sysfs+0x2e4/0x9b0
[  327.477370][ T5907]  ? kmem_cache_free+0x19b/0x690
[  327.482413][ T5907]  _request_firmware+0xf83/0x15b0
[  327.487515][ T5907]  ? __pfx__request_firmware+0x10/0x10
[  327.493118][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  327.499019][ T5907]  request_firmware_work_func+0xaf/0x1c0
[  327.505269][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  327.511099][ T5907]  process_scheduled_works+0xae1/0x17b0
[  327.516693][ T5907]  ? __pfx_process_scheduled_works+0x10/0x10
[  327.522752][ T5907]  worker_thread+0x8a0/0xda0
[  327.527378][ T5907]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  327.533801][ T5907]  ? __kthread_parkme+0x7b/0x200
[  327.538836][ T5907]  kthread+0x711/0x8a0
[  327.543004][ T5907]  ? __pfx_worker_thread+0x10/0x10
[  327.548107][ T5907]  ? __pfx_kthread+0x10/0x10
[  327.552853][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  327.558274][ T5907]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.563780][ T5907]  ? __pfx_kthread+0x10/0x10
[  327.568613][ T5907]  ret_from_fork+0x4bc/0x870
[  327.568857][    T9] usb 6-1: Using ep0 maxpacket: 16
[  327.573283][ T5907]  ? __pfx_ret_from_fork+0x10/0x10
[  327.583673][ T5907]  ? __switch_to_asm+0x39/0x70
[  327.588641][ T5907]  ? __switch_to_asm+0x33/0x70
[  327.593454][ T5907]  ? __pfx_kthread+0x10/0x10
[  327.598084][ T5907]  ret_from_fork_asm+0x1a/0x30
[  327.603432][ T5907]  </TASK>
[  327.604653][    T9] usb 6-1: config 0 has an invalid interface number: 68 but max is 0
[  327.606573][ T5907] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  327.606592][ T5907] CPU: 1 UID: 0 PID: 5907 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) 
[  327.606614][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  327.606628][ T5907] Workqueue: events request_firmware_work_func
[  327.606655][ T5907] Call Trace:
[  327.606663][ T5907]  <TASK>
[  327.606672][ T5907]  dump_stack_lvl+0x99/0x250
[  327.606695][ T5907]  ? __asan_memcpy+0x40/0x70
[  327.606715][ T5907]  ? __pfx_dump_stack_lvl+0x10/0x10
[  327.606735][ T5907]  ? __pfx__printk+0x10/0x10
[  327.606768][ T5907]  vpanic+0x237/0x6d0
[  327.606794][ T5907]  ? __pfx_vpanic+0x10/0x10
[  327.606829][ T5907]  panic+0xb9/0xc0
[  327.606854][ T5907]  ? __pfx_panic+0x10/0x10
[  327.606895][ T5907]  __warn+0x31b/0x4b0
[  327.606919][ T5907]  ? kernfs_get+0x72/0x90
[  327.606940][ T5907]  ? kernfs_get+0x72/0x90
[  327.606956][ T5907]  report_bug+0x2be/0x4f0
[  327.606974][ T5907]  ? kernfs_get+0x72/0x90
[  327.606992][ T5907]  ? kernfs_get+0x72/0x90
[  327.607008][ T5907]  ? kernfs_get+0x74/0x90
[  327.607025][ T5907]  handle_bug+0x84/0x160
[  327.607048][ T5907]  exc_invalid_op+0x1a/0x50
[  327.607070][ T5907]  asm_exc_invalid_op+0x1a/0x20
[  327.607087][ T5907] RIP: 0010:kernfs_get+0x72/0x90
[  327.607105][ T5907] Code: e8 83 90 5f ff 48 89 df be 04 00 00 00 e8 36 43 c5 ff f0 ff 03 eb 05 e8 6c 90 5f ff 5b 5d e9 15 b1 ee 08 cc e8 5f 90 5f ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 35
[  327.607122][ T5907] RSP: 0018:ffffc90004a575c0 EFLAGS: 00010293
[  327.607138][ T5907] RAX: ffffffff8260b391 RBX: ffff888056fdd0f0 RCX: ffff88802eab0000
[  327.607153][ T5907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  327.607165][ T5907] RBP: 0000000000000000 R08: ffff888056fdd0f3 R09: 1ffff1100adfba1e
[  327.607178][ T5907] R10: dffffc0000000000 R11: ffffed100adfba1f R12: ffff8880307d3628
[  327.607193][ T5907] R13: 1ffff110060fa6c6 R14: ffff8880307d3630 R15: 1ffff110060fa6c5
[  327.607216][ T5907]  ? kernfs_get+0x71/0x90
[  327.607241][ T5907]  kobject_add_internal+0x632/0xb40
[  327.607272][ T5907]  kobject_add+0x155/0x220
[  327.607299][ T5907]  ? __pfx_kobject_add+0x10/0x10
[  327.607318][ T5907]  ? __kasan_kmalloc+0x93/0xb0
[  327.607346][ T5907]  ? kobject_init+0x83/0x1e0
[  327.607369][ T5907]  get_device_parent+0x316/0x3a0
[  327.607405][ T5907]  device_add+0x2e1/0xb50
[  327.607432][ T5907]  firmware_fallback_sysfs+0x2e4/0x9b0
[  327.607456][ T5907]  ? kmem_cache_free+0x19b/0x690
[  327.607486][ T5907]  _request_firmware+0xf83/0x15b0
[  327.607528][ T5907]  ? __pfx__request_firmware+0x10/0x10
[  327.607553][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  327.607583][ T5907]  request_firmware_work_func+0xaf/0x1c0
[  327.607606][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  327.607633][ T5907]  process_scheduled_works+0xae1/0x17b0
[  327.607687][ T5907]  ? __pfx_process_scheduled_works+0x10/0x10
[  327.607730][ T5907]  worker_thread+0x8a0/0xda0
[  327.607758][ T5907]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  327.607794][ T5907]  ? __kthread_parkme+0x7b/0x200
[  327.607831][ T5907]  kthread+0x711/0x8a0
[  327.607854][ T5907]  ? __pfx_worker_thread+0x10/0x10
[  327.607879][ T5907]  ? __pfx_kthread+0x10/0x10
[  327.607901][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  327.607928][ T5907]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.607944][ T5907]  ? __pfx_kthread+0x10/0x10
[  327.607965][ T5907]  ret_from_fork+0x4bc/0x870
[  327.607994][ T5907]  ? __pfx_ret_from_fork+0x10/0x10
[  327.608026][ T5907]  ? __switch_to_asm+0x39/0x70
[  327.608047][ T5907]  ? __switch_to_asm+0x33/0x70
[  327.608067][ T5907]  ? __pfx_kthread+0x10/0x10
[  327.608087][ T5907]  ret_from_fork_asm+0x1a/0x30
[  327.608126][ T5907]  </TASK>
[  327.615029][ T5907] Kernel Offset: disabled