last executing test programs:

12.575940427s ago: executing program 3 (id=512):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0xed, 0x2a3605b9, 0x7f, 0x3c, 0xb763599953cb091d, {0x10000, 0x6fd8e84b}, 0x3, 0x9}})

12.51285286s ago: executing program 3 (id=513):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r0=>0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
socket(0x10, 0x80002, 0x0)
fsopen(&(0x7f0000000300)='rpc_pipefs\x00', 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r7, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r8, 0x0, 0x24004894)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
r10 = accept4(r9, 0x0, 0x0, 0x80800)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0xfff3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000001300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10011}, 0xc, &(0x7f00000012c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="2900eeff", @ANYRES16=0x0, @ANYBLOB="200300bd25160000940812e83bad0c00549aa351472e2fc819f529026e02d150128b662fce840ddb61600c0a89b6758f7adef870015c19909d7fdd0f52a1ecebd671658f0875f134b8e2483da000ef758966f8333c0502bd133284e11182383b099c8b0f2361935a45cb8dec78bc3acb6f9283790b6e25a5fb683ff4ab59a11e67ce7db34fa51b9633595c7006298be2a50ac5053f62873a42798b77d1de95e86decf4d49a050adf79659415adea33193e75f6f01b272cbc2f9935120547c78c3aa926c3063153270c025ffa5deb47ace87afec3f64e38d65761e42fe8422c5494026bb6c40f968671ecc1", @ANYRES32=r3, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000008)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f00000002c0)={@hyper})
socket$key(0xf, 0x3, 0x2)

11.649179146s ago: executing program 3 (id=517):
ioctl$BLKGETNRZONES(0xffffffffffffffff, 0x80041285, &(0x7f0000000140)=0x8d7a)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b37ed030109022400010000000009040000023c7f98000905ee000000000000090502"], 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000580)=0x6)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xabe)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0)
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)

10.289159692s ago: executing program 4 (id=520):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000000, 0xfa11, 0x2}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0)
socket(0x1d, 0x2, 0x6)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
pipe(&(0x7f0000000600))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000100000000000000000d0001007564703a737e7a3200000000"], 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000010017000000440006803c00040067636d286165732902000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989040005009f1506912113b197b562ef6a016f5e6667fd81c16a1a3a35c006196be98ae37bf255ff97957d48c1a1d0f889b6bfab0004a2d28844a50e1f64c8bc49fbcfb9360e3ac28cdb5b4dcefbc8cc8670305883a10855c0bc020f948deb22ff8c45708d7f4c"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)

7.973436185s ago: executing program 2 (id=526):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000740), 0x2802)
r2 = syz_open_dev$sndctrl(&(0x7f0000000140), 0xf, 0x2200)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0))
unshare(0x2c020400)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={0x0, r1}, 0x18)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x8084}, 0x0)
r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
unlinkat(r5, &(0x7f00000000c0)='./control\x00', 0x200)
r8 = io_uring_setup(0x6653, &(0x7f0000000080)={0x0, 0xfaa0, 0x100, 0x3, 0x10a, 0x0, r5})
sendmsg(r1, &(0x7f0000000540)={&(0x7f00000002c0)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)="96f3132c6a80963d8b0a741446fe3687ba782235341b4f960eb0c82310ae7d6dc0409b20ad7aab085c03550f37a06ff3dff35169eb9f39b476ef4dd8105a0b4146d2693c664510e085427f51f6f644539761033b37461b94dc0d", 0x5a}, {&(0x7f00000003c0)="fa72a745bcd209196c09ec2fbcc5430a215b85f8bcb70a1c0d9ef83eb80ddcf1d9e6c65493fabb389520df99d72a0f3a510c5960ab68b3fdd4b8023e6fdf708d3b52f9c233dee534ad41a2819b97dab88ff3ebb4ac5c5e8db31452db3a36fdf011a1f2a38156753163e6a36ba071680730fa6012895c267f40782884f303c804b4cd135937c606366566728c0771d571676eb9e037ddcd1511040387655d1e415a134b43875ca0e983acc428c0d490bafc79122b2c9ed3f7260e33bd7bb4e7b956cafa4b7040c962f713f99c4ef5865363c753af5c4126499bca1a212a5d7fbfb9c12e", 0xe3}, {&(0x7f00000004c0)="c1029e879b6dfaae5b695ba8e486be5554dca8249ee7ee97b168bff5f6155ab41bb48da461d0c6582a8f026e6f91f7d5", 0x30}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x110}, 0x20011000)
ioctl$SG_BLKSECTGET(r5, 0x1267, &(0x7f0000000700))
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x1)
close_range(r8, r8, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r9, <r10=>0xffffffffffffffff}, 0x4)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x50, r10, 0x1738a000)
r11 = getpgrp(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x0, r11, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a)

7.89343945s ago: executing program 0 (id=527):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b00, 0x0)
ppoll(&(0x7f0000000140)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x4, 0x4, "fdcb7b70"}, 0xc)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r2, 0x5608)

7.355981593s ago: executing program 3 (id=528):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
pwritev(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)="98672395b88085d8d1329c1fa586c5a7b28caf2a64cfaa40fe1ed33fcf2812fdffffffff", 0x24}, {0x0}], 0x2, 0x1003, 0x22000005)
r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x14001, 0x68)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, <r3=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000100)={0x18, r3}) (async)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x5, {0x5, 0x1, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
recvmmsg(r2, &(0x7f0000002b40)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000380)=""/146, 0x92}, {&(0x7f00000001c0)=""/58, 0x3a}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/229, 0xe5}, {&(0x7f00000015c0)=""/161, 0xa1}, {&(0x7f0000001680)=""/250, 0xfa}, {&(0x7f0000001780)=""/154, 0x9a}, {&(0x7f0000001840)=""/183, 0xb7}], 0xa, &(0x7f00000019c0)=""/253, 0xfd}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001ac0)=""/75, 0x4b}], 0x1, &(0x7f0000001b40)=""/4096, 0x1000}, 0x93d}], 0x2, 0x40002020, &(0x7f0000002bc0)) (rerun: 64)

6.830930644s ago: executing program 2 (id=530):
prctl$PR_SET_MM(0x4e, 0x3, &(0x7f00002d6000/0x4000)=nil)
syz_emit_ethernet(0xf0, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0xba, 0x6, 0x0, @private0, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "cf7509", 0x8001, 0x2c, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x1f}, [], "5085c67fb22d78e10e6d3fb0e9054f3f71572aa6eb434187876ad4e0c3d037bb40cda91d3c389779b82a394e3fbe40a2c891ee9103c490a7ea915d974afbf59a569be0cbfd3671e36bd41baaeb0a3e896264f4c408fca362abcf6a1cb7d0bc9780f5141d4f5be475f9dd1a524cd58e25e4e8114d32804176a8050c2cd8b6e16cea256b107cb59a9dd539"}}}}}}}, 0x0)

6.829526068s ago: executing program 4 (id=531):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeff9, 0x3}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f00000001000130728bd70000000000000000000000000000000000000000000fc0100000000000000000000000000014e23fffe00000000020000803c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000320000002001000007000000000000000000000200000000000000000000000000000000ff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000fcffffffffffffff0c000000000000000000000028bd700000000000020000000000000000000000e9fc677fdbf53cef6900"/177], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf7001000800000000000000000000000000000374d99f400000000000000000000000000013c0040af44ae88673c"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB=' \x00\t\x00', @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'sit0\x00', {0x3}, 0x8})
landlock_restrict_self(0xffffffffffffffff, 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r4 = socket(0x8000000010, 0x2, 0x0)
write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
r5 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0xff43)
sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r7, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x20010, r5, 0x3c9be000)

6.753178939s ago: executing program 0 (id=532):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @remote}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x9, 0x0, 0x1, 0x8, 0xa7, 0x4, 0x5, 0xf1, 0xb, 0x7, 0x0, 0x6}, 0xe)
poll(&(0x7f0000000080), 0x0, 0x400)
shutdown(r1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', <r3=>0x0, 0x2f, 0xd, 0x2, 0x7, 0x68, @private1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x40, 0x10, 0x0, 0xfffffffc}})
r4 = userfaultfd(0x80801)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x5, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e1f, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0xfffffffc}}]}, 0x70}, 0x1, 0x7}, 0x0)
cachestat(r4, &(0x7f0000000fc0)={0x7, 0x294b9e89}, &(0x7f0000001000), 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', r3, 0x4, 0x8, 0x3, 0x7fff, 0x23, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast1, 0x8, 0x10, 0x2f2e5291, 0x5}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
bind$tipc(r6, &(0x7f0000000300)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000340000000080800074000000031080000000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c00030000020c0002800600010029920000140000001000010000000000000000000084000a00000000006689612a0000000000"], 0xe4}}, 0x0)

6.732282504s ago: executing program 2 (id=533):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000090)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x401, 0x0, 0xf4ae, 0x9, 0x400000006, 0x12ce, 0x3}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r3 = socket$inet(0x2, 0x4000000805, 0x0)
listen(r3, 0x5)
sendmmsg(r3, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084"], 0x18}}], 0x2, 0x844)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000100), 0xf9ba, 0x28540)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TRIM(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f6, 0x200, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000140)={0x0, 0x401, 0x8a})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
request_key(&(0x7f0000001240)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000001280)='/dev/vsock\x00/(zu\xaa\xa9\x9c\x11\xcb!i\x80\xeds/\xaa#\xd8^\xf2B\xf6\x81\x02\xae\xed\xcc\xd0\x80\x8eCA\xdd`\xcco$G\xf6f\xa7\xe2\xc2e\xf0&\x81\x9f)\'\x87Ro|\x0e,\x85\xe9\xa5\x93\xd7\xbb\x0fe?G\xeb\xd6\x0e/,\xec\xb1\xaf\xaeIZAk\xb3\xfcm\x12\xcb\x97,\xd2\xda\x19~\xbaAEV\xde\x15\x02\x0fA\xe3p\xe9\x96\xc3\x1f\x8e\xa7\xadi\x00\xf7\x05\xb4.f\b\x9f\xe1\f\x7f\x16!\xda\xfd\xb4\xbf\x88\x9dl\xda\xe8\xb1=\xceS\x85\xedVq2\"\x89\xd3\x8f\xbb\x1dP\xf2\x8f\xfb\xdfz2\x16\"\xfa\x1aX\x13\xb9\x94\x99\xa1T#`\xff61b\xbew\x17\xb3\x95z\xaey\xe9?n\xc3\xf7\xde\xbf\xb8\\D\xf4\xc8\xc6e\xc9\xbb\x1a>P\xf2\x10\xbf\x01\xc4\xca\xe2\xe3\x8a\xca!\x1e2\x03N\xe0\xb9OD\xd6\xbf\x02_|i/\x8a\x90\x155\x8e\xd9\xf4\x1e\aS-\x14\v\x05\xee\x83l.D\x03h\xbc@\xe0\xae\xa1zK\xc8\xd0\xbb\x89\xf1my*\x12\xb5\xbbE\x14\xd3', 0x0)

5.83826104s ago: executing program 0 (id=534):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0xed, 0x2a3605b9, 0x7f, 0x3c, 0xb763599953cb091d, {0x10000, 0x6fd8e84b}, 0x3, 0x9}})

5.663600064s ago: executing program 0 (id=535):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x48) (async)
r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) (async)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r2, 0x4c03, r2)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "051000"}, @local=@item_012={0x1, 0x2, 0x9, "d3"}]}}, 0x0}, 0x0) (async)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x40, 0x18, 0x3, "0666bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

5.265204053s ago: executing program 4 (id=537):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000600a36850d0f3df9a7e80000000b1b85178541ccec25c13b66979dec83032c268513e35", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000500"/28], 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f000000a300)="f6c5cdd50b89338e6f0228b937225c21a87072407fe83d5fecd7bcca9b3fb6c714baa7d905bd76d4f38eba0ffafc067da9e5b2a863dbea1f11e32b455862ad205d1de267dbf9edb296fda48092e372fd3166c91d636b627f4ce223d2fff7db30abd245c174812a8ebfce720483d74f6658daaba3ea9e453d789d9d1d8b63c91f02b1282f122d5847241f305a5d791a7188c946ed5d5e5343c04968e62b064aeadeafd55ddb6a1b724a9adf29b15c4c55c9afd709d19cf29df117c69d1f855b647f2d6dc3ad9cc2e413cda65ca8d3fd777fdf88827428723d37b89a7330dddd234f39187db8e54905b8eb0dc851f51ff37b5deb69b64bbd27b72881267f94a88974a56b1d3178d49c209d6f4e974c00f25a87255c3804b1150f98d46437f5333b200651dfd1ae939125483cec1690ecb4d449ae4f2bdf88d50382440dbe1699017f21c0f1e0c85cd339a9f87046af063b54b923d4eaa04fc8dabb3bb3e3bc83f0657b5a3c4cdfce3c325abe45a39b794d13057e3a036ec20c4eb1c18a7501a8bf3899626fe01b2b9c18ab08eaa972ab9f8a786888162c7f77db751c1ab88db854ad8a99c7307a52571fd4d0a8ca5a6f4f5e46396bab29e4a5bb6f7c40404be7357b47028a1cd2b780abbba9e37d182866a9171ddea543a5684ff6445d4c3ba61b4300a1556e85518301862b398e43f61d461054469f693c42f995a000dc9b950b277bbc5a9bec872462a0938ef0e0ba4f4d2bff4d81804996a9f97893c02b2deff1abf1a6cb7987f446132f55a10aaf537d93422ed22fa659ceda5939cf18398f8632a257abbf68d4854e452ceb5acc02c7b65d67b582e159fb5039ecfe636dfd00218f2e5d1e2ebeca027472d63fdd2b61d7bbd9258a3fbb14ee2559845a638e07bbde84f87a42b59a09c1bc877b7e51a4ea42c64bcb3b3c8043f1604c569308bd6ddf438204df167580f5aefe2a8beabb77a8fd3392f99e3a43a7cfa0a68b1b21a307aeecd5b7a3742d74ff1790b13f1026ebec296210301d48d9354646382a18d247300bfd8aca878051a2d667ad2ee489edfeb3c1c912cc6a6c573fd92dd4cd1b6d2fb1bbdc86ddd8bf515c28f15ebafe858df78e8a783b293db3144c44397cbaeeadea44655c6350562166bda3accf7a2e65cf3eb7beace08760337e2dff8c9611fb131b345f44dba2aa2eee0bb4ec719c59a269e71ffc0775c5c193e341a833d38edf8a1f01f66b9fd039ff55c884257ec7330f333e579e66ac67097bfe31b2b78d88b81b640351da3bea710e38d8b50b0a63814f4638df1680d2217dfe7364dc228ea79f74e678b338105391e8c1e041cae3d2ccb9d1b034d96b811bf06515b3f4dd02cf2cf9f9884a6a1af39f219fde0b1caee2065536b8e900bf4fe9d87396cb0854ff28db253382a8f1e6c2a2805b5d5c8b756640a49a092f8fbc5ab87e511d790519e9e79c1336b2af288b1b07871858966197f65919009c435e6ca5bc89a15fae0e3534e50cbacb3cb2ee519a9894f08facb453a7ada35c0cd8e6ac71cf9ceb21c1b944d81a16a3299c730fe1ddb164505e2df5e4dc7f46c3fa3230a9cc3845298d4abf909565a67be3316ca881540f2920c8fb6ffe5ffc66ef477476cc4941ba03795287f408b6175df89274e189bc2e12e93f5d8aaa532400946a7a0cb6cacb55d4947d0c02da9e2345b4d0cc92a570019ac51f64b29b7e509109500f9fe8129196bc46230a1848ad7dc721efd97f1cbee41a1e520da4cda9fa5a0024d7865e637d0f17f240647f11f4d41a39e29643917f6ccd8680d83cfaa33081c3dd613ba2ebe736539834ba7977d2617b85b073a4532c8e6cb3dc3ecb492f23b573ee103ad6c56a5930904e836e9390a8b20470de2c7e0d1b52000366cbc198caa4917b593334a449840a093bbd709a6f835eb4338e23b12f59efd0fe6a8f7d108e6c40d63b06b43639a73822b431b636c3c6cfa2c973fd43aab1ebb560eb5b556b98758583195190651d9f12bec2a2db9c87f879af59d9e72786e416ea8fa36ff4a4f08d56c5e208b9995fd9ed0607d3af20b1eb51dc0943cd96bee0cc78875fac1dc471f80664ef9eb1f146d5b6871842ae1c51e83523f28a149346df307eae77929a81c235f5593d7eb30581b0650a8759d5a59b5c2697c461e17d8458b13dc88935b878f71f0597d46924bc84714ca7af2df5749b1b0fbe1950aade8d85555887809f9d4cb5d8d6cdd0ddede90e2fd122d1168f0c7e535aefe0385ce12a5cb1060498ba51b28fc344e6c6094b1cf6263007e299d7ceae7814c664f43bc2b8e989779e1a2a36e7e209175c197117966925ced8cd941fb4d37d05a5c771ba579671d505d6af7fb70fe764d906fa84f046fb4429d82bc7f4ed72f686bf2f923ec7bd48b1be8773ef8a51235825cb6c54d444021e823ba2614e7d93920a96d23f19d9adfcabe1716fea4979ef4d74fadc6fd53e8d6c6704c4eb04a039ba4c83d15afdb195a36f292ba9a2728cd85311076aa6a484c01fbf9fad617f4870fcbd1cd453aeaa391968287263852732552443e3388bd07d975cd2a11624fa2d0d931034b940c4b2babe262706c6cd72007c5fd5744564babc9fc37da476cb38ed0de6b530864e26a6febeb8d901d40c771a0cf2f498830487d83368ff3f8af68a0ffa5762d3f2c9cf2a66e2338d3e3655b647685c2dcacba997eac420d5618c3d268b85795fa49e37ee504521017439581a6c5c064f0184e4cad2b8134e2f9b9ec42981c155775d7d744bfff7adb3f7599f159c7cf1d7d56fb7cddf5b4f8ee8a3dcfbc1151b3d253771db09879f48c3c0cc9506e97c776fa8251c21d5fed9dba8ca6674e45ac2a6bef86ae18b175ffb5d281f58527661ef7d5651b28db85c1b7cc305ab5b34fb49a32778390d3b6d4e78d06d3d863eff86435d36be3043529fb9b4d061a7a983d6e287fa83925dfab1b526d6bf510a29f9d6ad493bbb4da5fdf0aef4f16ff50799b016dc4230aaf87b9ef8953f8ad522ab4c3ec3209a57852cbdb5e39628ad107b248d6f07d123fb0e68d7b7aa8558478de5dee88032de6ccbbcab0ecfe8fccb1681816db894fdc24a9b6cf8ad5690efb01c8b4840255a5d5563b4cb73609f0a5337738e179fd9577bb795eb5a89a4ee4e2b2bed5fc65ba1efb911889e131a0b010c5699d7f6b869ffff3945208feee8d245eb45590f2c67b97d186307dbee5327ef60340386ae04d45f981061b80d33ed6db2e5dcd711d68f8d9befdca10334e9636de1a2d6e6de2888d0984aae79b636eb0576f6cc9f450320b7e946eb82e9e1f8b3477f382090c79a9524a69f3416eadba673ff24cb1846358680d370e6ae98230256ebad4826f90ef8189b95f3b6275950c33ec2781bf438bbcce8ee350f3c1475b026a6c189db5101981b21f82ba8d8f62e852ccc5109a2780c70eb4a0b014c0c06ef46ff506c481b8082154db687b644ff122e5f35af5882212834a5b696afda432241f966d5706fa7c00be4a4912b6adb8e5629d0e18bb2ed4e2d7b6dbe79920d21ed0491f7a5017ae5ccdee5b498f61bb9ad5845a6268abebf80338c20c09530675a8366bfd4ea746957dd7337f1c1184751b649a399891ad2b6306bb062b9b2dc8a8b09302ea3386ccd78d9a3a0314c3df264ce81048391ae66ec9eeda8c70efe95146205d0b6bed2c362f2920615d41c7d12fc3991000a080061dad4e34587ff1684c6756f55dfd249d2d62bef74b5e4a40a63a2bc14a473cf913d5a4fd289d1792fc693c4a5f85326eebc52994a34e16af861438f22633fc5a4ce0d30d37ac0e2277e072f78375d7b1443e1af9647c23decfc411a3d0def781ce6679d92872fbc27dbd4a7edc2acfe565103d472fbde7ac626248a5305cf6e1c5fc81e9b71adb2523839b9425c72a67409539d611240ff5ad04ea2b3d063e197f5663606aeb0b76fa2e1121e3815506fe4a9ac09d555c1b8d8c9749f5dd5096130aaab80d9b721a831013885e3a376a57f97db4f1878372c7ac241b7424b86d97ae5fa3a0943f55c64cdbb4aa3209c4fbee3d9ed201e2bfccee01d33bd99c01689e1f23b185acb82e75cd2a161c316334f4887c8225f11ec1354105e3180d67ebb3a98d1178cca8332eb73555f53ed86c7285fc6c85570be32e74baeece3d610cfb505e1ca6c02fabffbd9b4c80274db8faab4a4d29f8bfa6db38daf4ca8442aad66e40581f40a63e50b3a33d9a3e32f4440b761d149a8d71c138f74d5b0e10d9266788499a19f03a17726226e27c899c538bf4c219d7a035bdab2c5b347bcb176555fa451594050c6196a2236e5b0981eabab3519dd10ed1ffb6334476cbb06059384f02c164f278d49391c6069b9adf25c14870e2fe1f28abdb325d3101fe464f829e971067dc9231fc3bc9d0e2a6c8e13db15f4b69b3b028a587a092453296f7f790a547ba191bca2ca929d1477344d7ba30b826a10152580e5ed7418f481e4b10139a4acea1a1c42f748cafff8b0215c6be50e0af09905366f0403c53f8c746ff06ec45d69d3c4039d0980af45c8a2d6cadafe477ffe3451fce3bdc9644faf73ef3ca3e823526fdc086d82967b1a569cdb99ea26fe6d06a21fdfa7a8342089931240324b786f6be1b987c8fc9e9e602cb0ad66039a0147319a896134cc97a7f50b3a0c04c4f80b8a53ea222f5c009325eca6668e453d92e1577712af0297ffbc3e3365d504ebc1c7e825e045c30c0ad9067fcea6dd754c179c3febce85187611f78634c081192b430010987a852837015a3c2a70604e18c5d394207fa61fd3c51a8ac5ab263d1c15a9918f599338d21b894e6016337a5a31422867a775a7def8fb7cc3a41342175e05c891ebbd7318bf011ab2dcd865dc5efa3a9451d973951c96752803665567c08013259f14fd704d5d108cef5a38b4e2375aa241c5cfa99511e334cac9665a06f25da7d3fdb497363b119bb4d536a6803b3aed59143655ef6df225b5a9305979f77e32942ffb48e859da96a309ab57b68fa56a9e0d6e53650e7b1968fe5afc21e5638cd50f5c415c9addd998fe32ac983a9f9266590967782b6d9b70f22a48cc14301af5de46d7b71d0f7c0ead21ff503cbed5c2535672835ea0216eaa7fed72390b66b4684b51365d1923aec4dcf4dd08b357552cfb7e96a5ab956ac1276882e80a79d018c5ca7ffb3367d59846387f4af1fd4b6098cb560bb565af3ec0c3934da29120546804f3800aaba4969e00cb83d9d9b0cf216c42a8722030a6fc85a01b9748bebe688671318a2cc33f69e0bf3a8a3779c8847de958b28b2e8017da7f74d56f1a75134a4da0944e45dfefe63ff367759b55e1659870e0be86cef2789ec9063ae6093693c1d47cfc164eae67c97efa447120a36b39561d380077ceaff4bf0f55b066af441e400cc3996633abf905a32cf025becf31983dc6fceb6e0fb506bd350d81afa6421115939adef8cd68abbbd94f1567d9e9f7505af57e1802b8d704bb7460b3822330c4a4bb6ff2b187fb9a3f324b0f415c706a1de8a7cf6747c72be3b356c0206a3c0c39daa85309bff9faba7b68178108b261086cc15a0e21a52a37c1576a72d2d5da5c43248ad760d239711739cb79fc79b4ca2dbec2e100db1c535ed90623c67ed2e3817ebec259343b17efdd912ea0fbf73653015b7f8a51cae3cab19ba00638b8c8bfa8db481ca7dc7ce5c2540c46c963386188f74dec088552330e6ea067b222bd97ecab5073d95d5814599f522a36fc80636bb66ee8dca399586f90f1c849e30d92382bb0e64f62511a7f1044560175d68dffc03a9e56ac7629a4bcf50a4334f29b3391ef4bf0f3174a44d69e143437cb3dcb3871c4e7de50084b5e5033c48df364a1d5cf925d42a3c8e2b419909e4a2ca2156c1397eb87704e8f8d6cdb3a4a031c1b5468a1e75a923cbdbd384cd8d87c2c05f11f1df014ef98c13fcf9f182f6fb68dc0aa4adf7bec8a17caedd172f64806c311fc106b39edd9628a01d7159d638e09b39feab432718059589dc971143da4a8e640aa63ae0c2fb4a71129d362cdcf993adbc97b4f1543637cf1acbc9e67067f6c6f95be39fdd14dc6478c507507ceff88c2d1c5e13522547ab149dad2526393714c6c0a221c167ddf1084b563c0bfcc4c75a972131c62ddec7a497bd5118eaa12ab25bbbf7cc62eca5de5ea50bab67ce6ff2e05cc47cc0b0a5465eb01bbc08dac30b8522bd92180d8987390314e19eb3201f0be2b4f71abb697a751fd8d6a3251ca8ea1b2f20a7827d2599d62e392d6c065183a1778950d5ebe04180047ee8a2a096e5f1d6813ec63ff4a626c725b24d259cbd9ca6305009b29c6ef7225eecf9078824f9aef4d3e9aee1e9616b2b7f87499f8abab6c38e9a3e7714132850b5e71fa671697e6c8407ac3dad5abeee5f7b2a63aa51d29744736b0c38adccf8e29a85b81f3b3106daed64fc78618e18c9056cc41ce2f50379cc6c2c1411ba2c690e1899dee193f0f2877412f1cbd54d12255ca81a72211f9a8ab7f0b7bebb6c11b4bd6c77455decdfd7df2b2014395ba69f22e520138a43e1b3a11264822b143adcad307b35800563bab720687a898a76cde1f0a15aa3f32c0d302ce6f1094bacf5a1add935884be029c7fe18a5e90c696e3371af0f3cd721abd7dd4ce74efe353105ebcc4b1411d52026901380a9c7a807a76fa617667adea8b7734822da93d93969641a92ad2af6350ceee54e3d7c7c39e22d6c5f363d201572b8d68c2b9c7230b0b85801cfafbc5557f21bc444ea05fc612e2c2a8d4a38578c69bb252d8f4d617d0974f95b6ebb416d5c8f3fa925d4ed4f23bfce03e28389ca8c1bece1fa49e8d66387bbb09b3c29d9ed75ea5a9ac7930cb3ed05f999867c640b3435962fdb763002e2fb451c5a1b9d4536e49ba50fcf61451168a994249ef29af51694a1426d987ed8cfe09f10462c7629c4ff1b1cc709b99e9e87a54d1ecf54cd9da0c2c19b84b2a2c32c0bd12d158b73230cf610645048cf1afbb62aa7ce6fab79bec3ad84108f3d96cb9fb3d78a26724892a6bca533e64880c7d4c28a6685502f4cb2a27b132c8253b97e88583fe0766d04795709486556df99b7e65fbf71febe24e0a188e2dc489b8fddbf9d4b1c9ef4b558f888824469df9b2085a845998220332d9cb693472ff2abcc10784c2280825adfcc630e3a961b39ab786deddc53b18e862edc75742d6eb2d7cc227ba3ed770851718388612e4e7f4f257a90fdf09e3b0081d7498e2d5b628d9132aa0165f323f59af5e9ea54c582999fb527d5f2f3dd7e4f85877080526f8481899b6afc732f5da6af31b561ddc36a6b8c723087d3f168292550d89b228f7a3cc131c110a2dab2f81e339f24d3d2b696892dcd4a3e8f2eaaddc0d78e2d07cb9df9d2fe73e4c55562c0794092c7dabd4364f9fea89d6cdd8369d5bf1bc8863b8f89aacf0fd9b9b380947bb4872656e58bc87526e18fa8b17ef8a7219adf1b79d1be5dd827e7ba8e4ed50a81eb7562b179876a8803dde2ea99fe744e8f7df17040ac38592a3be7eb353416496e867d8a74c7eb94556b16241935d718dd43462fe0855cc31a812e0ac01109d1d3539bd2fd4eeb422009138a92324bd072edee2ba47d6cacc24588410ce30565a8aaa5aad52d9c55368372715717ff5ed3a0243ddafd11a7059c29a26b9ea9374e8434f31e4c15a747ee6d69368d12b96122690f843569e82ad27eb8fb25e94dde94cc15e690dc65f6a6c2a6393821168a79e03cd223ce54a1d5e38eee1c12e23027b12c6a8094c805088617c2fb4f52008366faf37fdb13b3a7a879949d13644da36dd35a4ede785ca0ac7b4f15472e77a33228129143f849ee75c915df31764c96954621a01e0941d6bb58125f544818b7152698f3addcd0a684af8fcdd4bcdf5752b3faa731988866ee8a664850989d280505d2a4b861f159d47d2d61ab3de866fb2c8f90075b713f61cf83a2ed426d53214b70385b7a46e5620c032486a5a00e0e73d3ea16eeccf5731507903a25685466b61311502ce781634ee46542957a0d5ba6016bf11589fff32e503feefccefe4107d0619e7a15336a8655e2f09034b4069941126d48909232592aac6d9c231285dc1d038ff1fa09c1588f543304659ca334afbc42b5f5fb813b34663cc6f4b0a12fc3edc28765b062e7a50fd19ef575be96cd1d9aa48c1fef1b2763949982a47bf25a69c8b1306e8e36c91d2096e6a6cf934452233ff49e91ee173c1e288b9ff70ff364689b82e2467a3d741809657ce0856582d24da5663162422a6f1ed1fce7cef40d90ce57cb99e19a0b4365d483361d03d0cceadd682f333bcdb0a49e24d8c7d004aad2dac06f4839cffc0a77730623917e5f101c33411ab4e0a8491de9a8bbd5dedb8dfeb5a5880da57c74bb8e1fd8b02d3c22087be3f686aee26988b2d62a41d4593ff0dc100c31dad221489f612ef60c160bd6c1f5a00ea6efd3a5aa5ca14efbf78ae4e5d8c5db9c03758b81e636005ade8d03a11f5d8231cfc1bdacdb276992ca8ecbad337fa89dacc9e9be11d398d37207e15ddb45566e0af78833545352d3043b70e20695ddddaccccaa93ee5e2874bfc7f9510541a57fb3cb9c8d6e75460cca3c4cca39a642eff1967dda07a66fe67d87696a5fe22a718a52cd9ba83e348ed211c1dc2e21ebd797455f0648af12c10321240058857632112a75adfdca249f26cf8d6ba05ee83d00ff8d64d8fed069dae70b79105ccd95fc9df34426d765578f651a4cba8094f46e0a9b676c0c0ebb1803660a70f5c7ad2de1ff96676c3ecacdc2953fd235856228556db20395b8d54819b7b12f56e4dddf6a7fe4f7f3d69dff022c59efb2313ae801dcb02b117f50f18eb11dd5a291a7068c820fbe381bd0697566909a38fdab0a0c48442dc935ab8447ebecb93af879a6bb82ab5f245274d873b5be4312856fe4fab8edc9575c02ba4cdb34b31323b69cfef40755bf96279460640ed9fb84d5c60d95cfd76a39726c29f5607d80090e5e3da18fd74682975dd98d98e4afdf4460e1aeb7087a18ded69310b28fa45b356fc28d1f2bef4c9dd50909076de9587fa07b966ee143ec589f70b8ac4d1320cac5bafefe640e445922090c721ce79e4e2c546cfb9b7f058932e6c83170dd2785e28ed81757ade61aa094bd042411aafe0b75156067a5790c78a44589728f1190ac0ba2f93004e06602f51fab34cc56a485569be11e0fd8c89ec3363e053dbdb6cbc69b686e89ff3730dce9099daff958f3be6e7f9ac00bddf0f133a6f904262443963aabe84b0ec9ab9209ebb0d6e81b8d30b2959bbfe5b332459310be2d8183a93ea08301b816d5b009a967916dd45b0f541c57685a6c7ef8cf715ae7fd1780f0a0da48467196e25e26fd2d5a075ad5acfa1ebec9647da21672b642ee4a908fbce416f4ed36ab5b96e5b47a0f6c7f280119567b7d54640c65ce5a0f4912690c4a3d0805e4284fb695eb3af2528f031261439506a4d3f4c2e18b736c55475828a0faf0153acf0dd89bf3c2f6525cb4bfcb419421c7696ee93bc595158a9a43bb288022122a8c45a0db060fe5e85bcc128f396f7af7006eba4e0d6e2f0802625342799bc1b98366682db90ff1be99322bc0672e07757c44173b96e659ff645d263af255d6ecd88bd9a0863006db7f674e79b0493d41a12057e36243394294b4c7850d14a988715de4b55e9f83c2f0676a8486efcc948109076361267f092315dae79164da8f832ad6f35f600b92e4a8228d39e507117c1c1b2a4a12b667538000912ea67de21bd85616cb30f95573ba748a75d2e04b493865a8711a688e33221b26f621ab3a137cf86cc9dd340bcee72f19e00de06f1e9abbe08b4cb8725c9e624f02d36c4c276a529b6e23581c348bb90a4fb1f89053aee36caca5529bad9124825860c011140744f245cd02ffe219e436bfef045517e4e41094b25cf9082692cd8e37d3893c5a90c35b808a17a6508fa7ae743740be0d984ef5ea80e2101e14b9997f86b45b97e5acf89a0a6aa962689c4f53bc7b65e5037de60fa395ed1013591caa79412108224c020d77069939391e20ee32b86139fca7eb9ca5c07fa733311fef5d5594b83ae34c6bc32f037b09995511ff9b9b611bc727055a10b808ebb8c8e5ce532046c7ad3336c38d506e0e3043c4413dc8ce0a9caadbef27d6f663b22bf8d399621ee86e52d9abd5628e3270424d8a06a79174c7de23c431224fd8d0f42853510600f9e2deb8a7bfcd324a5c6ec19cd0c9ca81c552b111a2acc4479e20439e2e3caf443ed8d4de1575216c134d55171568ee64213fc4d32ca5cd7ad04b8705ecfd1b88d56294dca67efe3b1b37c7d5d170cef18997c4af074e97a98c11ec3cdc83a4ea564ebb47f02344d3ab410e25a4ad658be9bf627d49c106c1098dccf7ff62ff9f4dc997a279afdc5630ba32167a68ed7bb3bae2a8b61fca67b5b7dc5b3ef3ab679b602764da9aabf3d0caa56b278c2ab6fbee2cfdd7277402a1f82de1d97807829c0105277073772929f16d79584118f31b45ec4db29aad83693b2d9de08f417beaa2f78d55a36a824a94d1e3cfeb3d75c3d41ddd0e317e85d327e9b5a9da44dc12b6fc3acf6d222a44f59520fa3fcdc37903eca4b7a91fe14cf54b06855d204ebd71018fe767a158b5e389b5e8e136fc8960840ef1916d8e36f08260e5fc9808442e2034f2c761ae051d03fa618a5f6b8ba8cee00411d09aaa3f8fe30a5d29d9403a905403b5310355326387ea6ea72643b70fcc5bf767371878440d07be919c4ad8c4b8952ea61655bbeac50025f4cc2e859c20dfd440a0b1b14549bccaf7952a27f12266c3b7185d9f37ab405d0765011ae6dbc0717f58ec6bd4101589f5c6054faba863bd2af1e8b19cc2cee98c619e477a47497896c42c37697313917b37140a77a5afec97556f06e0ee1d87c3739bd9ff4c210ddd4eceb65701e64bf4d6cbd5d4b9786f4d45acd881fa6eb1c6fda5f8844f5a1635d05e7bb82270694efe063d44296d86b4bb8b28e573dd7cc0d379b5449af1064f10ab8e8f5f177713a63fd7ea8bb68305356c59b5b48334d568fc6d81713bf2c1438dbec4c2c793d5bcd94c459eaace9295ec5b51328fcea5c8f984d8bf90b2f9fb247ce722a1c001e6ff179524417d647b856d905976f623b2db0facf05d62a87662ddc0d6c31cadca2ec262439fdd0f5cd7788617b98bbb802ceed7f971fe6d432a49dc132fe5475db3bc61d6ff04442a9afa9078be7a15de8668cdf469697e337eb4a99b24cd89da2a36eaf4f725cfc77f5e4de3dc010c2ef1f6b22dc479544c0c4c611fe1c8ef5ed3c23ddae7cd01ae1874217f8d1001f0c5f8d2ace0ec72ef3ed9b95b72753462feaa1ff5c2d23f5ec1ccf41064895d6944f38bf7c41a091df7b8c5c5021ff7ab7571439a3d5c889aa57c715e4a55ecd77b5cb4f8bc3408d95d560f5e8ec711e81ef8a751df5d1d053822debf0295574ebfc5f1fc47caafdf8b3862d68fb01d6239fa13c026320aafdead31d003d8bd8b46842687b600", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x3, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x200, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x102, 0x8000, 0x0, 0x0, 0x0, 0x2000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000008200)="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", 0x2000, &(0x7f0000000780)={&(0x7f0000000080)={0x50, 0x0, 0x5, {0x7, 0x28, 0x6, 0x38a0e60, 0xfffc, 0x100, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1000}, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000e00)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x23072d, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x78, 0xfffffffffffffffe, 0x3, {0x869, 0x4, 0x0, {0x6, 0x5, 0x1ff, 0x5, 0xe6, 0x10001, 0x7, 0x404, 0x5, 0x8000, 0x8, r4, r5, 0x757a3c64, 0xba9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x300000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', <r8=>0x0})
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x1}, 0x1c)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0)
r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read(r10, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r9}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000002000000b703000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

5.165218206s ago: executing program 2 (id=538):
ioctl$BLKGETNRZONES(0xffffffffffffffff, 0x80041285, &(0x7f0000000140)=0x8d7a)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b37ed030109022400010000000009040000023c7f98000905ee000000000000090502"], 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000580)=0x6)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xabe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0)
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)

5.067363096s ago: executing program 1 (id=539):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r0, 0xda90)
accept4(r0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd289400000000"], 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x86)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)
socket(0x10, 0x80002, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e)
lseek(r2, 0xfffffffffffffff0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x7, 0x1, 0x1, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x71, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x33, 0xf3, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0xfb, 0x9}}]}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x843}}]})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002ef1c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

4.955345874s ago: executing program 4 (id=540):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000040)={{&(0x7f0000000880)=""/4096, 0x1000}, &(0x7f0000000000), 0x60}, 0x20)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x30}, 0x0)

4.113311352s ago: executing program 3 (id=541):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000000, 0xfa11, 0x2}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0)
socket(0x1d, 0x2, 0x6)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
pipe(&(0x7f0000000600))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000100000000000000000d0001007564703a737e7a3200000000"], 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000010017000000440006803c00040067636d286165732902000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989040005009f1506912113b197b562ef6a016f5e6667fd81c16a1a3a35c006196be98ae37bf255ff97957d48c1a1d0f889b6bfab0004a2d28844a50e1f64c8bc49fbcfb9360e3ac28cdb5b4dcefbc8cc8670305883a10855c0bc020f948deb22ff8c45708d7f4c"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)

4.057652302s ago: executing program 4 (id=542):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$pppoe(0x18, 0x1, 0x0) (async)
connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8)
sched_setattr(0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r3, 0x0, 0x0) (async)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x5)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c0000002cbd7000fddbdf2502000900080000001c00000000000000030006006c000000a743a88c965d808ffc6d93f802004e22e0000002000000000000000002000100000000000300060c020000e003000002004e20"], 0x60}, 0x1, 0x7}, 0x0) (async)
mmap$snddsp_status(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x4000053, 0xffffffffffffffff, 0x82000000) (async)
unshare(0x66000080) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000540)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) (async)
alarm(0x8000000000000001) (async)
r6 = syz_pidfd_open(0x0, 0x0)
setns(r6, 0x2000000) (async)
syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000040)={0x18, r7, 0xfffffffffffffdb6, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x7, r7, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc9b})

3.887926688s ago: executing program 0 (id=543):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000008e34c4210b96f44515342420010025bd7000"], 0x14}}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100004a2401000001020c0d"], 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r3 = syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="58000000070601010000000000000000070010010900020073797a3200000000050001000700000005000100070000000900020073797a32000000000800064000000001050001000700e18c377383618d6186101e3e000900020073797a3100000000"], 0x58}, 0x1, 0x0, 0x0, 0x200408f4}, 0x2000c040)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x100, &(0x7f00000004c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x10201, 0x5, 0x3000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x16, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000005c0)="450f11440f0966b88d00c44101c41d0e0000000841c0d62c360f01c80fc729b805000000b9000000800f01d966ba6100ecf20f2291", 0x35}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
io_uring_enter(r3, 0x7ffa, 0xba1c, 0x40, 0x0, 0x39)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000500)={0x10, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r10=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r10, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r11, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}})
r12 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r12, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_FLUSH(r12, 0x29, 0xd4, 0x0, 0x47)
socket$nl_route(0x10, 0x3, 0x0)

2.378282681s ago: executing program 3 (id=544):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, 0x0, 0xffdd)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x65, @mcast2, 0x7}, 0x1c)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000640)={0x796, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00')
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a00100009"], 0x1c}}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r8, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x6000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0)
pwritev(r10, &(0x7f00000000c0)=[{&(0x7f0000000080)="e756d337a1129afc310be63dea375cc551177c82b985e06e0a82e6a0ac24510aef6adbe5adbce172d671cf", 0x2b}, {&(0x7f0000000140)="2fe223062b20b43055a9dafe4340c47124ecd08f52a0c029f0a905035f10e9372aff2c7d2157544591840dd6c552a01e4ba3451745e9f6acf1ab492ec553c0a3a346a7aeb4ddec32ccc729701914fced53fda22078fda3fd9e1b0af51b28313480732979e4cd1840fc633c288bce242d33d7e3f261d3fe0b171ef6fda9219a2027ef44ddc97cc419e3383a31b1f5267e9a7381a10983c6e302a04311986e02c10795068e88c0f4c9fd102ac1c8555325f987f841b93ff8d248e9ac7340b7a8fa442bcba46626f609784da08ea2f72f31248b565a48990caecab054389a205965e86545fb133b4f1f7ea299132f4c545563cbcbf34f964218687b441a95ac50897e8985b939e5dae4facf50de8dc32d59d10a310afe7b8bf72d502a517af97dd21e60950510c291c4636adef9dffd5651fc004395e886a814edcbd672cfbfc1d50e7a16d3d5d83075ef1362e9e087defb7a107af5edc02ac5ecbb720affdbb2032bd2e4c046a949cdce18d90e8ac4d4af14723e8ff94ab24a89fb576081d6d3ebdd8943e796aa3c1eddba172161d57e214a0602b3c039c29f2f523046ea2d899540a20d81dfa3d326696c5a5876044dcc625f2ac8d023502428346fea4f5bb0d82c75ffb0c91940a232793467989f7d0503ca85c5b241e12af8e838799581cb678a4362d4b34569cc312c518cffd9946da804158046a38a520c84ee7792193cc03b0851164a18a75ba265f0e13d3f4941052b7ceb8cc344a1ad231784e8165ba13a192d23d3740aa479b74e2730fd07cafd06b6683cb1d52cc09575c536ca34b2174e17bf18a20b8982f74dbd137be413dffee5f2b9829412e8c585319f2c0b0edd9e16a615a1f0806fc6b9b54ac44cd6effc61376107d33a76d41c381f73fcffaf41ef60e64e8f43ce96d21cb321f41e8f23a189d08d562ec927e8dd7522792268f2b4b790ad6c8e6758c34a5ae61adc93e3c3867f83a0714173627581a739ce408cd90f96e8634d88645dfbb97389e3b010676083c82558c12977dd8933bfa5f448a74f42775ac4623319ea6ebb0066db0ce56b577a296b6c753de9fb019b9c02ae939e413a6c88633746b7cde63e3547344a0b5542ebf0454fd93098e53a8d6dd1d0e21283ccbdef4eb1b97b1847802c917475bde022d455cef0e9478963ef304302caa38bd053ce5aa8a5118b1f987ee24167565aba7304c612e36a6305629c64b71ed893678fe138a412f4cc85dc190ea81521a1991ed09a1833afc8966b37850271f9f3cb37a455cdfb3675c4f8fff2d7d8e68f637c0ea509a2dc75f60399a6f77661010245422b10c864541df432e2e7a278bb73584ad962c2250dea46af78a40930c9506f8a1b81ec3a55574e417f1bd35a4832ed48e0c5ded28c5e666df4f8fe0ac0e60212d94bd9b308540aabf7fb68890416891792790317f7514009e98dc40e2ba092d8c7cdb4ee48cefefc2d7763c1915f95bcd32295127dbf6baa46e4132596e51e6a79b671cf16eb3e58f3968224f3adc5a628c8473a477fd1c48e6627ba26ac5401a65aefc2dcf60bf446c3496d2ededdd8bdd23bbf4d4b5aa1cff98b7ffeb65dd9f5a84f22b3a50b8d194f44e21d3515b2f9bd8c28506ec0f646327c892c4613d61fc24931b6939472eeee3e22ce1f8bcc191a04c56b28dc4616b2ef7bf219e6745b631c1ec089d6027e99b1f9f613ea0bc75db0f56f62fb924989fd43693ce31f038fac8672e4da4210af05100403c643a654a05f3655078f31df0222e98b01841bfd7800c6aaee8a0e7ec88b60efb02afab6c1fb2d2abcfc60ae8b15f5937de2dbddd4ea31d4e423cc6f0d48af9de2053a3d4f5c28170e8ad53d0d4b25dee8f91acfdb089b60707c12a668dc4aeea747e15740a48fbbdf860042d9f97fb810f8bf1237033aae5adda9fabea1e49219c93f9055f05e79f9b987e40484dab641141e759f22fe83928febdb4fce6aeefbacb22540355d4112dc5dfb62c7aeda256364b238a470d19b516abbef5cac019be1c60809d394a5c3d875b891caf322eee675bf2b8fe503a6be877d094a36661dac863ecd7f2323253bb99c71456085f523afda527d7b4c7b0a3b5eab9fdd870c7d38373e741dde1b5f4481a8f9db3ba71c11a28a16242e54f9660ac69285669aa78dbdd9eef6ca43948285dfca8ea632dc3bc31b1519215c9fe4022647884edd56449e03e2d577835dc7d5a0d6981e27fd872677a4b477588da6a898567e1227c8bff8a1676702ce647411b129c34d008093bb0b48f99967d68268ccde0f09cfa372c3292f547bb7436b6e08e942766ae097f47f9ebf5c752731eaa596e46f721536b4871ce1692ed973ff00e5b38858756324f556209b9a0573df20557574814d2cabed8023419529b7927616090103423cb6cbe6c99f99099bbe26c0a8d0faacb8b07e79da40a476b813fd0701943f1254d66181242fb03f8bfd7f8e7b7537eee03c02a3eb3c42c13cb7e8d7e5f05d2c3f8168f408b251094d83a477196708c1361568f53e01756bac5685b8ab6bdbf50aa9db9977cdccc22e347ed6dd78b2f93aebb88b7714b3a628e1468f836c6de1e6f12575c6afba940ccde6a4d95f62ce512886adfabb06896da9ca81e1809642c537f96712568ddce33d9c12187477fb3654b63873b596c7850d7ec1728debab8047ae5b04399f84b378b6b886257ca51de651a8b6cde74a653e36ca75cc698ce411bd237d52e64180dcdc4bd45ad03acca3c98412ff229a474cd99f0d856c405f63ae282e7e1f3e2375335aa922ca42d392a6295fc35921eda0430076eae5192157d37cfd6dcf905107e168f5fc40f238950bbec2360b0e3bedc52d69a0d99ba119e07374878dad7c2c1394d981d224344954fd9acb8ac6c2df4d979a074d7d8062a54df9e5bffde9b5a1bc1ec9186234d729ffbc9d08865f9f7ade5bd39b62d38d6934d7f31fef05d380231790e9a51824654354e20ffe15b4c6c1e0817b7371dc3eabdb4eb56d93343c50e87b2723009e26f03256eb1061c3072ab84a50b3be516ad059d0557acaab5407104fe42f4a832983d38896675a544f4ed6ae2203cb958b061f0e5b8df3fd94b4dd9c942885857925264bb75a5231059f98d5da64f5d7ecc21e79d6a402132be9a8dd28df04899202a4e6c28bad2c5f75d01403623753316685d4eb8a0b93372770e9ff1bcda974b4e62b47438f52ed94f14e71a3162eeb2c5a5c3b7eee5b423ba2eaed05468f9904b509b1453ff3431d95dcc30fdaff2f1e9c33d42684e89ff66894b4052effdc808d9d5c7810e7bca2505edc6d3896584d2e6ddc9383de2df55492c17c9ed63055701ab45ba7edab661475bc292781196ef6a5eb5c82b92ce029e942b189d9d17dac51ba62c319ece7bbc37131cddc389dbdfe181944e099e4a36b448b9e77dde2e50d767d5b103bd8737e31ca206ff9f0328d1ca23540f928ae397c742b514285c22698c937be7f763473df59607fed8b7bb3289a97ee431e1310d011b9ac0f5f78b4415bb280d59d769389a926b2e4963c436a760463e4e59a4db9214988fbe7336c1f51c9425eacf3d975e42d8acdf207cd6dc71f6b9dc1efc1893e47e0b3fe2c7cf683cbc7fa4fc00e2b4d69f4b7c883d448d4bb724dec3f601e97a181288ee2f654c2c7c8e915e14daed55d017cd9ed5d2ead80f14fb29e9150150244551b843a7b1780490c97962d2e63957f49a5dcfec73188bb8284e7e699f0727b7eb339806bae3cd051c6e77666c3142e27ca626c4ea41865d60ab1d425a609f6dcf53ac58477b8bebef4b83fcd181808acb4d504fc7b51dc3452685c2449ee86b34dd2418c3157fc02daaa29aced516afd1ed478942cfd730e68f25c97e0f8866f1fe266c3895d9e19fc6964c38f63237d682fcd2e0b070788e5ed5ac3d32c5036b71fd3abc4ca53b2bb93bd5085b6d58f1bf68ffa134f5ef63b498702fb69a6aff33dbe27bff9250b3696ca267e1534a2d1780221f997f7b0a32de9ee2fd6fbf75cae4560f5011ae81e0143c356ead3e7ae63cd806056feef5afee0697b7fd2b6630535a0bd006d86400110356743ee70af78c0b96a72c384ae81843374f22f84feaf8d430624ccd81760abf674f0a2991be60ea7f096dbc6ba5b9c7c95c2f0aeb568bee45e8bd40727688d415e3d62440a6217590855e6b413877abb6bef485d1cce8960a369fd4348c824864bca07f4a9f2be9e0eeb84dc2bc3ecdb35c723e7a96f8fda5846e95bca2c648d64bc30242c1efa80086af683bd67aef0620740056276a54b8a1c43dffb631e24e443264168453b76e005c47c60f510327cd6f85b51428e5832d1ced42baf29e1627a56322ba76658bfae3c441f4667dbdf2b25931b85b95ed37a6d942736b69214e2bb9234a019bc6559e600836bba640cdfe6ba1b1b821e49a2b4aae23474c496064cc4bd3072fcbf299e2f76028a4e7c47f6ec9c2c6f4485316d1345bcadd19c69aaf707d3f762ff7972b817787f4297f619307b113bd16fb880f1a7080971d9973fc99c12966c6450db87a5b8b9a243a2927ec845de2eda52617e4b41b5dd51eb39ee3a1a95bbe95eeb822b2f6215f8c649ba2e2a5e6cdade3d4bc4a12aaff064efed4a15bd34f2bd1cf40c9e510a965b99265ff2a37239c729eb3cfc35c7086ab3f5db6772219d67509547588867136bf67314aad16dcedc089e268aa1fd83e7d41730c9d6bb55a5e036c6874609d9e9e97614916af0b65ec739ae830af63f03a88ec3e9b4c565da02538181fa89bf651873b1074bde86b90ba29341bc3f1be26e01b1aa15966ea799f0f46a36702e3db540027c5832f6e534d4c640280864b0eac8649f4d69db7ce210402fabdda8986006a64d34ed64196191ba5b3bd62c6bddc89449919c276da8daf0887185f1ac4ea2cfd1b2546dd2d71b89b6ed20e6311242f689fe49a19dd60f00cf7429cf806f389dc75e9ce0b53603e3d725d6069a6064a13cd24e03b6a5f7a6601ebf72e013a45609fa1cbfc7c4435d9ae0b048f99fa389764bacc81f7b3c72b6b8a1b751c8d0c364c7158a9baa985e6cded3321b60a066d249e05853b933611366d7c5a7cf7d86bfa42e013f01aa622b15abc60a0d16940f12735aade184a15c736cfd7f080a0469353ee1a8bafdb79fa6dfcce5a781b8ed7e2ce44a356c97a3733916143dc043400348673c7cc59f1d4c99eb856fe0e768d517e03329531b2e1c07348a44054d1efd21e348100947f6c1c0bf632b95a6c00999474a1ae5fc75c048b51226f9e31768db3fdb188b0e654d088b3d710cd342ce727e0b024d1e13056a67dc1eaf6f66cd837b0eb11cccada111927977760c95295d15526e4e7b6219bdcd1fcbdb75dd0d410684a74dffb0d2f757b1aaafb7ed765f6d9a4f6afc173c2452da7768e967a426fe299ec67d2793098cf03f02ea5920b174761dd6c8c081d7997bd68ecac43f23bf969e7dd58bc3573cb4941a9344f396eb1d340d49b435ac065f306c0838814b3a83981d81d6247cd7b174e472778ad2a6313e02563f07ba4ac359bb2c895a4c09ece95cf739a1f720ea2b6d8919fb58ed4773434de5262682d5fb847252598b75a76cd7d725245b0adc1807ef02e362fce69c918b42808125d8d6dd9cf29e905252edad26b9b5db2a2414d7a3f9add683d8cb0cf545d57b46417e73882b74c4", 0xfc0}], 0x2, 0x8, 0x1)
write$vga_arbiter(r10, &(0x7f0000000100)=@other={'trylock', ' ', 'io+mem'}, 0xf)

2.237106028s ago: executing program 4 (id=545):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x24000000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x0, 0x9, 0x5})
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
pread64(r3, 0x0, 0x0, 0x9)
dup(0xffffffffffffffff)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
fchdir(r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES16=r8, @ANYBLOB="01032757c38d085641a7220000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x1)

1.943991829s ago: executing program 1 (id=546):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000000c0), 0xffffff86}, {&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000700)=""/228, 0xe4}], 0x3}, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x220000, 0x800, 0x1, 0x1}, 0x20)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0)
ptrace$setregs(0xf, r0, 0x9, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x3, 0x2002)

1.656710466s ago: executing program 2 (id=547):
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @empty}}}}, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac1414aa}}, 0x1c, 0x0}}], 0x1, 0x20004855)
syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa06ac0100000008060001080006040001aaaaaaaaaa08ac1414bb"], 0x0)

1.48530937s ago: executing program 1 (id=548):
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
mknod$loop(&(0x7f0000000040)='./bus\x00', 0x2, 0x1)
write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000004c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0055aaffffffffffff00"}})

827.022818ms ago: executing program 2 (id=549):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0)
syz_io_uring_setup(0x4ba, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x7ff9, 0x32c, 0x0, r3}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r3, 0x7, 0x0, 0x0, 0x10, 0x1})
io_uring_enter(r3, 0xfd0, 0x5f04, 0x0, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = getpgid(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {<r9=>0xee00, 0xee01}}, './file0\x00'})
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={r8, r9, r10}, 0xc)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r11)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'macsec0\x00'}, 0x18)

738.330113ms ago: executing program 1 (id=550):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
close(r0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=<r1=>0xffffffffffffffff)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0x9e0000, 0x1, 0x0, r1, 0x0, &(0x7f0000000100)={0x209d8, 0x8, '\x00', @string=&(0x7f0000000040)=0x80}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000180)=0x5)
r3 = accept(r2, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r3, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)

601.18792ms ago: executing program 0 (id=551):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101024a0000000000000000000000ac1e0001ac140501071300e000000200000000ffffffffac14140c00859ca2427d60ef20093b68fbe1bd142ebcd256cf74ea6e09c57b0400d5fe8e6e85063aed3ca45da654c29b55cf2865b13a9d80eb6d3533d6ea2fda4e8fbaadff924427762213f303acddf64ff3dec6dede33e3dd3e9c9762b87a8e"], 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={<r7=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x200000000000011, 0x2, 0x8)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x8, 0x70bd29, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x0, 0xa}, {0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4)
syz_open_dev$usbfs(&(0x7f0000000480), 0x63a, 0xa5761)

551.700997ms ago: executing program 1 (id=552):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0)
ioctl$RTC_PIE_ON(r1, 0x7005)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) (async)
ioctl$RTC_PIE_ON(r1, 0x7005) (async)

0s ago: executing program 1 (id=553):
r0 = syz_usb_connect(0xf, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100fffffffffffffffd0243d3070200000902120001000000000904"], 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'veth1_to_team\x00', @broadcast})
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882)
close(r1)
write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {0x80}, {0x4}, @ext={0x27, &(0x7f0000000040)="2e6697edd709a19d4f829774c92bdc55aa228ca48e55beba94bdda38afaa61c1e4e40ec94a2b9e"}}], 0x1c)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

, device number 11
[  254.527314][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  254.578111][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  254.653859][   T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  254.734492][    T9] quatech2 2-1:0.51: device disconnected
[  254.884603][   T43] usb 4-1: device descriptor read/64, error -71
[  255.135683][   T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  255.290688][   T43] usb 4-1: device descriptor read/64, error -71
[  255.598074][   T43] usb usb4-port1: attempt power cycle
[  255.699143][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  255.709128][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  255.958917][   T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  255.992444][   T43] usb 4-1: device descriptor read/8, error -71
[  256.395091][   T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  256.438837][   T43] usb 4-1: device descriptor read/8, error -71
[  256.586366][   T43] usb usb4-port1: unable to enumerate USB device
[  256.912003][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  257.115438][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  257.138679][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.149311][   T30] audit: type=1326 audit(1758527282.176:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.2.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0535d8ec29 code=0x0
[  257.171378][ T5970] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  257.207768][    T9] usb 2-1: config 0 descriptor??
[  257.246511][    T9] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  257.347341][ T5970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.364592][ T5970] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  257.458343][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.589065][ T5970] usb 5-1: Product: syz
[  257.616113][ T5970] usb 5-1: Manufacturer: syz
[  257.642529][ T5970] usb 5-1: SerialNumber: syz
[  257.724834][ T5970] usb 5-1: config 0 descriptor??
[  257.801720][ T5970] adutux 5-1:0.0: interrupt endpoints not found
[  257.862592][    T9] gspca_stv06xx: I2C: Read error writing address: -71
[  257.916726][ T6703] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  257.948646][ T5970] usb 5-1: USB disconnect, device number 13
[  257.955463][    T9] usb 2-1: USB disconnect, device number 12
[  258.028726][ T6711] loop8: detected capacity change from 0 to 8
[  258.073239][ T6711] Dev loop8: unable to read RDB block 8
[  258.089528][ T6711]  loop8: unable to read partition table
[  258.112328][ T6711] loop8: partition table beyond EOD, truncated
[  258.143907][ T6711] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  258.553744][ T6720] netlink: 'syz.0.174': attribute type 15 has an invalid length.
[  258.561639][ T6720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.174'.
[  259.284578][ T6725] netlink: 'syz.1.175': attribute type 3 has an invalid length.
[  259.383762][ T5952] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  259.554644][ T5952] usb 5-1: Using ep0 maxpacket: 8
[  259.565942][ T5952] usb 5-1: config 162 has an invalid interface number: 150 but max is 0
[  259.617246][ T5952] usb 5-1: config 162 has no interface number 0
[  259.681425][ T5952] usb 5-1: config 162 interface 150 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  259.706687][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'.
[  259.725638][ T5952] usb 5-1: config 162 interface 150 has no altsetting 0
[  259.752049][ T5952] usb 5-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=e0.0e
[  259.762307][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.781443][ T5952] usb 5-1: Product: syz
[  259.808147][ T5952] usb 5-1: Manufacturer: syz
[  259.833117][ T5952] usb 5-1: SerialNumber: syz
[  260.114078][ T5952] usb 5-1: Found UVC 0.0a device syz (058f:3820)
[  260.140204][ T5952] usb 5-1: No valid video chain found.
[  260.159598][ T5952] usb 5-1: USB disconnect, device number 14
[  260.264539][ T6754] FAULT_INJECTION: forcing a failure.
[  260.264539][ T6754] name failslab, interval 1, probability 0, space 0, times 0
[  260.335626][ T6754] CPU: 1 UID: 0 PID: 6754 Comm: syz.3.181 Not tainted syzkaller #0 PREEMPT(full) 
[  260.335642][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  260.335648][ T6754] Call Trace:
[  260.335652][ T6754]  <TASK>
[  260.335657][ T6754]  dump_stack_lvl+0x189/0x250
[  260.335674][ T6754]  ? __pfx____ratelimit+0x10/0x10
[  260.335685][ T6754]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.335696][ T6754]  ? __pfx__printk+0x10/0x10
[  260.335713][ T6754]  ? __pfx___might_resched+0x10/0x10
[  260.335722][ T6754]  ? fs_reclaim_acquire+0x7d/0x100
[  260.335734][ T6754]  should_fail_ex+0x414/0x560
[  260.335752][ T6754]  should_failslab+0xa8/0x100
[  260.335767][ T6754]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  260.335781][ T6754]  ? __d_alloc+0x36/0x7a0
[  260.335793][ T6754]  __d_alloc+0x36/0x7a0
[  260.335807][ T6754]  d_alloc_parallel+0xe5/0x15e0
[  260.335825][ T6754]  ? __lock_acquire+0xab9/0xd20
[  260.335843][ T6754]  ? __pfx_d_alloc_parallel+0x10/0x10
[  260.335856][ T6754]  ? __raw_spin_lock_init+0x45/0x100
[  260.335869][ T6754]  ? __init_waitqueue_head+0xa9/0x150
[  260.335884][ T6754]  __lookup_slow+0x116/0x3d0
[  260.335896][ T6754]  ? __pfx___lookup_slow+0x10/0x10
[  260.335912][ T6754]  ? d_lookup+0x8a/0xa0
[  260.335923][ T6754]  ? lookup_noperm+0x112/0x220
[  260.335936][ T6754]  simple_start_creating+0xfd/0x1e0
[  260.335945][ T6754]  ? __pfx_simple_start_creating+0x10/0x10
[  260.335961][ T6754]  start_creating+0x10f/0x180
[  260.335977][ T6754]  __debugfs_create_file+0x79/0x4f0
[  260.335994][ T6754]  debugfs_create_file_full+0x3f/0x60
[  260.336011][ T6754]  ref_tracker_dir_debugfs+0x14e/0x270
[  260.336021][ T6754]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  260.336044][ T6754]  ? rcu_is_watching+0x15/0xb0
[  260.336054][ T6754]  ? alloc_netdev_mqs+0xa3/0x11b0
[  260.336071][ T6754]  ? __raw_spin_lock_init+0x45/0x100
[  260.336084][ T6754]  alloc_netdev_mqs+0x26f/0x11b0
[  260.336097][ T6754]  ? __pfx_bond_setup+0x10/0x10
[  260.336109][ T6754]  rtnl_create_link+0x31f/0xd10
[  260.336127][ T6754]  rtnl_newlink_create+0x25c/0xb00
[  260.336142][ T6754]  ? __lock_acquire+0xab9/0xd20
[  260.336159][ T6754]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  260.336173][ T6754]  ? __pfx___mutex_lock+0x10/0x10
[  260.336189][ T6754]  ? ns_capable+0x8a/0xf0
[  260.336202][ T6754]  rtnl_newlink+0x16d6/0x1c70
[  260.336213][ T6754]  ? netlink_sendmsg+0x805/0xb30
[  260.336230][ T6754]  ? __pfx_rtnl_newlink+0x10/0x10
[  260.336253][ T6754]  ? kasan_quarantine_put+0xdd/0x220
[  260.336265][ T6754]  ? lockdep_hardirqs_on+0x9c/0x150
[  260.336278][ T6754]  ? nlmon_xmit+0xb0/0x100
[  260.336289][ T6754]  ? kmem_cache_free+0x18f/0x400
[  260.336306][ T6754]  ? __local_bh_enable_ip+0x12d/0x1c0
[  260.336315][ T6754]  ? lockdep_hardirqs_on+0x9c/0x150
[  260.336325][ T6754]  ? __local_bh_enable_ip+0x12d/0x1c0
[  260.336334][ T6754]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  260.336345][ T6754]  ? __dev_queue_xmit+0x27b/0x3b50
[  260.336358][ T6754]  ? __dev_queue_xmit+0x27b/0x3b50
[  260.336370][ T6754]  ? __dev_queue_xmit+0x27b/0x3b50
[  260.336383][ T6754]  ? __dev_queue_xmit+0x1d79/0x3b50
[  260.336399][ T6754]  ? __lock_acquire+0xab9/0xd20
[  260.336426][ T6754]  ? __pfx_rtnl_newlink+0x10/0x10
[  260.336436][ T6754]  rtnetlink_rcv_msg+0x7cc/0xb70
[  260.336448][ T6754]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  260.336457][ T6754]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  260.336466][ T6754]  ? ref_tracker_free+0x63a/0x7d0
[  260.336475][ T6754]  ? __asan_memcpy+0x40/0x70
[  260.336486][ T6754]  ? __pfx_ref_tracker_free+0x10/0x10
[  260.336493][ T6754]  ? __skb_clone+0x63/0x7a0
[  260.336511][ T6754]  netlink_rcv_skb+0x208/0x470
[  260.336522][ T6754]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  260.336532][ T6754]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  260.336554][ T6754]  ? netlink_deliver_tap+0x2e/0x1b0
[  260.336568][ T6754]  netlink_unicast+0x82c/0x9e0
[  260.336589][ T6754]  ? __pfx_netlink_unicast+0x10/0x10
[  260.336604][ T6754]  ? netlink_sendmsg+0x642/0xb30
[  260.336613][ T6754]  ? skb_put+0x11b/0x210
[  260.336626][ T6754]  netlink_sendmsg+0x805/0xb30
[  260.336642][ T6754]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.336654][ T6754]  ? aa_sock_msg_perm+0xf1/0x1d0
[  260.336665][ T6754]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  260.336676][ T6754]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.336686][ T6754]  __sock_sendmsg+0x21c/0x270
[  260.336703][ T6754]  ____sys_sendmsg+0x505/0x830
[  260.336718][ T6754]  ? __pfx_____sys_sendmsg+0x10/0x10
[  260.336735][ T6754]  ? import_iovec+0x74/0xa0
[  260.336750][ T6754]  ___sys_sendmsg+0x21f/0x2a0
[  260.336764][ T6754]  ? __pfx____sys_sendmsg+0x10/0x10
[  260.336795][ T6754]  ? __fget_files+0x2a/0x420
[  260.336804][ T6754]  ? __fget_files+0x3a0/0x420
[  260.336818][ T6754]  __x64_sys_sendmsg+0x19b/0x260
[  260.336831][ T6754]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  260.336849][ T6754]  ? __pfx_ksys_write+0x10/0x10
[  260.336860][ T6754]  ? rcu_is_watching+0x15/0xb0
[  260.336872][ T6754]  ? do_syscall_64+0xbe/0x3b0
[  260.336885][ T6754]  do_syscall_64+0xfa/0x3b0
[  260.336895][ T6754]  ? lockdep_hardirqs_on+0x9c/0x150
[  260.336904][ T6754]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.336913][ T6754]  ? clear_bhb_loop+0x60/0xb0
[  260.336924][ T6754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.336933][ T6754] RIP: 0033:0x7fd99518ec29
[  260.336942][ T6754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.336950][ T6754] RSP: 002b:00007fd99601c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  260.336960][ T6754] RAX: ffffffffffffffda RBX: 00007fd9953d5fa0 RCX: 00007fd99518ec29
[  260.336967][ T6754] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  260.336973][ T6754] RBP: 00007fd99601c090 R08: 0000000000000000 R09: 0000000000000000
[  260.336979][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.336984][ T6754] R13: 00007fd9953d6038 R14: 00007fd9953d5fa0 R15: 00007fd9954ffa28
[  260.337000][ T6754]  </TASK>
[  260.337109][ T6754] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608)
[  260.924011][ T6754] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  261.242660][ T5952] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  261.398077][ T5952] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  261.442010][ T5952] usb 5-1: config 0 has no interface number 0
[  261.470873][ T5952] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  261.516396][ T5952] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  261.556132][ T5952] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  261.566697][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.592106][ T5952] usb 5-1: config 0 descriptor??
[  261.629618][ T6759] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  261.665074][ T5952] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  261.789582][ T6780] loop8: detected capacity change from 0 to 8
[  261.806844][ T6044] Dev loop8: unable to read RDB block 8
[  261.828132][ T6044]  loop8: unable to read partition table
[  261.836455][ T6044] loop8: partition table beyond EOD, truncated
[  261.863533][ T6780] Dev loop8: unable to read RDB block 8
[  261.906690][ T6780]  loop8: unable to read partition table
[  261.925015][    T9] usb 5-1: USB disconnect, device number 15
[  261.959564][ T6780] loop8: partition table beyond EOD, truncated
[  261.993968][ T6780] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  262.503768][   T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  262.665282][ T6806] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  262.717096][   T43] usb 4-1: Using ep0 maxpacket: 16
[  262.737174][   T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  262.792559][   T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  262.896477][ T6816] FAULT_INJECTION: forcing a failure.
[  262.896477][ T6816] name failslab, interval 1, probability 0, space 0, times 0
[  262.917823][   T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  262.921318][ T6816] CPU: 0 UID: 0 PID: 6816 Comm: syz.4.194 Not tainted syzkaller #0 PREEMPT(full) 
[  262.921341][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  262.921351][ T6816] Call Trace:
[  262.921358][ T6816]  <TASK>
[  262.921366][ T6816]  dump_stack_lvl+0x189/0x250
[  262.921390][ T6816]  ? __pfx____ratelimit+0x10/0x10
[  262.921409][ T6816]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.921428][ T6816]  ? __pfx__printk+0x10/0x10
[  262.921457][ T6816]  ? __pfx___might_resched+0x10/0x10
[  262.921478][ T6816]  should_fail_ex+0x414/0x560
[  262.921506][ T6816]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  262.921522][ T6816]  should_failslab+0xa8/0x100
[  262.921546][ T6816]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  262.921561][ T6816]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  262.921587][ T6816]  ? alloc_inode+0x6a/0x1b0
[  262.921608][ T6816]  ? __pfx_simple_start_creating+0x10/0x10
[  262.921627][ T6816]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  262.921642][ T6816]  alloc_inode+0x6a/0x1b0
[  262.921666][ T6816]  new_inode+0x22/0x170
[  262.921686][ T6816]  __debugfs_create_file+0x14d/0x4f0
[  262.921715][ T6816]  debugfs_create_file_full+0x3f/0x60
[  262.921741][ T6816]  ref_tracker_dir_debugfs+0x14e/0x270
[  262.921759][ T6816]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  262.921803][ T6816]  ? rcu_is_watching+0x15/0xb0
[  262.921819][ T6816]  ? alloc_netdev_mqs+0xa3/0x11b0
[  262.921846][ T6816]  ? __raw_spin_lock_init+0x45/0x100
[  262.921869][ T6816]  alloc_netdev_mqs+0x26f/0x11b0
[  262.921889][ T6816]  ? __pfx_bond_setup+0x10/0x10
[  262.921915][ T6816]  rtnl_create_link+0x31f/0xd10
[  262.921944][ T6816]  rtnl_newlink_create+0x25c/0xb00
[  262.921968][ T6816]  ? __lock_acquire+0xab9/0xd20
[  262.921994][ T6816]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  262.922017][ T6816]  ? __pfx___mutex_lock+0x10/0x10
[  262.922046][ T6816]  ? ns_capable+0x8a/0xf0
[  262.922066][ T6816]  rtnl_newlink+0x16d6/0x1c70
[  262.922084][ T6816]  ? netlink_sendmsg+0x805/0xb30
[  262.922113][ T6816]  ? __pfx_rtnl_newlink+0x10/0x10
[  262.922154][ T6816]  ? kasan_quarantine_put+0xdd/0x220
[  262.922173][ T6816]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.922196][ T6816]  ? nlmon_xmit+0xb0/0x100
[  262.922212][ T6816]  ? kmem_cache_free+0x18f/0x400
[  262.922240][ T6816]  ? __local_bh_enable_ip+0x12d/0x1c0
[  262.922256][ T6816]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.922273][ T6816]  ? __local_bh_enable_ip+0x12d/0x1c0
[  262.922289][ T6816]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  262.922309][ T6816]  ? __dev_queue_xmit+0x27b/0x3b50
[  262.922329][ T6816]  ? __dev_queue_xmit+0x27b/0x3b50
[  262.922347][ T6816]  ? __dev_queue_xmit+0x27b/0x3b50
[  262.922368][ T6816]  ? __dev_queue_xmit+0x1d79/0x3b50
[  262.922393][ T6816]  ? __lock_acquire+0xab9/0xd20
[  262.922440][ T6816]  ? __pfx_rtnl_newlink+0x10/0x10
[  262.922456][ T6816]  rtnetlink_rcv_msg+0x7cc/0xb70
[  262.922477][ T6816]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  262.922493][ T6816]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  262.922508][ T6816]  ? ref_tracker_free+0x63a/0x7d0
[  262.922523][ T6816]  ? __asan_memcpy+0x40/0x70
[  262.922541][ T6816]  ? __pfx_ref_tracker_free+0x10/0x10
[  262.922554][ T6816]  ? __skb_clone+0x63/0x7a0
[  262.922588][ T6816]  netlink_rcv_skb+0x208/0x470
[  262.922607][ T6816]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  262.922626][ T6816]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  262.922654][ T6816]  ? netlink_deliver_tap+0x2e/0x1b0
[  262.922679][ T6816]  netlink_unicast+0x82c/0x9e0
[  262.922711][ T6816]  ? __pfx_netlink_unicast+0x10/0x10
[  262.922735][ T6816]  ? netlink_sendmsg+0x642/0xb30
[  262.922750][ T6816]  ? skb_put+0x11b/0x210
[  262.922771][ T6816]  netlink_sendmsg+0x805/0xb30
[  262.922799][ T6816]  ? __pfx_netlink_sendmsg+0x10/0x10
[  262.922820][ T6816]  ? aa_sock_msg_perm+0xf1/0x1d0
[  262.922838][ T6816]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  262.922855][ T6816]  ? __pfx_netlink_sendmsg+0x10/0x10
[  262.922873][ T6816]  __sock_sendmsg+0x21c/0x270
[  262.922899][ T6816]  ____sys_sendmsg+0x505/0x830
[  262.922925][ T6816]  ? __pfx_____sys_sendmsg+0x10/0x10
[  262.922953][ T6816]  ? import_iovec+0x74/0xa0
[  262.922977][ T6816]  ___sys_sendmsg+0x21f/0x2a0
[  262.922999][ T6816]  ? __pfx____sys_sendmsg+0x10/0x10
[  262.923056][ T6816]  ? __fget_files+0x2a/0x420
[  262.923070][ T6816]  ? __fget_files+0x3a0/0x420
[  262.923095][ T6816]  __x64_sys_sendmsg+0x19b/0x260
[  262.923118][ T6816]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  262.923147][ T6816]  ? __pfx_ksys_write+0x10/0x10
[  262.923165][ T6816]  ? rcu_is_watching+0x15/0xb0
[  262.923186][ T6816]  ? do_syscall_64+0xbe/0x3b0
[  262.923208][ T6816]  do_syscall_64+0xfa/0x3b0
[  262.923224][ T6816]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.923240][ T6816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.923255][ T6816]  ? clear_bhb_loop+0x60/0xb0
[  262.923274][ T6816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.923290][ T6816] RIP: 0033:0x7f83a438ec29
[  262.923305][ T6816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.923317][ T6816] RSP: 002b:00007f83a25ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  262.923334][ T6816] RAX: ffffffffffffffda RBX: 00007f83a45d5fa0 RCX: 00007f83a438ec29
[  262.923346][ T6816] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  262.923356][ T6816] RBP: 00007f83a25ee090 R08: 0000000000000000 R09: 0000000000000000
[  262.923365][ T6816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  262.923375][ T6816] R13: 00007f83a45d6038 R14: 00007f83a45d5fa0 R15: 00007f83a46ffa28
[  262.923403][ T6816]  </TASK>
[  262.956764][ T6816] debugfs: out of free dentries, can not create file 'netdev@ffff888046ee4610'
[  263.068344][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.534428][ T6816] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608)
[  263.586575][ T6816] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  264.150819][   T43] usb 4-1: Product: syz
[  264.160740][   T43] usb 4-1: Manufacturer: syz
[  264.170874][   T43] usb 4-1: SerialNumber: syz
[  264.255075][ T6829] loop6: detected capacity change from 0 to 7
[  264.316284][ T6829] Dev loop6: unable to read RDB block 7
[  264.322847][ T6829]  loop6: AHDI p2 p3
[  264.337321][ T6829] loop6: partition table partially beyond EOD, truncated
[  264.354150][ T6829] loop6: p2 size 46 extends beyond EOD, truncated
[  264.495356][ T6835] ptrace attach of "./syz-executor exec"[5882] was attempted by "./syz-executor exec"[6835]
[  264.666292][ T6044] udevd[6044]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  264.676331][ T6837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.697965][ T6837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.802528][    T9] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  264.820483][   T43] usb 4-1: 0:2 : does not exist
[  264.883780][ T1211] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  264.985876][    T9] usb 5-1: config 8 has an invalid interface number: 80 but max is 0
[  264.994172][    T9] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  265.004378][    T9] usb 5-1: config 8 has no interface number 0
[  265.011051][    T9] usb 5-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  265.021940][    T9] usb 5-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  265.036965][    T9] usb 5-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14
[  265.050851][    T9] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  265.060256][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.063851][ T1211] usb 2-1: Using ep0 maxpacket: 16
[  265.089439][    T9] usb 5-1: NFC: intf ffff88807eb6a000 id ffffffff8eb55080
[  265.097032][ T5952] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  265.119375][ T1211] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.143718][ T1211] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  265.156773][ T1211] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  265.176855][ T1211] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  265.186265][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.194600][ T1211] usb 2-1: Product: syz
[  265.198896][ T1211] usb 2-1: Manufacturer: syz
[  265.203564][ T1211] usb 2-1: SerialNumber: syz
[  265.301794][ T2154] usb 5-1: USB disconnect, device number 16
[  265.323443][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  265.389262][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  265.420871][ T5952] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  265.438725][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'.
[  265.461836][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.516332][ T5952] usb 1-1: config 0 descriptor??
[  265.663846][ T1211] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[  265.677284][ T1211] cdc_ncm 2-1:1.0: bind() failure
[  265.708439][ T1211] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  265.738501][ T5952] usb 1-1: USB disconnect, device number 13
[  265.755847][ T1211] cdc_ncm 2-1:1.1: bind() failure
[  265.793749][ T1211] usb 2-1: USB disconnect, device number 13
[  266.449027][   T43] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  266.710745][ T6867] program syz.0.208 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  266.825684][   T43] usb 4-1: USB disconnect, device number 10
[  266.970506][ T6872] loop6: detected capacity change from 0 to 7
[  267.082949][ T6872] Dev loop6: unable to read RDB block 7
[  267.096252][ T6868] netlink: 'syz.3.210': attribute type 1 has an invalid length.
[  267.096294][ T6872]  loop6: AHDI p2 p3
[  267.122572][ T6872] loop6: partition table partially beyond EOD, truncated
[  267.140757][ T6872] loop6: p2 size 46 extends beyond EOD, truncated
[  267.280072][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  267.343808][ T6868] netlink: 1 bytes leftover after parsing attributes in process `syz.3.210'.
[  267.402899][ T6876] netlink: 72 bytes leftover after parsing attributes in process `syz.3.210'.
[  267.602721][ T6044] udevd[6044]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  267.860746][ T6884] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  268.017491][   T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  268.292572][   T43] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  268.361568][   T43] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  268.573803][   T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  268.656890][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.850505][ T6882] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  268.887124][   T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  269.211305][ T6882] fuse: Unknown parameter 'rootmod'
[  269.432381][ T1211] usb 4-1: USB disconnect, device number 11
[  269.513376][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.619408][   T43] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[  269.804244][   T43] usb 1-1: Invalid ep0 maxpacket: 64
[  269.887027][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.006807][   T43] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[  270.110069][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.182169][   T43] usb 1-1: Invalid ep0 maxpacket: 64
[  270.187928][   T43] usb usb1-port1: attempt power cycle
[  270.261603][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.543953][   T43] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[  270.625050][   T43] usb 1-1: Invalid ep0 maxpacket: 64
[  270.892201][   T43] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[  270.949012][   T43] usb 1-1: Invalid ep0 maxpacket: 64
[  270.961556][   T43] usb usb1-port1: unable to enumerate USB device
[  271.065095][   T49] bridge_slave_1: left allmulticast mode
[  271.078841][   T49] bridge_slave_1: left promiscuous mode
[  271.094261][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.156572][   T49] bridge_slave_0: left allmulticast mode
[  271.162218][   T49] bridge_slave_0: left promiscuous mode
[  271.170661][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.258376][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  271.269005][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  271.287907][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  271.311025][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  271.320682][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  271.487781][ T6919] loop6: detected capacity change from 0 to 7
[  271.534035][ T6919] Dev loop6: unable to read RDB block 7
[  271.539743][ T6919]  loop6: AHDI p2 p3
[  271.574000][ T6919] loop6: partition table partially beyond EOD, truncated
[  271.594333][ T6919] loop6: p2 size 46 extends beyond EOD, truncated
[  271.820133][ T6044] udevd[6044]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  272.482572][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.519274][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.537067][   T49] bond0 (unregistering): Released all slaves
[  272.580683][ T6928] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608)
[  272.593811][ T6928] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  272.999931][ T6944] fuse: Unknown parameter '000000000000000000000150000000000000000000000300000000000000000000'
[  273.024361][ T6944] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  273.163920][ T6941] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  273.175583][ T6941] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  273.379679][ T5873] Bluetooth: hci3: command tx timeout
[  273.827328][   T49] hsr_slave_0: left promiscuous mode
[  273.859769][   T49] hsr_slave_1: left promiscuous mode
[  273.876418][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.909146][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.021535][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.349637][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.395467][   T49] veth1_macvtap: left promiscuous mode
[  274.401175][   T49] veth0_macvtap: left promiscuous mode
[  274.415668][   T49] veth1_vlan: left promiscuous mode
[  274.423521][   T49] veth0_vlan: left promiscuous mode
[  274.983999][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  275.164177][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.235'.
[  275.184012][    T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  275.213000][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.266857][    T9] usb 2-1: Product: syz
[  275.297249][    T9] usb 2-1: Manufacturer: syz
[  275.311560][    T9] usb 2-1: SerialNumber: syz
[  275.334621][    T9] usb 2-1: config 0 descriptor??
[  275.353002][    T9] ch341 2-1:0.0: ch341-uart converter detected
[  275.454381][ T5872] Bluetooth: hci3: command tx timeout
[  275.843932][   T49] team0 (unregistering): Port device team_slave_1 removed
[  275.940743][   T49] team0 (unregistering): Port device team_slave_0 removed
[  275.966482][    T9] usb 2-1: failed to send control message: -71
[  275.972672][    T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  276.019166][    T9] usb 2-1: USB disconnect, device number 14
[  276.029240][    T9] ch341 2-1:0.0: device disconnected
[  276.472760][ T6958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  276.512355][ T6965] warning: `syz.0.227' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  276.853109][ T6994] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  277.050685][ T7000] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608)
[  277.114322][ T7000] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  277.215356][ T6920] chnl_net:caif_netlink_parms(): no params data found
[  277.584843][ T5872] Bluetooth: hci3: command tx timeout
[  278.177855][ T6920] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.230606][ T7027] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  278.262377][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.271967][ T6920] bridge_slave_0: entered allmulticast mode
[  278.304801][ T6920] bridge_slave_0: entered promiscuous mode
[  278.322859][ T6920] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.343605][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.359095][ T6920] bridge_slave_1: entered allmulticast mode
[  278.385507][ T6920] bridge_slave_1: entered promiscuous mode
[  278.782222][ T6920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.856813][ T6920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.699066][ T5872] Bluetooth: hci3: command tx timeout
[  279.720260][ T6920] team0: Port device team_slave_0 added
[  279.857336][ T6920] team0: Port device team_slave_1 added
[  280.115079][ T6983] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  280.124192][ T6983] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  280.132867][ T6983] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  280.449060][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.465891][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.592621][ T7055] netlink: 128 bytes leftover after parsing attributes in process `syz.2.248'.
[  280.653204][ T6920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.702111][ T6983] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  280.735207][ T7055] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  280.753826][ T7055] bridge2: entered allmulticast mode
[  280.770114][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.779340][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.928859][ T6920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.080494][ T7061] program syz.2.249 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  281.438922][ T6920] hsr_slave_0: entered promiscuous mode
[  281.466718][ T6920] hsr_slave_1: entered promiscuous mode
[  281.480521][ T6920] debugfs: 'hsr0' already exists in 'hsr'
[  281.497929][ T6920] Cannot create hsr debugfs directory
[  281.658429][ T7073] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608)
[  281.783712][ T7073] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  281.870749][ T7079] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608)
[  281.881271][ T7079] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  283.274117][ T5954] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  283.464089][ T5954] usb 4-1: Using ep0 maxpacket: 16
[  283.484046][   T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  283.496502][ T5954] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  283.512957][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.548935][ T5954] usb 4-1: Product: syz
[  283.577810][ T5954] usb 4-1: Manufacturer: syz
[  283.600872][ T5954] usb 4-1: SerialNumber: syz
[  283.632583][ T5954] usb 4-1: config 0 descriptor??
[  283.637897][   T43] usb 1-1: Using ep0 maxpacket: 32
[  283.658181][   T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.723891][   T43] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  283.863912][   T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  283.875685][ T6920] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  283.887839][   T43] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  283.909041][ T6920] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  283.916159][   T43] usb 1-1: Product: syz
[  283.930078][   T43] usb 1-1: Manufacturer: syz
[  283.954031][   T43] usb 1-1: SerialNumber: syz
[  283.969954][ T6920] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  284.030604][   T43] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6
[  284.051242][ T6920] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  284.097112][ T5954] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  284.122154][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  284.158173][ T5954] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  284.177115][ T5954] usb 4-1: media controller created
[  284.259018][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  284.355361][ T5954] zl10353_read_register: readreg error (reg=127, ret==0)
[  284.366713][ T6920] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.377279][ T5954] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  284.400126][ T5954] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  284.431720][ T6920] 8021q: adding VLAN 0 to HW filter on device team0
[  284.462057][ T5954] usb 4-1: USB disconnect, device number 12
[  284.489471][ T6983] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.496680][ T6983] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.566865][ T6983] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.574044][ T6983] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.667392][ T5954] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  284.839756][ T6920] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.062618][ T6920] veth0_vlan: entered promiscuous mode
[  285.182256][ T7136] program syz.3.262 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  285.206369][ T6920] veth1_vlan: entered promiscuous mode
[  285.288651][ T7138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.310396][ T7138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.432061][ T6920] veth0_macvtap: entered promiscuous mode
[  285.549227][ T6920] veth1_macvtap: entered promiscuous mode
[  285.602908][ T6920] batman_adv: batadv0: Interface activated: batadv_slave_0
[  285.639237][ T6920] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.061488][ T7138] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608)
[  286.107267][ T7138] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  286.276505][ T5970] usb 1-1: USB disconnect, device number 18
[  286.348414][ T5970] appletouch 1-1:1.0: input: appletouch disconnected
[  286.437439][   T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.505396][   T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.544424][   T64] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.573733][   T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.861590][ T6983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.900091][ T6983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.122498][ T7173] netlink: 'syz.3.266': attribute type 13 has an invalid length.
[  287.366966][ T7173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  287.433511][ T6925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.449632][ T6925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.680100][   T30] audit: type=1326 audit(1758527312.696:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  287.702112][    C0] vkms_vblank_simulate: vblank timer overrun
[  288.279116][   T30] audit: type=1326 audit(1758527312.736:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  288.301231][    C0] vkms_vblank_simulate: vblank timer overrun
[  288.347790][   T30] audit: type=1326 audit(1758527312.826:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  288.369887][    C0] vkms_vblank_simulate: vblank timer overrun
[  288.443925][   T30] audit: type=1326 audit(1758527312.826:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  288.466020][    C0] vkms_vblank_simulate: vblank timer overrun
[  288.790167][   T30] audit: type=1326 audit(1758527312.826:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  289.017821][   T30] audit: type=1326 audit(1758527312.826:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0535d8d590 code=0x7ffc0000
[  289.096180][   T30] audit: type=1326 audit(1758527312.826:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  289.162456][   T30] audit: type=1326 audit(1758527312.826:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  289.236337][   T30] audit: type=1326 audit(1758527312.826:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  289.379757][   T30] audit: type=1326 audit(1758527312.826:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  290.303755][ T2154] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  290.473744][ T2154] usb 2-1: Using ep0 maxpacket: 8
[  290.497165][ T2154] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  290.534237][ T2154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  290.553718][ T2154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  290.601197][ T2154] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad
[  290.613703][ T2154] usb 2-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3
[  290.631077][ T2154] usb 2-1: Product: syz
[  290.635486][ T2154] usb 2-1: Manufacturer: syz
[  290.640176][ T2154] usb 2-1: SerialNumber: syz
[  290.670769][ T2154] usb 2-1: config 0 descriptor??
[  290.705257][ T2154] smsusb:smsusb_probe: board id=2, interface number 0
[  290.765044][ T2154] smsusb:smsusb_probe: Device initialized with return code -19
[  291.073750][ T5872] Bluetooth: unknown link type 128
[  291.408066][ T7248] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  291.414305][ T7248] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  291.479009][ T7248] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  291.771741][ T7248] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  292.786060][ T7248] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  292.853879][ T7248] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  292.911877][ T7248] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  292.918527][ T7248] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  293.025705][ T7248] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  293.032959][ T7248] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  293.067255][ T7248] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  293.155525][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  293.155541][   T30] audit: type=1326 audit(1758527318.176:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f09c732ae09 code=0x7ffc0000
[  293.403814][ T5954] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  293.428344][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.286'.
[  293.439891][   T30] audit: type=1326 audit(1758527318.206:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c738ec29 code=0x7ffc0000
[  293.462124][ T5872] Bluetooth: hci0: command 0x0406 tx timeout
[  293.484332][   T30] audit: type=1326 audit(1758527318.206:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c738ec29 code=0x7ffc0000
[  293.516416][   T30] audit: type=1326 audit(1758527318.216:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f09c732ae09 code=0x7ffc0000
[  293.538410][    C1] vkms_vblank_simulate: vblank timer overrun
[  293.553377][ T5872] Bluetooth: hci2: command 0x0406 tx timeout
[  293.567590][   T30] audit: type=1326 audit(1758527318.216:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f09c732ae09 code=0x7ffc0000
[  293.619421][   T30] audit: type=1326 audit(1758527318.216:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c738ec29 code=0x7ffc0000
[  293.644650][ T5954] usb 5-1: Using ep0 maxpacket: 8
[  293.653738][ T5954] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  293.663213][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.671843][   T30] audit: type=1326 audit(1758527318.216:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f09c732ae09 code=0x7ffc0000
[  293.694071][ T5954] usb 5-1: Product: syz
[  293.699092][ T5954] usb 5-1: Manufacturer: syz
[  293.717977][ T7277] fuse: Unknown parameter '000000000000000000000150000000000000000000000300000000000000000000'
[  293.729072][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.286'.
[  293.740883][ T7277] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  293.758999][ T5954] usb 5-1: SerialNumber: syz
[  293.783954][ T5954] usb 5-1: config 0 descriptor??
[  293.794409][   T30] audit: type=1326 audit(1758527318.216:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c738ec29 code=0x7ffc0000
[  293.824764][ T5954] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  293.857758][   T30] audit: type=1326 audit(1758527318.216:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c738ec29 code=0x7ffc0000
[  293.882143][   T30] audit: type=1326 audit(1758527318.216:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c738ec29 code=0x7ffc0000
[  293.904212][    C1] vkms_vblank_simulate: vblank timer overrun
[  294.165963][   T43] usb 2-1: USB disconnect, device number 15
[  294.374353][ T1211] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  294.529117][ T7295] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1113132006 (1113132006 ns) > initial count (497682314 ns). Using initial count to start timer.
[  294.623794][ T1211] usb 4-1: Using ep0 maxpacket: 32
[  294.632734][ T1211] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  294.679915][ T7294] pim6reg: entered allmulticast mode
[  294.709678][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  294.755725][ T7300] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608)
[  294.774347][ T2154] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  294.779452][ T1211] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  294.796275][ T1211] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  294.817015][ T1211] usb 4-1: Product: syz
[  294.824188][ T5872] Bluetooth: hci1: command 0x0406 tx timeout
[  294.825956][ T7300] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  294.833211][ T1211] usb 4-1: Manufacturer: syz
[  294.859207][ T1211] usb 4-1: SerialNumber: syz
[  294.868433][ T1211] usb 4-1: config 0 descriptor??
[  294.911147][ T1211] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  294.929122][ T7269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.938824][ T7269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.979938][ T5872] Bluetooth: hci4: command 0x0406 tx timeout
[  295.053788][ T2154] usb 1-1: Using ep0 maxpacket: 8
[  295.054272][ T5872] Bluetooth: hci3: command 0x0c1a tx timeout
[  295.065089][ T5954] gspca_sonixj: reg_r err -110
[  295.069915][ T5954] sonixj 5-1:0.0: probe with driver sonixj failed with error -110
[  295.099351][   T24] usb 4-1: USB disconnect, device number 13
[  295.106257][ T6925] usb 4-1: Failed to submit usb control message: -71
[  295.113098][ T6925] usb 4-1: unable to send the bmi data to the device: -71
[  295.123760][ T6925] usb 4-1: unable to get target info from device
[  295.150210][ T6925] usb 4-1: could not get target info (-71)
[  295.165591][ T6925] usb 4-1: could not probe fw (-71)
[  295.176395][ T2154] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  295.316700][ T2154] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  295.351221][ T2154] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  295.390425][ T2154] usb 1-1: Product: syz
[  295.400889][ T2154] usb 1-1: Manufacturer: syz
[  295.411309][ T2154] usb 1-1: SerialNumber: syz
[  295.534453][ T5872] Bluetooth: hci0: command 0x0406 tx timeout
[  295.633423][ T5872] Bluetooth: hci2: command 0x0406 tx timeout
[  295.643402][ T2154] usb 1-1: Handspring Visor / Palm OS: No valid connect info available
[  295.716547][ T2154] usb 1-1: Handspring Visor / Palm OS: port 0, is for HotSync use
[  295.763237][ T2154] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  295.821129][ T2154] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2
[  295.848800][ T7296] netlink: 'syz.0.290': attribute type 1 has an invalid length.
[  295.871304][ T2154] usb 1-1: palm_os_3_probe - error -71 getting bytes available request
[  296.166290][ T2154] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[  296.239682][ T2154] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  296.279139][ T2154] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  296.613810][ T2154] usb 1-1: USB disconnect, device number 19
[  296.689459][ T2154] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  296.887245][ T2154] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  296.904266][ T5872] Bluetooth: hci1: command 0x0406 tx timeout
[  296.920709][ T5970] usb 5-1: USB disconnect, device number 17
[  296.997477][ T2154] visor 1-1:1.0: device disconnected
[  297.087706][ T5872] Bluetooth: hci4: command 0x0406 tx timeout
[  297.134461][ T5872] Bluetooth: hci3: command 0x0c1a tx timeout
[  297.434250][   T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  297.713852][   T24] usb 2-1: Using ep0 maxpacket: 32
[  297.748013][   T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  297.799980][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'.
[  297.826692][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.880472][   T24] usb 2-1: config 0 descriptor??
[  298.097584][   T24] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  298.279103][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  298.311299][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  298.348634][   T24] usb 2-1: media controller created
[  298.421484][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  298.712720][   T24] DVB: Unable to find symbol dib7000p_attach()
[  298.725296][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  298.843718][   T24] rc_core: IR keymap rc-dib0700-rc5 not found
[  298.917802][   T24] Registered IR keymap rc-empty
[  298.945709][   T24] dvb-usb: could not initialize remote control.
[  298.952326][   T24] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  299.001951][   T24] usb 2-1: USB disconnect, device number 16
[  299.110412][   T24] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  299.224827][ T5872] Bluetooth: hci3: command 0x0c1a tx timeout
[  299.305202][ T7367] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  299.311928][ T7367] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  299.403977][ T7367] vhci_hcd vhci_hcd.0: Device attached
[  299.574248][ T5954] vhci_hcd: vhci_device speed not set
[  299.633941][ T1211] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  299.651774][ T5954] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  299.851181][ T1211] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  299.902430][ T1211] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  299.923867][ T2154] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  300.397107][ T1211] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  300.412098][ T1211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.433308][ T2154] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  300.442604][ T2154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.459279][ T2154] usb 2-1: Product: syz
[  300.473020][ T2154] usb 2-1: Manufacturer: syz
[  300.492878][ T2154] usb 2-1: SerialNumber: syz
[  300.500376][ T7365] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  300.523581][ T1211] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  300.601076][ T2154] usb 2-1: config 0 descriptor??
[  300.800621][ T7368] vhci_hcd: connection reset by peer
[  300.877753][ T6925] vhci_hcd: stop threads
[  300.882028][ T6925] vhci_hcd: release socket
[  300.893614][ T6925] vhci_hcd: disconnect device
[  301.021716][ T1211] usb 1-1: USB disconnect, device number 20
[  301.129543][ T2154] airspy 2-1:0.0: Board ID: 00
[  301.135366][ T2154] airspy 2-1:0.0: Firmware version: 
[  301.627354][ T7395] netlink: 'syz.0.304': attribute type 10 has an invalid length.
[  301.660197][ T7395] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  302.194485][ T7411] fuse: Bad value for 'fd'
[  302.272179][ T2154] airspy 2-1:0.0: usb_control_msg() failed -110 request 11
[  302.297741][ T2154] airspy 2-1:0.0: Registered as swradio24
[  302.312833][ T2154] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  303.453759][ T7383] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  303.463987][ T5872] Bluetooth: hci0: command 0x0406 tx timeout
[  303.825643][ T7383] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  303.836839][ T7383] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  303.846092][ T7383] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  303.854268][ T7383] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  304.051093][ T1211] usb 2-1: USB disconnect, device number 17
[  304.193925][ T2154] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  304.263757][   T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  304.385526][ T2154] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  304.412560][ T2154] usb 5-1: config 0 interface 0 has no altsetting 0
[  304.432218][ T2154] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.18
[  304.512050][   T24] usb 4-1: Using ep0 maxpacket: 8
[  304.561064][   T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  304.570838][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  304.586626][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  304.607824][   T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  304.640447][ T2154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.690901][ T2154] usb 5-1: config 0 descriptor??
[  304.702961][ T7418] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  304.773750][   T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  304.820325][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.828614][ T5954] vhci_hcd: vhci_device speed not set
[  304.909280][ T7433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.921645][ T7433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.450593][   T24] usb 4-1: usb_control_msg returned -71
[  305.479303][   T24] usbtmc 4-1:16.0: can't read capabilities
[  305.496268][ T2154] usbhid 5-1:0.0: can't add hid device: -71
[  305.526016][ T2154] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  305.534470][ T5872] Bluetooth: hci2: command 0x0406 tx timeout
[  305.546452][   T24] usb 4-1: USB disconnect, device number 14
[  305.570030][ T2154] usb 5-1: USB disconnect, device number 18
[  305.853849][ T5872] Bluetooth: hci4: command 0x0406 tx timeout
[  305.859992][ T5873] Bluetooth: hci1: command 0x0406 tx timeout
[  305.933831][ T5872] Bluetooth: hci3: command 0x0c1a tx timeout
[  306.004223][ T5954] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  306.053836][ T7447] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.063514][ T7447] netlink: 148 bytes leftover after parsing attributes in process `syz.4.315'.
[  306.094314][   T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  306.153951][ T5954] usb 1-1: device descriptor read/64, error -71
[  306.315645][ T7452] fuse: Unknown parameter '000000000000000000000140000000000000000000000300000000000000000000'
[  306.329953][ T7452] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  306.357276][   T24] usb 4-1: Using ep0 maxpacket: 16
[  306.385343][   T24] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10
[  306.404939][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.414658][   T24] usb 4-1: Product: syz
[  306.418940][   T24] usb 4-1: Manufacturer: syz
[  306.423605][   T24] usb 4-1: SerialNumber: syz
[  306.437103][   T24] usb 4-1: config 0 descriptor??
[  306.448122][   T24] go7007 4-1:0.0: probe with driver go7007 failed with error -12
[  306.456022][ T5954] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  306.633814][ T5954] usb 1-1: device descriptor read/64, error -71
[  306.662032][   T24] usb 4-1: USB disconnect, device number 15
[  306.764883][ T5954] usb usb1-port1: attempt power cycle
[  307.197344][ T5954] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  307.270859][ T5954] usb 1-1: device descriptor read/8, error -71
[  307.403081][ T7447] syz.4.315 (7447): drop_caches: 2
[  307.507484][ T7459] mmap: syz.3.319 (7459) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  307.536481][ T7454] loop6: detected capacity change from 0 to 7
[  307.543210][ T7454] Dev loop6: unable to read RDB block 7
[  307.551832][ T5954] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  307.559812][ T7454]  loop6: AHDI p1 p2 p3 p4
[  307.573492][ T7454] loop6: partition table partially beyond EOD, truncated
[  307.603974][ T7454] loop6: p1 start 1868445818 is beyond EOD, truncated
[  307.611808][ T7454] loop6: p2 size 47 extends beyond EOD, truncated
[  307.624515][ T5954] usb 1-1: device descriptor read/8, error -71
[  307.643488][ T7454] loop6: p3 start 1886353253 is beyond EOD, truncated
[  307.747681][ T5954] usb usb1-port1: unable to enumerate USB device
[  308.847780][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  308.847797][   T30] audit: type=1326 audit(1758527333.866:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.4.324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa27d18ec29 code=0x0
[  308.876052][ T5954] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  308.970438][   T30] audit: type=1326 audit(1758527333.866:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.4.324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa27d18ec29 code=0x0
[  309.068111][ T5954] usb 2-1: Using ep0 maxpacket: 8
[  309.079994][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  309.109447][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  309.116174][ T7490] loop2: detected capacity change from 0 to 7
[  309.136521][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  309.151937][ T5954] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad
[  309.170239][ T5954] usb 2-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3
[  309.227364][ T5954] usb 2-1: Product: syz
[  309.231895][ T5954] usb 2-1: Manufacturer: syz
[  309.260849][ T7490] Dev loop2: unable to read RDB block 7
[  309.282368][ T5954] usb 2-1: SerialNumber: syz
[  309.316049][ T5954] usb 2-1: config 0 descriptor??
[  309.381150][ T7490]  loop2: unable to read partition table
[  309.390739][ T5954] smsusb:smsusb_probe: board id=2, interface number 0
[  309.398230][ T7490] loop2: partition table beyond EOD, truncated
[  309.405043][ T5954] smsusb:smsusb_probe: Device initialized with return code -19
[  309.422463][ T7490] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  309.670548][ T7507] loop2: detected capacity change from 0 to 7
[  309.705110][ T7507] Dev loop2: unable to read RDB block 7
[  309.712229][ T7507]  loop2: unable to read partition table
[  309.738093][ T7507] loop2: partition table beyond EOD, truncated
[  309.758930][ T7507] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  309.943729][ T5954] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  310.963865][ T5954] usb 1-1: Using ep0 maxpacket: 32
[  310.987722][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  311.003727][ T5956] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  311.018264][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.138723][ T5954] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  311.174041][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.189348][ T5954] usb 1-1: config 0 descriptor??
[  311.324267][ T5956] usb 4-1: Using ep0 maxpacket: 16
[  311.353308][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  311.364523][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  311.447989][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  311.480066][ T5956] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  311.509351][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  311.571981][ T5956] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  311.582614][ T5956] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  311.621218][ T5954] ft260 0003:0403:6030.0007: unknown main item tag 0x7
[  311.633864][ T5956] usb 4-1: Manufacturer: syz
[  311.671063][ T5956] usb 4-1: config 0 descriptor??
[  311.910004][ T5954] ft260 0003:0403:6030.0007: chip code: 6424 8183
[  311.921014][   T43] usb 2-1: USB disconnect, device number 18
[  312.078829][ T7523] loop8: detected capacity change from 0 to 8
[  312.088799][ T6114] Dev loop8: unable to read RDB block 8
[  312.099817][ T6114]  loop8: unable to read partition table
[  312.103735][ T5956] rc_core: IR keymap rc-hauppauge not found
[  312.111506][ T5956] Registered IR keymap rc-empty
[  312.113041][ T6114] loop8: partition table beyond EOD, truncated
[  312.129203][ T5954] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  312.147318][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  312.155366][ T7523] Dev loop8: unable to read RDB block 8
[  312.161398][ T7523]  loop8: unable to read partition table
[  312.171817][ T7523] loop8: partition table beyond EOD, truncated
[  312.183323][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  312.190826][ T7523] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  312.205301][ T5956] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  312.241373][ T5956] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9
[  312.273825][   T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  312.302031][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  312.331051][ T5954] ft260 0003:0403:6030.0007: failed to retrieve status: -32, no wakeup
[  312.351312][ T5954] ft260 0003:0403:6030.0007: failed to retrieve status: -32
[  312.365014][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  312.423804][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  312.484026][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  312.492803][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 245, setting to 64
[  312.514580][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  312.571620][ T7529] fuse: Unknown parameter '000000000000000000000140000000000000000000000300000000000000000000'
[  312.582339][   T43] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  312.610076][ T7529] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  312.617042][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  312.627096][ T2154] usb 1-1: USB disconnect, device number 25
[  312.628244][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.644401][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  312.663936][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  312.671220][   T43] usb 2-1: config 0 descriptor??
[  312.974042][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  312.994150][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  313.020536][ T5956] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  313.199277][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.291750][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.309757][   T43] ath6kl: Failed to submit usb control message: -71
[  313.327320][   T43] ath6kl: unable to send the bmi data to the device: -71
[  313.454972][ T5956] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  313.463507][   T43] ath6kl: Unable to send get target info: -71
[  313.598845][ T7536] netlink: 44 bytes leftover after parsing attributes in process `syz.3.336'.
[  313.754241][   T43] ath6kl: Failed to init ath6kl core: -71
[  313.769818][ T5956] usb 4-1: USB disconnect, device number 16
[  313.779131][   T43] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  313.801260][   T43] usb 2-1: USB disconnect, device number 19
[  314.086976][ T7541] loop2: detected capacity change from 0 to 7
[  314.129344][ T5954] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  314.155187][ T7541] Dev loop2: unable to read RDB block 7
[  314.291393][ T7541]  loop2: unable to read partition table
[  314.321939][ T7541] loop2: partition table beyond EOD, truncated
[  314.346368][ T7541] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  314.364705][ T5954] usb 5-1: Using ep0 maxpacket: 16
[  314.381879][ T5954] usb 5-1: config 8 has an invalid interface number: 39 but max is 0
[  314.413687][ T5954] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  314.441877][ T5954] usb 5-1: config 8 has no interface number 0
[  314.458695][ T5954] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  314.470453][ T5954] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0
[  314.481273][ T5954] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0
[  314.580534][ T5954] usb 5-1: config 8 interface 39 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  314.736438][ T5954] usb 5-1: config 8 interface 39 has no altsetting 0
[  314.759216][ T5954] usb 5-1: New USB device found, idVendor=05ac, idProduct=c6e7, bcdDevice=62.77
[  314.793897][ T5954] usb 5-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3
[  314.838751][ T5954] usb 5-1: Product: syz
[  314.849653][ T5954] usb 5-1: Manufacturer: syz
[  314.860685][ T5954] usb 5-1: SerialNumber: syz
[  314.861453][ T7562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.343'.
[  314.967884][ T7565] netlink: 48 bytes leftover after parsing attributes in process `syz.0.343'.
[  314.982919][ T7567] netlink: 64 bytes leftover after parsing attributes in process `syz.2.345'.
[  314.997941][ T7567] netlink: 'syz.2.345': attribute type 1 has an invalid length.
[  315.091256][ T5954] ipheth 5-1:8.39: Unable to find endpoints
[  315.103419][ T5954] usb 5-1: USB disconnect, device number 19
[  315.181764][ T7564] loop8: detected capacity change from 0 to 8
[  315.205226][ T6044] Dev loop8: unable to read RDB block 8
[  315.211650][ T6044]  loop8: unable to read partition table
[  315.218452][ T6044] loop8: partition table beyond EOD, truncated
[  315.259474][ T7564] Dev loop8: unable to read RDB block 8
[  315.318594][ T7571] fuse: Unknown parameter '000000000000000000000140000000000000000000000300000000000000000000'
[  315.336252][ T7571] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  315.383855][ T7564]  loop8: unable to read partition table
[  315.393959][ T7564] loop8: partition table beyond EOD, truncated
[  315.495441][ T7564] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  315.769898][ T7575] tipc: Started in network mode
[  315.775164][ T7575] tipc: Node identity fadf0228c765, cluster identity 4711
[  315.788144][ T7575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  315.942066][ T7575] tipc: Resetting bearer <eth:syzkaller0>
[  316.222842][ T7582] veth0_to_bridge: entered promiscuous mode
[  316.688161][ T7572] tipc: Disabling bearer <eth:syzkaller0>
[  317.069815][ T7580] veth0_to_bridge: left promiscuous mode
[  317.196867][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  317.206144][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  317.837500][ T7601] netlink: 'syz.3.350': attribute type 13 has an invalid length.
[  317.918122][ T7601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  319.033908][ T5956] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  319.263860][ T5956] usb 5-1: device descriptor read/64, error -71
[  319.553754][ T5956] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  319.622515][ T7637] netlink: 'syz.0.358': attribute type 1 has an invalid length.
[  319.652935][ T7637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.358'.
[  319.736742][ T5956] usb 5-1: device descriptor read/64, error -71
[  319.864169][ T5956] usb usb5-port1: attempt power cycle
[  320.206983][ T7642] fuse: Unknown parameter '000000000000000000000140000000000000000000000300000000000000000000'
[  320.274936][ T5956] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  320.300488][ T7642] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  320.350028][ T5956] usb 5-1: device descriptor read/8, error -71
[  320.410339][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.456311][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.561549][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.570404][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.607202][ T5956] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  320.636335][ T5956] usb 5-1: device descriptor read/8, error -71
[  320.661201][ T7649] program syz.2.360 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  320.761773][ T5956] usb usb5-port1: unable to enumerate USB device
[  322.105551][ T7666] tipc: Started in network mode
[  322.110467][ T7666] tipc: Node identity ac1414aa, cluster identity 4711
[  322.119659][ T7666] tipc: Enabled bearer <udp:syz2>, priority 10
[  322.130648][ T7666] tipc: Enabled bearer <ib:wg1>, priority 0
[  322.203768][   T10] usb 5-1: new low-speed USB device number 24 using dummy_hcd
[  322.423052][   T10] usb 5-1: device descriptor read/64, error -71
[  322.703751][   T10] usb 5-1: new low-speed USB device number 25 using dummy_hcd
[  322.856083][   T10] usb 5-1: device descriptor read/64, error -71
[  322.986197][   T10] usb usb5-port1: attempt power cycle
[  322.993790][   T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  323.125468][ T5956] tipc: Node number set to 2886997162
[  323.167089][   T43] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  323.176359][   T43] usb 4-1: config 0 has an invalid interface number: 2 but max is -1
[  323.219928][   T43] usb 4-1: config 0 has an invalid interface number: 2 but max is -1
[  323.254714][   T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  323.296620][   T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  323.333249][   T43] usb 4-1: config 0 has no interface number 0
[  323.333744][   T10] usb 5-1: new low-speed USB device number 26 using dummy_hcd
[  323.367933][   T43] usb 4-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  323.426275][   T10] usb 5-1: device descriptor read/8, error -71
[  323.493010][   T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  323.510348][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.548369][   T43] usb 4-1: Product: syz
[  323.569759][   T43] usb 4-1: Manufacturer: syz
[  323.589523][   T43] usb 4-1: SerialNumber: syz
[  323.616152][   T43] usb 4-1: config 0 descriptor??
[  323.663887][   T10] usb 5-1: new low-speed USB device number 27 using dummy_hcd
[  323.684648][   T10] usb 5-1: device descriptor read/8, error -71
[  323.696448][ T7677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.368'.
[  323.794210][   T10] usb usb5-port1: unable to enumerate USB device
[  324.004190][ T7682] netlink: 'syz.0.369': attribute type 13 has an invalid length.
[  324.169047][ T7682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  324.375086][   T43] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  324.382569][   T43] usb 4-1: MIDIStreaming interface descriptor not found
[  324.517331][   T43] usb 4-1: USB disconnect, device number 17
[  325.010161][   T43] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  325.236482][   T43] usb 4-1: Using ep0 maxpacket: 16
[  325.247219][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  325.271320][   T43] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  325.280989][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.293548][   T43] usb 4-1: Product: syz
[  325.403711][   T43] usb 4-1: Manufacturer: syz
[  325.412597][   T43] usb 4-1: SerialNumber: syz
[  325.432914][   T43] usb 4-1: config 0 descriptor??
[  325.439905][   T43] hub 4-1:0.0: bad descriptor, ignoring hub
[  325.448239][   T43] hub 4-1:0.0: probe with driver hub failed with error -5
[  325.462235][   T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  325.647206][ T2154] usb 4-1: USB disconnect, device number 18
[  325.901351][ T6845] udevd[6845]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  327.405062][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  327.703746][    T9] usb 4-1: Using ep0 maxpacket: 32
[  327.723077][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  327.772225][    T9] usb 4-1: config 9 has an invalid interface number: 3 but max is 2
[  327.796110][    T9] usb 4-1: config 9 contains an unexpected descriptor of type 0x2, skipping
[  327.838985][    T9] usb 4-1: config 9 has an invalid interface number: 150 but max is 2
[  327.877374][    T9] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  327.891226][   T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  328.086054][   T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  328.115215][   T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  328.208949][   T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  328.253986][    T9] usb 4-1: config 9 has no interface number 1
[  328.260107][    T9] usb 4-1: config 9 has no interface number 2
[  328.320317][    T9] usb 4-1: config 9 interface 150 altsetting 253 has a duplicate endpoint with address 0xD, skipping
[  328.406437][ T7731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.413688][    T9] usb 4-1: config 9 interface 150 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[  328.454935][ T7731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.473751][ T5956] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  328.493268][    T9] usb 4-1: config 9 interface 150 has no altsetting 0
[  328.556756][    T9] usb 4-1: New USB device found, idVendor=05c6, idProduct=9002, bcdDevice=b2.3d
[  328.569802][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.588740][    T9] usb 4-1: Product: syz
[  328.592928][    T9] usb 4-1: Manufacturer: syz
[  328.663857][ T5956] usb 2-1: device descriptor read/64, error -71
[  328.750086][    T9] usb 4-1: SerialNumber: syz
[  328.903741][ T5956] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  329.071058][ T5956] usb 2-1: device descriptor read/64, error -71
[  329.204251][ T5956] usb usb2-port1: attempt power cycle
[  329.373446][    T9] usb 4-1: USB disconnect, device number 19
[  329.593849][ T5956] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  329.698448][ T5956] usb 2-1: device descriptor read/8, error -71
[  330.003944][ T5956] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  330.163806][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  330.185284][ T5956] usb 2-1: device descriptor read/8, error -71
[  330.316933][ T5956] usb usb2-port1: unable to enumerate USB device
[  330.724832][    T9] usb 4-1: device descriptor read/64, error -71
[  330.767220][ T7748] netlink: 'syz.2.384': attribute type 8 has an invalid length.
[  330.974748][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  331.143932][    T9] usb 4-1: device descriptor read/64, error -71
[  331.295156][    T9] usb usb4-port1: attempt power cycle
[  331.318706][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'.
[  331.332081][ T7755] loop6: detected capacity change from 0 to 7
[  331.362792][ T7755] Dev loop6: unable to read RDB block 7
[  331.404063][ T7755]  loop6: AHDI p2 p3
[  331.408017][ T7755] loop6: partition table partially beyond EOD, truncated
[  331.448366][ T7755] loop6: p2 size 46 extends beyond EOD, truncated
[  331.703803][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  331.749280][ T6044] udevd[6044]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  331.783800][    T9] usb 4-1: device descriptor read/8, error -71
[  331.866423][   T30] audit: type=1326 audit(1758527356.866:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.0.389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09c738ec29 code=0x0
[  332.027110][ T7776] netlink: 'syz.2.391': attribute type 13 has an invalid length.
[  332.103976][    T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  332.137044][    T9] usb 4-1: device descriptor read/8, error -71
[  332.238273][ T7776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  332.256201][    T9] usb usb4-port1: unable to enumerate USB device
[  332.905407][ T7783] netlink: 188 bytes leftover after parsing attributes in process `syz.3.392'.
[  333.660564][ T7788] loop2: detected capacity change from 0 to 7
[  333.707677][ T7788] Dev loop2: unable to read RDB block 7
[  333.748261][ T7788]  loop2: unable to read partition table
[  333.912058][ T7788] loop2: partition table beyond EOD, truncated
[  333.932544][ T7788] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  334.569210][ T7804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.398'.
[  334.594091][ T7804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.398'.
[  334.833173][ T7806] tipc: Failed to remove unknown binding: 66,1,1/0:3812030793/3812030795
[  334.833239][ T7806] tipc: Failed to remove unknown binding: 66,1,1/0:3812030793/3812030795
[  334.839042][ T7806] netlink: 36 bytes leftover after parsing attributes in process `syz.4.397'.
[  335.096764][   T64] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  335.098473][   T64] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  335.098894][ T7606] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  335.098927][ T7606] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  335.744815][ T7819] loop6: detected capacity change from 0 to 7
[  335.768887][ T7819] Dev loop6: unable to read RDB block 7
[  335.768921][ T7819]  loop6: AHDI p2 p3
[  335.768948][ T7819] loop6: partition table partially beyond EOD, truncated
[  335.769141][ T7819] loop6: p2 size 46 extends beyond EOD, truncated
[  335.960953][ T6044] udevd[6044]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  335.971867][   T43] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  336.029695][ T7823] netlink: 'syz.2.403': attribute type 5 has an invalid length.
[  336.235156][   T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  336.277773][   T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  336.312789][   T43] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  336.334167][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  336.340960][ T7829] loop2: detected capacity change from 0 to 7
[  336.358739][   T43] usb 4-1: SerialNumber: syz
[  336.388295][ T7829] Dev loop2: unable to read RDB block 7
[  336.396599][ T7829]  loop2: unable to read partition table
[  336.402460][ T7829] loop2: partition table beyond EOD, truncated
[  336.429619][ T7829] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  337.849946][ T7858] loop6: detected capacity change from 0 to 7
[  337.866319][ T7860] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  337.926308][ T6114] Dev loop6: unable to read RDB block 7
[  337.945087][ T6114]  loop6: AHDI p2 p3
[  338.122550][ T6114] loop6: partition table partially beyond EOD, truncated
[  338.135818][ T6114] loop6: p2 size 46 extends beyond EOD, truncated
[  338.152883][ T7858] Dev loop6: unable to read RDB block 7
[  338.159059][ T7858]  loop6: AHDI p2 p3
[  338.163061][ T7858] loop6: partition table partially beyond EOD, truncated
[  338.179015][ T7858] loop6: p2 size 46 extends beyond EOD, truncated
[  338.469301][   T43] usb 4-1: 0:2 : does not exist
[  338.483114][   T43] usb 4-1: unit 5: unexpected type 0x0b
[  338.613921][   T43] usb 4-1: USB disconnect, device number 24
[  338.806399][ T6044] udevd[6044]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  338.846237][ T6114] udevd[6114]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  339.002285][ T6044] udevd[6044]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  339.497876][ T7874] netlink: 'syz.1.417': attribute type 10 has an invalid length.
[  339.523585][ T7874] syz_tun: entered promiscuous mode
[  339.581870][ T7874] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  339.683731][ T5956] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  339.843948][ T2154] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  339.897333][ T5956] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  339.906501][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.947561][ T5956] usb 1-1: Product: syz
[  339.965682][ T5956] usb 1-1: Manufacturer: syz
[  340.021589][ T5956] usb 1-1: SerialNumber: syz
[  340.094259][ T2154] usb 4-1: Using ep0 maxpacket: 32
[  340.304355][ T2154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.343204][ T2154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.360566][ T2154] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  340.397175][ T2154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.450547][ T2154] usb 4-1: config 0 descriptor??
[  341.122640][ T2154] usbhid 4-1:0.0: can't add hid device: -32
[  341.128999][ T2154] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[  341.504903][ T7901] netlink: 'syz.1.423': attribute type 13 has an invalid length.
[  341.511519][ T7905] loop6: detected capacity change from 0 to 7
[  341.523966][ T6044] Dev loop6: unable to read RDB block 7
[  341.529632][ T6044]  loop6: AHDI p2 p3
[  341.533988][ T6044] loop6: partition table partially beyond EOD, truncated
[  341.541603][ T5956] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  341.557776][ T7878] loop2: detected capacity change from 0 to 7
[  341.566793][ T6044] loop6: p2 size 46 extends beyond EOD, truncated
[  341.568243][ T7878] Dev loop2: unable to read RDB block 7
[  341.583924][ T7905] Dev loop6: unable to read RDB block 7
[  341.596504][ T7878]  loop2: unable to read partition table
[  341.598332][ T7905]  loop6: AHDI p2 p3
[  341.602580][ T7878] loop2: partition table beyond EOD, truncated
[  341.624645][ T7878] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  341.640457][ T7905] loop6: partition table partially beyond EOD, truncated
[  341.663931][ T7905] loop6: p2 size 46 extends beyond EOD, truncated
[  341.715384][ T7901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  341.734468][ T6044] udevd[6044]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  341.811206][ T6044] udevd[6044]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  341.831052][ T7878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.846162][ T7878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.862947][ T5956] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO
[  341.894531][ T5956] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  341.926361][ T5956] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  341.970621][ T5956] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  341.983596][ T5956] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  342.019046][ T5956] usb 1-1: USB disconnect, device number 26
[  342.138484][ T7918] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[  342.878024][ T5956] usb 4-1: USB disconnect, device number 25
[  343.847186][ T7947] fuse: Unknown parameter '000000000000000000000140000000000000000000000300000000000000000000'
[  343.884431][ T7947] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  344.010623][ T7951] loop6: detected capacity change from 0 to 7
[  344.024506][ T7951] Dev loop6: unable to read RDB block 7
[  344.031860][ T7951]  loop6: AHDI p2 p3
[  344.039354][ T7951] loop6: partition table partially beyond EOD, truncated
[  344.048918][ T7951] loop6: p2 size 46 extends beyond EOD, truncated
[  344.147929][ T6044] udevd[6044]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  344.174153][ T7918] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  344.180902][ T5872] Bluetooth: hci0: command 0x0406 tx timeout
[  344.198715][ T7918] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  344.360513][ T7957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.461143][ T7957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.611551][ T7957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.647519][ T7957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.809296][ T7967] netlink: 'syz.0.439': attribute type 13 has an invalid length.
[  344.858416][ T7967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  345.251841][ T7918] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  345.265201][ T7918] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  345.277201][ T7918] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  345.296798][ T7918] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  345.349187][ T7918] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  345.414151][ T7918] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  345.455696][ T7918] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  345.487964][ T7918] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  346.300977][ T7991] netlink: 32 bytes leftover after parsing attributes in process `syz.3.446'.
[  346.571215][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.447'.
[  346.598532][ T7994] bridge_slave_1: left allmulticast mode
[  346.607718][ T7994] bridge_slave_1: left promiscuous mode
[  346.632350][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.718385][ T7994] bridge_slave_0: left allmulticast mode
[  346.725243][ T7994] bridge_slave_0: left promiscuous mode
[  346.731665][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  346.747837][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.765393][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.345331][ T2154] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  347.474054][ T5956] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  347.486347][ T8015] netlink: 'syz.1.452': attribute type 10 has an invalid length.
[  347.517986][ T8015] 8021q: adding VLAN 0 to HW filter on device team0
[  347.532534][ T8015] bond0: (slave team0): Enslaving as an active interface with an up link
[  347.553738][ T2154] usb 5-1: Using ep0 maxpacket: 32
[  347.584913][ T2154] usb 5-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config
[  347.609330][ T2154] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  347.643807][ T2154] usb 5-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00
[  347.655783][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.683317][ T2154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.706299][ T5956] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  347.736904][ T2154] usb 5-1: config 0 descriptor??
[  347.783846][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.870634][ T5956] usb 4-1: Product: syz
[  347.888285][ T5956] usb 4-1: Manufacturer: syz
[  347.904826][ T5956] usb 4-1: SerialNumber: syz
[  347.915470][ T5956] usb 4-1: config 0 descriptor??
[  347.942721][ T5956] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  347.955353][ T2154] usb 5-1: USB disconnect, device number 28
[  348.115866][ T8023] netlink: 'syz.2.454': attribute type 14 has an invalid length.
[  348.131935][ T8021] netlink: 'syz.2.454': attribute type 1 has an invalid length.
[  348.193353][ T5956] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2
[  348.234095][    T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  348.275863][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  348.360743][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.408787][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.421330][ T8034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.439229][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.456189][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  348.460104][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.474232][ T8034] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.477723][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.493311][    T9] usb 2-1: config 1 interface 0 altsetting 16 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  348.497059][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.520883][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.530429][    T9] usb 2-1: config 1 interface 0 altsetting 16 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  348.545250][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  348.554966][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.562927][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  348.586840][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.600331][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.611587][    T9] usb 2-1: Product: ࠧ
[  348.623913][    T9] usb 2-1: Manufacturer: ѥ좓垵是送ࣻ꣓圯듋錃旷燵덉쌛悚䊳嗁‎콥嚳彆ⰺ嵊⥝莮㺂佸佚䭾焀덣磵灞ꡬᗖ銉茇ḃ챬Ꞓ랥삔您侼䆨寧酛╞벢놜槎叠㶭䆶㒱㧐ﾫⷋ䍠ᄞ报䮁舷께꟤蚨됺ꂊ꿐珊⧲臎槚齫ˎ뱷牨좕럚뭄暐瓥뤦嬋ઘ墀ᘃ輀昮鶑뾙맥ወ។₇ｊ䤊횽ᄀ㮣㌡
[  348.723487][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.768327][    T9] usb 2-1: SerialNumber: 会쵕骉ⅎⲰ㄃趗횞剻ꇙ䠁那笅殮㾬᭶홲믟ⶴ좰胙
[  348.775505][ T8009] netlink: 'syz.3.451': attribute type 1 has an invalid length.
[  348.788131][ T8009] netlink: 'syz.3.451': attribute type 1 has an invalid length.
[  348.802175][ T8019] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  348.813858][ T8019] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  348.829890][ T8009] netlink: 'syz.3.451': attribute type 1 has an invalid length.
[  349.074776][ T8009] netlink: 'syz.3.451': attribute type 1 has an invalid length.
[  349.566460][ T8009] netlink: 'syz.3.451': attribute type 1 has an invalid length.
[  349.616843][    T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  349.640641][ T8009] netlink: 'syz.3.451': attribute type 1 has an invalid length.
[  349.659164][    T9] usb 2-1: USB disconnect, device number 24
[  349.794743][ T8009] netlink: 'syz.3.451': attribute type 1 has an invalid length.
[  349.847077][ T5956] usb 4-1: USB disconnect, device number 26
[  350.180135][ T8057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.461'.
[  350.762226][ T8068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.462'.
[  350.794159][ T8071] loop2: detected capacity change from 0 to 7
[  350.802951][ T8071] Dev loop2: unable to read RDB block 7
[  350.808798][ T8071]  loop2: unable to read partition table
[  350.817622][ T8071] loop2: partition table beyond EOD, truncated
[  350.825264][ T8071] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  350.862958][ T8070] usb usb8: usbfs: process 8070 (syz.0.462) did not claim interface 0 before use
[  351.668548][ T8075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  352.039171][ T8083] tipc: Started in network mode
[  352.044230][ T8083] tipc: Node identity ac1414aa, cluster identity 4711
[  352.051927][ T8083] tipc: Enabled bearer <udp:s~z2>, priority 10
[  352.203816][ T5954] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  352.394524][ T5954] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  352.417724][ T5954] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  352.453429][ T5954] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  352.480486][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0
[  352.498813][ T5954] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  352.512527][ T5954] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  352.524011][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0
[  352.549273][ T5954] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  352.568477][ T5954] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  352.596464][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0
[  352.607204][ T5954] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  352.652610][ T5954] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  352.664061][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0
[  352.881414][ T5954] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  353.054070][ T5956] tipc: Node number set to 2886997162
[  353.071740][ T5954] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  353.111088][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0
[  353.122444][ T5954] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  353.132100][ T5954] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  353.172388][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0
[  353.197406][ T5954] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  353.206625][ T5954] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  353.218910][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0
[  353.228134][ T5954] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  353.237499][ T5954] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  353.249757][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0
[  353.283432][ T5954] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  353.294316][ T5954] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  353.302970][ T5954] usb 2-1: Product: syz
[  353.312075][ T5954] usb 2-1: Manufacturer: syz
[  353.327633][ T5954] usb 2-1: SerialNumber: syz
[  353.369518][ T5954] usb 2-1: config 0 descriptor??
[  353.432429][ T5954] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  353.664088][ T2154] usb 2-1: USB disconnect, device number 25
[  353.694085][ T2154] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  354.472304][ T8118] loop6: detected capacity change from 0 to 7
[  354.474013][ T5954] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  354.495504][ T8118] Dev loop6: unable to read RDB block 7
[  354.510339][ T8118]  loop6: AHDI p2 p3
[  354.523199][ T8118] loop6: partition table partially beyond EOD, truncated
[  354.544652][ T8118] loop6: p2 size 46 extends beyond EOD, truncated
[  354.638071][ T6044] udevd[6044]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  354.647963][ T1211] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  354.693741][ T5954] usb 1-1: Using ep0 maxpacket: 16
[  354.701263][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.756758][ T8123] validate_nla: 59 callbacks suppressed
[  354.756775][ T8123] netlink: 'syz.3.478': attribute type 13 has an invalid length.
[  354.825688][ T8123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  354.894295][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.912460][ T5954] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  354.924010][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.944940][ T5954] usb 1-1: config 0 descriptor??
[  354.995871][ T1211] usb 5-1: Using ep0 maxpacket: 32
[  355.024657][ T1211] usb 5-1: no configurations
[  355.030043][ T1211] usb 5-1: can't read configurations, error -22
[  355.203867][ T1211] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  355.365558][ T5954] hid-multitouch 0003:1FD2:6007.0008: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0
[  355.381133][ T1211] usb 5-1: Using ep0 maxpacket: 32
[  355.399151][ T1211] usb 5-1: no configurations
[  355.408895][ T1211] usb 5-1: can't read configurations, error -22
[  355.433125][ T1211] usb usb5-port1: attempt power cycle
[  355.628806][ T5954] usb 1-1: USB disconnect, device number 27
[  355.831985][ T1211] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  355.870905][ T1211] usb 5-1: Using ep0 maxpacket: 32
[  355.876883][ T1211] usb 5-1: no configurations
[  355.881835][ T1211] usb 5-1: can't read configurations, error -22
[  355.897318][ T8138] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  355.906377][ T8138] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  356.034216][ T1211] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  356.039408][ T8133] fido_id[8133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  356.085021][ T1211] usb 5-1: Using ep0 maxpacket: 32
[  356.091186][ T1211] usb 5-1: no configurations
[  356.097946][ T1211] usb 5-1: can't read configurations, error -22
[  356.106706][ T1211] usb usb5-port1: unable to enumerate USB device
[  356.171519][ T8140] sctp: [Deprecated]: syz.1.482 (pid 8140) Use of struct sctp_assoc_value in delayed_ack socket option.
[  356.171519][ T8140] Use struct sctp_sack_info instead
[  356.252994][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'.
[  356.265617][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'.
[  356.603752][ T5970] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  356.756637][ T5970] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  356.764777][ T5970] usb 1-1: config 0 has no interface number 0
[  356.780737][ T5970] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.800322][ T5970] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.841080][ T5970] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  356.871678][ T5970] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  356.901513][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.931146][ T5970] usb 1-1: config 0 descriptor??
[  357.612981][ T5970] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0009/input/input10
[  357.746946][ T8147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.755989][ T8147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.767425][ T8147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.805233][ T5970] uclogic 0003:28BD:0042.0009: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1
[  357.836794][ T8147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.864789][ T1211] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  357.985441][ T2154] usb 1-1: USB disconnect, device number 28
[  358.055563][ T1211] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  358.107146][ T1211] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  358.165694][ T8185] loop2: detected capacity change from 0 to 7
[  358.183571][ T1211] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  358.216432][ T8185] Dev loop2: unable to read RDB block 7
[  358.222079][ T8185]  loop2: unable to read partition table
[  358.235807][ T8185] loop2: partition table beyond EOD, truncated
[  358.244208][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.271094][ T8185] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  358.497870][ T1211] usb 5-1: usb_control_msg returned -32
[  358.513944][ T1211] usbtmc 5-1:16.0: can't read capabilities
[  358.576658][ T8192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.587505][ T8192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.619334][ T2154] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  358.635759][ T8189] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90
[  358.644909][ T8189] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90
[  358.866124][ T2154] usb 4-1: Using ep0 maxpacket: 8
[  358.893857][ T2154] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  358.918245][ T2154] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  358.961310][ T2154] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  358.974120][ T2154] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  358.993340][ T2154] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 128, changing to 11
[  359.080500][ T2154] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  359.095212][ T2154] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  359.111301][ T2154] usb 4-1: config 168 interface 0 has no altsetting 0
[  359.122884][ T2154] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  359.130752][ T2154] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  359.142443][ T2154] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  359.177668][ T2154] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  359.333852][ T5970] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  359.367870][ T2154] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 128, changing to 11
[  359.426956][ T2154] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  359.446881][ T2154] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  359.461913][ T2154] usb 4-1: config 168 interface 0 has no altsetting 0
[  359.489841][ T2154] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  359.497614][ T2154] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  359.511598][ T2154] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  359.614595][ T5970] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  359.636088][ T5970] usb 2-1: can't read configurations, error -22
[  359.673921][ T8208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  359.688280][ T2154] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  359.688716][ T8208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  359.700436][ T2154] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 128, changing to 11
[  359.723550][ T2154] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  359.737433][ T2154] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  359.752494][ T2154] usb 4-1: config 168 interface 0 has no altsetting 0
[  359.768517][ T2154] usb 4-1: string descriptor 0 read error: -22
[  359.776848][ T2154] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  359.789253][ T2154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.814743][ T5970] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  359.910554][ T2154] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  360.055124][ T8187] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90
[  360.422341][ T5970] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  360.749876][ T5970] usb 2-1: can't read configurations, error -22
[  360.761286][ T2154] usb 4-1: USB disconnect, device number 27
[  360.772576][ T5970] usb usb2-port1: attempt power cycle
[  360.829057][    T9] usb 5-1: USB disconnect, device number 33
[  361.125739][ T5970] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  361.156668][ T5970] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  361.165225][ T5970] usb 2-1: can't read configurations, error -22
[  361.294316][   T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  361.305072][ T5970] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  361.338774][ T5970] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  361.349142][ T5970] usb 2-1: can't read configurations, error -22
[  361.355511][    T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  361.366855][ T5970] usb usb2-port1: unable to enumerate USB device
[  361.463868][   T10] usb 4-1: Using ep0 maxpacket: 32
[  361.469667][   T10] usb 4-1: too many configurations: 132, using maximum allowed: 8
[  361.479183][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  361.486841][   T10] usb 4-1: can't read configurations, error -61
[  361.523741][    T9] usb 5-1: Using ep0 maxpacket: 32
[  361.529520][    T9] usb 5-1: no configurations
[  361.534405][    T9] usb 5-1: can't read configurations, error -22
[  361.623936][   T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  361.663792][    T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  361.773821][   T10] usb 4-1: Using ep0 maxpacket: 32
[  361.779846][   T10] usb 4-1: too many configurations: 132, using maximum allowed: 8
[  361.789332][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  361.797116][   T10] usb 4-1: can't read configurations, error -61
[  361.806911][   T10] usb usb4-port1: attempt power cycle
[  361.823855][    T9] usb 5-1: Using ep0 maxpacket: 32
[  361.829546][    T9] usb 5-1: no configurations
[  361.834565][    T9] usb 5-1: can't read configurations, error -22
[  361.841013][    T9] usb usb5-port1: attempt power cycle
[  362.143892][   T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  362.183818][    T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  362.192060][   T10] usb 4-1: Using ep0 maxpacket: 32
[  362.200263][   T10] usb 4-1: too many configurations: 132, using maximum allowed: 8
[  362.209875][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  362.219977][   T10] usb 4-1: can't read configurations, error -61
[  362.226891][    T9] usb 5-1: Using ep0 maxpacket: 32
[  362.232898][    T9] usb 5-1: no configurations
[  362.237771][    T9] usb 5-1: can't read configurations, error -22
[  362.363832][   T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  362.394794][   T10] usb 4-1: Using ep0 maxpacket: 32
[  362.407770][ T8231] netlink: 'syz.1.506': attribute type 13 has an invalid length.
[  362.437277][    T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  362.448267][   T10] usb 4-1: too many configurations: 132, using maximum allowed: 8
[  362.457411][ T8231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  362.474203][    T9] usb 5-1: Using ep0 maxpacket: 32
[  362.481685][    T9] usb 5-1: no configurations
[  362.486929][    T9] usb 5-1: can't read configurations, error -22
[  362.503320][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  362.511085][   T10] usb 4-1: can't read configurations, error -61
[  362.522426][    T9] usb usb5-port1: unable to enumerate USB device
[  362.532152][   T10] usb usb4-port1: unable to enumerate USB device
[  362.842672][   T30] audit: type=1326 audit(1758527387.856:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  362.893714][   T30] audit: type=1326 audit(1758527387.856:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  362.981867][   T30] audit: type=1326 audit(1758527387.856:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  363.008497][   T30] audit: type=1326 audit(1758527387.856:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  363.030656][   T30] audit: type=1326 audit(1758527387.856:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  363.054454][   T30] audit: type=1326 audit(1758527387.856:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  363.117045][   T30] audit: type=1326 audit(1758527387.856:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  363.156853][   T30] audit: type=1326 audit(1758527387.856:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  363.255969][   T30] audit: type=1326 audit(1758527387.856:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  363.349828][   T30] audit: type=1326 audit(1758527387.856:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0535d8ec29 code=0x7ffc0000
[  363.546899][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.569192][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.620262][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.643076][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.855112][ T8259] loop2: detected capacity change from 0 to 7
[  364.874835][ T8259] Dev loop2: unable to read RDB block 7
[  364.883827][ T8259]  loop2: unable to read partition table
[  364.905722][ T8259] loop2: partition table beyond EOD, truncated
[  364.936567][ T8259] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  365.123899][   T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  365.304842][ T5970] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  365.316319][   T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  365.333148][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.358450][   T10] usb 1-1: config 0 descriptor??
[  365.379824][   T10] cp210x 1-1:0.0: cp210x converter detected
[  365.481190][ T5970] usb 4-1: Using ep0 maxpacket: 8
[  365.492299][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  365.530096][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  365.566622][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  365.583529][ T5970] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad
[  365.616486][ T5970] usb 4-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3
[  365.998470][   T10] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  366.047740][   T10] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -32
[  366.059565][ T5970] usb 4-1: Product: syz
[  366.091504][   T10] cp210x 1-1:0.0: GPIO initialisation failed: -32
[  366.093278][ T8271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.100276][ T5970] usb 4-1: Manufacturer: syz
[  366.120832][   T10] usb 1-1: cp210x converter now attached to ttyUSB0
[  366.129247][ T5970] usb 4-1: SerialNumber: syz
[  366.142850][ T5970] usb 4-1: config 0 descriptor??
[  366.150278][ T5970] smsusb:smsusb_probe: board id=2, interface number 0
[  366.158364][ T5970] smsusb:smsusb_probe: Device initialized with return code -19
[  366.194430][ T8271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  367.241224][ T8291] tipc: Started in network mode
[  367.246396][ T8291] tipc: Node identity ac1414aa, cluster identity 4711
[  367.796162][   T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  367.826661][ T8291] tipc: Enabled bearer <udp:s~z2>, priority 10
[  367.977561][   T10] usb 2-1: Using ep0 maxpacket: 32
[  367.995081][   T10] usb 2-1: no configurations
[  368.006852][   T10] usb 2-1: can't read configurations, error -22
[  368.206163][   T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  368.397272][   T10] usb 2-1: Using ep0 maxpacket: 32
[  368.419438][   T10] usb 2-1: no configurations
[  368.442243][   T10] usb 2-1: can't read configurations, error -22
[  368.469986][ T1211] usb 1-1: USB disconnect, device number 29
[  368.480456][ T1211] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  368.502741][   T10] usb usb2-port1: attempt power cycle
[  368.509736][ T1211] cp210x 1-1:0.0: device disconnected
[  368.833777][ T1211] tipc: Node number set to 2886997162
[  368.894085][   T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  368.914522][   T10] usb 2-1: Using ep0 maxpacket: 32
[  368.916235][   T10] usb 2-1: no configurations
[  368.916254][   T10] usb 2-1: can't read configurations, error -22
[  369.073920][   T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  369.112885][   T10] usb 2-1: Using ep0 maxpacket: 32
[  369.113483][   T10] usb 2-1: no configurations
[  369.113493][   T10] usb 2-1: can't read configurations, error -22
[  369.114435][   T10] usb usb2-port1: unable to enumerate USB device
[  369.304613][   T10] usb 4-1: USB disconnect, device number 32
[  369.770779][ T8317] tty tty21: ldisc open failed (-12), clearing slot 20
[  369.892547][   T10] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  370.139185][ T8337] program syz.2.533 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  370.264443][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  370.283836][   T10] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  370.298985][ T8341] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.531'.
[  370.316760][ T8341] 8021q: VLANs not supported on sit0
[  370.326043][ T8341] netlink: 'syz.4.531': attribute type 12 has an invalid length.
[  370.374770][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.406739][   T10] usb 4-1: config 0 descriptor??
[  370.454243][ T8321] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  370.690276][   T10] elan 0003:04F3:0755.000A: unknown main item tag 0x0
[  370.706015][   T10] elan 0003:04F3:0755.000A: item fetching failed at offset 3/5
[  371.004341][   T10] elan 0003:04F3:0755.000A: Hid Parse failed
[  371.010471][   T10] elan 0003:04F3:0755.000A: probe with driver elan failed with error -22
[  371.263791][ T5956] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  371.452194][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.465418][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.477879][ T5956] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  371.487483][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.499456][ T5956] usb 1-1: config 0 descriptor??
[  371.531052][ T8355] netlink: 348 bytes leftover after parsing attributes in process `syz.1.536'.
[  371.536062][ T8357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.576503][ T8357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  372.171778][ T5956] usbhid 1-1:0.0: can't add hid device: -71
[  372.180148][ T5956] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  372.422107][ T5954] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  372.431922][ T5956] usb 1-1: USB disconnect, device number 30
[  372.474165][   T10] usb 4-1: USB disconnect, device number 33
[  372.604101][ T5954] usb 2-1: Using ep0 maxpacket: 32
[  372.619441][ T5954] usb 2-1: no configurations
[  372.627815][ T5954] usb 2-1: can't read configurations, error -22
[  372.805941][ T8375] tipc: Started in network mode
[  372.810945][ T8375] tipc: Node identity ac1414aa, cluster identity 4711
[  372.822269][ T8375] tipc: Enabled bearer <udp:s~z2>, priority 10
[  372.906695][ T5954] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  373.073870][   T43] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  373.144290][ T5954] usb 2-1: Using ep0 maxpacket: 32
[  373.150933][ T5954] usb 2-1: no configurations
[  373.157988][ T5954] usb 2-1: can't read configurations, error -22
[  373.197406][ T5954] usb usb2-port1: attempt power cycle
[  373.236075][   T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  373.248452][   T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  373.259028][   T43] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  373.271264][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  373.288286][   T43] usb 1-1: SerialNumber: syz
[  373.525124][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'.
[  373.543816][ T5954] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  373.552744][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'.
[  373.584324][ T5954] usb 2-1: Using ep0 maxpacket: 32
[  373.590210][ T5954] usb 2-1: no configurations
[  373.599719][ T5954] usb 2-1: can't read configurations, error -22
[  373.753719][ T5954] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  373.924508][ T5954] usb 2-1: Using ep0 maxpacket: 32
[  373.933919][ T5939] tipc: Node number set to 2886997162
[  373.959801][ T5954] usb 2-1: no configurations
[  373.967847][ T5954] usb 2-1: can't read configurations, error -22
[  373.989105][ T5954] usb usb2-port1: unable to enumerate USB device
[  374.586900][ T8396] netlink: 'syz.3.544': attribute type 13 has an invalid length.
[  374.674599][ T8396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  374.829823][ T8400] capability: warning: `syz.1.546' uses deprecated v2 capabilities in a way that may be insecure
[  375.197892][ T8406] loop6: detected capacity change from 0 to 7
[  375.402292][ T8406] Dev loop6: unable to read RDB block 7
[  375.408534][ T8406]  loop6: AHDI p2 p3
[  375.412727][ T8406] loop6: partition table partially beyond EOD, truncated
[  375.424131][ T8406] loop6: p2 size 46 extends beyond EOD, truncated
[  375.949601][ T6114] udevd[6114]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  376.002376][   T43] usb 1-1: 0:13 : does not exist
[  376.047464][   T43] usb 1-1: USB disconnect, device number 31
[  376.109188][ T6114] udevd[6114]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  376.388685][   T64] syzkaller0: tun_net_xmit 76
[  376.395582][   T64] syzkaller0: tun_net_xmit 48
[  376.414024][   T43] syzkaller0: tun_net_xmit 76
[  376.653867][   T31] INFO: task kworker/1:3:5866 blocked for more than 143 seconds.
[  376.661769][   T31]       Not tainted syzkaller #0
[  376.678084][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  376.697906][   T31] task:kworker/1:3     state:D stack:21368 pid:5866  tgid:5866  ppid:2      task_flags:0x4208060 flags:0x00004000
[  376.712696][   T31] Workqueue: usb_hub_wq hub_event
[  376.718288][   T31] Call Trace:
[  376.721758][   T31]  <TASK>
[  376.727458][   T31]  __schedule+0x1798/0x4cc0
[  376.732398][   T31]  ? __pfx___schedule+0x10/0x10
[  376.738653][   T31]  ? schedule+0x91/0x360
[  376.762134][   T31]  schedule+0x165/0x360
[  376.769787][   T31]  schedule_timeout+0x9a/0x270
[  376.776454][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  376.783157][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.986102][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.107335][   T31]  ? wait_for_completion+0x267/0x5d0
[  377.257684][   T31]  wait_for_completion+0x2bf/0x5d0
[  377.271686][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  377.284392][   T31]  i2c_del_adapter+0x581/0x6e0
[  377.292264][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[  377.312175][   T31]  ? rcu_is_watching+0x15/0xb0
[  377.320749][   T31]  ? dvb_usb_adapter_exit+0xd7/0x240
[  377.330538][   T31]  dvb_usb_i2c_exit+0x64/0xb0
[  377.429330][   T31]  dvb_usb_device_exit+0x1be/0x350
[  377.497727][   T31]  ? __pfx_dvb_usb_device_exit+0x10/0x10
[  377.561504][   T31]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  377.610266][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.643055][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  377.718681][   T31]  cxusb_probe+0x603/0x700
[  377.738532][   T31]  ? __pfx_cxusb_probe+0x10/0x10
[  377.761702][   T31]  ? __pm_runtime_set_status+0x785/0xa50
[  377.803692][   T31]  usb_probe_interface+0x668/0xc30
[  377.808859][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[  377.836060][   T31]  really_probe+0x26a/0x9e0
[  377.851062][   T31]  __driver_probe_device+0x18c/0x2f0
[  377.863816][   T31]  driver_probe_device+0x4f/0x430
[  377.868955][   T31]  __device_attach_driver+0x2ce/0x530
[  377.891338][   T31]  bus_for_each_drv+0x251/0x2e0
[  377.901867][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  377.909382][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  377.916195][   T31]  __device_attach+0x2b8/0x400
[  377.921059][   T31]  ? __pfx___device_attach+0x10/0x10
[  377.928207][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  377.933475][   T31]  bus_probe_device+0x185/0x260
[  377.939496][   T31]  device_add+0x7b6/0xb50
[  377.945597][   T31]  usb_set_configuration+0x1a87/0x20e0
[  377.951387][   T31]  usb_generic_driver_probe+0x8d/0x150
[  377.958275][   T31]  usb_probe_device+0x1c4/0x390
[  377.963251][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[  377.969857][   T31]  really_probe+0x26a/0x9e0
[  377.976007][   T31]  __driver_probe_device+0x18c/0x2f0
[  377.981374][   T31]  driver_probe_device+0x4f/0x430
[  377.987703][   T31]  __device_attach_driver+0x2ce/0x530
[  377.993287][   T31]  bus_for_each_drv+0x251/0x2e0
[  377.999488][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  378.005714][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  378.011242][   T31]  __device_attach+0x2b8/0x400
[  378.021267][   T31]  ? __pfx___device_attach+0x10/0x10
[  378.027564][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  378.032767][   T31]  bus_probe_device+0x185/0x260
[  378.037761][   T31]  device_add+0x7b6/0xb50
[  378.042270][   T31]  usb_new_device+0xa39/0x16f0
[  378.047147][   T31]  ? __pfx_usb_new_device+0x10/0x10
[  378.052516][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.057774][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.063123][   T31]  hub_event+0x2958/0x4a20
[  378.067669][   T31]  ? __pfx_hub_event+0x10/0x10
[  378.072537][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  378.078519][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.083888][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  378.089632][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  378.095660][   T31]  process_scheduled_works+0xae1/0x17b0
[  378.101233][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  378.107364][   T31]  worker_thread+0x8a0/0xda0
[  378.111964][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  378.118354][   T31]  ? __kthread_parkme+0x7b/0x200
[  378.123318][   T31]  kthread+0x70e/0x8a0
[  378.127579][   T31]  ? __pfx_worker_thread+0x10/0x10
[  378.132704][   T31]  ? __pfx_kthread+0x10/0x10
[  378.137384][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.142614][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.147905][   T31]  ? __pfx_kthread+0x10/0x10
[  378.152505][   T31]  ret_from_fork+0x439/0x7d0
[  378.157186][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  378.162310][   T31]  ? __switch_to_asm+0x39/0x70
[  378.167199][   T31]  ? __switch_to_asm+0x33/0x70
[  378.171991][   T31]  ? __pfx_kthread+0x10/0x10
[  378.176787][   T31]  ret_from_fork_asm+0x1a/0x30
[  378.181582][   T31]  </TASK>
[  378.202304][   T31] 
[  378.202304][   T31] Showing all locks held in the system:
[  378.216402][   T31] 2 locks held by ksoftirqd/1/23:
[  378.221455][   T31]  #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[  378.237778][   T31]  #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  378.246885][   T31] 1 lock held by khungtaskd/31:
[  378.251737][   T31]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  378.262194][   T31] 3 locks held by kworker/u8:2/36:
[  378.267340][   T31]  #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[  378.277364][   T31]  #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  378.286291][   T31]  #2: ffff8880b8625918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30
[  378.295560][   T31] 3 locks held by kworker/u8:4/64:
[  378.300670][   T31]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  378.312383][   T31]  #1: ffffc9000211fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  378.323610][   T31]  #2: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  378.332811][   T31] 2 locks held by getty/5629:
[  378.337822][   T31]  #0: ffff88814d1f60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  378.349420][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  378.359838][   T31] 5 locks held by kworker/1:3/5866:
[  378.365135][   T31]  #0: ffff88801bab5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  378.376661][   T31]  #1: ffffc9000403fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  378.388670][   T31]  #2: ffff88802807a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  378.397602][   T31]  #3: ffff88807d771198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  378.406903][   T31]  #4: ffff88807dbf2160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  378.416225][   T31] 1 lock held by syz.3.544/8393:
[  378.421153][   T31]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  378.430160][   T31] 2 locks held by syz.2.549/8418:
[  378.435204][   T31]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  378.444252][   T31]  #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  378.455229][   T31] 2 locks held by syz.0.551/8414:
[  378.460250][   T31]  #0: ffffffff8fa5aa90 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  378.469811][   T31]  #1: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  378.478954][   T31] 
[  378.485317][   T31] =============================================
[  378.485317][   T31] 
[  378.493842][   T31] NMI backtrace for cpu 0
[  378.493857][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  378.493876][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  378.493886][   T31] Call Trace:
[  378.493894][   T31]  <TASK>
[  378.493901][   T31]  dump_stack_lvl+0x189/0x250
[  378.493928][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  378.493947][   T31]  ? __pfx__printk+0x10/0x10
[  378.493981][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  378.494006][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  378.494030][   T31]  ? __pfx__printk+0x10/0x10
[  378.494055][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  378.494081][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  378.494106][   T31]  watchdog+0xf93/0xfe0
[  378.494131][   T31]  ? watchdog+0x1de/0xfe0
[  378.494158][   T31]  kthread+0x70e/0x8a0
[  378.494181][   T31]  ? __pfx_watchdog+0x10/0x10
[  378.494200][   T31]  ? __pfx_kthread+0x10/0x10
[  378.494221][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.494244][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.494259][   T31]  ? __pfx_kthread+0x10/0x10
[  378.494278][   T31]  ret_from_fork+0x439/0x7d0
[  378.494296][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  378.494318][   T31]  ? __switch_to_asm+0x39/0x70
[  378.494336][   T31]  ? __switch_to_asm+0x33/0x70
[  378.494351][   T31]  ? __pfx_kthread+0x10/0x10
[  378.494370][   T31]  ret_from_fork_asm+0x1a/0x30
[  378.494409][   T31]  </TASK>
[  378.494416][   T31] Sending NMI from CPU 0 to CPUs 1:
[  378.579185][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  378.582179][    C1] NMI backtrace for cpu 1
[  378.582193][    C1] CPU: 1 UID: 0 PID: 1303 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) 
[  378.582210][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  378.582220][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  378.582241][    C1] Code: e8 ae 00 70 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 7d d3 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 0a 8f 2d 06 cc 44 89 f9 80 e1 07
[  378.582255][    C1] RSP: 0018:ffffc9000452ee58 EFLAGS: 00000006
[  378.582269][    C1] RAX: 1ffffffff33bee05 RBX: 00000000000003f9 RCX: 0000000000000000
[  378.582281][    C1] RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020
[  378.582294][    C1] RBP: ffffc9000452f030 R08: 0000000000000003 R09: 0000000000000004
[  378.582304][    C1] R10: dffffc0000000000 R11: ffffffff854fac90 R12: dffffc0000000000
[  378.582315][    C1] R13: dffffc0000000000 R14: ffffffff99df7460 R15: 0000000000000000
[  378.582326][    C1] FS:  0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000
[  378.582339][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  378.582349][    C1] CR2: 0000200000404030 CR3: 00000000720ca000 CR4: 00000000003526f0
[  378.582363][    C1] Call Trace:
[  378.582369][    C1]  <TASK>
[  378.582378][    C1]  serial8250_console_write+0x581/0x1ba0
[  378.582402][    C1]  ? __lock_acquire+0xab9/0xd20
[  378.582423][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  378.582441][    C1]  ? console_flush_all+0x13a/0xc40
[  378.582458][    C1]  ? console_flush_all+0x13a/0xc40
[  378.582478][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  378.582494][    C1]  ? console_flush_all+0x13a/0xc40
[  378.582509][    C1]  ? console_flush_all+0x13a/0xc40
[  378.582526][    C1]  console_flush_all+0x725/0xc40
[  378.582543][    C1]  ? console_flush_all+0x13a/0xc40
[  378.582562][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  378.582585][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  378.582604][    C1]  console_unlock+0xc4/0x270
[  378.582628][    C1]  ? __pfx_console_unlock+0x10/0x10
[  378.582645][    C1]  ? vprintk_emit+0x444/0x7a0
[  378.582659][    C1]  ? vprintk_emit+0x444/0x7a0
[  378.582675][    C1]  vprintk_emit+0x5b7/0x7a0
[  378.582689][    C1]  ? vprintk_emit+0x444/0x7a0
[  378.582705][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  378.582721][    C1]  ? __pfx_snprintf+0x10/0x10
[  378.582746][    C1]  dev_vprintk_emit+0x337/0x3f0
[  378.582766][    C1]  ? __pfx_dev_vprintk_emit+0x10/0x10
[  378.582790][    C1]  dev_printk_emit+0xe0/0x130
[  378.582806][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  378.582828][    C1]  ? __pfx_dev_printk_emit+0x10/0x10
[  378.582844][    C1]  ? ieee802154_hdr_get_sechdr+0x3f/0x150
[  378.582865][    C1]  ? __asan_memcpy+0x40/0x70
[  378.582881][    C1]  ? skb_pull+0xc1/0x1d0
[  378.582902][    C1]  __netdev_printk+0x3d7/0x4d0
[  378.582925][    C1]  netdev_warn+0x10a/0x160
[  378.582941][    C1]  ? __pfx_netdev_warn+0x10/0x10
[  378.582963][    C1]  ? rcu_lockdep_current_cpu_online+0x37/0x120
[  378.582981][    C1]  ? rcu_read_lock_bh_held+0x79/0xe0
[  378.582996][    C1]  ? __pfx_rcu_read_lock_bh_held+0x10/0x10
[  378.583011][    C1]  ? __lock_acquire+0xab9/0xd20
[  378.583032][    C1]  ieee802154_subif_start_xmit+0x136/0x190
[  378.583050][    C1]  dev_hard_start_xmit+0x2d4/0x830
[  378.583076][    C1]  sch_direct_xmit+0x241/0x4b0
[  378.583099][    C1]  ? __pfx_sch_direct_xmit+0x10/0x10
[  378.583123][    C1]  __dev_queue_xmit+0x1857/0x3b50
[  378.583146][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  378.583166][    C1]  ? rcu_is_watching+0x15/0xb0
[  378.583180][    C1]  ? trace_sched_exit_tp+0x36/0x110
[  378.583201][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  378.583223][    C1]  ? do_raw_spin_lock+0x121/0x290
[  378.583244][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  378.583262][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  378.583287][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.583306][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.583322][    C1]  tx+0x6b/0x190
[  378.583339][    C1]  ? __pfx_tx+0x10/0x10
[  378.583355][    C1]  kthread+0x1cd/0x3e0
[  378.583375][    C1]  ? __pfx_kthread+0x10/0x10
[  378.583390][    C1]  ? __pfx_default_wake_function+0x10/0x10
[  378.583410][    C1]  ? __kthread_parkme+0x7b/0x200
[  378.583426][    C1]  ? __kthread_parkme+0x1a1/0x200
[  378.583445][    C1]  kthread+0x70e/0x8a0
[  378.583464][    C1]  ? __pfx_kthread+0x10/0x10
[  378.583479][    C1]  ? __pfx_kthread+0x10/0x10
[  378.583496][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.583515][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.583529][    C1]  ? __pfx_kthread+0x10/0x10
[  378.583546][    C1]  ret_from_fork+0x439/0x7d0
[  378.583562][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  378.583580][    C1]  ? __switch_to_asm+0x39/0x70
[  378.583596][    C1]  ? __switch_to_asm+0x33/0x70
[  378.583613][    C1]  ? __pfx_kthread+0x10/0x10
[  378.583634][    C1]  ret_from_fork_asm+0x1a/0x30
[  378.583656][    C1]  </TASK>
[  378.584207][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  378.584222][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  378.584242][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  378.584252][   T31] Call Trace:
[  378.584260][   T31]  <TASK>
[  378.584267][   T31]  dump_stack_lvl+0x99/0x250
[  378.584287][   T31]  ? __asan_memcpy+0x40/0x70
[  378.584306][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  378.584325][   T31]  ? __pfx__printk+0x10/0x10
[  378.584358][   T31]  vpanic+0x281/0x750
[  378.584384][   T31]  ? __pfx_vpanic+0x10/0x10
[  378.584402][   T31]  ? preempt_schedule+0xae/0xc0
[  378.584420][   T31]  ? preempt_schedule_common+0x83/0xd0
[  378.584443][   T31]  panic+0xb9/0xc0
[  378.584461][   T31]  ? __pfx_panic+0x10/0x10
[  378.584480][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  378.584509][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  378.584534][   T31]  watchdog+0xfd2/0xfe0
[  378.584560][   T31]  ? watchdog+0x1de/0xfe0
[  378.584585][   T31]  kthread+0x70e/0x8a0
[  378.584608][   T31]  ? __pfx_watchdog+0x10/0x10
[  378.584628][   T31]  ? __pfx_kthread+0x10/0x10
[  378.584649][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.584672][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.584687][   T31]  ? __pfx_kthread+0x10/0x10
[  378.584707][   T31]  ret_from_fork+0x439/0x7d0
[  378.584727][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  378.584749][   T31]  ? __switch_to_asm+0x39/0x70
[  378.584767][   T31]  ? __switch_to_asm+0x33/0x70
[  378.584786][   T31]  ? __pfx_kthread+0x10/0x10
[  378.584807][   T31]  ret_from_fork_asm+0x1a/0x30
[  378.584841][   T31]  </TASK>
[  378.588544][   T31] Kernel Offset: disabled