last executing test programs:

12m9.544356104s ago: executing program 4 (id=299):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x9eb89}]}}}]}, 0x40}}, 0x0)

12m9.264415781s ago: executing program 4 (id=300):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x80000000)

12m9.006353449s ago: executing program 4 (id=301):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0xc, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000640)="180c4552c833a71dbd2856acd9e40e8e22e6cd41f172fb718d598a15f9acafc9ecf00db6b389e5c1c20d3980b7cd69ce51177964ed41cd5320877f7032e59091aa83343580c4ec22834b8ad6e92040bbd2467c6b283e2e1976ed46b72c6a61b5eaccf19c45faa2371026c3a4b7ab81e14b3730ad8ca64b196e6e0cee54e9e13fdeea8926bfe689c92087f45af2617790294538d36133a65ebf218a23843a1364b524b53b26612d891344325c9171b9dde02a248572b54964721e3a00dcd42f61f84b3817344f9aeaede2b85fc19802bbf3fc23", 0xd3)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000056a49255dab1c704002000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

12m8.357094054s ago: executing program 4 (id=307):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x1000000)
ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f00000002c0))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff64, 0x82}, {0x8, 0x87}}]}, 0x4c}}, 0x0)

12m7.396527771s ago: executing program 4 (id=316):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x1c, 0x6, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000004)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000004a000707"], 0x1c}, 0x1, 0x0, 0x0, 0x20080804}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0xfffffffe}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@loopback={0x1000000000000}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

12m6.756242354s ago: executing program 4 (id=320):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x3}}], 0x1, 0x2124, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map, r2, 0x1d, 0x10, r2, @void, @value=r2}, 0x20)
r3 = syz_io_uring_setup(0x1bab, &(0x7f0000000200)={0x0, 0x2841, 0x80, 0x2, 0x156}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8, 0x1})
io_uring_enter(r3, 0x242f, 0x11f7, 0x28, 0x0, 0x0)
io_uring_enter(r3, 0x26c8, 0xe000000, 0x1, 0x0, 0x10)

11m51.307373019s ago: executing program 32 (id=320):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x3}}], 0x1, 0x2124, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd00007118540000000000c3640010010000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map, r2, 0x1d, 0x10, r2, @void, @value=r2}, 0x20)
r3 = syz_io_uring_setup(0x1bab, &(0x7f0000000200)={0x0, 0x2841, 0x80, 0x2, 0x156}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8, 0x1})
io_uring_enter(r3, 0x242f, 0x11f7, 0x28, 0x0, 0x0)
io_uring_enter(r3, 0x26c8, 0xe000000, 0x1, 0x0, 0x10)

8.020776547s ago: executing program 2 (id=2788):
socket$pppl2tp(0x18, 0x1, 0x1)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x2d, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48)
syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB="27c9d5a05bdf7bd8e340235f90fc7ed5f4d6fa526b4d1be1cbb213b38028fad5043110b684def7690000000000002486dcc03cc73a230863e1a506f73996276eba6b410248b20dbe9d8b79a03cace500261dac0b0ebd07d58d52dc1ff7db40f3287d08287323bd6e908bed34f10827b974f1f1cf734c0fac8dba8292053ed6e0173bfd5b93b1783a765c5327835d6581222e8bb3a5", @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,max_read=0x00000000000000'], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x2a00)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000180)=[0x0, 0x0], 0x2})
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)

6.710624282s ago: executing program 2 (id=2795):
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
nanosleep(&(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r2 = add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000180)={0x0, 0x0, @c}, 0x29, 0xfffffffffffffffc)
syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000f80)={0x14, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x63, 0x2}, @period={0x58, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}})
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)
ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000680)=""/211)
pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
io_setup(0xa3, &(0x7f0000000240)=<r5=>0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r6=>0x0, <r7=>0x0})
io_pgetevents(r5, 0x2, 0x5, &(0x7f0000000340)=[{}, {}, {}, {}, {}], &(0x7f00000002c0)={r6, r7+10000000}, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0xd6)

6.628229834s ago: executing program 1 (id=2796):
r0 = gettid()
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x500, &(0x7f0000000140)={&(0x7f0000000a40)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "8d747ea4dc9278634a4e3ae552"}]}, 0x28}}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mq_open(&(0x7f0000000880)='GPL\x00', 0x40, 0x11, &(0x7f00000008c0)={0x101, 0x4, 0x2, 0x80})
clock_gettime(0x0, &(0x7f0000000a00)={<r2=>0x0, <r3=>0x0})
r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x44040, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r5, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0)
mq_timedreceive(r4, &(0x7f0000000900)=""/250, 0xfffffffffffffe62, 0x400080000001, &(0x7f0000000a40)={r2, r3+60000000})
syz_usb_connect(0x3, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001186360088d0e3f76239b010203010902860003a2000000090454020317987b5b0a24010a00060201020c2408050600070d0a329ce2090586100004f40804072501832f08000905000040008103ff0905091b08000c078009040201042e2b1503090509000000030004090502020002f7810609050303ff030840040705a6c6415a9f09058503a2692db640000b020b0904034b00a7d80107"], 0x0)

6.603746201s ago: executing program 3 (id=2797):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) (async)
ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000140)) (async)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382)
sendfile(r2, r2, 0x0, 0x24002de8) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf01, 0x0) (async)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1)

6.446287675s ago: executing program 2 (id=2798):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
socket$inet6(0xa, 0x2, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x18})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r2 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r3, {0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x2, 0x82, 0x1, 0xfc, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000000}]}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x664c, 0x80, 0x0, 0x3c3}, &(0x7f0000000200), &(0x7f0000000140))
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x0, 0x7, 0xe, 0x25}, {0xfa, 0xe5, 0x9, 0x10000}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x4)

6.356252721s ago: executing program 3 (id=2799):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000003340)=0x9, 0x4)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000300), 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x80000001, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_elf64(r3, 0x0, 0x78)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f00000000c0)={0x6, "13f20a6684154bc7ec29052b9ec48e707a4f251dd900", 0x0, 0x20, 0x0, 0x3, 0x2, 0x0, 0x8})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
creat(&(0x7f00000001c0)='./file0\x00', 0x8)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x48}}, 0x0)
sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0)
close(r5)
syz_open_procfs(0x0, 0x0)

6.100695579s ago: executing program 0 (id=2802):
r0 = socket(0x840000000002, 0x3, 0xff)
sendmsg$inet(r0, &(0x7f0000000ec0)={&(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000500)="378e818bde4c53975451df39c817292e341705438e808311cff7607ad91bd14c8270f5d09088f6ec7f1e269591efde1450070f53e986f84fce0fb6c281de5244ec63e9d600b368bfe1e8730c2705b13f85e15e761ffe6bcf6138434685451fa6076907c86e158d82d056d3d5f49c519bdcafae3576c7ee7d2df5ec8a3afb71ef2355e10f6d7a", 0x86}, {&(0x7f0000000680)="2190d611b4e0acf47cfa8cdb41c4a2ca807c9dfb67aae619e9ce9616a973203833ea4fde29d5db9f321453f7f0f9e6f0e8f3e1296bb53c79a8c7e9c378648b414b24ef6730bdbb535a81f9409babf2a13e046c580f1d9fbc264a3c7912c6a28adb441c16fe6dffdcc151f3729dd12936d75794410ce65347bed5fd4219be8eea2d97a17853f2f65fae9c2df7567b6db7a030e629ef0412f8c5e06f8b0f3739c4", 0xa0}, {&(0x7f00000005c0)="5dd7d0816f25f574ba8a87032bc73c0211f1b3a14140eb0d4fb66b9b27165690cc2fc775e7935a14d91ffb7066083669021dabacc5a72ea40e808ffc4bd1d72059ff78bb4f194905b716e4aa5ca08dc3fa870985653babf7493a1409405f6bcd623ea28b017aca8173bb05dd15", 0x6d}, {&(0x7f0000000380)="ac0f129213f951f15b90c57ef4848cff7603", 0x12}, {&(0x7f0000000740)="eb50c2d1818a998567ac1d7879cd6d604ee791314d24119d5e0d5f4d45122a4f697991198bbf791ca23cc8257bba9fb44937229d06f4f8b50bc82973f77bd469ca27c951ff261f6a3743904adb19fc27168aebe328c2e040b5f8c3d0b268e669a15bf7c92f754b9e9057be9515c0e05920729a417713d2b5d227ca858e4745c008c23170778aa9bca40637fd050e5f03fa0342c852dfd8e3648f532b3f25cba684ce6b91618663fca1ef726119b2386ab824e30ac69e1a97fb9a", 0xba}, {&(0x7f0000001700)="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", 0x354}, {&(0x7f0000000080)="0f", 0x1}, {&(0x7f0000000100)="beba47bf8cdec261d0caab030dc83dc97c", 0x11}], 0x8, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x24040010)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="400f01c3650b07b9800000c02e6726f3400fc7b50000000035000400000f30c4417ff030b9800000c00f3235000100000f30640f01cf65490fc79ce656000000f30f1efc6764653e470f1b690c", 0x4d}], 0x1, 0x53, 0x0, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000080)={0x2, 0x0, [{0x4, 0x2, 0x2, 0x7fffffff, 0x3, 0xfffffff7, 0x2}, {0x40000019, 0x10000, 0x0, 0x4, 0x3, 0x7fd}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

5.904294761s ago: executing program 1 (id=2803):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c080}, 0xc050)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127)
write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0'}, 0xb)
socket$igmp6(0xa, 0x3, 0x2)

5.805587301s ago: executing program 0 (id=2805):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
r2 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000180)={0x0, 0x21, 0x3c, {0x3c, 0xa, "6a07ca596baf80643c005deadd618b13ef2fb1d11024e60239f4b025b642658fe71acb899f47ad282b659df15f64b433797375d88b52582d5e9c"}}, &(0x7f0000000200)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "259da2bf7bf0f8078b3891e415d564690ae199ae6ff98c4b50045c25cadcb2b11371c1f171ce4fc7302e2bd5d9f29728e4b612c73c55dee51415f9e7b0ae0c6b97039ea14ab95dc752cdf8c6a6bcb1f76a440ea64d7c6f874795bb74d49f184986b0081b8ead52a56cb97b20e025cc882ccf931d598cf63f108c"}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x17, 0xc5, "7e9a7c73969430e85d06a546e691b30f726eac7bdf95e0d71dec1acb5a56eadb6221721316058a96bb3cfc1d5a6094dd3869fbc703b82bc5c649611fa4a4c4db07984d43ae1c529891cda46494ecadf7d555d4d25dbafd57eb891321762cf39abe61098eeb6eb9d1481b20413486550d5b7e5ebed5c3c43420fb815f895680276d976933ae5caebb2d2f6984df5e26abc3804cbb8126e29a2915e201ac54fcb0167d1cf231441514db99664d3e20177ad4efbff25cc22ab7b6325477ae6cf2b3546a8fede0"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0xc0, 0x5, 0x6, "2b8cc14b009b"}, &(0x7f0000000500)={0x40, 0x5, 0x1, "82"}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_newrule={0x0, 0x20, 0x400, 0x70bd2a, 0x25dfdbfe, {0xa, 0x80, 0x10, 0x1, 0x5, 0x0, 0x0, 0x2}, [@FRA_SRC={0x0, 0x2, @empty}, @FRA_DST={0x0, 0x1, @local}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x0, 0xd, 0x6cad0501}]}, 0x50}, 0x1, 0x0, 0x0, 0x6dfa5883031f1715}, 0x8000)
read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g')

5.247210248s ago: executing program 5 (id=2807):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0xc, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000640)="180c4552c833a71dbd2856acd9e40e8e22e6cd41f172fb718d598a15f9acafc9ecf00db6b389e5c1c20d3980b7cd69ce51177964ed41cd5320877f7032e59091aa83343580c4ec22834b8ad6e92040bbd2467c6b283e2e1976ed46b72c6a61b5eaccf19c45faa2371026c3a4b7ab81e14b3730ad8ca64b196e6e0cee54e9e13fdeea8926bfe689c92087f45af2617790294538d36133a65ebf218a23843a1364b524b53b26612d891344325c9171b9dde02a248572b54964721e3a00dcd42f61f84b3817344f9aeaede2b85fc19802bbf3fc23", 0xd3)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000056a49255dab1c7040000000000ffffffffffffbeda00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

5.000919209s ago: executing program 2 (id=2808):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r1, 0x1, 0x19, 0xfffffffffffffffd, &(0x7f0000003080)=0x7a)
close_range(r0, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0xffffffd3, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780050014007f00000005001500030000000500010006040000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000140), 0x4)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) (async)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}})
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x28000) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x28000)
ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @start={0x8}}) (async)
ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @start={0x8}})

5.000259857s ago: executing program 1 (id=2809):
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @private}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x4048004)
openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = gettid()
tgkill(0x0, r2, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x20)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, 0x0, 0x0, 0x3}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000200000000000000000000000005000100060000000900020073797a3000000080"], 0x28}}, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, 0x0)
mprotect(&(0x7f00001d4000/0x1000)=nil, 0x1000, 0x2000001)

4.956409717s ago: executing program 5 (id=2810):
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
unshare(0x28000600)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000080)={0x1})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r9=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

4.680436206s ago: executing program 2 (id=2811):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffc, 0x3, @empty, 0x5}, 0x1c)
r4 = dup2(r2, r2)
sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x11c, 0x24, 0xe10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff2, 0xc}, {0x10, 0xffee}, {0xfff2, 0x10}}, [@TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x28, 0x84, 0x4, 0x4f, 0x0, 0x3, 0x6, 0x1}}, {0x6, 0x2, [0x800]}}, {{0x1c, 0x1, {0x4, 0x5, 0x2, 0x1, 0x1, 0x1, 0x200c, 0x2}}, {0x8, 0x2, [0x3, 0x4]}}, {{0x1c, 0x1, {0x6, 0x0, 0x9, 0x5, 0x1, 0xfabf, 0x100400, 0x6}}, {0x10, 0x2, [0xff, 0x0, 0xf, 0x1, 0x8, 0x8000]}}, {{0x1c, 0x1, {0x1, 0x0, 0x6, 0x7, 0x1, 0x0, 0x6, 0x5}}, {0xe, 0x2, [0x0, 0x3, 0x4, 0xfff9, 0x3]}}, {{0x1c, 0x1, {0xa, 0x16, 0x0, 0x7fffffff, 0x1, 0x4, 0x1, 0x5}}, {0xe, 0x2, [0x4, 0x4e51, 0x0, 0xc307, 0x7ff]}}, {{0x1c, 0x1, {0xb, 0x87, 0x19, 0x0, 0x2, 0x6, 0xc86e, 0x3}}, {0xa, 0x2, [0xc68d, 0x6, 0x4]}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x85}, 0x40020)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_usb_connect(0x2, 0x459, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x81, 0xff, 0xc7, 0xff, 0x8}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="00409800003500"], 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3801}}]})
connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x70000, 0x0)
lseek(r10, 0x7, 0x1)
sendmmsg$inet6(r9, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f00000008c0)="84", 0x1}], 0x2}}], 0x1, 0x4404c880)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r5, @ANYRES16=0x0, @ANYRES32=r0, @ANYRES8=r3], 0x48)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000008cc400000400"/20, @ANYRES32=r11, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r12, 0x4}, 0x38)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg1\x00'})
socket$nl_xfrm(0x10, 0x3, 0x6)

3.416872337s ago: executing program 1 (id=2812):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = dup(r0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async)
syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315, 0x0, r4}, &(0x7f0000000500), &(0x7f00000001c0)) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40080382}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xd2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0) (async)
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)

3.200539382s ago: executing program 0 (id=2813):
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x7, 0x0, 0x8000}, 0x50)
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
mknod$loop(&(0x7f0000000040)='./bus\x00', 0x200, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000ffffefff00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

2.798344627s ago: executing program 5 (id=2814):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20500, 0x0)
ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000004f00))
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x6b})

2.669959346s ago: executing program 0 (id=2815):
dup(0xffffffffffffffff)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x4e22, 0x0, 0xa}, {0xfffffffffffffffe, 0x400403, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, {0x800, 0x0, 0x2, 0x10000000000}, 0xfffffff9, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x4d2, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x3500, 0x1, 0x2, 0x0, 0x1, 0x9}}, 0xe8)
sendmmsg(r1, 0x0, 0x0, 0x0)

2.536750696s ago: executing program 3 (id=2816):
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000380)={0x28, 0x3, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x12080, 0xcc)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
mkdirat(r1, &(0x7f0000000200)='./bus/file0\x00', 0x0)
renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x4)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000380)={0x28, 0x3, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0}) (async)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x12080, 0xcc) (async)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async)
landlock_restrict_self(r2, 0x0) (async)
landlock_restrict_self(r2, 0x0) (async)
landlock_restrict_self(r2, 0x0) (async)
mkdirat(r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) (async)
renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x4) (async)

2.327974999s ago: executing program 0 (id=2817):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r4=>0xffffffffffffffff})
r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}, 0x0, 0x20040000})
io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x1, @dev, 0x4}, 0x1c)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x0)

2.300813048s ago: executing program 5 (id=2818):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000240a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a3200000000f37d140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getpgrp(0xffffffffffffffff)
getresuid(&(0x7f0000000200), 0x0, &(0x7f0000000340))
getgid()
sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)="402c9b", 0x3}], 0x2, 0x0, 0x0, 0x1}, 0x8000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000002081b00000000000305000320210000000900010073797a30000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000080), 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x18, 0x4, 0x20000008)
socket$unix(0x1, 0x1, 0x0)

2.25388498s ago: executing program 3 (id=2819):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x3)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000040)={0x80, 0x9, 0x0, 0x0, 0xffffffff})
r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000180)="d21f9833d41c89d71d7e5df52fd77f", 0xf, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, 0x0, 0x0, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r4=>0x0)
mq_timedreceive(r0, &(0x7f0000000100), 0x0, 0x8, &(0x7f0000000140))
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, 0x0, 0x0, 0xfeffff}])
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r5, 0xc0485630, &(0x7f0000000040)={0x7, "0c6c427e005d7e6a0000a424dd2e656847bce87f2d47abe9ad374121bcd2d18b", 0x2, 0x0, 0x800, 0xffffff, 0x2})
timerfd_create(0x4, 0x80800)

2.097155489s ago: executing program 1 (id=2820):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c080}, 0xc050)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127)
write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb)
socket$igmp6(0xa, 0x3, 0x2)

1.404119506s ago: executing program 2 (id=2821):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
syz_open_dev$dri(0x0, 0x2, 0x98240)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0x3}, 0x0)
ftruncate(r0, 0x8800000)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
sendfile(r3, r0, 0x0, 0x558410e9)
r4 = socket$inet6(0xa, 0x3, 0x5)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
dup2(r5, r4)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYRESHEX=r5, @ANYRES16=r7, @ANYRES32=r4, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0)
sendmmsg(r4, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x850)

995.998058ms ago: executing program 3 (id=2822):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000037c0)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000200)="d3bf8ca149d90c178d5fe681a65eedf2719d2479219bbff05d6be4e4ab74ba5843249e26199bf14c4b58d0c71162b3ad60a7e6aa7a42711bcc860a0e32f2ba11690e9174fc5de9960342d400832540bda2b38a7c5f10edf928831a9795960e387b", 0x61}, {&(0x7f0000000340)="c96a51aca798cae3082668b1500d1b8a9c0686cbe2090634cdb5ba4f1d45a8e8385e65712d514f686acc333eb960", 0x2e}, {&(0x7f00000003c0)="1b061f217441b2a8c907dab0bf2a5154980794ac62cdf0c4fe3222bb785863106ec799070f7662cb42ac2dfb1b134151332bf795e65e0cf57b59eee35747532063493d239020df35f46dbc6bf0d6d9908deb846fba6bc0383b83d2ab7cd9d2c595314bffbcada1c6730bd612229c7a267a262f41f979de807d62608a1f595fd3", 0x80}, {&(0x7f0000000440)="bc7f490ff7a454561c1d31ca7c18adc111fc8488ff6ec83f142a853f394c0761a8a9926a8b52bbf991c542cbe7f7a86ca44df954fc2e06ee9e035547d6334d812af315116e30a91f64b45b59983a24c87ef08e1dde925797d870122d38478047509cd0ae3481b70146cdc614e033f2eeb9", 0x71}, {&(0x7f00000004c0)="936fc40cfa847da781d4", 0xa}, {&(0x7f0000000600)="054e7f10fbcc3055c792272fd9a56cc4af368de0c38cc7388dc3379de21b7b3a9886039c97be31bdc4c550bfc2eda68c74bc5dc7b131b41ac885c216ea02a995b2b8aa905ac313a311d9fa33844d3049940a758d2e482fe4b69e0ebc32c7cad36582460b73d81e0e528248bd36f6c2e4fba18e830e3bf385b33e84968a62ff3b067629801e210a4c6d46d8ac2e553eb9e8ab384fd8b1a34ea49dcfc7428330eda38ca45e6913439461221ecd5c781d991a5f70849082a67f05e7ddce0b4bff1f00ee9c20c690daad2aa59f21e34adbe01175bc705b221abd892e7cf4572b823463d5399199ea9abb77972bc92a93cc9f2164e210e82f17a82c784156524fbf74c37628fd4e802d1a8bf879056b6bbf6c1705d1a451b96fe4e044f2381cd3cef0df47cb23eefc0747e2bb8ca2ef8fc314057c8f2a05480f3ed94e6156458ecfaf92a8891281004ef9c2b1bd207b5c30fbe51b2376c4997c7408f65a1539a36ea58a47b23e9509f9ee0e08f3a7c4c6732da05646453d95949766b693b684cffdd15b5d6dd1303b370f99f490b7c182f7e599136ca4da0d046193c0673bf66b78ced9c7e02dbc941c94257e2e5db2c6f2ea5963c5dfe23cbec06e33e8b4ffa878da46bb26e4906695c91b7f0d58f43a8df899df6e1a83261afa078a78c40d54075a2a206d60c5b23f38ee53aa95a2193c7fb8ebd5a85ad9ffc441b6d078d18c3b76318bef35cbe2c0ddebf76039ffbff30d6e187357033c1f3170d3cead53ec95b2822974024e701e243f3adc2d5de552be7efc265e7a86d4785a10f4d42237e05fe5b3b010e1078edd04ed2f9549334737a69d3cf9d68efad2766a3292dca69f3549652c1e43f5ef44062f2533baa5681edc172875cb5d4186b146a6d5c240010cb3a4f3de046e53585cb67556a32a5b718eb8241e02e45600945b0a7aba6b18aa9d44a3c768eeb0163a8ef4eb8927b50dd84f550f76ec79d333333b61257d9a586d9f6e38b8004a1143b6f11eaac18c737bd53f351f84ec48089f1597bbf375946fc3608d3b8d738840df36a7194b0eef06636f45116801e4d6be1aed18d207e00b5c4a3fbb9e6e60e760842cf1ee2556d5a2107fb87261c6c4c8c66b85ffdff4fb0b3839e7deea4ad60ff5b2f82ecda6283f99d025692da752bc2e3459df19b594b88ebf4914424c0f86da1f67eed701c3c7c39840f9afbb55464482e409a80baece9b8a7904a986cbf06f9efd9b13b63b1b0a7dd8b2dad089f968420788964766a83a1771d2a424423ee895648554068842cef82713ac2ca7bd0dbbe473daee1a18cba61f51dd18b1527c86d7ea67fdc6c1ba6861e562b80c95a32d8ef8cc3f558b8eea186fdb88dc26db002798aa3baeb4e5acce4c98b0c7d66d75eea793e8d1e8a76f715793853d9856d71ab2d90fa7dc683a9a40ef0749a81b2c139119e7b7e6902cda2efd2663051ccdb40bbd6043d03c2c7b7a5edc94cf1483d56ac86c12fc86a0e64d3b7c45d221baa512f879d36a25bb6002d8f1d44fd30207ff88f7c795a05e8264a11cfbfc51d04d955ed2a16a61e99848d98303e0ffababa365098db3fc8f7a00d79ab2b67f4442d816172321269fc69836195a9a9ec38a934e96dfb01e58eef6d61a0a6526c6285a4715448c06b59e464aff3436130bcc44e539ba3853b000b6f0b11ad65357ef2caa808c5611a23419245483e4e4582d7620b062f2dffe5e512969e832c95dd3f617a9577d0059485af68ccf82fb9e4029a55edfa192e91b21a4f4673d2c11a04a1921a1f507aa53c75727e147131042325d77534ba4d0284b5629953d93a453c89ff2360cf606195402305a9e66414b4e642a00b209f52dc58ba29385edbf4561de44415131a625d296431b5b6adcae1ba6683c34f76148d38a19d00af6ed4d15ef8e5b37dbb1c7844978db15e96aa254756a2feba91d8706a9c0e3870df09ad0f93aab9e32b401dbc69c637821044321cc11225b5a0d7db0e30d284f4c96f1583a76d5798043c11c9d29d6399a7fa5420fdbcdd34b4fcae0925a850e557afaa446a9007ed194a9af7146f75f5937609737584f27e08aa6dda0ef45f382e2f4402c5bcc6c70b8b13821b3625174d0e6693e7d519195722bed7e39cbb818602494302da1ad9abafcc74e4bb274f811847b3933396c9b26fb31e009795eceeafba92f23380eb305b58b0362bf386b229c2007f47ec5f70f76f4dcde56359e8edaf58912dfe55ed741c576537800fbdc67d84aaf2de8c0a2feb858d3db7233848f882b4e44a46e92a137dad4c1eb370a7f67fca675eb64b5e0c5aaac7df7e39e7560b5b93b6b172597e6e33e8ff80be25a623c0b36323f18023d580c6e8433c7173c9aa07c4716ba1056a2b75cfc5153967a50010c75d803a8633898252709e7150414b1452fbce498a364963b84ba011d5fadd45cfd0d4c94814923fd77a39b0f76af5a7a76c7a623dcf6fa89e3b60d7543d60c0bebc55eae88522c1889179d2a2d7e8309574633b976ecb26fdec3e5a409ceea66f55e9a70ed79692205cbe73e2ffcc5894b0ed040208663ed5eb6fb601b5a9216180d1156dff4ec9488963e19b4c95f727f1e3f696d81ab6152d4dfb77f5468b471ce79f9e6b9dd90a5129c2680faeba43492146955df3a1bef8375b6ecff7f99e87497ddf7616f1254908bd21e5a33b26cf27d0ae3f5054be3382eecda8ab56b446045eb238876c47db7514438a77e5d68d964eb98807368d961e2e3bea4d6d473a85f8e9b6f73c253ea9f688509ab39e7279f87f2db14ae0f91ac3c8b6f439def4c44eb4264481d487554d1179a59728fb20f275b1dad9c1f7ce7bddc88d1b6d483455706e91f4ad679a866b0baac858c2f867a4cb12865b208bddf3a094c5655a711144cd072c1c559be89eab2cf6838890749e13471c97c3c2c7f76884ced69d6b4ade010cb567040ab3b8d7727ff86d0be4a7892573e09587ca857311bf007f14a2ce7a64c6379b2f873e7adf5164e2bcb4148326b5288b7961860b33457405b8e464a5f5998e9d97e1fe60f378e4dee2a23e15a20a87d762dacda13d8f8aa7b6971e6c24c3be972132475ec699aca1ca20a61760177bf5a1f2a8ee8d4671e0ad71c446c5ce59b5df06a0e0ce87b43064996686f305ffa5d6906652b7f979d9d0864329e580b91ad070cf144aaafb415e42ace80f440292bd0b70e23d18bb1a8b44c80688c31d0e69423587c0419cc8f949bf9be461c9c291022b7b2c6215d90d7eab3e5d7506f9a1dc2f3ec4f7b133940b478e20bf67cc6771d36bf0fcc76841e89930431e86d184ca22ed102c2b510fa91a4db9aaf0d7db6ef129a8312c5e47e469da5abe055a783a926db3a72373babc0199a162b275f560142d113ea74e99bb9bbb155711e70f5c515263c7f66109bafcdad4cb74fe439997a79254f9b5f450918cdefa83ebb8fe17639855717e9e4d6f292239e0fc8299278dea1db69441588c43f06a6895c819f247a8d08fa33742dfc7e874b691113dc698da5d1f0dbe341f8d88185ef8530886099deeb8a1aa7eb5a37e93c44bf99e197a6b0ef10fa0007b3454471f87a6f095e8c81396416934dccf3d16593b2ca52c72f5178c12c1d2f0a6c809a063b92952c63ebae49fd17cac5c793e7e11cd6a93137893ec857248219c000546cd0988eb88f319e7f85ac7aa640a1506554d5282aff87d646fa67007ac4267029b5e366a9be1f0f414c5fcaf8c50b5ee81286beb27332901a484ff7918b5cdc84e5e841b4113a4b747c337ded2c7ad1ae4aef6b4d6113a5561bbe7cbf9904bcf8fb20c710a279ac2059a9be9c6f0bf801ba63e712912a8c496116cb7d3ff69d50073c103f6ef4f00735865dbb30918f5e2074e15259d2cd648879be8c56177124e731faeca11bf2bf1afec49b1981fefb1c310a9b39928866f38c8eada672d3ae57e40fce01417a0bb204617eb4bc04cc17a5fef132f39f433c33d8b929d96dc2831dd85eb0aa947e0bc3859f3acb7af87042f8c1abfa884b51624a681ed32594e928c8eddce63e53ad82f2030d012a7f3c87a7b2891be34633d12ce232727137f9782da52f185465da9561bfc1e0c29a39d89b1870e07d9f193613b0cf157af806d57aaa01ef45c95bfdc7da9d82d8a3fc031f01c4deb0d09205c7821e15e8eafaec1e3c4f24c9b650ac63585a48123aafea336193b43e919ea04663474f61a085648ac24d0461c7f4212f66936b1efca7097ee2535968d9a3ee410f10a1afff53e589078fd938deff38466bd90e66565e81ac7312f1b751042416928ac2bfba8bfea8442090a9724bc97e20d145829cd8ea5ced6fddaabf213bc9a1845b46604db7c9797e3beed2b7692f564175427fd660866603819a70624cbb5e20bfbb0028f8a2919f9784a3f33cbd82525a18e52ecac06f9dcbf63854b43638487ffaa5ee45e63333c380fada819e1fb4980624014b405cf6a7da80820a9fce3f5be6fd2cce04fe041e297bb7e4fbda43b6f796cfb006b23340b89deede1688daf1eea93b8bbbaf32625d357c0cab07236f7a3cbf23171ec3266ac31d5127277eca71c71e1593f281a3f68af069990c6ea63874274317fef4de1eaa16ecb3bac26fef03e5e9bd901d9fcde40c20db6d8ae14ff9eebf33eb1b352f539d7cf8df709506617725924eecbe1111fbc3c0859e83c37a1e7311396eadd90b881647be176e9689d9e92acbe15fe4e0457ff6f93213b966d52e09234b4c9f774b75f6856eb29a29b0d04c2882f641b56e26e8d4df1fbbd8323394db2428fd772f81ea64f4260970c93e98c1b018d7a93db632ebf44c4b114aed361927d307bc2db23ac8f9215a8941daaaf0078b26e64308a9da9aba54563f2490b0f88c6a7bde014d1aae694be0bf989de29971946520e1e1248905702b31e33d45ca16a99107a8efde7a95a674b5edc94636188c45587f10e8084064ab9fb92e04d2fe4210c0031a6822e99e3f49a1ed19ed3aa779a7dec6503c9b12ec0705ea816fcd6f5fead3a2fa8272cb4ae60cfb830fe4eb7f0000d4522882d0b54baa8626032b4fb0b2412608d5ff2349dfa9365f3dcf75ce2db77dda29356b3e9258cb7d244a3888ce868e079ae2120d4c5f3698fc832b9faf92e1cf93d409f8ab5c445f193a4746d985b872979fda47d6da77b56ccd9a4841aea2bba977c3e15a262b089f5bd7f8e50657b7463bad99c81466b55415a5be265c097c3d3ba031eac841ae72a1fb8833fe67c99a55ba7d4fe2b630477d305db79b839f75c74f7aab7f073bae8fa9e81a561929a383aa5f70171771084b108312a5c8a37780baa7c0f54ac0ee11980f4ff84d4f44ef3e917aa4b73222fc7afaf4bcde5e1f197f6eef50542159a6d89657be66a1412b444e77c3b41de4cc03eb6c96dbc669fdaf8b6efd2abfa97aa709d02728521d994aeecbdf9c08c9fab5401a4b4d95ae0e734a8cf6a72b3d5b7a8cbae0713f491939512750e9e91cf22f45a8aaf319e8eadc01cc7f4b51cd2bd7c81ba77252659a36801e3dab311d2a4b42099a0b56f55a1af8bae813e56346d9225f886cb9293f009dcb84f10d67833b1c78dcff89ca00a283c7d237b202f48cf1341ce2772fd765510237f0c4a4b3576aae1bd346e9552eecb0e3beda5845f55fdea1ff78c67e3718b84341b7548539e69f4c410e76ef95f44da7303e440f083d364d6dc1c5d10afb826ae6514b14f8db17f8d2e70998467eb60a54b0bf8d7758fb41d78dc76bfa3f068d33ed92ee0bf87739e2efa6b2567531b5087f348e", 0x1000}, {&(0x7f0000001940)="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", 0x1000}], 0x7, &(0x7f0000000500), 0x0, 0x4040}}, {{&(0x7f0000001700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002940)=[{&(0x7f0000001780)="1698323fcb22b00c8be3295d32da1e4c2574a9a3da525462c8a9fab5534cf16374dac9e50ad57f9a0b4e5d79147613ea4521b0c4da7ca6c5511ead7f08599db91042be628ed68c04ec3228fc2d35b3839cf0e6ab61e95c08e2cb1b422ac912a74ea257715f653c66ea5204cf790db8d0757de2ae6162f44d4215652bbb93ef20845d7a624390edce6a55c0fd6747bf5e7b43227f52fbeffcec8b44cd1727da032f66306edfa478f88c2c7cb4cb03002c39f56d979995a3d5038eec4ba8b76b3ef8afba3784e333ad78bfb4b55c177de7", 0xd0}, {&(0x7f0000001600)}, {&(0x7f0000001880)="73fbf99024b08a96998f8a0be8116b3b25d7fbdfb4b78f2a4dbcb01fe160f8742e43300357a4972b5b32f25773d14d5849c20074ed981cffd0591a39ac8923e8e63c351066d15dd40be1b35056709bd53277574249c22deb6b40047c9b3937ddcd4ffb3d5e8d77b7", 0x68}], 0x3, &(0x7f0000002e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x98, 0x80}}, {{&(0x7f0000002ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002f40)="19f96fdaeebfb61b2f48c55be364c7575fcc3752b3c1", 0x16}, {&(0x7f0000002f80)="fe0d61342ee28997fceb7d11db302d6e9e2c0bf05c23c2dba8007d87b68e5a63d0df2ec9cf6739d2ba223e1e33ffc7c3e137361778028a17320d04a311bae8bb27c07aa978b1ed587b0e007e1b6dfa797a6522df6cd4fbedae96612692f8553a876bae37a395457872b0b621e33d74cb7b498055391ceb91d0782cdaa1927ad8c5408c8e6d3d5898f81f1b097b4ae771b3a97723c64ed9a8eb2524b35caa2755bdcac358b1a998fb292191bf6d2aeccce9dac4c6c7a3876626ba07a34fa83189c691329cca9f13", 0xc7}], 0x2, &(0x7f00000030c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4000880}}, {{&(0x7f0000003100)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000035c0)=[{&(0x7f0000003180)="e8ffbf9420e180ce2547843c9760ba3985e7945b453770ede89dd70141be9c7f7a189be0967d5659b60368edea9e28e7d52e58e2fe97f8f2c641eb2dfb2f5f4387ee3eae643e5e57abb67dfb0c284c2a39ca50c737", 0x55}, {&(0x7f0000003200)="5809bd1996c6e37ee58ee1d3832cb4c7a3a361cbc23d5afdbc8d1587025051dd0d381c227205bd8e9f4dbbe1dcbe4c408a46e4667d023ee2c2b28833aa33d77872f3882b11d3315a66865eaefee7b958ca8957c7e5f174fbc16bcd187506b636406ea9a211d37b5d0c5819e6330dff7dd90bd1a1934c7c019871cb15d8fad5740d2e6a90ea6767f13e362803cedba88001c434c8901d5bec76eff5ed65e189e217ab25a3ead109a975f964371c8debd8b8e7ee95f301c59579e1648d1c1366bbf33c607dab724e79efa117dd21a01bd5b540fca33893725e105fdf9aeef8b2853c3f9a65d8", 0xe5}, {&(0x7f0000003300)="18029d", 0x3}, {&(0x7f0000003340)="885416891d932d79b6", 0x9}, {&(0x7f0000003380)="510f8d93082dbfe589381e4b468029008e31ff6dca92e8e220f0279a69f539cd4a0894fed52d7890fcddd9c3bb766ab60690ec2530bdb20925cbb9d42b5087f488434c8af5efd6d0bf57173323211f377d047d2b8911945e8559a43daed3ede05e24ee8b762696232250e701faef46a9dd81c2ed2a7c85191795c83687d70834add7b1f665b0277106fbc3240cea2c843db4f09dc19d179494904af20bb69a6fbfef950178721f14b83e1aabe8714fa068a2b1f7dfacfb2e23d0b45253585ee70fddf03f1797645fc264459e3f142c05a55f3799f6e66a67962d4b16f697c52cd6", 0xe1}, {&(0x7f0000003480)="79343f7eed5c25ab1067a2e96c405adc623e0a0885d2668d57d880248aed066bfaa32c57d45a6a9dce9e15907672f00e612d7543212099d985cb67be5cd369705bb330bfe361afc419e40dd4aee186ea588b30e17de67b02ab91a5c3990528e417f7ff9d3621fb1917b33ec5a3ed81aae2a1a554cccc7f645e5dec6ffeb5b69710e1", 0x82}, {&(0x7f0000003540)="1c1f87bc9362cfb4e250a35319c9f8eee48e41feb67d5c30e0d213ca37b4a23c899a85c52625c3158995fd36f0f60bd883fd0106ce9cb4b8e8e8c7153491a0c0a5647c4c713df91ebed64e5942fc77db9d308ea7aadc1db9dda9672e201aa5d135a430af60b078ce42eaefbcf1a2360156b0c1a0d786f71b", 0x78}], 0x7, &(0x7f0000003640)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003680)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000003740)=[{&(0x7f0000003700)="32487f7a1e928557c95469d6c0cc93e852746d7f9b7d73854510f32c621cf521222a43ed6e9cd9386f94cbca46564e", 0x2f}], 0x1, &(0x7f0000003780)=[@cred={{0x1c}}], 0x20}}], 0x5, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
mkdir(0x0, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000140), 0x12)
umount2(0x0, 0x3) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r7 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64)
syz_io_uring_setup(0x12d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd, 0x4}, &(0x7f0000000380)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0) (rerun: 64)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
sendmsg$inet(r7, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20000090)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x80800})
r10 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) (async)
r11 = socket$netlink(0x10, 0x3, 0x14)
sendfile(r11, r10, 0x0, 0x17) (async, rerun: 64)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r12) (async)
sendmsg$DEVLINK_CMD_RATE_SET(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async)
syz_usb_connect(0x0, 0x3f, &(0x7f0000002980)=ANY=[@ANYRES32=r9, @ANYRESDEC=r12, @ANYRES64=r1, @ANYRESOCT=r4, @ANYRESOCT=r8, @ANYRES64=r3], 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000000))

619.666259ms ago: executing program 1 (id=2823):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r2=>0x0)
sendmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="260000000000000000000000d73d9c6a", 0x10}], 0x1}}], 0x1, 0x20000040)
io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}])
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/tcp\x00')
preadv(r3, &(0x7f0000002280)=[{&(0x7f0000002180)=""/18, 0x12}], 0x1, 0x10001, 0x7)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvmsg(r4, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x40000061)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x1, 0x40000333}, &(0x7f00000006c0)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x8, 0x4007, @fd=r5, 0x4, 0x0, 0x0, 0x16, 0x2e07ce984b8502db})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a010400000000000000000a0000010900010073797a3100000000340004803000018008000100636d700024000280080001400010000408000240000000011000038009000100407327c3600000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) (async)
accept4$alg(r0, 0x0, 0x0, 0x0) (async)
io_setup(0x20000000001005, &(0x7f0000000880)) (async)
sendmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="260000000000000000000000d73d9c6a", 0x10}], 0x1}}], 0x1, 0x20000040) (async)
io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}]) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/tcp\x00') (async)
preadv(r3, &(0x7f0000002280)=[{&(0x7f0000002180)=""/18, 0x12}], 0x1, 0x10001, 0x7) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
recvmsg(r4, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x40000061) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x8, 0x4007, @fd=r5, 0x4, 0x0, 0x0, 0x16, 0x2e07ce984b8502db}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a010400000000000000000a0000010900010073797a3100000000340004803000018008000100636d700024000280080001400010000408000240000000011000038009000100407327c3600000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) (async)
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async)

456.21891ms ago: executing program 3 (id=2824):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000000)=0x4, 0xfffffffffffffe3a)
r3 = socket$inet6(0xa, 0x3, 0x5)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r4}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r4}, 0x38)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000380)=""/200, 0x1d)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3ff}]}, 0x28}}, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x541b, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243)
close(r7)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0)
socket$alg(0x26, 0x5, 0x0)

192.864628ms ago: executing program 5 (id=2825):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x3c3e}, 0x8) (async)
r3 = socket(0x2, 0x80805, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={<r6=>r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) (async)
sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x3b09, 0x6, 0x8000, 0x6, 0x2, 0x2, 0xffff2d97, 0xd6e432cb, r6}, &(0x7f0000000180)=0x20) (async)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt(r8, 0x1, 0x9, &(0x7f0000001500)=""/4096, &(0x7f00000000c0)=0x1000) (async)
r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r10 = dup(r9)
write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c)
r11 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=<r12=>0x0, &(0x7f00000001c0)=<r13=>0x0)
syz_io_uring_submit(r12, r13, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) (async)
io_uring_enter(r11, 0x2ded, 0x58e3, 0x0, 0x0, 0x0) (async)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22401) (async)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) (async)
ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f0000000240)={0x2, r10})

58.15687ms ago: executing program 0 (id=2826):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000003340)=0x9, 0x4)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000300), 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x80000001, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_elf64(r3, 0x0, 0x78)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f00000000c0)={0x6, "13f20a6684154bc7ec29052b9ec48e707a4f251dd900", 0x0, 0x20, 0x0, 0x3, 0x2, 0x0, 0x8})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
creat(&(0x7f00000001c0)='./file0\x00', 0x8)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0], 0x48}}, 0x0)
sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0)
close(r5)
syz_open_procfs(0x0, 0x0)

0s ago: executing program 5 (id=2827):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe0, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3ff}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfffffffc}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r11, 0x4b3a, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x3, 0x4, 0x1}, 0x50)

kernel console output (not intermixed with test programs):

ally beyond EOD, truncated
[  798.050262][T15806] loop6: p2 size 46 extends beyond EOD, truncated
[  798.164028][T11058] udevd[11058]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  798.259656][  T981] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  798.399199][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  798.445925][  T981] usb 1-1: Using ep0 maxpacket: 8
[  798.461480][  T981] usb 1-1: unable to get BOS descriptor or descriptor too short
[  798.511801][  T981] usb 1-1: config 7 has an invalid descriptor of length 255, skipping remainder of the config
[  798.552663][  T981] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  798.552684][  T981] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  798.552697][  T981] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  798.554981][  T981] usb 1-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  798.555005][  T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  798.555025][  T981] usb 1-1: Product: syz
[  798.555040][  T981] usb 1-1: Manufacturer: syz
[  798.555055][  T981] usb 1-1: SerialNumber: syz
[  798.557679][T15812] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  798.752910][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2438'.
[  798.819505][  T981] usb 1-1: USB disconnect, device number 3
[  799.067255][  T981] usb 3-1: USB disconnect, device number 117
[  799.236355][   T30] kauditd_printk_skb: 66 callbacks suppressed
[  799.236374][   T30] audit: type=1326 audit(1756646692.354:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  799.292046][T15827] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  799.300699][   T30] audit: type=1326 audit(1756646692.354:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  799.376650][   T30] audit: type=1326 audit(1756646692.354:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd23838d550 code=0x7ffc0000
[  799.416924][   T30] audit: type=1326 audit(1756646692.354:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  799.429235][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  799.514534][   T30] audit: type=1326 audit(1756646692.354:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  799.537261][   T30] audit: type=1326 audit(1756646692.354:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  799.849218][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  799.881291][   T30] audit: type=1326 audit(1756646692.354:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  799.941778][   T30] audit: type=1326 audit(1756646692.364:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  799.996690][   T30] audit: type=1326 audit(1756646692.404:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  800.086603][   T30] audit: type=1326 audit(1756646692.404:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  800.119433][    T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  800.156538][    T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  800.177040][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  800.197378][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  800.217724][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.271957][    T9] usb 1-1: config 0 descriptor??
[  800.469366][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  800.709641][T15851] loop6: detected capacity change from 0 to 7
[  800.711194][    T9] logitech 0003:046D:C24F.002A: unknown main item tag 0x0
[  800.716870][T15851] Dev loop6: unable to read RDB block 7
[  800.729110][    T9] logitech 0003:046D:C24F.002A: unknown main item tag 0x0
[  800.732671][T15851]  loop6: AHDI p2 p3
[  800.737224][    T9] logitech 0003:046D:C24F.002A: unknown main item tag 0x0
[  800.740657][T15851] loop6: partition table partially beyond EOD, truncated
[  800.757626][T15851] loop6: p2 size 46 extends beyond EOD, truncated
[  800.764405][    T9] logitech 0003:046D:C24F.002A: unknown main item tag 0x0
[  800.799724][    T9] logitech 0003:046D:C24F.002A: hidraw0: USB HID v0.05 Device [HID 046d:c24f] on usb-dummy_hcd.0-1/input0
[  800.830600][    T9] logitech 0003:046D:C24F.002A: no inputs found
[  800.837729][T11058] udevd[11058]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  800.994389][    T9] usb 1-1: USB disconnect, device number 4
[  801.197027][T15866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  801.238200][T15866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  801.379282][   T10] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  801.509226][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  801.710205][   T10] usb 3-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  801.732315][   T10] usb 3-1: config 16 interface 0 has no altsetting 0
[  801.748171][   T10] usb 3-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a
[  801.777535][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.979554][ T5935] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  802.029483][T15879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  802.080279][   T10] usb 3-1: string descriptor 0 read error: -71
[  802.087977][   T10] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  802.100093][T15879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  802.110563][   T10] imon 3-1:16.0: unable to initialize intf0, err -19
[  802.119274][ T5935] usb 1-1: device descriptor read/64, error -71
[  802.130951][   T10] imon:imon_probe: failed to initialize context!
[  802.171367][   T10] imon 3-1:16.0: unable to register, err -19
[  802.241888][   T10] usb 3-1: USB disconnect, device number 118
[  802.389549][ T5935] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  802.519290][ T5935] usb 1-1: device descriptor read/64, error -71
[  802.549204][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  802.631691][ T5935] usb usb1-port1: attempt power cycle
[  802.809569][ T5939] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[  803.021188][ T5935] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  803.061769][ T5935] usb 1-1: device descriptor read/8, error -71
[  803.130621][ T5939] usb 4-1: Using ep0 maxpacket: 8
[  803.145136][ T5939] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17
[  803.182428][ T5939] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07
[  803.196405][ T5939] usb 4-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60
[  803.404352][ T5939] usb 4-1: Product: syz
[  803.408534][ T5939] usb 4-1: Manufacturer: syz
[  803.590520][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  804.285339][ T5935] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  804.308000][ T5939] usb 4-1: SerialNumber: syz
[  804.323023][ T5935] usb 1-1: device descriptor read/8, error -71
[  804.350357][ T5939] usb 4-1: config 0 descriptor??
[  804.449772][ T5935] usb usb1-port1: unable to enumerate USB device
[  804.562346][ T5939] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  804.629247][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  805.030447][    C1] vcan0: j1939_tp_rxtimer: 0xffff888047763c00: rx timeout, send abort
[  805.038933][    C1] vcan0: j1939_tp_rxtimer: 0xffff888047762800: rx timeout, send abort
[  805.048428][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888047763c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  805.062880][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888047762800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  805.307562][ T5939] gspca_sunplus: reg_w_riv err -71
[  805.386813][ T5939] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  805.656213][ T5939] usb 4-1: USB disconnect, device number 117
[  805.666814][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2462'.
[  805.669619][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  805.818940][T15913] bond4 (unregistering): Released all slaves
[  805.838335][T15917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2462'.
[  806.259993][T15923] dvmrp0: entered allmulticast mode
[  806.709233][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  807.533962][T15940] 8021q: adding VLAN 0 to HW filter on device batadv1
[  807.551383][T15940] batadv1: entered promiscuous mode
[  807.594958][T15940] team0: Port device batadv1 added
[  807.749244][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  807.751242][T15940] hub 9-0:1.0: USB hub found
[  807.863869][T15940] hub 9-0:1.0: 1 port detected
[  808.713510][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2470'.
[  808.789262][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  808.890308][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  808.896733][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  809.829227][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  810.159284][ T5939] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[  810.479358][ T5939] usb 4-1: Using ep0 maxpacket: 8
[  810.542672][ T5939] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab
[  810.553689][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.564372][ T5939] usb 4-1: Product: syz
[  810.568546][ T5939] usb 4-1: Manufacturer: syz
[  810.594336][ T5939] usb 4-1: SerialNumber: syz
[  810.662446][ T5939] usb 4-1: config 0 descriptor??
[  810.724206][T15974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  810.747623][T15974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  810.825466][T15977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  810.867332][T15977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  810.875225][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  810.989305][ T5956] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  811.152218][ T5956] usb 3-1: Using ep0 maxpacket: 8
[  811.162051][ T5956] usb 3-1: config 0 has an invalid interface number: 151 but max is 1
[  811.177039][ T5956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  811.197188][ T5956] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  811.222757][ T5956] usb 3-1: config 0 has no interface number 0
[  811.240395][ T5956] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  811.273037][ T5956] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  811.305608][ T5956] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210
[  811.329621][ T5956] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  811.414872][ T5956] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  811.437722][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.452878][ T5956] usb 3-1: Product: syz
[  811.470706][ T5956] usb 3-1: Manufacturer: syz
[  811.482954][ T5956] usb 3-1: SerialNumber: syz
[  811.504434][ T5956] usb 3-1: config 0 descriptor??
[  811.517910][T15966] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  811.536514][ T5956] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  811.730864][ T5939] usb 3-1: USB disconnect, device number 119
[  811.785093][T15991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  811.799531][ T5926] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  811.820453][T15991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  811.857324][T15990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  811.878424][T15990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  811.919201][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  811.969675][ T5926] usb 1-1: Using ep0 maxpacket: 8
[  811.990629][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  812.007928][ T5926] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  812.017260][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.088858][ T5926] usb 1-1: config 0 descriptor??
[  812.114323][ T5926] iowarrior 1-1:0.0: no interrupt-in endpoint found
[  812.352087][ T5926] usb 1-1: USB disconnect, device number 9
[  812.853092][T16004] input: syz0 as /devices/virtual/input/input40
[  812.949204][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  813.279829][ T5926] usb 4-1: USB disconnect, device number 118
[  813.830102][ T5926] usb 4-1: new full-speed USB device number 119 using dummy_hcd
[  813.859742][T16026] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  813.878784][T16026] syzkaller0: entered promiscuous mode
[  813.894463][T16026] syzkaller0: entered allmulticast mode
[  813.969005][T16026] tipc: Resetting bearer <eth:syzkaller0>
[  813.980658][ T5926] usb 4-1: config 0 has an invalid interface number: 207 but max is 0
[  813.989387][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  813.997261][ T5926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  814.008011][ T5926] usb 4-1: config 0 has no interface number 0
[  814.025125][ T5926] usb 4-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  814.036792][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.047272][ T5926] usb 4-1: Product: syz
[  814.053918][ T5926] usb 4-1: Manufacturer: syz
[  814.058826][ T5926] usb 4-1: SerialNumber: syz
[  814.081128][ T5926] usb 4-1: config 0 descriptor??
[  814.204167][T16028] tipc: Resetting bearer <eth:syzkaller0>
[  814.367765][T16028] tipc: Disabling bearer <eth:syzkaller0>
[  814.669622][ T5926] qmi_wwan 4-1:0.207: probe with driver qmi_wwan failed with error -22
[  814.714097][ T5926] usb 4-1: USB disconnect, device number 119
[  815.029447][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  815.454906][T16052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  815.464398][T16052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  815.559357][ T5956] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[  815.731903][T16055] netlink: 'syz.0.2493': attribute type 27 has an invalid length.
[  815.749978][T16055] lo: left promiscuous mode
[  815.761750][T16055] tunl0: left promiscuous mode
[  815.767119][ T5956] usb 4-1: Using ep0 maxpacket: 16
[  815.796241][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  815.815718][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  815.854563][ T5956] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  815.882617][T16055] gre0: left promiscuous mode
[  815.891969][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.953334][ T5956] usb 4-1: config 0 descriptor??
[  815.981264][T16055] gretap0: left promiscuous mode
[  816.013912][T16055] erspan0: left promiscuous mode
[  816.028485][T16055] ip_vti0: left promiscuous mode
[  816.069261][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  816.130517][T16055] ip6_vti0: left promiscuous mode
[  816.144532][T16055] sit0: left promiscuous mode
[  816.159534][  T981] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[  816.220673][T16055] ip6tnl0: left promiscuous mode
[  816.285326][T16055] ip6gre0: left promiscuous mode
[  816.336370][  T981] usb 3-1: Using ep0 maxpacket: 32
[  816.360116][  T981] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  816.375410][  T981] usb 3-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  816.435164][ T5956] lua 0003:1E7D:2C2E.002B: item fetching failed at offset 1/5
[  816.448984][T16055] syz_tun: left promiscuous mode
[  816.460477][  T981] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  816.460866][ T5956] lua 0003:1E7D:2C2E.002B: parse failed
[  816.491467][ T5956] lua 0003:1E7D:2C2E.002B: probe with driver lua failed with error -22
[  816.519918][  T981] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0
[  816.534698][T16055] ip6gretap0: left promiscuous mode
[  816.562859][  T981] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  816.578937][T16055] bridge0: port 2(bridge_slave_1) entered disabled state
[  816.586358][T16055] bridge0: port 1(bridge_slave_0) entered disabled state
[  816.594451][T16055] bridge0: left promiscuous mode
[  816.626890][T16039] fuse: Unknown parameter ''
[  816.632550][T16039] program syz.3.2490 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  816.643093][T16055] bond0: left promiscuous mode
[  816.655331][T16055] bond_slave_0: left promiscuous mode
[  816.669536][T16064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  816.686155][  T981] usb 3-1: config 0 interface 0 has no altsetting 0
[  816.694369][T16055] bond_slave_1: left promiscuous mode
[  816.705845][  T981] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  816.722399][T16064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  816.735513][  T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  816.767971][T16055] team0: left promiscuous mode
[  816.773885][T16055] team_slave_0: left promiscuous mode
[  816.781830][  T981] usb 3-1: config 0 descriptor??
[  816.824392][T16055] team_slave_1: left promiscuous mode
[  816.834739][ T5956] usb 4-1: USB disconnect, device number 120
[  816.883581][T16055] batadv1: left promiscuous mode
[  816.961912][T16055] nlmon0: left promiscuous mode
[  816.985060][T16055] caif0: left promiscuous mode
[  817.109247][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  817.352235][T16072] fuse: Bad value for 'user_id'
[  817.357126][T16072] fuse: Bad value for 'user_id'
[  817.654338][   T30] audit: type=1326 audit(1756646710.754:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdb38ebe9 code=0x7ffc0000
[  817.702414][   T30] audit: type=1326 audit(1756646710.754:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdb38ebe9 code=0x7ffc0000
[  817.737446][T16055] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  817.754766][T16055] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  817.766590][T16055] xfrm0: left promiscuous mode
[  817.773213][T16055] xfrm0: left allmulticast mode
[  817.982101][   T30] audit: type=1326 audit(1756646710.754:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fefdb38ebe9 code=0x7ffc0000
[  818.037101][   T30] audit: type=1326 audit(1756646710.754:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdb38ebe9 code=0x7ffc0000
[  818.090951][   T30] audit: type=1326 audit(1756646710.754:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdb38ebe9 code=0x7ffc0000
[  818.131066][T16055] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  818.149272][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  818.156424][T16055] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  818.166377][   T30] audit: type=1326 audit(1756646710.754:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefdb38ebe9 code=0x7ffc0000
[  818.260951][T16055] vlan2: left allmulticast mode
[  818.268256][T16055] veth1: left allmulticast mode
[  818.275353][   T30] audit: type=1326 audit(1756646710.754:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdb38ebe9 code=0x7ffc0000
[  818.326235][   T30] audit: type=1326 audit(1756646710.754:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fefdb38ebe9 code=0x7ffc0000
[  818.353667][T16055] veth5: left promiscuous mode
[  818.364578][   T30] audit: type=1326 audit(1756646710.964:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdb38ebe9 code=0x7ffc0000
[  818.409956][   T30] audit: type=1326 audit(1756646710.964:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdb38ebe9 code=0x7ffc0000
[  818.716699][T16060] 8021q: adding VLAN 0 to HW filter on device bond0
[  818.725220][T16060] 8021q: adding VLAN 0 to HW filter on device team0
[  818.732954][T16060] dummy0: left promiscuous mode
[  818.794188][T16060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  818.859215][T13073] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  818.875400][T13073] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  818.934418][T13073] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  818.952248][  T981] usbhid 3-1:0.0: can't add hid device: -71
[  818.970007][  T981] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  819.026979][T13073] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  819.129650][  T981] usb 3-1: USB disconnect, device number 120
[  819.189188][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  819.643581][T16102] netlink: 'syz.0.2503': attribute type 1 has an invalid length.
[  819.819786][T16106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  819.846436][T16106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  819.851778][T16102] bond6: entered promiscuous mode
[  819.859811][T16102] bond6: entered allmulticast mode
[  819.865869][T16102] 8021q: adding VLAN 0 to HW filter on device bond6
[  819.897373][T16102] bridge1: entered promiscuous mode
[  819.903059][T16102] bridge1: entered allmulticast mode
[  819.909598][T16102] bond6: (slave bridge1): Enslaving as a backup interface with an up link
[  819.955128][T13076] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  820.145045][   T49] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  820.212189][T16111] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2505'.
[  820.229350][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  820.510567][T16115] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2506'.
[  820.956978][T16127] loop2: detected capacity change from 0 to 7
[  820.976487][ T5873] Dev loop2: unable to read RDB block 7
[  820.995769][ T5873]  loop2: unable to read partition table
[  821.004120][ T5873] loop2: partition table beyond EOD, truncated
[  821.014538][T16127] Dev loop2: unable to read RDB block 7
[  821.021571][T16127]  loop2: unable to read partition table
[  821.027643][T16127] loop2: partition table beyond EOD, truncated
[  821.050583][T16127] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  821.149348][ T5939] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  821.269207][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  821.329390][   T10] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  821.330315][ T5939] usb 1-1: Using ep0 maxpacket: 8
[  821.374644][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  821.382232][ T5939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  821.406853][ T5939] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  821.417465][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  821.431184][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.443479][ T5939] usb 1-1: Product: syz
[  821.447677][ T5939] usb 1-1: Manufacturer: syz
[  821.463225][ T5939] usb 1-1: SerialNumber: syz
[  821.486317][ T5939] usb 1-1: config 0 descriptor??
[  821.489268][   T10] usb 3-1: Using ep0 maxpacket: 16
[  821.497253][ T5939] gspca_main: stk014-2.14.0 probing 05e1:0893
[  821.508715][   T10] usb 3-1: config 0 has an invalid interface descriptor of length 7, skipping
[  821.530767][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  821.547648][T16137] input: syz0 as /devices/virtual/input/input41
[  821.601186][ T5939] usb 1-1: selecting invalid altsetting 1
[  821.612997][   T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  821.666305][   T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  821.680755][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.701206][   T10] usb 3-1: Product: syz
[  821.714344][   T10] usb 3-1: Manufacturer: syz
[  821.727404][   T10] usb 3-1: SerialNumber: syz
[  821.767334][   T10] r8152-cfgselector 3-1: Unknown version 0x0000
[  821.785475][   T10] r8152-cfgselector 3-1: config 0 descriptor??
[  821.819286][T12117] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[  821.988232][T12117] usb 4-1: config 0 has no interfaces?
[  822.004491][T12117] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  822.014957][T12117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.023357][T12117] usb 4-1: Product: syz
[  822.027707][T12117] usb 4-1: Manufacturer: syz
[  822.032439][T12117] usb 4-1: SerialNumber: syz
[  822.040292][T12117] usb 4-1: config 0 descriptor??
[  822.067135][T16129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  822.084085][T16129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  822.112927][T12117] r8152-cfgselector 3-1: USB disconnect, device number 121
[  822.130383][ T5939] gspca_stk014: reg_r err -110
[  822.147720][ T5939] stk014 1-1:0.0: probe with driver stk014 failed with error -110
[  822.319191][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  822.439588][ T5939] usb 4-1: USB disconnect, device number 121
[  822.772233][T12117] usb 1-1: USB disconnect, device number 10
[  822.793246][T16143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  822.846426][T16143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  822.873019][T16145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  822.939046][T16145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  823.169591][   T10] usb 3-1: new full-speed USB device number 122 using dummy_hcd
[  823.359228][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  823.383578][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  823.398596][   T10] usb 3-1: not running at top speed; connect to a high speed hub
[  823.423799][   T10] usb 3-1: config 1 has an invalid interface number: 138 but max is 0
[  823.448671][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  823.519460][   T10] usb 3-1: config 1 has no interface number 0
[  823.529408][   T10] usb 3-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  823.543141][   T10] usb 3-1: config 1 interface 138 has no altsetting 0
[  823.552384][   T10] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[  823.637829][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.668356][   T10] usb 3-1: Product: syz
[  823.684622][   T10] usb 3-1: Manufacturer: syz
[  823.700570][   T10] usb 3-1: SerialNumber: syz
[  823.810282][T16164] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  823.821136][T16164] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  823.943887][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  824.389196][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  824.396433][ T5939] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  824.464371][   T10] usb 3-1: USB disconnect, device number 122
[  824.610420][ T5939] usb 1-1: Using ep0 maxpacket: 32
[  824.633617][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2521'.
[  824.649688][T16171] chnl_net:caif_netlink_parms(): no params data found
[  824.729572][ T5939] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  824.751929][ T5939] usb 1-1: config 0 has no interface number 0
[  824.765586][ T5939] usb 1-1: config 0 interface 184 has no altsetting 0
[  824.791801][T16174] loop6: detected capacity change from 0 to 7
[  824.814657][T16174] Dev loop6: unable to read RDB block 7
[  824.864336][T16174]  loop6: AHDI p2 p3
[  824.881036][ T5939] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  824.900655][T16174] loop6: partition table partially beyond EOD, truncated
[  824.932876][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.961649][ T5939] usb 1-1: Product: syz
[  824.972136][ T5939] usb 1-1: Manufacturer: syz
[  824.976769][ T5939] usb 1-1: SerialNumber: syz
[  825.070127][ T5939] usb 1-1: config 0 descriptor??
[  825.079283][ T5935] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[  825.111283][ T5939] smsc75xx v1.0.0
[  825.129374][ T5939] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  825.133348][T16174] loop6: p2 size 46 extends beyond EOD, truncated
[  825.159814][ T5939] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22
[  825.185029][T16176] 8021q: adding VLAN 0 to HW filter on device bond9
[  825.206633][T16176] bond9: entered promiscuous mode
[  825.261250][T16176] bond0: (slave bond9): Enslaving as an active interface with an up link
[  825.288918][ T5935] usb 4-1: config index 0 descriptor too short (expected 8192, got 77)
[  825.297380][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  825.379948][ T5935] usb 4-1: config 0 has no interfaces?
[  825.439193][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  825.512510][ T5935] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  825.589738][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.607451][T16177] udevd[16177]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  825.649993][T16182] netlink: 'syz.2.2524': attribute type 25 has an invalid length.
[  825.657878][T16182] netlink: 'syz.2.2524': attribute type 7 has an invalid length.
[  825.685593][ T5935] usb 4-1: Product: syz
[  825.705650][ T5935] usb 4-1: Manufacturer: syz
[  825.727394][ T5935] usb 4-1: SerialNumber: syz
[  825.753238][T16182] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2524'.
[  825.785105][ T5935] usb 4-1: config 0 descriptor??
[  826.469207][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  826.610467][T16173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2521'.
[  826.913933][T16195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  826.915461][T16193] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  826.923904][T16195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  827.481914][T12117] usb 1-1: USB disconnect, device number 11
[  827.509201][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  828.079458][T12117] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[  828.239670][T12117] usb 1-1: string descriptor 0 read error: -22
[  828.246290][T12117] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d
[  828.256458][T12117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.285233][T12117] usb 1-1: config 0 descriptor??
[  828.559211][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  828.864558][ T5935] usb 4-1: USB disconnect, device number 122
[  829.024139][T16215] loop2: detected capacity change from 0 to 7
[  829.035090][T16177] Dev loop2: unable to read RDB block 7
[  829.045834][T16177]  loop2: unable to read partition table
[  829.053960][T16177] loop2: partition table beyond EOD, truncated
[  829.062321][T16215] Dev loop2: unable to read RDB block 7
[  829.073917][T16215]  loop2: unable to read partition table
[  829.086308][T16215] loop2: partition table beyond EOD, truncated
[  829.098247][T16215] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  829.589206][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  829.930981][T16217] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  829.939588][T16217] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  829.958913][T16217] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  829.977893][T16217] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  829.993708][T16217] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  830.573757][T16244] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2538'.
[  830.629590][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  830.736176][T16250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  830.763778][T16250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  830.885870][T12117] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware
[  830.958124][T12117] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  830.976900][T12117] dib0700: firmware download failed at 7 with -22
[  831.007685][T12117] usb 1-1: USB disconnect, device number 12
[  831.032593][T16259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2541'.
[  831.066340][T16259] vlan3: entered allmulticast mode
[  831.071840][T16259] macvtap0: entered allmulticast mode
[  831.117305][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'.
[  831.191714][T16263] ip6gre1: entered allmulticast mode
[  831.202438][ T5869] Bluetooth: hci0: command 0x0406 tx timeout
[  831.611109][T16269] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  831.669200][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  831.788831][T16275] bond0: left allmulticast mode
[  831.804556][T16275] bond_slave_0: left allmulticast mode
[  831.810573][T16275] bond_slave_1: left allmulticast mode
[  831.848584][T16275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  831.878128][T16276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  831.887706][T16276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  831.989623][ T5869] Bluetooth: hci3: command 0x0406 tx timeout
[  831.995852][T13453] Bluetooth: hci2: command 0x0406 tx timeout
[  832.002455][T13453] Bluetooth: hci1: command 0x0406 tx timeout
[  832.082309][ T5866] Bluetooth: hci5: command 0x0406 tx timeout
[  832.296756][T16288] loop2: detected capacity change from 0 to 7
[  832.306254][T16288] Dev loop2: unable to read RDB block 7
[  832.329378][T16288]  loop2: unable to read partition table
[  832.347805][T16288] loop2: partition table beyond EOD, truncated
[  832.365499][T16288] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  832.462389][T16286] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  832.538033][T16292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  832.571881][T16292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  832.709532][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  832.939267][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  833.069320][T11115] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  833.089307][   T10] usb 1-1: Using ep0 maxpacket: 8
[  833.097036][   T10] usb 1-1: config 0 has an invalid interface number: 151 but max is 1
[  833.105802][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  833.198515][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  833.207890][   T10] usb 1-1: config 0 has no interface number 0
[  833.215698][   T10] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  833.226924][   T10] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  833.238947][T11115] usb 3-1: Using ep0 maxpacket: 16
[  833.246185][   T10] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210
[  833.256915][   T10] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  833.270556][T11115] usb 3-1: config 0 has an invalid interface number: 74 but max is 0
[  833.278833][T11115] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  833.288724][T11115] usb 3-1: config 0 has no interface number 0
[  833.293089][T16300] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2552'.
[  833.295232][T11115] usb 3-1: config 0 interface 74 altsetting 0 endpoint 0xC has an invalid bInterval 246, changing to 11
[  833.316580][T11115] usb 3-1: config 0 interface 74 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  833.328140][T11115] usb 3-1: config 0 interface 74 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  833.340367][T11115] usb 3-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  833.352382][   T10] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  833.362410][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.370948][   T10] usb 1-1: Product: syz
[  833.375333][   T10] usb 1-1: Manufacturer: syz
[  833.380586][T11115] usb 3-1: config 0 interface 74 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  833.399285][   T10] usb 1-1: SerialNumber: syz
[  833.430935][   T10] usb 1-1: config 0 descriptor??
[  833.459790][T11115] usb 3-1: config 0 interface 74 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  833.475949][T11115] usb 3-1: config 0 interface 74 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  833.487844][T16293] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  833.513257][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  833.520990][T16301] syzkaller0: create flow: hash 2895184964 index 1
[  833.532122][T11115] usb 3-1: config 0 interface 74 altsetting 0 has a duplicate endpoint with address 0xF, skipping
[  833.564789][T13076] syzkaller0: tun_net_xmit 76
[  833.573298][T11115] usb 3-1: config 0 interface 74 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[  833.581140][T13076] syzkaller0: tun_net_xmit 48
[  833.589918][ T5926] syzkaller0: tun_net_xmit 76
[  833.647155][T11115] usb 3-1: config 0 interface 74 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  833.669277][T11115] usb 3-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  833.680659][T11115] usb 3-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81
[  833.692918][T11115] usb 3-1: config 0 interface 74 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 8
[  833.706790][T11115] usb 3-1: New USB device found, idVendor=0af0, idProduct=d013, bcdDevice= 9.b2
[  833.731636][   T10] usb 1-1: USB disconnect, device number 13
[  833.749219][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  833.763610][T11115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.783856][T16299] syzkaller0: delete flow: hash 2895184964 index 1
[  833.790573][T11115] usb 3-1: Product: syz
[  833.794966][T11115] usb 3-1: Manufacturer: syz
[  833.799952][T11115] usb 3-1: SerialNumber: syz
[  833.816184][T11115] usb 3-1: config 0 descriptor??
[  833.828371][T16297] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  833.845198][T16297] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  833.867027][T11115] hso 3-1:0.74: Not our interface
[  834.065021][ T5935] usb 3-1: USB disconnect, device number 123
[  834.729268][ T5935] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  834.776739][T16317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  834.789217][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  834.863219][T16317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  834.952693][ T5935] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  834.976843][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  834.985767][ T5935] usb 1-1: Product: syz
[  834.990654][ T5935] usb 1-1: Manufacturer: syz
[  834.995276][ T5935] usb 1-1: SerialNumber: syz
[  835.836162][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  835.984020][T16326] loop2: detected capacity change from 0 to 7
[  836.001187][T16177] Dev loop2: unable to read RDB block 7
[  836.006929][T16177]  loop2: unable to read partition table
[  836.016714][T16177] loop2: partition table beyond EOD, truncated
[  836.024605][T16326] Dev loop2: unable to read RDB block 7
[  836.045105][T16326]  loop2: unable to read partition table
[  836.051834][T16326] loop2: partition table beyond EOD, truncated
[  836.065182][T16326] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  836.191228][T16328] loop4: detected capacity change from 0 to 7
[  836.202485][T16328] Dev loop4: unable to read RDB block 7
[  836.216518][T16328]  loop4: unable to read partition table
[  836.223371][T16328] loop4: partition table beyond EOD, truncated
[  836.233669][T16328] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  836.869209][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  837.909208][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  838.118189][T16343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  838.146288][T16343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  838.170414][T16343] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2567'.
[  838.179728][    T9] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  838.233385][T16346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  838.244716][T16346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  838.421930][ T5935] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -EPROTO
[  838.438506][T16343] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  838.479184][    T9] usb 3-1: Using ep0 maxpacket: 32
[  838.630178][ T5935] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[  838.642942][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  838.661016][ T5935] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  838.718317][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  838.732684][ T5935] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  838.741572][    T9] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  838.754386][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.764556][    T9] usb 3-1: config 0 descriptor??
[  838.853717][ T5935] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  838.959323][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  838.986767][ T5935] usb 1-1: USB disconnect, device number 14
[  839.106222][T16353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  839.399513][ T5926] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  839.452934][    T9] aquacomputer_d5next 0003:0C70:F0B6.002C: unknown main item tag 0x2
[  839.532153][    T9] aquacomputer_d5next 0003:0C70:F0B6.002C: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0
[  839.583509][ T5926] usb 4-1: Using ep0 maxpacket: 32
[  839.626485][ T5926] usb 4-1: unable to get BOS descriptor or descriptor too short
[  839.787899][ T5926] usb 4-1: config 4 has an invalid interface number: 239 but max is 0
[  839.800253][    T9] usb 3-1: USB disconnect, device number 124
[  839.886160][ T5926] usb 4-1: config 4 has no interface number 0
[  839.989191][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  840.069293][ T5926] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=48.59
[  840.078588][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  840.116020][ T5926] usb 4-1: Product: syz
[  840.141247][ T5926] usb 4-1: Manufacturer: syz
[  840.163941][ T5926] usb 4-1: SerialNumber: syz
[  840.702622][T16367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  840.732798][T16367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  840.750723][T16367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  840.771335][T16367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  841.002545][T16375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  841.027741][T16375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  841.035663][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  841.059475][T11115] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  841.219340][T11115] usb 3-1: Using ep0 maxpacket: 32
[  841.226766][T11115] usb 3-1: config 0 has an invalid interface number: 232 but max is 0
[  841.237444][T11115] usb 3-1: config 0 has no interface number 0
[  841.376341][T11115] usb 3-1: config 0 interface 232 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  841.393424][T11115] usb 3-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a
[  841.403631][T11115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.414939][T11115] usb 3-1: Product: syz
[  841.422808][T11115] usb 3-1: Manufacturer: syz
[  841.434267][T11115] usb 3-1: SerialNumber: syz
[  841.447698][T11115] usb 3-1: config 0 descriptor??
[  841.492420][T16372] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  841.581007][T11115] em28xx 3-1:0.232: New device syz syz @ 480 Mbps (2040:651b, interface 232, class 232)
[  841.602360][T11115] em28xx 3-1:0.232: Video interface 232 found: bulk
[  841.786846][ T5926] usb 4-1: MBOX3: Invalid descriptor size=18.
[  841.809687][ T5926] usb 4-1: USB disconnect, device number 123
[  841.879831][T11115] em28xx 3-1:0.232: unknown em28xx chip ID (0)
[  841.998101][T11115] em28xx 3-1:0.232: reading from i2c device at 0xa0 failed (error=-5)
[  842.017680][T11115] em28xx 3-1:0.232: board has no eeprom
[  842.079183][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  842.109354][T11115] em28xx 3-1:0.232: Identified as Hauppauge WinTV HVR 950 (card=16)
[  842.117530][T11115] em28xx 3-1:0.232: analog set to bulk mode.
[  842.156566][T16394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  842.179226][   T10] em28xx 3-1:0.232: Registering V4L2 extension
[  842.199284][T11115] usb 3-1: USB disconnect, device number 125
[  842.200580][T16394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  842.237787][T11115] em28xx 3-1:0.232: Disconnecting em28xx
[  842.280092][ T5926] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  842.360104][ T5935] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  842.453686][ T5926] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  842.464139][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.541310][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  842.573572][ T5935] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  842.583352][ T5926] usb 4-1: Product: syz
[  842.593207][ T5926] usb 4-1: Manufacturer: syz
[  842.605701][ T5926] usb 4-1: SerialNumber: syz
[  842.611625][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  842.633727][   T10] em28xx 3-1:0.232: Config register raw data: 0xffffffed
[  842.646333][ T5935] usb 1-1: config 0 descriptor??
[  842.677895][   T10] em28xx 3-1:0.232: AC97 chip type couldn't be determined
[  842.699090][   T10] em28xx 3-1:0.232: No AC97 audio processor
[  842.765640][   T10] em28xx 3-1:0.232: em28xx_v4l2_init: Error while setting audio - error [-19]!
[  842.809062][   T10] em28xx 3-1:0.232: Binding DVB extension
[  842.815669][   T10] em28xx 3-1:0.232: no endpoint for DVB mode and transfer type 0
[  842.816846][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2581'.
[  842.824073][   T10] em28xx 3-1:0.232: failed to pre-allocate USB transfer buffers for DVB.
[  842.841225][   T10] em28xx 3-1:0.232: Registering input extension
[  842.849448][T11115] em28xx 3-1:0.232: Closing input extension
[  842.873575][T11115] em28xx 3-1:0.232: Freeing device
[  843.109201][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  843.185590][T11115] usb 1-1: USB disconnect, device number 15
[  843.717226][ T5926] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  843.757289][ T5926] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  843.774971][ T5926] cdc_ncm 4-1:1.0: setting rx_max = 2048
[  843.951354][T16417] loop6: detected capacity change from 0 to 7
[  843.981553][T16177] Dev loop6: unable to read RDB block 7
[  844.149336][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  844.810252][ T5926] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  844.842133][T16177]  loop6: AHDI p2 p3
[  844.846131][T16177] loop6: partition table partially beyond EOD, truncated
[  844.860170][ T5926] usb 4-1: USB disconnect, device number 124
[  844.876888][T16177] loop6: p2 size 46 extends beyond EOD, truncated
[  844.883669][ T5926] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  845.153466][T16432] lo: entered promiscuous mode
[  845.161185][T16432] tunl0: entered promiscuous mode
[  845.166915][T16432] gre0: entered promiscuous mode
[  845.176312][T16432] gretap0: entered promiscuous mode
[  845.185085][T16432] erspan0: entered promiscuous mode
[  845.191001][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  845.219512][T16432] ip_vti0: entered promiscuous mode
[  845.227349][T16432] ip6_vti0: entered promiscuous mode
[  845.241415][T16432] sit0: entered promiscuous mode
[  845.319323][T16432] ip6tnl0: entered promiscuous mode
[  845.330898][T16177] udevd[16177]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  845.371144][T16432] ip6gre0: entered promiscuous mode
[  845.379061][T16432] syz_tun: entered promiscuous mode
[  845.401288][T16432] ip6gretap0: entered promiscuous mode
[  845.407191][T16432] bridge0: entered promiscuous mode
[  845.446139][T16432] bond0: entered promiscuous mode
[  845.461798][T16432] bond_slave_0: entered promiscuous mode
[  845.481187][T16432] bond_slave_1: entered promiscuous mode
[  845.489253][  T981] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  845.534043][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807d785800: rx timeout, send abort
[  845.545870][T16432] team0: entered promiscuous mode
[  845.552684][T16432] team_slave_0: entered promiscuous mode
[  845.558726][T16432] team_slave_1: entered promiscuous mode
[  845.565990][T16432] batadv1: entered promiscuous mode
[  845.576591][T16432] dummy0: entered promiscuous mode
[  845.586977][T16432] nlmon0: entered promiscuous mode
[  845.617764][T16432] caif0: entered promiscuous mode
[  845.634311][T16432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  845.699589][  T981] usb 1-1: Using ep0 maxpacket: 32
[  845.709513][ T5926] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[  845.718668][  T981] usb 1-1: unable to get BOS descriptor or descriptor too short
[  845.942408][  T981] usb 1-1: config 4 has an invalid interface number: 239 but max is 0
[  845.951702][  T981] usb 1-1: config 4 has no interface number 0
[  846.042320][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807d785800: abort rx timeout. Force session deactivation
[  846.059212][ T5926] usb 4-1: Using ep0 maxpacket: 32
[  846.068515][ T5926] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  846.194538][  T981] usb 1-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=48.59
[  846.215468][  T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.229552][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.239255][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  846.259182][  T981] usb 1-1: Product: syz
[  846.266913][  T981] usb 1-1: Manufacturer: syz
[  846.290519][ T5926] usb 4-1: config 0 descriptor??
[  846.305774][  T981] usb 1-1: SerialNumber: syz
[  846.404386][T16444] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2592'.
[  846.523423][ T5926] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  846.563238][T16447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2593'.
[  846.582743][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  846.641792][T16449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  846.650324][ T5926] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  846.650401][ T5926] usb 4-1: media controller created
[  846.779284][T16429] netlink: 'syz.3.2589': attribute type 10 has an invalid length.
[  846.796175][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  846.806515][T16449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  847.086773][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  847.086842][   T30] audit: type=1326 audit(1756646740.194:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.5.2594" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84d178ebe9 code=0x0
[  847.168583][T16454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  847.177783][T16454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  847.269260][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  847.778666][T16429] bridge_slave_1: entered promiscuous mode
[  847.788782][T16429] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  848.182905][T16468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  848.196132][T16468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  848.309188][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  848.328027][ T5926] az6027: usb out operation failed. (-71)
[  848.339694][ T5926] az6027: usb out operation failed. (-71)
[  848.368798][ T5926] stb0899_attach: Driver disabled by Kconfig
[  848.395151][ T5926] az6027: no front-end attached
[  848.395151][ T5926] 
[  848.410866][ T5926] az6027: usb out operation failed. (-71)
[  848.427034][ T5926] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  848.447348][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43
[  848.470720][ T5926] dvb-usb: schedule remote query interval to 400 msecs.
[  848.478127][ T5926] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  848.570558][  T981] usb 1-1: MBOX3: Invalid descriptor size=18.
[  848.587370][ T5926] usb 4-1: USB disconnect, device number 125
[  848.609621][  T981] usb 1-1: USB disconnect, device number 16
[  848.707476][ T5926] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  848.917429][T16476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2599'.
[  848.999714][T16478] loop6: detected capacity change from 0 to 7
[  849.027830][T16478] Dev loop6: unable to read RDB block 7
[  849.049030][T16478]  loop6: AHDI p2 p3
[  849.062379][T16478] loop6: partition table partially beyond EOD, truncated
[  849.102428][T16478] loop6: p2 size 46 extends beyond EOD, truncated
[  849.185994][T16177] udevd[16177]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  849.199805][T16484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  849.226095][T16484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  849.327860][T16489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  849.349205][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  849.359813][T16489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  849.729292][T11115] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[  849.835812][T16494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  849.850245][T16494] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  849.866326][T16494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  849.876941][T16494] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  849.939400][T11115] usb 4-1: Using ep0 maxpacket: 16
[  849.946213][T11115] usb 4-1: config index 0 descriptor too short (expected 1810, got 18)
[  849.955495][T11115] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6
[  849.967476][T11115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.985149][T11115] usb 4-1: config 0 descriptor??
[  850.013920][T11115] gspca_main: etoms-2.14.0 probing 102c:6151
[  850.217928][T16498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2607'.
[  850.314739][T16499] team0: entered allmulticast mode
[  850.399186][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  850.978163][T16513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  851.111679][T16514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  851.124025][T16514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  851.149231][ T5935] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  851.242887][T16517] loop2: detected capacity change from 0 to 7
[  851.309862][T16517] Dev loop2: unable to read RDB block 7
[  851.425248][T16517]  loop2: unable to read partition table
[  851.431192][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  851.442932][T16517] loop2: partition table beyond EOD, truncated
[  851.455307][T16519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  851.470088][ T5935] usb 1-1: Using ep0 maxpacket: 32
[  851.484848][ T5935] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  851.495935][ T5935] usb 1-1: config 0 has no interface number 0
[  851.502457][ T5935] usb 1-1: config 0 interface 184 has no altsetting 0
[  851.543807][ T5935] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  851.545488][T16517] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  851.557480][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.564622][T16519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  851.587386][ T5935] usb 1-1: Product: syz
[  851.632459][ T5935] usb 1-1: Manufacturer: syz
[  851.805882][ T5935] usb 1-1: SerialNumber: syz
[  852.028921][ T5935] usb 1-1: config 0 descriptor??
[  852.084977][ T5935] smsc75xx v1.0.0
[  852.089185][ T5935] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  852.165939][ T5935] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22
[  852.469371][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  852.479306][ T5935] usb 4-1: USB disconnect, device number 126
[  852.594466][T16532] loop6: detected capacity change from 0 to 7
[  852.607062][T16532] Dev loop6: unable to read RDB block 7
[  852.613224][T16532]  loop6: AHDI p2 p3
[  852.618510][T16532] loop6: partition table partially beyond EOD, truncated
[  852.629717][T16532] loop6: p2 size 46 extends beyond EOD, truncated
[  853.213075][T16177] udevd[16177]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  853.226004][T16542] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2616'.
[  853.509555][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  853.737544][T16542] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2616'.
[  853.781360][T16551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2618'.
[  853.984731][T16551] lo: left promiscuous mode
[  853.991496][T16551] tunl0: left promiscuous mode
[  853.997016][T16551] gre0: left promiscuous mode
[  854.004194][T16551] gretap0: left promiscuous mode
[  854.013487][T16551] erspan0: left promiscuous mode
[  854.092901][T16551] ip_vti0: left promiscuous mode
[  854.098488][T16551] ip6_vti0: left promiscuous mode
[  854.123715][T16551] sit0: left promiscuous mode
[  854.131403][T16551] ip6tnl0: left promiscuous mode
[  854.155236][T16551] ip6gre0: left promiscuous mode
[  854.171256][T16551] syz_tun: left promiscuous mode
[  854.198788][T16551] ip6gretap0: left promiscuous mode
[  854.207460][T16551] bridge0: left promiscuous mode
[  854.213549][T16551] vcan0: left promiscuous mode
[  854.219343][T16551] bond0: left promiscuous mode
[  854.224222][T16551] bond_slave_0: left promiscuous mode
[  854.230166][T16551] bond_slave_1: left promiscuous mode
[  854.236107][T16551] bond9: left promiscuous mode
[  854.242855][T16551] team0: left promiscuous mode
[  854.247848][T16551] team_slave_0: left promiscuous mode
[  854.253856][T16551] team_slave_1: left promiscuous mode
[  854.261008][T16551] dummy0: left promiscuous mode
[  854.266459][T16551] nlmon0: left promiscuous mode
[  854.299390][T16551] caif0: left promiscuous mode
[  854.304317][T16551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  854.409232][ T5935] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[  854.416933][  T981] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  854.467860][T11115] usb 1-1: USB disconnect, device number 17
[  854.538658][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2620'.
[  854.549195][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  854.568663][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2620'.
[  854.833644][ T5935] usb 4-1: config 0 has no interfaces?
[  854.839445][  T981] usb 3-1: Using ep0 maxpacket: 16
[  854.859780][  T981] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  854.876541][ T5935] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  854.909287][  T981] usb 3-1: config 0 has no interface number 0
[  854.921020][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.939929][ T5935] usb 4-1: Product: syz
[  854.949312][  T981] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  854.964271][  T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.972581][  T981] usb 3-1: Product: syz
[  854.978060][  T981] usb 3-1: Manufacturer: syz
[  854.985617][ T5935] usb 4-1: Manufacturer: syz
[  854.991016][  T981] usb 3-1: SerialNumber: syz
[  854.995686][ T5935] usb 4-1: SerialNumber: syz
[  855.003766][  T981] usb 3-1: config 0 descriptor??
[  855.011629][ T5935] usb 4-1: config 0 descriptor??
[  855.033975][  T981] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  855.599207][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  855.701514][T16574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  855.740749][T16574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  855.805040][T16574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  855.845146][T16574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  855.976065][T16580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2624'.
[  856.301394][T16582] loop6: detected capacity change from 0 to 7
[  856.309057][T16582] Dev loop6: unable to read RDB block 7
[  856.315677][T16582]  loop6: AHDI p2 p3
[  856.323536][T16582] loop6: partition table partially beyond EOD, truncated
[  856.334667][T16582] loop6: p2 size 46 extends beyond EOD, truncated
[  856.446900][T16177] udevd[16177]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  856.464394][  T981] gspca_spca1528: reg_w err -110
[  856.477755][  T981] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110
[  856.629189][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  856.669411][T11115] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  856.843201][T11115] usb 1-1: config 135 has an invalid interface number: 230 but max is 0
[  856.851938][T11115] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  856.862712][T11115] usb 1-1: config 135 has no interface number 0
[  856.869372][T11115] usb 1-1: config 135 interface 230 has no altsetting 0
[  856.879018][T11115] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  856.888741][T11115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.897120][T11115] usb 1-1: Product: syz
[  856.901771][T11115] usb 1-1: Manufacturer: syz
[  856.906763][T11115] usb 1-1: SerialNumber: syz
[  857.098975][  T981] usb 4-1: USB disconnect, device number 127
[  857.221418][T16584] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2627'.
[  857.298063][ T5935] usb 3-1: USB disconnect, device number 126
[  857.402576][   T10] usb 1-1: USB disconnect, device number 18
[  857.669248][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  857.804085][T16599] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  857.835787][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2632'.
[  857.884558][T16604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2632'.
[  857.959930][T16599] netlink: 'syz.5.2629': attribute type 2 has an invalid length.
[  858.039790][ T5935] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  858.251866][ T5935] usb 3-1: Using ep0 maxpacket: 32
[  858.265964][ T5935] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  858.281717][   T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  858.291086][ T5935] usb 3-1: config 0 has no interface number 0
[  858.308803][ T5935] usb 3-1: config 0 interface 184 has no altsetting 0
[  858.328255][ T5935] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  858.341824][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.358909][ T5935] usb 3-1: Product: syz
[  858.368811][ T5935] usb 3-1: Manufacturer: syz
[  858.379305][ T5935] usb 3-1: SerialNumber: syz
[  858.389075][ T5935] usb 3-1: config 0 descriptor??
[  858.413276][ T5935] smsc75xx v1.0.0
[  858.417416][ T5935] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  858.429820][T16616] ptrace attach of "./syz-executor exec"[7418] was attempted by "./syz-executor exec"[16616]
[  858.442192][   T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  858.452330][   T10] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  858.457436][ T5935] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[  858.472774][   T10] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config
[  858.528555][   T10] usb 1-1: config 220 has no interface number 2
[  858.549399][T16616] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  858.568599][T16616] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  858.578169][T16616] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[  858.590283][T16616] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  858.594678][   T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  858.657849][T16616] kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[  858.666136][T16616] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  858.674861][T16616] kvm: requested 58666 ns i8254 timer period limited to 200000 ns
[  858.680412][   T10] usb 1-1: config 220 interface 0 has no altsetting 0
[  858.708092][T16616] kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  858.716067][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  858.723945][T16616] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  858.734661][T16616] kvm: requested 170133 ns i8254 timer period limited to 200000 ns
[  858.735442][   T10] usb 1-1: config 220 interface 76 has no altsetting 0
[  858.750434][   T10] usb 1-1: config 220 interface 1 has no altsetting 0
[  858.808162][   T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  858.818257][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.905419][   T10] usb 1-1: Product: syz
[  858.912131][   T10] usb 1-1: Manufacturer: syz
[  858.924088][   T10] usb 1-1: SerialNumber: syz
[  859.170500][   T10] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  859.224955][   T10] usb 1-1: No valid video chain found.
[  859.235739][   T10] usb 1-1: selecting invalid altsetting 0
[  859.274981][   T10] usb 1-1: selecting invalid altsetting 0
[  859.281468][   T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  859.422180][   T10] usb 1-1: USB disconnect, device number 19
[  859.550353][T16632] loop6: detected capacity change from 0 to 7
[  859.558205][T16177] Dev loop6: unable to read RDB block 7
[  859.564598][T16177]  loop6: AHDI p2 p3
[  859.585872][T16177] loop6: partition table partially beyond EOD, truncated
[  859.604182][T16177] loop6: p2 size 46 extends beyond EOD, truncated
[  859.637756][T16632] Dev loop6: unable to read RDB block 7
[  859.644485][T16632]  loop6: AHDI p2 p3
[  859.649027][T16632] loop6: partition table partially beyond EOD, truncated
[  859.660420][T16632] loop6: p2 size 46 extends beyond EOD, truncated
[  859.749195][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  859.791407][T16636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  859.817491][T16636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  859.951615][T16636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  859.974993][T16177] udevd[16177]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  860.080735][T16636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  860.154524][T16636] netlink: 'syz.5.2639': attribute type 3 has an invalid length.
[  860.179938][T16177] udevd[16177]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  860.307923][T16636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  860.496830][T16636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  860.768746][ T5935] usb 3-1: USB disconnect, device number 127
[  860.789197][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  861.103345][T16659] ptrace attach of "./syz-executor exec"[5875] was attempted by "./syz-executor exec"[16659]
[  861.121908][T16659] input: syz1 as /devices/virtual/input/input44
[  861.829193][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  861.838894][T16671] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2647'.
[  862.789410][T16656] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  862.869180][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  862.887526][T16676] loop4: detected capacity change from 0 to 7
[  862.927077][T16676] Dev loop4: unable to read RDB block 7
[  862.957242][T16676]  loop4: unable to read partition table
[  862.967800][T16676] loop4: partition table beyond EOD, truncated
[  862.984729][T16656] netlink: 'syz.5.2644': attribute type 2 has an invalid length.
[  863.050419][T16685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2648'.
[  863.063047][T16676] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  863.433596][T16697] program syz.5.2653 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  863.909188][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  864.559238][   T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  864.750028][   T10] usb 1-1: Using ep0 maxpacket: 32
[  864.774021][   T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  864.793636][   T10] usb 1-1: config 0 has no interface number 0
[  864.844368][   T10] usb 1-1: config 0 interface 184 has no altsetting 0
[  864.879325][   T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  864.888622][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.903377][   T10] usb 1-1: Product: syz
[  864.915495][   T10] usb 1-1: Manufacturer: syz
[  864.928208][   T10] usb 1-1: SerialNumber: syz
[  864.959176][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  864.964561][   T10] usb 1-1: config 0 descriptor??
[  865.023188][   T10] smsc75xx v1.0.0
[  865.027091][   T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  865.068832][   T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22
[  865.244903][T16726] can: request_module (can-proto-4) failed.
[  865.366529][T16731] vxcan1: entered allmulticast mode
[  865.567060][T16737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  865.617553][T16737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  865.650076][T16739] fuse: Bad value for 'rootmode'
[  865.677751][T16737] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2661'.
[  865.985432][T16743] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  865.992922][T16743] syzkaller0: entered promiscuous mode
[  865.998529][T16743] syzkaller0: entered allmulticast mode
[  865.999284][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  866.176176][T16743] tipc: Resetting bearer <eth:syzkaller0>
[  866.182264][ T5935] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  866.299371][T16744] tipc: Resetting bearer <eth:syzkaller0>
[  866.359621][ T5935] usb 4-1: Using ep0 maxpacket: 16
[  866.424351][ T5935] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  866.445609][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  866.462072][ T5935] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  866.472189][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.482776][ T5935] usb 4-1: Product: syz
[  866.494239][ T5935] usb 4-1: Manufacturer: syz
[  866.505969][ T5935] usb 4-1: SerialNumber: syz
[  866.530813][ T5935] usb 4-1: config 0 descriptor??
[  866.552152][ T5935] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  866.685498][ T5935] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  866.697071][T16744] tipc: Disabling bearer <eth:syzkaller0>
[  866.813118][T16753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  866.835373][T16753] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  867.029269][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  867.582250][   T10] usb 1-1: USB disconnect, device number 20
[  867.822059][ T5935] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  867.842931][ T5935] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  867.855300][ T5935] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  867.874779][ T5935] em28xx 4-1:0.0: No AC97 audio processor
[  868.069334][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  868.636667][T16769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2667'.
[  868.949817][T11115] usb 4-1: USB disconnect, device number 2
[  868.967154][T11115] em28xx 4-1:0.0: Disconnecting em28xx
[  868.999864][T11115] em28xx 4-1:0.0: Freeing device
[  869.049299][  T981] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  869.109309][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  869.189319][  T981] usb 3-1: device descriptor read/64, error -71
[  869.329994][   T30] audit: type=1326 audit(1756646762.464:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16775 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdb38ebe9 code=0x7ffc0000
[  869.505562][   T30] audit: type=1326 audit(1756646762.464:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16775 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdb38ebe9 code=0x7ffc0000
[  869.563465][T16789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  869.589235][  T981] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  869.617484][T16789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  869.697731][T16790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  869.754007][T16790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  869.762127][  T981] usb 3-1: device descriptor read/64, error -71
[  869.879959][  T981] usb usb3-port1: attempt power cycle
[  870.149364][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  870.207739][T16798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  870.220571][T16798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  870.259241][  T981] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  870.289901][  T981] usb 3-1: device descriptor read/8, error -71
[  870.314112][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  870.320816][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  870.569188][  T981] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  870.638877][  T981] usb 3-1: device descriptor read/8, error -71
[  870.729269][    T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  870.889375][    T9] usb 1-1: Using ep0 maxpacket: 32
[  870.959778][  T981] usb usb3-port1: unable to enumerate USB device
[  871.130647][    T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  871.145863][    T9] usb 1-1: config 0 has no interface number 0
[  871.172824][    T9] usb 1-1: config 0 interface 184 has no altsetting 0
[  871.189251][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  871.220892][T16814] netlink: 'syz.3.2680': attribute type 1 has an invalid length.
[  871.229013][T16814] netlink: 'syz.3.2680': attribute type 1 has an invalid length.
[  871.237531][T16814] netlink: 'syz.3.2680': attribute type 1 has an invalid length.
[  871.246307][T16814] netlink: 'syz.3.2680': attribute type 1 has an invalid length.
[  871.255618][T16814] netlink: 'syz.3.2680': attribute type 1 has an invalid length.
[  871.269298][T16814] netlink: 'syz.3.2680': attribute type 1 has an invalid length.
[  871.278101][T16814] netlink: 'syz.3.2680': attribute type 1 has an invalid length.
[  871.294807][    T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  871.304297][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.390910][    T9] usb 1-1: Product: syz
[  871.452586][T16814] netlink: 'syz.3.2680': attribute type 1 has an invalid length.
[  871.488565][    T9] usb 1-1: Manufacturer: syz
[  871.494461][T16814] netlink: 'syz.3.2680': attribute type 1 has an invalid length.
[  871.506393][T16814] netlink: 'syz.3.2680': attribute type 1 has an invalid length.
[  871.514456][    T9] usb 1-1: SerialNumber: syz
[  871.532605][    T9] usb 1-1: config 0 descriptor??
[  871.570465][    T9] smsc75xx v1.0.0
[  871.575478][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  871.586852][T16817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  871.597728][    T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22
[  872.229511][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  872.600211][   T30] audit: type=1326 audit(1756646765.554:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  872.623174][   T30] audit: type=1326 audit(1756646765.554:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  872.688385][   T30] audit: type=1326 audit(1756646765.554:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  872.754999][   T30] audit: type=1326 audit(1756646765.554:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  872.983231][   T30] audit: type=1326 audit(1756646765.554:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  873.076464][   T30] audit: type=1326 audit(1756646765.554:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  873.269172][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  873.341425][   T30] audit: type=1326 audit(1756646765.554:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  873.372681][T16838] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  873.379230][T16838] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  873.415446][T16838] vhci_hcd vhci_hcd.0: Device attached
[  873.421529][T16842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  873.434320][T16843] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  873.445440][T16842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  873.457317][T16838] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  873.474449][T16838] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  873.485859][T16838] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  873.495312][T16838] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  873.593888][T16843] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  873.606698][T16838] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(19)
[  873.613332][T16838] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  873.620966][    T9] vhci_hcd: vhci_device speed not set
[  873.644235][T16843] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  873.669446][   T30] audit: type=1326 audit(1756646765.554:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd23838ebe9 code=0x7ffc0000
[  873.691512][T16838] vhci_hcd vhci_hcd.0: Device attached
[  873.703146][T16839] vhci_hcd: connection closed
[  873.704525][T13071] vhci_hcd: stop threads
[  873.713812][    T9] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  873.724377][T13071] vhci_hcd: release socket
[  873.728987][T13071] vhci_hcd: disconnect device
[  873.754515][T16844] vhci_hcd: connection closed
[  873.754838][T13071] vhci_hcd: stop threads
[  873.786269][T13071] vhci_hcd: release socket
[  873.809591][T13071] vhci_hcd: disconnect device
[  873.841247][ T5939] usb 1-1: USB disconnect, device number 21
[  874.024509][T16853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  874.036639][T16853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  874.067102][T16854] loop4: detected capacity change from 0 to 7
[  874.093313][T16854] Dev loop4: unable to read RDB block 7
[  874.099176][T16854]  loop4: unable to read partition table
[  874.104967][T16854] loop4: partition table beyond EOD, truncated
[  874.147436][T16854] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  874.319174][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  874.902859][T16881] loop6: detected capacity change from 0 to 7
[  874.987609][T16881] Dev loop6: unable to read RDB block 7
[  874.995448][T16881]  loop6: AHDI p2 p3
[  875.006720][T16881] loop6: partition table partially beyond EOD, truncated
[  875.032774][T16881] loop6: p2 size 46 extends beyond EOD, truncated
[  875.349484][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  875.895855][T16177] udevd[16177]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  876.124631][T16890] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  876.309433][ T5939] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  876.389392][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  876.420881][T16885] validate_nla: 40 callbacks suppressed
[  876.420898][T16885] netlink: 'syz.5.2697': attribute type 2 has an invalid length.
[  876.470033][ T5939] usb 1-1: Using ep0 maxpacket: 32
[  876.478731][ T5939] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  876.487657][ T5939] usb 1-1: config 0 has no interface number 0
[  876.503092][ T5939] usb 1-1: config 0 interface 184 has no altsetting 0
[  876.576725][T16896] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  876.583251][T16896] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  876.596914][ T5939] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  876.606216][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.614372][ T5939] usb 1-1: Product: syz
[  876.633019][ T5939] usb 1-1: Manufacturer: syz
[  876.641307][ T5939] usb 1-1: SerialNumber: syz
[  876.655275][ T5939] usb 1-1: config 0 descriptor??
[  876.669056][ T5939] smsc75xx v1.0.0
[  876.677090][ T5939] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  876.692492][T16896] vhci_hcd vhci_hcd.0: Device attached
[  876.784734][T16898] vhci_hcd: connection closed
[  876.785345][T13077] vhci_hcd: stop threads
[  876.799340][T13077] vhci_hcd: release socket
[  876.817996][T13077] vhci_hcd: disconnect device
[  876.831811][ T5939] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22
[  876.874419][  T981] vhci_hcd: vhci_device speed not set
[  877.212486][T16909] loop4: detected capacity change from 0 to 7
[  877.223301][T16909] Dev loop4: unable to read RDB block 7
[  877.231613][T16909]  loop4: unable to read partition table
[  877.241385][T16909] loop4: partition table beyond EOD, truncated
[  877.248491][T16909] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  877.399017][T16913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  877.421662][T16913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  877.439384][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  877.859402][ T5939] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  878.019435][ T5939] usb 3-1: Using ep0 maxpacket: 16
[  878.047971][ T5939] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  878.060094][ T5939] usb 3-1: config 0 has no interface number 0
[  878.066743][ T5939] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  878.080305][ T5939] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  878.090294][ T5939] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  878.100385][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.130344][ T5939] usb 3-1: config 0 descriptor??
[  878.387019][T16925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  878.417111][T16925] syzkaller0: entered promiscuous mode
[  878.447704][T16925] syzkaller0: entered allmulticast mode
[  878.456902][T16929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  878.477993][T16929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  878.486071][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  878.565363][ T5939] uclogic 0003:28BD:0071.002E: pen parameters not found
[  878.588583][T16925] tipc: Resetting bearer <eth:syzkaller0>
[  878.658053][ T5939] uclogic 0003:28BD:0071.002E: interface is invalid, ignoring
[  878.671711][T16930] tipc: Resetting bearer <eth:syzkaller0>
[  878.689400][   T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  878.799388][T16930] tipc: Disabling bearer <eth:syzkaller0>
[  878.864542][    T9] vhci_hcd: vhci_device speed not set
[  878.873692][   T10] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  878.887306][   T10] usb 4-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  878.921221][ T5939] usb 1-1: USB disconnect, device number 22
[  878.951566][   T10] usb 4-1: config 1 interface 0 has no altsetting 0
[  879.005612][   T10] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.40
[  879.017579][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.036269][   T10] usb 4-1: Product: 댴⺱脛䅀㰉錄簬橦䮅᳍㷗섿ꕱ凎๪墻᳈諤榪澎聰䄙눃朡烮㟧頼쮦籙閩쨁₫隦碅䈟푏棤㧩늆삸긬慳㝻ꮰ讞貤醅領ℭ衇ᐓנ˫嗍ꤕⷌ筺몴⭛ꇮ謜ۨ䐗헔졤鬭膡༈唩馋Ỹꛠ藽繕릗藳쎒懖꒍蔜횟곃誂㒇韰숟웈薇ၤ⩣䮆ﯙ顁཈䚁उꯁ牤ዱ岅Ꚃ倎䌷绉톒
[  879.098873][   T10] usb 4-1: Manufacturer: 㐁
[  879.125717][   T10] usb 4-1: SerialNumber: ю
[  879.204465][T16927] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22
[  879.457050][   T10] usbhid 4-1:1.0: can't add hid device: -71
[  879.465904][   T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  879.492235][   T10] usb 4-1: USB disconnect, device number 3
[  879.509338][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  879.727030][T16938] netlink: 'syz.1.2711': attribute type 2 has an invalid length.
[  879.956376][   T10] usb 3-1: USB disconnect, device number 6
[  880.324795][T16961] loop4: detected capacity change from 0 to 7
[  880.365896][T16177] Dev loop4: unable to read RDB block 7
[  880.374345][T16177]  loop4: unable to read partition table
[  880.407730][T16177] loop4: partition table beyond EOD, truncated
[  880.457807][T16961] Dev loop4: unable to read RDB block 7
[  880.463726][T16961]  loop4: unable to read partition table
[  880.470330][T16961] loop4: partition table beyond EOD, truncated
[  880.493132][T16961] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  880.550038][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  880.638811][T16967] netlink: 'syz.2.2716': attribute type 25 has an invalid length.
[  880.653685][T16967] netlink: 'syz.2.2716': attribute type 7 has an invalid length.
[  880.673268][T16967] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2716'.
[  881.599576][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  881.751662][   T30] kauditd_printk_skb: 56 callbacks suppressed
[  881.751679][   T30] audit: type=1326 audit(1756646774.884:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000
[  882.073414][   T30] audit: type=1326 audit(1756646774.884:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000
[  882.107870][T16996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  882.121256][T16996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  882.158834][   T30] audit: type=1326 audit(1756646774.884:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000
[  882.248757][   T30] audit: type=1326 audit(1756646774.914:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000
[  882.426353][   T30] audit: type=1326 audit(1756646774.914:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000
[  882.629191][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  882.805861][   T30] audit: type=1326 audit(1756646774.914:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000
[  882.828651][   T30] audit: type=1326 audit(1756646774.914:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000
[  882.889608][   T30] audit: type=1326 audit(1756646774.914:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000
[  882.929274][  T981] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  882.985594][   T30] audit: type=1326 audit(1756646774.914:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000
[  883.008139][    C1] vkms_vblank_simulate: vblank timer overrun
[  883.100114][   T30] audit: type=1326 audit(1756646774.914:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000
[  883.129783][  T981] usb 1-1: Using ep0 maxpacket: 32
[  883.153170][  T981] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  883.161551][  T981] usb 1-1: config 0 has no interface number 0
[  883.179472][  T981] usb 1-1: config 0 interface 184 has no altsetting 0
[  883.267250][  T981] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  883.332720][  T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.371289][  T981] usb 1-1: Product: syz
[  883.383444][  T981] usb 1-1: Manufacturer: syz
[  883.397110][  T981] usb 1-1: SerialNumber: syz
[  883.438577][  T981] usb 1-1: config 0 descriptor??
[  883.460074][  T981] smsc75xx v1.0.0
[  883.463768][  T981] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  883.621381][T17004] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  883.631808][  T981] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22
[  883.669267][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  883.781697][T17004] netlink: 'syz.5.2725': attribute type 2 has an invalid length.
[  883.797796][T17010] loop4: detected capacity change from 0 to 7
[  883.826717][T16177] Dev loop4: unable to read RDB block 7
[  883.847045][T16177]  loop4: unable to read partition table
[  883.868849][T16177] loop4: partition table beyond EOD, truncated
[  884.030913][T17010] Dev loop4: unable to read RDB block 7
[  884.036857][T17010]  loop4: unable to read partition table
[  884.089482][T17010] loop4: partition table beyond EOD, truncated
[  884.155625][T17010] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  884.217262][T17014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  884.236822][T17014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  884.253717][T17014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  884.273741][T17014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  884.719190][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  884.839557][  T981] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  885.367634][ T5956] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  885.466309][  T981] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  885.518265][  T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  885.529320][  T981] usb 3-1: Product: syz
[  885.533552][  T981] usb 3-1: Manufacturer: syz
[  885.546661][  T981] usb 3-1: SerialNumber: syz
[  885.559213][ T5956] usb 4-1: device descriptor read/64, error -71
[  885.577267][  T981] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  885.594308][ T5926] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  885.749191][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  885.929656][ T5956] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  886.064445][T17048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  886.073624][T17048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  886.134295][T17047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  886.199781][ T5956] usb 4-1: device descriptor read/64, error -71
[  886.629668][ T5926] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  886.641089][ T5926] ath9k_htc: Failed to initialize the device
[  886.789352][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  887.830419][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  888.869697][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  889.099934][ T5235] udevd[5235]: worker [11054] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time
[  889.705430][ T5956] usb usb4-port1: attempt power cycle
[  889.800170][ T5935] usb 3-1: USB disconnect, device number 7
[  889.803113][    T0] sched: DL replenish lagged too much
[  889.865162][   T10] usb 1-1: USB disconnect, device number 23
[  889.877510][ T5935] usb 3-1: ath9k_htc: USB layer deinitialized
[  889.909181][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  890.013619][T17060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  890.085749][T17060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  890.177261][T17064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  890.230047][T17064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  890.349368][   T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  890.509291][   T10] usb 1-1: device descriptor read/64, error -71
[  890.631352][T17071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  890.651188][T17071] syzkaller0: entered promiscuous mode
[  890.665741][T17071] syzkaller0: entered allmulticast mode
[  890.758558][   T10] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  890.802439][T17070] tipc: Resetting bearer <eth:syzkaller0>
[  890.929297][   T10] usb 1-1: device descriptor read/64, error -71
[  890.949275][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  891.033811][T17070] tipc: Disabling bearer <eth:syzkaller0>
[  891.067168][   T10] usb usb1-port1: attempt power cycle
[  891.439394][   T10] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  891.460655][   T10] usb 1-1: device descriptor read/8, error -71
[  891.660973][T17088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  891.699449][   T10] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  891.721511][T17088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  891.731998][   T10] usb 1-1: device descriptor read/8, error -71
[  891.767995][T17088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  891.803292][T17088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  891.839728][   T10] usb usb1-port1: unable to enumerate USB device
[  891.884162][T17090] netlink: 'syz.1.2746': attribute type 11 has an invalid length.
[  891.989259][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  892.664147][T17100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  892.677256][T17100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  892.746915][T17102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  892.771064][T17102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  892.786312][T17102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  892.806248][T17102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  892.912305][T17102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  892.927768][T17102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  893.039200][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  893.181993][T17108] netlink: 'syz.3.2751': attribute type 37 has an invalid length.
[  893.254986][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2751'.
[  894.029402][T17134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  894.059283][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  894.075009][T17135] syzkaller0: entered promiscuous mode
[  894.079166][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  894.098431][T17135] syzkaller0: entered allmulticast mode
[  894.121617][T17138] netlink: 'syz.2.2759': attribute type 25 has an invalid length.
[  894.146656][T17138] netlink: 'syz.2.2759': attribute type 7 has an invalid length.
[  894.209898][   T10] usb 4-1: Using ep0 maxpacket: 8
[  894.263315][   T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  894.283323][   T10] usb 4-1: config 179 has no interface number 0
[  894.389445][   T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  894.401840][   T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  894.413806][   T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  894.425973][   T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  894.438001][   T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  894.452023][   T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  894.461669][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.474375][T17125] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  894.484843][T17135] tipc: Resetting bearer <eth:syzkaller0>
[  894.534883][T17135] tipc: Disabling bearer <eth:syzkaller0>
[  895.109174][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  895.829327][   T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  895.978902][T17158] tipc: Can't bind to reserved service type 1
[  895.999363][   T10] usb 1-1: Using ep0 maxpacket: 8
[  896.006647][   T10] usb 1-1: config 0 has an invalid interface number: 200 but max is 0
[  896.015831][   T10] usb 1-1: config 0 has no interface number 0
[  896.046835][   T10] usb 1-1: config 0 interface 200 has no altsetting 0
[  896.084841][   T10] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  896.100054][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.149173][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  896.159201][   T10] usb 1-1: Product: syz
[  896.166097][   T10] usb 1-1: Manufacturer: syz
[  896.186491][   T10] usb 1-1: SerialNumber: syz
[  896.205504][   T10] usb 1-1: config 0 descriptor??
[  896.252159][T17164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  896.267436][T17164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  896.442035][T17152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  896.456851][T17152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  896.632513][   T10] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input46
[  896.730083][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2763'.
[  896.739350][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2763'.
[  896.758077][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2763'.
[  896.767646][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2763'.
[  896.777109][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2763'.
[  896.794864][T17171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2763'.
[  896.804540][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2763'.
[  896.813855][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2763'.
[  896.875961][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2763'.
[  896.890098][   T10] usb 1-1: USB disconnect, device number 28
[  896.892911][ T5939] usb 4-1: USB disconnect, device number 7
[  896.896139][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  896.910431][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  897.189354][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  898.229244][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  898.521356][T17174] syz.2.2763 (17174): drop_caches: 2
[  898.570294][T17188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  898.618982][T17188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  898.659520][T17188] binder: 17187:17188 ioctl 4018620d 0 returned -22
[  898.989245][ T5939] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  899.155427][ T5939] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  899.195755][ T5939] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  899.249613][ T5939] usb 4-1: config 0 interface 0 has no altsetting 0
[  899.269247][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  899.317122][ T5939] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  899.327169][T17199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  899.349646][T17199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  899.357356][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  899.382155][ T5939] usb 4-1: config 0 descriptor??
[  899.393382][T17199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  899.431235][T17197] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  899.460191][T17199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  899.545280][T17204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  899.564729][T17204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  899.877012][T17204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  899.900012][T17204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  899.980732][T17191] __nla_validate_parse: 9 callbacks suppressed
[  899.980748][T17191] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2771'.
[  900.008240][T17197] netlink: 'syz.5.2772': attribute type 2 has an invalid length.
[  900.299446][T11115] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  900.319247][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  900.422280][T17209] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  900.434166][T17209] syzkaller0: entered promiscuous mode
[  900.440504][T17209] syzkaller0: entered allmulticast mode
[  900.466709][T11115] usb 3-1: Using ep0 maxpacket: 32
[  900.482152][T11115] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  900.490780][T11115] usb 3-1: config 0 has no interface number 0
[  900.505781][T11115] usb 3-1: config 0 interface 184 has no altsetting 0
[  900.573299][T17209] tipc: Resetting bearer <eth:syzkaller0>
[  900.650259][T11115] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  900.693908][T11115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  900.704116][T17211] tipc: Resetting bearer <eth:syzkaller0>
[  900.726029][T11115] usb 3-1: Product: syz
[  900.758015][T11115] usb 3-1: Manufacturer: syz
[  900.764691][T11115] usb 3-1: SerialNumber: syz
[  900.784667][T17211] tipc: Disabling bearer <eth:syzkaller0>
[  900.794933][T11115] usb 3-1: config 0 descriptor??
[  900.815381][T11115] smsc75xx v1.0.0
[  900.824899][T11115] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  900.866745][T11115] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[  900.901890][   T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  900.981289][T17215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  900.991159][T17215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  901.071848][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  901.084805][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  901.095665][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  901.114030][   T10] usb 1-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[  901.123509][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.139651][   T10] usb 1-1: config 0 descriptor??
[  901.349310][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  901.357567][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2776'.
[  901.367073][T17213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2776'.
[  901.589292][   T10] itetech 0003:048D:8595.002F: item fetching failed at offset 3/7
[  901.598294][   T10] itetech 0003:048D:8595.002F: probe with driver itetech failed with error -22
[  901.714031][ T5939] usbhid 4-1:0.0: can't add hid device: -71
[  901.727651][ T5939] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  901.752475][ T5939] usb 4-1: USB disconnect, device number 8
[  901.774740][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2778'.
[  901.790897][T17213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  901.802340][T17213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  901.822804][   T10] usb 1-1: USB disconnect, device number 29
[  902.066514][T17228] loop3: detected capacity change from 0 to 1
[  902.085491][T17228] Dev loop3: unable to read RDB block 1
[  902.093285][T17228]  loop3: unable to read partition table
[  902.103153][T17228] loop3: partition table beyond EOD, truncated
[  902.110561][T17228] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  902.389228][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  902.479415][   T10] usb 3-1: USB disconnect, device number 8
[  902.536413][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  902.536430][   T30] audit: type=1326 audit(1756646795.664:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.0.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092098ebe9 code=0x7ffc0000
[  902.567688][   T30] audit: type=1326 audit(1756646795.694:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.0.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092098ebe9 code=0x7ffc0000
[  902.597773][   T30] audit: type=1326 audit(1756646795.694:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.0.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f092098ebe9 code=0x7ffc0000
[  902.625517][   T30] audit: type=1326 audit(1756646795.694:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.0.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092098ebe9 code=0x7ffc0000
[  903.202506][T17252] fuse: Unknown parameter ''�ՠ[�{��@#_��~����RkM�˲��(��1����i'
[  903.227638][   T30] audit: type=1326 audit(1756646795.694:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.0.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092098ebe9 code=0x7ffc0000
[  903.266749][   T30] audit: type=1326 audit(1756646795.694:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.0.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f092098ebe9 code=0x7ffc0000
[  903.303373][T17261] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2790'.
[  903.319819][   T30] audit: type=1326 audit(1756646795.694:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.0.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092098ebe9 code=0x7ffc0000
[  903.429284][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  903.482232][   T30] audit: type=1326 audit(1756646795.694:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.0.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092098ebe9 code=0x7ffc0000
[  903.515987][T17266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  903.527897][T17266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  903.531166][T17267] loop3: detected capacity change from 0 to 1
[  903.536010][   T30] audit: type=1326 audit(1756646795.694:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.0.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f092098ebe9 code=0x7ffc0000
[  903.569490][T17266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  903.578712][T17266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  903.597132][T17267] Dev loop3: unable to read RDB block 1
[  903.603132][   T30] audit: type=1326 audit(1756646796.494:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.0.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f092098ebe9 code=0x7ffc0000
[  903.645307][T17267]  loop3: unable to read partition table
[  903.651799][T17267] loop3: partition table beyond EOD, truncated
[  903.696417][T17267] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  903.727188][ T5235] Dev loop3: unable to read RDB block 1
[  903.733996][ T5235]  loop3: unable to read partition table
[  903.759547][ T5235] loop3: partition table beyond EOD, truncated
[  903.966320][T17276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  903.985231][T17276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  904.084578][T17285] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  904.469234][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  904.630685][T17295] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14)
[  904.637306][T17295] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  904.653155][T17295] vhci_hcd vhci_hcd.0: Device attached
[  904.662601][T17285] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(16)
[  904.669227][T17285] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  904.696768][T17285] vhci_hcd vhci_hcd.0: Device attached
[  904.713607][T17285] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(18)
[  904.720217][T17285] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  904.731114][T17285] vhci_hcd vhci_hcd.0: Device attached
[  904.743236][T17312] netlink: 'syz.5.2804': attribute type 25 has an invalid length.
[  904.776596][T17312] netlink: 'syz.5.2804': attribute type 7 has an invalid length.
[  904.827298][T17285] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(20)
[  904.833915][T17285] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  904.849572][ T5956] vhci_hcd: vhci_device speed not set
[  904.866496][T17285] vhci_hcd vhci_hcd.0: Device attached
[  904.874811][ T5926] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  904.891555][T17302] vhci_hcd: connection closed
[  904.891672][T17313] vhci_hcd: connection closed
[  904.896479][T13077] vhci_hcd: stop threads
[  904.909295][ T5956] usb 37-1: new full-speed USB device number 4 using vhci_hcd
[  904.917118][T17307] vhci_hcd: connection closed
[  904.917420][T13077] vhci_hcd: release socket
[  904.936481][T13077] vhci_hcd: disconnect device
[  904.954066][T13077] vhci_hcd: stop threads
[  904.963717][T17316] vhci_hcd: connection closed
[  904.964612][T13077] vhci_hcd: release socket
[  904.977014][T13077] vhci_hcd: disconnect device
[  904.981987][ T5939] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  904.996387][T13077] vhci_hcd: stop threads
[  905.001572][T13077] vhci_hcd: release socket
[  905.006373][T13077] vhci_hcd: disconnect device
[  905.014166][T13077] vhci_hcd: stop threads
[  905.018917][T13077] vhci_hcd: release socket
[  905.024117][T13077] vhci_hcd: disconnect device
[  905.029478][ T5926] usb 4-1: Using ep0 maxpacket: 32
[  905.052033][ T5926] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  905.061043][ T5926] usb 4-1: config 0 has no interface number 0
[  905.067135][ T5926] usb 4-1: config 0 interface 184 has no altsetting 0
[  905.116803][ T5926] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  905.129199][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.137381][ T5926] usb 4-1: Product: syz
[  905.141651][ T5939] usb 1-1: Using ep0 maxpacket: 16
[  905.146891][ T5926] usb 4-1: Manufacturer: syz
[  905.153854][ T5926] usb 4-1: SerialNumber: syz
[  905.153984][ T5939] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  905.170001][ T5939] usb 1-1: config 0 interface 0 has no altsetting 0
[  905.177859][ T5939] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  905.188272][ T5926] usb 4-1: config 0 descriptor??
[  905.201482][ T5926] smsc75xx v1.0.0
[  905.205160][ T5926] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  905.216560][ T5926] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22
[  905.229486][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  905.249415][ T5939] usb 1-1: config 0 descriptor??
[  905.289412][T17324] loop3: detected capacity change from 0 to 1
[  905.297249][T16177] Dev loop3: unable to read RDB block 1
[  905.304772][T16177]  loop3: unable to read partition table
[  905.313626][T16177] loop3: partition table beyond EOD, truncated
[  905.328102][T17324] Dev loop3: unable to read RDB block 1
[  905.343531][T17324]  loop3: unable to read partition table
[  905.349918][T17324] loop3: partition table beyond EOD, truncated
[  905.359578][T17324] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  905.509372][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  905.779728][ T5939] nzxt-smart2 0003:1E71:2009.0030: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  906.369494][T17310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  906.390881][T17310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  906.436894][T17339] netlink: 'syz.5.2810': attribute type 1 has an invalid length.
[  906.549259][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  906.712095][T11115] usb 1-1: USB disconnect, device number 30
[  906.789344][   T10] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  906.846664][T17339] 8021q: adding VLAN 0 to HW filter on device bond6
[  906.951839][T17344] bond6: (slave veth0_to_bond): making interface the new active one
[  907.014494][T17344] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  907.019165][   T10] usb 3-1: config 128 has an invalid interface number: 115 but max is 0
[  907.047293][   T10] usb 3-1: config 128 has an invalid descriptor of length 1, skipping remainder of the config
[  907.078647][   T10] usb 3-1: config 128 has no interface number 0
[  907.102154][   T10] usb 3-1: config 128 interface 115 altsetting 163 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  907.110390][   T59] bond6: (slave veth0_to_bond): link status definitely down, disabling slave
[  907.172133][   T59] bond6: now running without any active interface!
[  907.183826][   T10] usb 3-1: config 128 interface 115 altsetting 163 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  907.251253][   T10] usb 3-1: config 128 interface 115 altsetting 163 has 3 endpoint descriptors, different from the interface descriptor's value: 8
[  907.295635][   T10] usb 3-1: config 128 interface 115 has no altsetting 0
[  907.325793][   T10] usb 3-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=80.bd
[  907.345310][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.370465][T17354] loop6: detected capacity change from 0 to 7
[  907.372930][   T10] usb 3-1: Product: syz
[  907.399196][   T10] usb 3-1: Manufacturer: 㠁
[  907.408194][T17354] Dev loop6: unable to read RDB block 7
[  907.420318][   T10] usb 3-1: SerialNumber: syz
[  907.456897][T17354]  loop6: AHDI p2 p3
[  907.469290][T17354] loop6: partition table partially beyond EOD, truncated
[  907.499377][T17354] loop6: p2 size 46 extends beyond EOD, truncated
[  907.589425][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  907.863108][T16177] udevd[16177]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  907.917176][ T5926] usb 4-1: USB disconnect, device number 9
[  908.629262][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  908.980973][T17377] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2818'.
[  909.040507][   T10] ftdi_sio 3-1:128.115: FTDI USB Serial Device converter detected
[  909.182163][   T10] ftdi_sio ttyUSB0: unknown device type: 0x80bd
[  909.421571][   T10] usb 3-1: USB disconnect, device number 9
[  909.439913][   T10] ftdi_sio 3-1:128.115: device disconnected
[  909.669174][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  909.962678][T17391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  910.061262][T17391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  910.139291][ T5956] vhci_hcd: vhci_device speed not set
[  910.709166][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  910.866846][T17409] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  910.878864][T17409] syzkaller0: entered promiscuous mode
[  910.890785][T17409] syzkaller0: entered allmulticast mode
[  911.165352][T17409] tipc: Resetting bearer <eth:syzkaller0>
[  911.220129][T17414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2826'.
[  911.286271][   T31] INFO: task kworker/0:4:5911 blocked for more than 143 seconds.
[  911.309210][   T31]       Not tainted syzkaller #0
[  911.349244][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  911.649223][ T5926] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  911.679286][   T31] task:kworker/0:4     state:D stack:21240 pid:5911  tgid:5911  ppid:2      task_flags:0x4208060 flags:0x00004000
[  911.749285][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  911.959354][ T5926] usb 1-1: Using ep0 maxpacket: 32
[  911.999545][   T31] Workqueue: usb_hub_wq hub_event
[  912.241719][ T5926] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  912.291144][T17415] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  912.299236][   T31] Call Trace:
[  912.332069][T17415] CPU: 0 UID: 0 PID: 17415 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  912.332097][T17415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  912.332108][T17415] Call Trace:
[  912.332116][T17415]  <TASK>
[  912.332125][T17415]  dump_stack_lvl+0x189/0x250
[  912.332154][T17415]  ? __pfx_dump_stack_lvl+0x10/0x10
[  912.332174][T17415]  ? __pfx__printk+0x10/0x10
[  912.332196][T17415]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  912.332216][T17415]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  912.332238][T17415]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  912.332260][T17415]  warn_alloc+0x214/0x310
[  912.332289][T17415]  ? __pfx_warn_alloc+0x10/0x10
[  912.332320][T17415]  ? __get_vm_area_node+0x28f/0x300
[  912.332341][T17415]  ? kcov_ioctl+0x55/0x640
[  912.332365][T17415]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  912.332415][T17415]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  912.332443][T17415]  ? __pfx_kcov_ioctl+0x10/0x10
[  912.332464][T17415]  vmalloc_user_noprof+0xad/0xf0
[  912.332485][T17415]  ? kcov_ioctl+0x55/0x640
[  912.332507][T17415]  kcov_ioctl+0x55/0x640
[  912.332529][T17415]  ? bpf_lsm_file_ioctl+0x9/0x20
[  912.332558][T17415]  ? __pfx_kcov_ioctl+0x10/0x10
[  912.332576][T17415]  __se_sys_ioctl+0xf9/0x170
[  912.332597][T17415]  do_syscall_64+0xfa/0x3b0
[  912.332613][T17415]  ? lockdep_hardirqs_on+0x9c/0x150
[  912.332633][T17415]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  912.332649][T17415]  ? clear_bhb_loop+0x60/0xb0
[  912.332670][T17415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  912.332686][T17415] RIP: 0033:0x7f509858e7eb
[  912.332703][T17415] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  912.332718][T17415] RSP: 002b:00007ffc44dab570 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  912.332738][T17415] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f509858e7eb
[  912.332751][T17415] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d8
[  912.332763][T17415] RBP: 00007f50987c6038 R08: 0000000000000005 R09: 0000000000000000
[  912.332775][T17415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  912.332786][T17415] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  912.332812][T17415]  </TASK>
[  912.332831][T17415] Mem-Info:
[  912.369443][ T5926] usb 1-1: config 0 has no interface number 0
[  912.371003][ T5926] usb 1-1: config 0 interface 184 has no altsetting 0
[  912.789164][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  913.581821][ T5926] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  913.666246][   T31]  <TASK>
[  913.699612][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  913.707749][ T5926] usb 1-1: Product: syz
[  913.712204][   T31]  __schedule+0x1798/0x4cc0
[  913.714265][T17415] active_anon:8646 inactive_anon:0 isolated_anon:0
[  913.714265][T17415]  active_file:21406 inactive_file:40259 isolated_file:0
[  913.714265][T17415]  unevictable:768 dirty:197 writeback:0
[  913.714265][T17415]  slab_reclaimable:8887 slab_unreclaimable:168177
[  913.714265][T17415]  mapped:28270 shmem:1371 pagetables:1807
[  913.714265][T17415]  sec_pagetables:0 bounce:0
[  913.714265][T17415]  kernel_misc_reclaimable:0
[  913.714265][T17415]  free:1224225 free_pcp:13948 free_cma:0
[  913.716730][   T31]  ? worker_thread+0x8a0/0xda0
[  913.716770][   T31]  ? __lock_acquire+0xab9/0xd20
[  913.716794][   T31]  ? __pfx___schedule+0x10/0x10
[  913.716835][   T31]  ? schedule+0x91/0x360
[  913.716863][   T31]  schedule+0x165/0x360
[  913.716888][   T31]  schedule_timeout+0x9a/0x270
[  913.716910][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  913.716945][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  913.716968][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  913.716990][   T31]  ? wait_for_completion+0x267/0x5d0
[  913.717016][   T31]  wait_for_completion+0x2bf/0x5d0
[  913.717054][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  913.717091][   T31]  i2c_del_adapter+0x581/0x6e0
[  913.717115][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  913.717148][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[  913.717176][   T31]  ? dvb_usbv2_exit+0x85a/0x9e0
[  913.717205][   T31]  dvb_usbv2_probe+0x4ae/0x41a0
[  913.717279][   T31]  ? __pfx_dvb_usbv2_probe+0x10/0x10
[  913.717302][   T31]  ? __pm_runtime_set_status+0x785/0xa50
[  913.717333][   T31]  usb_probe_interface+0x668/0xc30
[  913.717368][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[  913.717390][   T31]  really_probe+0x26d/0x9e0
[  913.717426][   T31]  __driver_probe_device+0x18c/0x2f0
[  913.717451][   T31]  driver_probe_device+0x4f/0x430
[  913.717477][   T31]  __device_attach_driver+0x2ce/0x530
[  913.717503][   T31]  bus_for_each_drv+0x24e/0x2e0
[  913.717528][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  913.717551][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  913.717587][   T31]  __device_attach+0x2b8/0x400
[  913.717610][   T31]  ? __pfx___device_attach+0x10/0x10
[  913.717633][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  913.717660][   T31]  bus_probe_device+0x185/0x260
[  913.717689][   T31]  device_add+0x7b6/0xb50
[  913.717714][   T31]  usb_set_configuration+0x1a87/0x20e0
[  913.717767][   T31]  usb_generic_driver_probe+0x8d/0x150
[  913.717793][   T31]  usb_probe_device+0x1c1/0x390
[  913.717820][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[  913.717842][   T31]  really_probe+0x26d/0x9e0
[  913.717870][   T31]  __driver_probe_device+0x18c/0x2f0
[  913.717895][   T31]  driver_probe_device+0x4f/0x430
[  913.717920][   T31]  __device_attach_driver+0x2ce/0x530
[  913.717945][   T31]  bus_for_each_drv+0x24e/0x2e0
[  913.717970][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  913.717992][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  913.718026][   T31]  __device_attach+0x2b8/0x400
[  913.718050][   T31]  ? __pfx___device_attach+0x10/0x10
[  913.718077][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  913.718103][   T31]  bus_probe_device+0x185/0x260
[  913.718131][   T31]  device_add+0x7b6/0xb50
[  913.718156][   T31]  usb_new_device+0xa39/0x16f0
[  913.718190][   T31]  ? __pfx_usb_new_device+0x10/0x10
[  913.718213][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  913.718235][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  913.718263][   T31]  hub_event+0x2958/0x4a20
[  913.718283][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  913.718355][   T31]  ? __pfx_hub_event+0x10/0x10
[  913.718377][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  913.718401][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  913.718428][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  913.718446][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  913.718467][   T31]  process_scheduled_works+0xae1/0x17b0
[  913.718517][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  913.718554][   T31]  worker_thread+0x8a0/0xda0
[  913.718601][   T31]  kthread+0x70e/0x8a0
[  913.718627][   T31]  ? __pfx_worker_thread+0x10/0x10
[  913.718647][   T31]  ? __pfx_kthread+0x10/0x10
[  913.718670][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  913.718693][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  913.718715][   T31]  ? __pfx_kthread+0x10/0x10
[  913.718738][   T31]  ret_from_fork+0x3fc/0x770
[  913.718762][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  913.718788][   T31]  ? __switch_to_asm+0x39/0x70
[  913.718809][   T31]  ? __switch_to_asm+0x33/0x70
[  913.718830][   T31]  ? __pfx_kthread+0x10/0x10
[  913.718852][   T31]  ret_from_fork_asm+0x1a/0x30
[  913.718891][   T31]  </TASK>
[  913.807074][   T31] 
[  913.807074][   T31] Showing all locks held in the system:
[  913.807096][   T31] 1 lock held by khungtaskd/31:
[  913.807112][   T31]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  913.807178][   T31] 1 lock held by khugepaged/38:
[  913.807192][   T31] 4 locks held by kworker/u8:4/59:
[  913.807232][   T31] 2 locks held by getty/5625:
[  913.807243][   T31]  #0: ffff88814d8240a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  913.807299][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  913.807353][   T31] 2 locks held by syz-executor/5872:
[  913.807366][   T31] 2 locks held by syz-executor/5873:
[  913.807379][   T31] 2 locks held by syz-executor/5892:
[  913.807393][   T31] 5 locks held by kworker/0:4/5911:
[  913.807405][   T31]  #0: ffff888144294948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  913.807457][   T31]  #1: ffffc900042dfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  913.807525][   T31]  #2: ffff888145396198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  913.807585][   T31]  #3: ffff88802ea0f198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  913.807636][   T31]  #4: ffff888079619160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  913.807687][   T31] 3 locks held by kworker/1:3/5926:
[  913.807701][   T31] 2 locks held by syz-executor/7418:
[  913.807716][   T31] 4 locks held by udevd/11054:
[  913.807728][   T31]  #0: ffff88802fb9fe80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[  913.807780][   T31]  #1: ffff888058487088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0
[  913.807841][   T31]  #2: ffff888024401c38 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0
[  913.807897][   T31]  #3: ffff88802ea0f198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  913.807951][   T31] 2 locks held by syz.1.2243/15084:
[  913.807964][   T31] 1 lock held by syz.3.2824/17395:
[  913.807977][   T31] 1 lock held by syz.0.2826/17414:
[  913.807988][   T31]  #0: ffffffff8f538c08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  913.808045][   T31] 2 locks held by syz.5.2827/17406:
[  913.808057][   T31]  #0: ffff88807a366208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  913.808117][   T31]  #1: ffff888054092258 (sk_lock-AF_CAN){+.+.}-{0:0}, at: j1939_sk_release+0xb3/0x790
[  913.808168][   T31] 2 locks held by syz.5.2827/17413:
[  913.808180][   T31]  #0: ffffffff8f538c08 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70
[  913.808235][   T31]  #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  913.808289][   T31] 6 locks held by syz-executor/17415:
[  913.808299][   T31] 
[  913.808305][   T31] =============================================
[  913.808305][   T31] 
[  913.808322][   T31] NMI backtrace for cpu 1
[  913.808336][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  913.808355][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  913.808366][   T31] Call Trace:
[  913.808373][   T31]  <TASK>
[  913.808395][   T31]  dump_stack_lvl+0x189/0x250
[  913.808419][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  913.808438][   T31]  ? __pfx__printk+0x10/0x10
[  913.808472][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  913.808514][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  913.808549][   T31]  ? __pfx__printk+0x10/0x10
[  913.808584][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  913.808611][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  913.808635][   T31]  watchdog+0xf93/0xfe0
[  913.808662][   T31]  ? watchdog+0x1de/0xfe0
[  913.808689][   T31]  kthread+0x70e/0x8a0
[  913.808711][   T31]  ? __pfx_watchdog+0x10/0x10
[  913.808731][   T31]  ? __pfx_kthread+0x10/0x10
[  913.808751][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  913.808772][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  913.808792][   T31]  ? __pfx_kthread+0x10/0x10
[  913.808813][   T31]  ret_from_fork+0x3fc/0x770
[  913.808834][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  913.808857][   T31]  ? __switch_to_asm+0x39/0x70
[  913.808876][   T31]  ? __switch_to_asm+0x33/0x70
[  913.808894][   T31]  ? __pfx_kthread+0x10/0x10
[  913.808914][   T31]  ret_from_fork_asm+0x1a/0x30
[  913.808948][   T31]  </TASK>
[  913.808955][   T31] Sending NMI from CPU 1 to CPUs 0:
[  913.808986][    C0] NMI backtrace for cpu 0
[  913.808999][    C0] CPU: 0 UID: 0 PID: 17415 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  913.809016][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  913.809025][    C0] RIP: 0010:trace_kfree_skb+0x1/0x200
[  913.809044][    C0] Code: 48 89 df 5b e9 60 1a 21 00 e8 3b 52 61 f8 5b e9 c5 51 1e 02 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 41 55 41 54 53 48 89 cb 89 d5 49 89 f6 49 89 ff e8 06
[  913.809057][    C0] RSP: 0018:ffffc90000007450 EFLAGS: 00000246
[  913.809073][    C0] RAX: ffffffff895ae2fe RBX: ffff888077c0c640 RCX: ffff8880589fc000
[  913.809084][    C0] RDX: 000000000000006a RSI: ffffffff8a4bdfc5 RDI: ffff888077c0c640
[  913.809094][    C0] RBP: 00000000fffd006a R08: ffff888077c0c727 R09: 1ffff1100ef818e4
[  913.809103][    C0] R10: dffffc0000000000 R11: ffffed100ef818e5 R12: ffff888077c0c724
[  913.809113][    C0] R13: ffff888077c0c640 R14: 000000000000006a R15: ffff8880589fc000
[  913.809122][    C0] FS:  000055556936f500(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000
[  913.809135][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  913.809151][    C0] CR2: 00007f84cf9f6d58 CR3: 000000006dc60000 CR4: 00000000003526f0
[  913.809164][    C0] DR0: 000000000000000e DR1: 000000000000000c DR2: 000000000000000e
[  913.809172][    C0] DR3: 00000000000000b4 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  913.809182][    C0] Call Trace:
[  913.809188][    C0]  <IRQ>
[  913.809195][    C0]  sk_skb_reason_drop+0xe1/0x170
[  913.809212][    C0]  packet_rcv+0x175/0x1590
[  913.809231][    C0]  ? __pfx_packet_rcv+0x10/0x10
[  913.809244][    C0]  dev_queue_xmit_nit+0xc35/0xcc0
[  913.809264][    C0]  ? dev_queue_xmit_nit+0x2d/0xcc0
[  913.809282][    C0]  dev_hard_start_xmit+0x1be/0x830
[  913.809314][    C0]  __dev_queue_xmit+0x1b8d/0x3b50
[  913.809335][    C0]  ? __dev_queue_xmit+0x27b/0x3b50
[  913.809351][    C0]  ? vprintk_emit+0x5b7/0x7a0
[  913.809366][    C0]  ? _printk+0xcf/0x120
[  913.809382][    C0]  ? __show_mem+0x8b7/0x2190
[  913.809401][    C0]  ? __vmalloc_node_range_noprof+0x67e/0x12f0
[  913.809420][    C0]  ? vmalloc_user_noprof+0xad/0xf0
[  913.809437][    C0]  ? __se_sys_ioctl+0xf9/0x170
[  913.809453][    C0]  ? do_syscall_64+0xfa/0x3b0
[  913.809466][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  913.809484][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  913.809507][    C0]  ? __copy_skb_header+0xa7/0x550
[  913.809523][    C0]  ? __asan_memcpy+0x40/0x70
[  913.809546][    C0]  ? skb_clone+0x246/0x3a0
[  913.809561][    C0]  ? can_send+0x655/0xd00
[  913.809576][    C0]  can_send+0x905/0xd00
[  913.809593][    C0]  ? __pfx_can_send+0x10/0x10
[  913.809606][    C0]  ? __asan_memset+0x22/0x50
[  913.809621][    C0]  ? j1939_send_one+0x1df/0x3d0
[  913.809637][    C0]  j1939_tp_txtimer+0x13f3/0x2650
[  913.809664][    C0]  ? __pfx_j1939_tp_txtimer+0x10/0x10
[  913.809681][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  913.809700][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  913.809718][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  913.809736][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  913.809756][    C0]  ? __pfx_j1939_tp_txtimer+0x10/0x10
[  913.809772][    C0]  ? __pfx_j1939_tp_txtimer+0x10/0x10
[  913.809788][    C0]  __hrtimer_run_queues+0x529/0xc60
[  913.809811][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  913.809825][    C0]  ? read_tsc+0x9/0x20
[  913.809844][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  913.809862][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  913.809880][    C0]  handle_softirqs+0x283/0x870
[  913.809896][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  913.809913][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  913.809930][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  913.809949][    C0]  __irq_exit_rcu+0xca/0x1f0
[  913.809967][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  913.809986][    C0]  irq_exit_rcu+0x9/0x30
[  913.809999][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  913.810017][    C0]  </IRQ>
[  913.810022][    C0]  <TASK>
[  913.810029][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  913.810045][    C0] RIP: 0010:console_flush_all+0x7f7/0xc40
[  913.810062][    C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 65 49 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 56 49 1f 00 eb 06 e8 4f 49 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 5a b7 82 00 48 8b 1b 48 8b 44 24
[  913.810075][    C0] RSP: 0018:ffffc90003c3f480 EFLAGS: 00000293
[  913.810088][    C0] RAX: 1ffffffff1d36847 RBX: ffffffff8e9b4238 RCX: ffff88801ff50000
[  913.810100][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  913.810110][    C0] RBP: ffffc90003c3f5d0 R08: ffffffff8fa38f37 R09: 1ffffffff1f471e6
[  913.810121][    C0] R10: dffffc0000000000 R11: fffffbfff1f471e7 R12: dffffc0000000000
[  913.810132][    C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b41e0
[  913.810153][    C0]  ? console_flush_all+0x13a/0xc40
[  913.810172][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  913.810193][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  913.810213][    C0]  console_unlock+0xc4/0x270
[  913.810235][    C0]  ? __pfx_console_unlock+0x10/0x10
[  913.810250][    C0]  ? vprintk_emit+0x3f0/0x7a0
[  913.810265][    C0]  ? vprintk_emit+0x587/0x7a0
[  913.810279][    C0]  ? vprintk_emit+0x444/0x7a0
[  913.810299][    C0]  ? vprintk_emit+0x444/0x7a0
[  913.810315][    C0]  vprintk_emit+0x5b7/0x7a0
[  913.810329][    C0]  ? vprintk_emit+0x444/0x7a0
[  913.810344][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  913.810359][    C0]  ? preempt_count_add+0x91/0x1a0
[  913.810380][    C0]  ? vprintk_emit+0x63e/0x7a0
[  913.810396][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  913.810415][    C0]  _printk+0xcf/0x120
[  913.810435][    C0]  ? __pfx__printk+0x10/0x10
[  913.810452][    C0]  ? _printk+0xcf/0x120
[  913.810474][    C0]  __show_mem+0x8b7/0x2190
[  913.810504][    C0]  ? dump_stack_lvl+0x1a4/0x250
[  913.810522][    C0]  ? __pfx___show_mem+0x10/0x10
[  913.810539][    C0]  ? dump_stack_lvl+0x1e7/0x250
[  913.810553][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  913.810582][    C0]  ? __pfx__printk+0x10/0x10
[  913.810600][    C0]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  913.810617][    C0]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  913.810634][    C0]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  913.810652][    C0]  warn_alloc+0x2dd/0x310
[  913.810674][    C0]  ? __pfx_warn_alloc+0x10/0x10
[  913.810697][    C0]  ? __get_vm_area_node+0x28f/0x300
[  913.810715][    C0]  ? kcov_ioctl+0x55/0x640
[  913.810734][    C0]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  913.810766][    C0]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  913.810788][    C0]  ? __pfx_kcov_ioctl+0x10/0x10
[  913.810805][    C0]  vmalloc_user_noprof+0xad/0xf0
[  913.810823][    C0]  ? kcov_ioctl+0x55/0x640
[  913.810841][    C0]  kcov_ioctl+0x55/0x640
[  913.810858][    C0]  ? bpf_lsm_file_ioctl+0x9/0x20
[  913.810875][    C0]  ? __pfx_kcov_ioctl+0x10/0x10
[  913.810892][    C0]  __se_sys_ioctl+0xf9/0x170
[  913.810910][    C0]  do_syscall_64+0xfa/0x3b0
[  913.810923][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  913.810941][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  913.810956][    C0]  ? clear_bhb_loop+0x60/0xb0
[  913.810972][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  913.810986][    C0] RIP: 0033:0x7f509858e7eb
[  913.811001][    C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  913.811013][    C0] RSP: 002b:00007ffc44dab570 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  913.811028][    C0] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f509858e7eb
[  913.811039][    C0] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d8
[  913.811049][    C0] RBP: 00007f50987c6038 R08: 0000000000000005 R09: 0000000000000000
[  913.811058][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  913.811067][    C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  913.811084][    C0]  </TASK>
[  913.825516][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  913.825537][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  913.825566][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  913.825577][   T31] Call Trace:
[  913.825586][   T31]  <TASK>
[  913.825595][   T31]  dump_stack_lvl+0x99/0x250
[  913.825621][   T31]  ? __asan_memcpy+0x40/0x70
[  913.825642][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  913.825662][   T31]  ? __pfx__printk+0x10/0x10
[  913.825696][   T31]  vpanic+0x281/0x750
[  913.825720][   T31]  ? __pfx_vpanic+0x10/0x10
[  913.825739][   T31]  ? preempt_schedule+0xae/0xc0
[  913.825764][   T31]  ? preempt_schedule_common+0x83/0xd0
[  913.825793][   T31]  panic+0xb9/0xc0
[  913.825812][   T31]  ? __pfx_panic+0x10/0x10
[  913.825834][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  913.825864][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  913.825887][   T31]  watchdog+0xfd2/0xfe0
[  913.825915][   T31]  ? watchdog+0x1de/0xfe0
[  913.825941][   T31]  kthread+0x70e/0x8a0
[  913.825964][   T31]  ? __pfx_watchdog+0x10/0x10
[  913.825985][   T31]  ? __pfx_kthread+0x10/0x10
[  913.826007][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  913.826029][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  913.826051][   T31]  ? __pfx_kthread+0x10/0x10
[  913.826078][   T31]  ret_from_fork+0x3fc/0x770
[  913.826101][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  913.826125][   T31]  ? __switch_to_asm+0x39/0x70
[  913.826145][   T31]  ? __switch_to_asm+0x33/0x70
[  913.826165][   T31]  ? __pfx_kthread+0x10/0x10
[  913.826186][   T31]  ret_from_fork_asm+0x1a/0x30
[  913.826221][   T31]  </TASK>
[  913.826562][   T31] Kernel Offset: disabled