last executing test programs:

18.252267094s ago: executing program 3 (id=933):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000280)={0x14, 0x4, 0x3})
ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r9, 0xc0040d07, &(0x7f0000000040)=0x121)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd700000000000090000003c000380140002007663616e3000000000000000000000000800030000000000080001000200000014000600ff010000830000000000000000000001"], 0x50}}, 0x0)

16.959502001s ago: executing program 3 (id=935):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xf3f, 0x4)
sendto$packet(r1, &(0x7f0000000040)="3f031c000302140006001e008900", 0xe, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r2, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
rt_sigqueueinfo(0xffffffffffffffff, 0x1c, &(0x7f00000000c0)={0x11, 0x7, 0x4})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000740)={0x0})
waitid(0x1, r5, &(0x7f0000000200), 0x40000000, &(0x7f0000000680))
r6 = gettid()
prctl$PR_SCHED_CORE(0x3e, 0x2, r6, 0x1, &(0x7f0000000000))
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240020005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x1, 0x0, 0x8000}, 0x50)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000d1460cf8bbb5050407ddaf1ae1e0a6b83cf36c342d5100b8145b38032f7d6cebc5b40ed3911c889a6cd93f663ef1706c5bf762936f02cd935567deabce3527f1edea8dea70170f0dcba0655d23b07655942fe41b886de085ead2a025b575e4fa9bbc13393a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

12.705461194s ago: executing program 3 (id=945):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
socket(0x2000000000000021, 0x2, 0x10000000000002)
unshare(0x2040400)
syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$vbi(0x0, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001b00)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000c}, 0x2400c810)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
open_by_handle_at(r3, 0x0, 0x109200)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)

11.840866546s ago: executing program 3 (id=951):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000300000018110000", @ANYRES32, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0xfffffffc}, 0x94)
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x3a)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$RTC_ALM_SET(r2, 0x40247007, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000080)={0x8, 0x7fff, 0x10, 0x0, 0x0, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x3, 0x4, 0xeeee0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x481}, 0x2004c080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0x9, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000140))
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c)
syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700303a00fe88000000000000f8ec32f2b1c164595d9f4e0000000000000001ff0200000000000000000000000000010222907800641a00043a01ff010000000000000000000000000001ff010000000000000000"], 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), 0xffffffffffffffff)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x101, 0x5, 0x2, 0x800, 0x1, "f759e100edc710000000d9fc6300", '\x00', "0300", "fdff1310", ["8b59b4d766cbd6e4af000700", "c2fed6e1d2def593c99f2982", "000000ff0000000000000020", "0006488000000000001000"]})

10.373374867s ago: executing program 4 (id=954):
socket$nl_generic(0x10, 0x3, 0x10)
mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1000005, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
listen(r0, 0x40007)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x3, 0x1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r1, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x5, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000540)=""/67, 0x43}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000000440)=""/133, 0x85}]}, &(0x7f0000000140)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x1, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard')
r8 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1)
fsmount(r8, 0x0, 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0)

10.301239389s ago: executing program 3 (id=956):
socket$nl_generic(0x10, 0x3, 0x10)
mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1000005, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
listen(r0, 0x40007)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x3, 0x1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r1, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x5, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000540)=""/67, 0x43}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000000440)=""/133, 0x85}]}, &(0x7f0000000140)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x1, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard')
r8 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1)
fsmount(r8, 0x0, 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0)

7.872878128s ago: executing program 0 (id=961):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x8000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
io_setup(0x1, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f042})
connect$netlink(0xffffffffffffffff, &(0x7f0000000100)=@unspec, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000180)=0x9, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
io_submit(r0, 0x1, &(0x7f0000000040))
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
close(r3)
statx(r3, 0x0, 0x1000, 0x6000, 0x0)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000000)={{@my=0x0, 0xd6b0}, 0x1, 0x2, 0x6})
migrate_pages(0x0, 0x5, &(0x7f00000000c0)=0x100000001, &(0x7f0000000080)=0x2)

7.516535693s ago: executing program 1 (id=964):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

7.413470798s ago: executing program 0 (id=965):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000940)=0x4cb, 0x4)
sendmmsg$alg(r0, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b30000000000000000f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6924849e6098ed884e7cb51726b360fbb37b6fe034bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}, {&(0x7f0000000040)="e1d4313b495283bdb83fb043a67a5e23", 0x10}, {&(0x7f00000002c0)="54c1ee4851c1d6ccd3be49c6a43997be020d8142d41acd5f82dd296c4fe48571b034b0d0c0c186b22ac7557fa53f020f80be950a87c577eee3d64c77569b01a8af33b356ab9b4fc9496cce90f65dc100265216fcdffc165d9b7bc3213a515cf38a8ceb0987b6a39d2bf8820cec5386c4020dbe2260735faee151e2ec1b57cdfd952973b09cb7a8639b0332be6f7677a57a22a7", 0x93}, {&(0x7f0000000540)="25d134f7ce589fad1e9c6b4946d3d774c02b253755ad8834aee2baf2d1f9e2d9ff957e2a53af", 0x26}, {&(0x7f0000000580)="a1692033a99dda4f0f7286eac91acae77e68b78cdd38a104d55ea9ed42cfacc4f9cb5d4e9744b01d10c2c26ecd022e06f120de5decfbf7c0b0caf61dba430d26b03aa372eaee15f2f45bc240187a41283600b76fc943cb3e81dd2b92f8a9d1b13b7d6331f6ffa68d9a560680cfc9bc09700212b7a8a4e5", 0x77}, {&(0x7f00000017c0)="b33e741480949fc02e0d88b5993ed8853d44026f0bd4c8fb44e9d67b0d2b40bd2f93aa6d0f320497c003d6ac714ce3ce3433bbb335c0e306ec0c93ea7cc2636dd54b956effdeb959bb3c8b926ac0e8cb052953962d5243765761e3997157c8228bc29acb4c1afc06956af31a213247b6ccd023f3a07cd57ba89c036c38619f8b48639d40cb39d2e6b41a657059ab256a45c77042d0ddf99ed2b20e7bc7f10b431ca80e0a2b93366987b5c8a25b680e09b02194a61ca08f3504ec91915c8d99bd30a9aeebb19ee731b9fc04fa16f01c669add75f2b7d61e574dd1648cab9374dfd947999939cf4095a5ccf6d8626e3f691ec31540cbf17be0aabe552ca475239c82cc39f3fa10cfaaea26e6bd06f268de890a4f55e9b2d0e813b1ca40f549827eff9c68f8499e2889e98d3a9851d9feff06f637e405ce35121902d7f17ad1cec1f8a182a038a77117b6bccd54712fed2ac355f1d4710e5e78eec6c4500a59a3be177d7fee97d6017629ae0d7ee83aa035f11cb9f88c4c414f1d9249ef307ecec379ee0a744f93066167b124b910d68c980e544ff0c7903cdfa4d77bd9cf088d774c32e3c810cd722211824fc6232a8d0f75db188481d10e5811fc7aeec72c9c06d808c142c5b80bd97cd8c4065288b3d013dd31e39a9459da02b3deddfaac6e46ba4a9fa96a58403e8bf66e3fdbba06fac9a3626380b737f721820598dd37cde8576093c105c5bdd82f42030649b438e50b4fce67faeb30ad07d721dd7db7bc5efb434d5c7b99ec735bfda0df32e9a444be1817a921809fe0f9b3d006d6d2b72a92ff9f0995404b984410017e7e1427d541c76a3fa9a8a983cf5f61b24d6078a169386a716910cf8d85767c5d8fe2dee1031aec8bc35fd1456000291aaa29f8cfc89c89c92a91e30152f43fbb3c144c03f634a1403532cf81eaf81c3069e699b8d392a09fc8111a5443c984f41bc01deb4d19d210a6649e7ed7a3c304179b210fe269d6fbfb61be9a34b4757f45fd68f113fb33b01efd1c6c7a0ef5682338892016b40e2b8d6f8663f612f099713530e6fe22a3d8ad8ef7b721bfade9246000eb417d0aeb07af6295fac2c5c1d45f93e272688eb93b8006e21deaaa0cd238cd991e563c703605339af13945bf894b73a6c97e8c58b15078611544adef8c3375153cd5eda8406afb1121f6579a3ca5f3a1b1aaa17abb644f785394a9b51d68a5b53e01acb88d532339f9e23e4fb671a71161dd7e6b13352aece9bbd29b987bf4a829ffc500808f975fa3fd042ae5b98c0ad544a479d4d9e7a64a50af3a4f0dd0699d07b7d478345d2ef9d8bee081733f3d76eb0f1f8e60e71bcb6d78917304fabd203e358b0833b0e0cef5350df4481af0d25c57e1704af5c4fb9b669a3856d3f489224f83a1e68d594c1fe57041f341179763e6f1f39d3df88608953f4f9460bdf573fdbb5c2f5f050f33bc28d8ec8d9df11a85cb2ecc686e6e769a8ac826e846b38546c09cd61460bc209e88eacce43cdfd9a1db1aa05e73d87c2fb4fe640679a19322eebb3208b05936c7b287696a42fe9336816a462fb8e951395aa085592b87bcfa70e2b55080265a6ccb939a2061143945f91409ed0fad54dfde2fe95b4c5620f6951534b5c9cce26fa3a26e4eabd2bbfe650916d0e3f8e80d05a963ceb4e0160c0fb87e8291291ab011ed9c6d480a073f2146e2452cbb7f4f3b3e10561d1f7a06fbaa52c0b9612b6da1ab1d2df28de9dabf5433c494e120e974c8305c67f4c991f821a57d8fb76996023bb5c917566dc612d270687752694f4f56dbab14a93703af020ef281c20afdb1007d80add6c784a41ffbae37a9d337d3c3f9fb7006c816802dec669d22e4f6e0873018fc41e73665bdb9438f6eb188c2c173edfbf0ee042e4ba0045586c915a1ea2f4a049c446bd07cb2e92a6f071fec138855acc0097f3e30ccdb2a7aaf130dba3368cc94157636f1e8976e6ad0673e0360343eb850aa7bff47a3de49f313692aa29024cbe278a7e58e96ca0d79d2fbd617848a81c0643ecf0427f1d9508249ab9c057f5f8191c77408f6d526d3cfcd799352ac4ab6bfcd75691b3e0ff9ce06ace622b7fb9de51a31d43ea97434c7051c9fc657f152ea5b4eec936891e54bcf2e553b31ac984365d2094cc8e067a4e6100c1e671f0e423e47309e6150114ad0c395192200b957920fea2abdef3a9b70b6fa3aa1ec0c538cd7cfdb7c2cdfe02b1bdeeacdcc5ea986cb23b16239887e2f365b25a21e916ad74c4b138fae5422cab5028a845ed7dff8cc89998a5d1b0975364aec407899ffc700dcb8f95d2b2ff7d8a02547c645d5ad0a993a49a11439db34a27a1c51dbd5120c0548548e0859510be79d1318592cc41c5dbb7c5b78a712cd311c31b7eed133daed3ef000d52b5965415a831db741ce84ffbd114312ab22cf05c88c3c5af2737cc5881d30929e626899f466e58fb0d4d66279c992eed8feef083378d7f132fb4ee79e0a8ce3d769746a4b9912f0b7f4711ecf8c509febf432fc0a1b48b8a8fbe3549a76e2917891837e55296e5e3088208c5c59e1a04c89e119b3389c06b502e4cfa48be95cdc478ee3edc78ac7cba8c09b64bd9c1554a95c7845de975d57cb2b49b368cbcf8bbae4ff737c0fe4a33d47b4c365f9fea378a5611734bc6287e207be0b5b945acd09f2b6f8c307fc3d1fc3ae1361cc94fff3f1d3112b10dcc6029971365c2e98f5c10b4c9ebb03874093cc4f94b70516ca1bc4f8e38d021c88786520b24146701a91411835b87622be4ee6c417aef720c13fe2baed1a8c9cf5729a602a37c05720665638d15ca2b290e35c1433f2ee97d0a2c39cd8adb7900bb01c7941c3bca65803a17f2cff5a4f991889e5b2ab845edfae80f9f5cc5a762e87f89810a9ddd3e99791387b699dda7f1c04da29c049b25ef224d52a9fe02e2ba5f23cca6c53afa6f96f03d0aed58221e7d7237918c0b062f9e7553ade1a752219945404f6a3e8e582ff97aaf176dac329d4781293d06fb69cc70367928a5223ea6de615137643cf670ebf8318ee14f496cd317bfa9630cb83042d58e4cf5b8914ef9f2a3f41adc01bd1dba1dd8ab96292264bd46fe5adc72b46281da84c6e5e8cdedfdf430b27e1801e4f7d4165e1155401feaa105d4fe650dc2e59ae5176eabe2a9ebd75d9261799df0702b4606149000cd4a9cb4cf9325409d054233777c59ce9a568c1fb47e8dc8a60b0f007e355270dd7f69c3b63b92534bdb1e4ed2c837305c7d5b381b0b844f0db7c12839b45b387b6a954bb88f6b99c59c5b7c38f4dfce18cf85953e815c68c193c102f910202086c055d5b2cae9601a37ca8a0077d6fcf752d06fc9719d66432ef4dced269933864e054958edc187e09b2f3a91fd6a77d6feef52448013a1a1c2cd5f0bada4477ca40f6b3c2ccb080c1f7201fa416d96671bd645672785a67f1f4e2ac9b034ab0535cc75595571c9317b9383be1858edcd9b49f3f7167ac2b8fadfea1f0aba640a144d841afa086e1358439a4ecc41c120c5a3f6a2a59d906d4f261aa8f95ae6c3d008a09d91a096df03312902764e3724231d86341bb3ea0a78c57aa780b91ec7e5c6ed7c563add46deeb20d8f5bbb47c0183c0d56f5fa3e6a752707ab7a69381d75ccd342ef9affdef508ae790edf13b2ed6aabdcef4cf16eb6676a5473aa10147fe6f0238bd96264c7f3a13a411e7c492fc104b32f4f152ea2d7f7392006558221b265dc469acf59fe49c4fd5a622c480dbd287f256d50fa734fcd293bda82a73037a8833b261044bb0d031c60cd80423694a65abc3cb45170cca2408ceefce08a7d15b96b60afa2d00f58ceb4989eb449ffaf3a1756b43e093013fe0a5906ee6c840ff60d2eaf92213750c5db198d56b5bb1b1016af46654d724d9983924e8e07f07036ad5d065eb9c1bc34a4844d967c4138caf4ebe40ecebdccf3b98a2e46b217852b6dd76f8e65d8c50904e970cbc16896b84681fc51af539423e45db9f2d0758cf4a6d2299718c79df26aa408f6934ff3ebdccfa20192566af87a1ab4bd7d3a64dd30f81d4591eedf2ff05d4f79d57a2ed80015391355ced7f6624ff572e66b25bdd9630dc71390037bad26ce2a35a2621d2036754c6b82e509b0e118d69cc8461e38c2c715b2378a4f01f05d98d059df1b251d677a008320bd4ac7404c55eb9e061e6839869f91c055f0bddf30f910d420b05b632ae687152e8fcf939ef09fe1c162ecfc7e09de8e8b52965f6631b24fe9a688c9f4e391cd1030274bdc6812f22a0952e3cd4d697de8c197703d856c176472ea040cf35d62e990154ffa41665dbf7e54d7a95dd2d78fe687039e470a9e51829563e3e6f188edd798671c8c07c971b0458bb5a30318373f27b7808b53405940f76a13323ba0e5cdaca71bf8c35732a0d6e108809c280df449c0d514227dcedcec5de695e17b1f1cd0a0a99d3c66eac0dddcabe8ad409186d48228c5625e33b1a90f0eaef4c11bb817cd83ee1a3b7de4e64343f709e451b820156a551afcf3e9c494054047a5356a29307d7d1c8b53c53631e660f1a7ab96ac2b0740f625df249ab26848a445efa506ec8107f14af42605dd84dc4c635cc85f2992e8b49c3b238e35093c315eb3f9a391d3b6fedc8bc4282ff92c8b140837416c07e96c2e52f78a941a61f4c3392475e9e10927aca3526eca8e8a0816ce4940b71f09993411571c0921a90d0ceee59ac50cce5a08a9ab8884d067f5e8951c872b8954dccca48a3d9c4070bf142ee6858c05f3d9ecc3eb8e867103a2724d43d30b61ddb4f7fbb7ed6d5e4ab9661df9d9588e93e0163659", 0xd5b}], 0x8, 0x0, 0x0, 0x2000847}], 0x1, 0x40800)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x67, 0x1ff, {0x5, 0x4, 0x1, 0x2, 0x69d2, 0x66, 0xfff, 0x4, 0x21, 0x8, @multicast1, @multicast2}}}}}}, 0x0)

7.265732653s ago: executing program 0 (id=967):
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb90000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44010}, 0x20000004)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000005c0))
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r2)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0xc01, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a)
ioctl$PPPIOCGL2TPSTATS(r4, 0x40047459, 0x0)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000440)={r5, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e8332365000000000000000001", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}})
preadv2(r5, &(0x7f0000000240), 0x0, 0x6, 0x3, 0x0)
link(&(0x7f0000000000)='./file0\x00', 0x0)
preadv2(r3, 0x0, 0x0, 0x4, 0x9, 0xb)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x8000000}, 0x1c)

6.645851632s ago: executing program 1 (id=968):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000000008c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
setns(0xffffffffffffffff, 0x66020000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002020702500000000002020207b1af8ff00000000bfa100000000000007012000f8ff62ffb702000008000000b70300000000000085000000c800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
umount2(0x0, 0x2)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)

5.321046911s ago: executing program 2 (id=969):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r1, 0xffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
io_setup(0x9, &(0x7f0000000b80)=<r4=>0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca0000", 0x1e}], 0x1}, 0x0)
io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}])
write$binfmt_script(r3, 0x0, 0x0)
r6 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10)

5.232217192s ago: executing program 1 (id=970):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
keyctl$reject(0x13, 0x0, 0x80000000, 0x1856, 0x0)
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)

5.153596564s ago: executing program 0 (id=971):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a000000050004000000000009"], 0x4c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x4c}}, 0x4000080)

4.523534239s ago: executing program 0 (id=972):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000300000018110000", @ANYRES32, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0xfffffffc}, 0x94)
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x3a)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$RTC_ALM_SET(r2, 0x40247007, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000080)={0x8, 0x7fff, 0x10, 0x0, 0x0, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x3, 0x4, 0xeeee0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x481}, 0x2004c080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0x9, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000140))
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c)
syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700303a00fe88000000000000f8ec32f2b1c164595d9f4e0000000000000001ff0200000000000000000000000000010222907800641a00043a01ff010000000000000000000000000001ff010000000000000000"], 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x101, 0x5, 0x2, 0x800, 0x1, "f759e100edc710000000d9fc6300", '\x00', "0300", "fdff1310", ["8b59b4d766cbd6e4af000700", "c2fed6e1d2def593c99f2982", "000000ff0000000000000020", "0006488000000000001000"]})

4.008102754s ago: executing program 2 (id=973):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0)
madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
r7 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, r7, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340), 0x0, 0x60, 0xfffffffefefffffe}}], 0x48, 0x8004}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
read$FUSE(r2, &(0x7f0000002280)={0x2020}, 0x2020)

3.911911522s ago: executing program 3 (id=974):
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r3=>0xffffffffffffffff})
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
r6 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d7729d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7187e45a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f00000000", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b237409", 0x6a}, {&(0x7f0000000300)="77729a", 0x3}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, <r8=>0xffffffffffffffff})
ppoll(&(0x7f0000000000)=[{r8}], 0x1, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, 0x0, 0x0)
r10 = socket(0x1e, 0x1, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x127081)
shutdown(r10, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)

3.866075371s ago: executing program 0 (id=975):
ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0xfffffffffffffff7})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_ADAP_G_CONNECTOR_INFO(r0, 0x8044610a, &(0x7f00000000c0))
keyctl$reject(0x13, 0x0, 0x80000000, 0x1856, 0x0)
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)

3.843860867s ago: executing program 4 (id=976):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0, 0x4}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb011d9c516b96ec5}, 0x2000c054)

2.889377817s ago: executing program 4 (id=977):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000940)=0x4cb, 0x4)
sendmmsg$alg(r0, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b30000000000000000f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6924849e6098ed884e7cb51726b360fbb37b6fe034bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}, {&(0x7f0000000040)="e1d4313b495283bdb83fb043a67a5e23", 0x10}, {&(0x7f00000002c0)="54c1ee4851c1d6ccd3be49c6a43997be020d8142d41acd5f82dd296c4fe48571b034b0d0c0c186b22ac7557fa53f020f80be950a87c577eee3d64c77569b01a8af33b356ab9b4fc9496cce90f65dc100265216fcdffc165d9b7bc3213a515cf38a8ceb0987b6a39d2bf8820cec5386c4020dbe2260735faee151e2ec1b57cdfd952973b09cb7a8639b0332be6f7677a57a22a7", 0x93}, {&(0x7f0000000540)="25d134f7ce589fad1e9c6b4946d3d774c02b253755ad8834aee2baf2d1f9e2d9ff957e2a53af", 0x26}, {&(0x7f0000000580)="a1692033a99dda4f0f7286eac91acae77e68b78cdd38a104d55ea9ed42cfacc4f9cb5d4e9744b01d10c2c26ecd022e06f120de5decfbf7c0b0caf61dba430d26b03aa372eaee15f2f45bc240187a41283600b76fc943cb3e81dd2b92f8a9d1b13b7d6331f6ffa68d9a560680cfc9bc09700212b7a8a4e5", 0x77}, {&(0x7f00000017c0)="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", 0xd5b}], 0x8, 0x0, 0x0, 0x2000847}], 0x1, 0x40800)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x67, 0x1ff, {0x5, 0x4, 0x1, 0x2, 0x69d2, 0x66, 0xfff, 0x4, 0x21, 0x8, @multicast1, @multicast2}}}}}}, 0x0)

2.747132257s ago: executing program 2 (id=978):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe800000000000000000ffffdd8600aaff020000000000000000000000000001"], 0x10da)

2.672818682s ago: executing program 4 (id=979):
socket$kcm(0x2, 0x3, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r3=>0xffffffffffffffff})
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
r6 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d7729d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7187e45a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f00000000", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b237409", 0x6a}, {&(0x7f0000000300)="77729a", 0x3}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, <r8=>0xffffffffffffffff})
ppoll(&(0x7f0000000000)=[{r8}], 0x1, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, 0x0, 0x0)
r10 = socket(0x1e, 0x1, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x127081)
shutdown(r10, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)

1.969600544s ago: executing program 2 (id=980):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
socket(0x2000000000000021, 0x2, 0x10000000000002)
unshare(0x2040400)
syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$vbi(0x0, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001b00)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000c}, 0x2400c810)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
open_by_handle_at(r4, 0x0, 0x109200)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)

1.91093203s ago: executing program 1 (id=981):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000002300)=@o_path={0x0, 0x0, 0x4000}, 0x18)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x208400, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_open_dev$video(0x0, 0x7, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
lseek(r1, 0xfffffffffffffff5, 0x1)
mount$fuse(0x0, 0x0, 0x0, 0xa0001c, &(0x7f0000002640)=ANY=[])
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0x2c000010)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002004000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000026600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

1.299110846s ago: executing program 4 (id=982):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a000000050004000000000009"], 0x4c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x4c}}, 0x4000080)

829.298136ms ago: executing program 1 (id=983):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r1, 0xffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
io_setup(0x9, &(0x7f0000000b80)=<r4=>0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca0000", 0x1e}], 0x1}, 0x0)
io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}])
write$binfmt_script(r3, 0x0, 0x0)
r6 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10)

761.438232ms ago: executing program 4 (id=984):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d0000005e5e24818327b2369d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="200e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x3137, 0x1829, 0x0, 0x0}], 0x1})

679.46769ms ago: executing program 2 (id=985):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xff\xff\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\x8d5\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x86\xca\xd0k\xb0\x1b\xe96\xedpm\xcc\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009\xf7\x81\xf4\xa9j\xc9\xbb\xf8\xf2K\"\x86\xf5h\xf5;\xd2\xaf\x9b\xea\xef-\xd7\xd6\xfa\x97-*\\\x98bE\r\xdc\x89\xd8&\x91\x1c+\x15\x89\xd7\xa7ceT\xea`5\xf9\x88\n \xdcA\xa6\x10\x93\"\xa4Y\x84\xee\xb2\xf9\xa9\x80uf\xab\xb3\xd1\x10i\x94x\x0f\xee\x94j2\xf9\x9ah\xf3b\x19P4\\\xad\xbaX]\xbc\xbbTA\x17d\a\x8fa\xe0\xc3K\x959'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38d"}, 0x109)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x7000000, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}})

45.393923ms ago: executing program 1 (id=986):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, 0x0, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x1e4224, 0x1598cc})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x1)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000407b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1002, &(0x7f0000000880)=""/4121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffe65}, 0x23)
r5 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000680)={{0x3, @netrom}, [@default, @netrom, @netrom, @remote, @remote, @null, @netrom, @default]}, &(0x7f0000000280)=0x48, 0x800)
recvfrom$ax25(r5, &(0x7f0000000700)=""/112, 0x70, 0x20, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x1, r2, 'id1\x00'})

0s ago: executing program 2 (id=987):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_mreq(r4, 0x88, 0x68, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'vlan0\x00', 0xc201})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x308)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0xea60}}, 0x0)
pwrite64(r3, &(0x7f0000000040)="272df13b93bc418e56098f6c01cbca3a8226d1417a7adf26deffb68c6cb5fd81af7de3ee9aa9f22ed8efc7d4eb06f7afabe96cbd293f281fe1d35eb5dfb84a7315865e7bdb9519b3905e9122a83095f687197d66aa6c3ecd00bee67629", 0x5d, 0x0)

kernel console output (not intermixed with test programs):

ith parent 'hsr' already present!
[   79.694470][ T5832] Cannot create hsr debugfs directory
[   79.705065][ T5846] team0: Port device team_slave_0 added
[   79.759292][ T5846] team0: Port device team_slave_1 added
[   79.837106][ T5842] hsr_slave_0: entered promiscuous mode
[   79.843381][ T5842] hsr_slave_1: entered promiscuous mode
[   79.850003][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.857920][ T5842] Cannot create hsr debugfs directory
[   79.928474][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.939344][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.966062][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.001810][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.009469][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.035742][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.231615][ T5846] hsr_slave_0: entered promiscuous mode
[   80.238664][ T5846] hsr_slave_1: entered promiscuous mode
[   80.244723][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.253117][ T5846] Cannot create hsr debugfs directory
[   80.453861][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   80.468305][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   80.493940][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   80.519922][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   80.603373][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.613287][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.638834][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.654889][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   80.743132][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.759791][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   80.796745][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   80.807272][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   80.884536][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.899278][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.929865][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.941197][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.065805][ T5849] Bluetooth: hci0: command tx timeout
[   81.092770][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.099754][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.123348][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   81.135572][ T5849] Bluetooth: hci1: command tx timeout
[   81.147474][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   81.159805][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   81.183448][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.216046][ T5849] Bluetooth: hci2: command tx timeout
[   81.216373][ T5840] Bluetooth: hci4: command tx timeout
[   81.249756][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   81.284967][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   81.295778][ T5840] Bluetooth: hci3: command tx timeout
[   81.302538][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.310062][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.328459][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.360003][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.367320][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.379404][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.386506][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.418703][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.425864][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.441168][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   81.464087][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.471433][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.486932][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.518463][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.525707][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.569174][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   81.651937][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.659135][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.691924][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.699173][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.854945][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.042856][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   82.110153][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.164474][ T4443] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.171686][ T4443] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.246571][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.253794][ T4443] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.474344][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.618901][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.661385][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.724455][ T5836] veth0_vlan: entered promiscuous mode
[   82.789060][ T5836] veth1_vlan: entered promiscuous mode
[   82.849524][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.900769][ T5841] veth0_vlan: entered promiscuous mode
[   82.909039][ T5832] veth0_vlan: entered promiscuous mode
[   82.939382][ T5841] veth1_vlan: entered promiscuous mode
[   82.964758][ T5832] veth1_vlan: entered promiscuous mode
[   82.975140][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.071729][ T5836] veth0_macvtap: entered promiscuous mode
[   83.102168][ T5836] veth1_macvtap: entered promiscuous mode
[   83.112832][ T5841] veth0_macvtap: entered promiscuous mode
[   83.131605][ T5842] veth0_vlan: entered promiscuous mode
[   83.138021][ T5840] Bluetooth: hci0: command tx timeout
[   83.156971][ T5841] veth1_macvtap: entered promiscuous mode
[   83.177464][ T5842] veth1_vlan: entered promiscuous mode
[   83.210046][ T5832] veth0_macvtap: entered promiscuous mode
[   83.218779][ T5840] Bluetooth: hci1: command tx timeout
[   83.233661][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.260562][ T5832] veth1_macvtap: entered promiscuous mode
[   83.284008][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.301183][ T5840] Bluetooth: hci4: command tx timeout
[   83.305507][ T5849] Bluetooth: hci2: command tx timeout
[   83.320883][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.331160][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.341375][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.350791][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.372074][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.381119][ T5849] Bluetooth: hci3: command tx timeout
[   83.398425][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.435179][ T5842] veth0_macvtap: entered promiscuous mode
[   83.474478][ T5842] veth1_macvtap: entered promiscuous mode
[   83.490227][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.502171][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.515740][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.524479][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.536642][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.568402][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.592609][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.602281][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.611929][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.621993][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.654079][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.671415][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.719444][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.730489][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.740719][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.749612][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.821831][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.834804][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.890751][ T5846] veth0_vlan: entered promiscuous mode
[   83.924032][ T5846] veth1_vlan: entered promiscuous mode
[   83.925628][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.939611][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.995194][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.004526][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.063149][ T5846] veth0_macvtap: entered promiscuous mode
[   84.098426][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.098807][ T5846] veth1_macvtap: entered promiscuous mode
[   84.123568][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.124578][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   84.208345][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.217495][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.234296][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.243327][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.291121][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.343768][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.366925][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.369649][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.374772][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.389631][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.400577][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.420828][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.589682][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.607955][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.753720][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.802178][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.919717][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.928932][ T5968] overlayfs: failed to resolve './file0': -2
[   84.942179][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.236444][ T5837] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   85.251188][ T5849] Bluetooth: hci0: command tx timeout
[   85.296429][ T5840] Bluetooth: hci1: command tx timeout
[   85.309257][ T5974] loop6: detected capacity change from 0 to 524287999
[   85.332585][ T5974] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.341461][ T5974] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.350696][ T5974] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.368501][ T5974] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.376689][ T5840] Bluetooth: hci4: command tx timeout
[   85.376818][ T5840] Bluetooth: hci2: command tx timeout
[   85.389551][ T5974] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.399162][ T5974] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.408550][ T5974] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.417480][ T5974] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.425974][ T5974] ldm_validate_partition_table(): Disk read failed.
[   85.433131][ T5974] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.442129][ T5974] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.452918][ T5974] Dev loop6: unable to read RDB block 0
[   85.459131][ T5849] Bluetooth: hci3: command tx timeout
[   85.473245][ T5974]  loop6: unable to read partition table
[   85.509145][   T30] audit: type=1326 audit(1755814085.894:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5954 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246958ebe9 code=0x7fc00000
[   85.535010][ T5974] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[   85.635553][ T5837] usb 3-1: Using ep0 maxpacket: 16
[   85.715970][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   85.771093][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   85.775309][   T30] audit: type=1326 audit(1755814086.054:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5954 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f246958ebe9 code=0x7fc00000
[   85.858850][ T5837] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   85.927877][   T30] audit: type=1326 audit(1755814086.054:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5954 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246958ebe9 code=0x7fc00000
[   85.941783][ T5837] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[   85.976611][ T5981] loop2: detected capacity change from 0 to 7
[   86.029988][ T5981] Dev loop2: unable to read RDB block 7
[   86.074644][ T5981]  loop2: unable to read partition table
[   86.132562][ T5981] loop2: partition table beyond EOD, truncated
[   86.149770][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.157970][ T5837] usb 3-1: Product: syz
[   86.162780][ T5837] usb 3-1: Manufacturer: syz
[   86.167445][ T5837] usb 3-1: SerialNumber: syz
[   86.179521][ T5837] usb 3-1: config 0 descriptor??
[   86.195547][ T5981] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   87.050415][ T5988] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   87.165656][   T24] cfg80211: failed to load regulatory.db
[   87.785699][ T5837] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[   87.945648][ T5837] gspca_stv06xx: st6422 sensor detected
[   88.311187][ T5837] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71
[   88.326587][ T5837] usb 3-1: USB disconnect, device number 2
[   88.416174][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   88.424448][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   88.433577][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   88.632003][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   88.656548][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   88.734846][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   88.744918][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   88.816926][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   88.825727][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   88.836709][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   88.946977][ T6003] binder: 6002:6003 ioctl c0306201 200000000280 returned -14
[   89.619991][ T6013] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   91.696180][ T6023] binder: 6022:6023 ioctl c0306201 2000000008c0 returned -14
[   91.985402][ T6034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24'.
[   92.065085][ T6036] Zero length message leads to an empty skb
[   92.620219][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'.
[   93.307986][ T6054] loop2: detected capacity change from 0 to 1
[   93.324914][ T6054] ldm_validate_privheads(): Disk read failed.
[   93.380372][ T6054] Dev loop2: unable to read RDB block 1
[   93.435451][ T6054]  loop2: AHDI p2 p3
[   93.470592][ T6054] loop2: partition table partially beyond EOD, truncated
[   93.513344][ T6054] loop2: p3 start 335544320 is beyond EOD, truncated
[   93.685375][ T5971] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   93.733097][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'.
[   93.867683][ T5971] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[   93.879194][ T5971] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   93.889882][ T5971] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   93.899886][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.312344][ T6059] syz.3.32 uses obsolete (PF_INET,SOCK_PACKET)
[   94.602172][ T6067] ubi31: attaching mtd0
[   94.633295][ T6067] ubi31: scanning is finished
[   94.638466][ T6067] ubi31: empty MTD device detected
[   95.350601][ T6071] delete_channel: no stack
[   95.549169][ T6067] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[   95.558018][ T6067] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   95.663283][ T6067] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[   95.671573][ T6067] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[   95.679400][ T6067] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   95.687480][ T6067] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[   95.713542][ T6067] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3410899204
[   95.743801][ T6067] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   95.775385][ T6072] ubi31: background thread "ubi_bgt31d" started, PID 6072
[   95.900581][ T5971] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[   95.967267][ T5971] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input5
[   96.132570][ T5971] input: failed to attach handler kbd to device input5, error: -5
[   96.814811][ T5971] usb 4-1: USB disconnect, device number 2
[   97.496787][ T6087] loop8: detected capacity change from 0 to 7
[   97.743673][ T6087] Dev loop8: unable to read RDB block 7
[   97.750411][ T6087]  loop8: AHDI p1 p2 p3
[   97.754824][ T6087] loop8: partition table partially beyond EOD, truncated
[   97.764285][ T6087] loop8: p1 start 1601398130 is beyond EOD, truncated
[   97.771216][ T6087] loop8: p2 start 1702059890 is beyond EOD, truncated
[   98.485719][   T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   99.295328][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.317949][   T10] usb 4-1: config 0 has no interfaces?
[   99.424203][   T10] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[   99.444426][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.476836][   T10] usb 4-1: config 0 descriptor??
[   99.510272][ T6123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.45'.
[   99.621562][ T6121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.933219][ T6141] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  100.933219][ T6141] The task syz.2.48 (6141) triggered the difference, watch for misbehavior.
[  101.167140][ T6140] netlink: 32 bytes leftover after parsing attributes in process `syz.1.49'.
[  101.364677][   T10] usb 4-1: USB disconnect, device number 3
[  102.888119][ T6159] netlink: 92 bytes leftover after parsing attributes in process `syz.1.54'.
[  104.379591][ T6175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.60'.
[  105.293848][ T6178] xt_connbytes: Forcing CT accounting to be enabled
[  105.301559][ T6178] Cannot find set identified by id 0 to match
[  106.729280][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  106.896273][   T10] usb 5-1: Using ep0 maxpacket: 16
[  106.937871][   T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  106.954076][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.000889][   T10] usb 5-1: Product: syz
[  107.035331][   T10] usb 5-1: Manufacturer: syz
[  107.040088][   T10] usb 5-1: SerialNumber: syz
[  107.096286][   T10] usb 5-1: config 0 descriptor??
[  107.120071][   T10] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  107.536030][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.625932][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.838260][   T10] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110
[  108.094886][   T10] usb 5-1: USB disconnect, device number 2
[  108.781403][ T6238] loop6: detected capacity change from 0 to 524287999
[  108.784000][ T6224] comedi comedi3: pcmda12: I/O port conflict (0xa,16)
[  108.813351][ T6238] buffer_io_error: 7 callbacks suppressed
[  108.813391][ T6238] Buffer I/O error on dev loop6, logical block 0, async page read
[  108.829337][ T6238] Buffer I/O error on dev loop6, logical block 0, async page read
[  108.839679][ T6238] Buffer I/O error on dev loop6, logical block 0, async page read
[  108.848599][ T6238] Buffer I/O error on dev loop6, logical block 0, async page read
[  108.857487][ T6238] Buffer I/O error on dev loop6, logical block 0, async page read
[  108.914361][ T6238] Buffer I/O error on dev loop6, logical block 0, async page read
[  108.924742][ T6238] Buffer I/O error on dev loop6, logical block 0, async page read
[  108.933808][ T6238] Buffer I/O error on dev loop6, logical block 0, async page read
[  108.943104][ T6238] ldm_validate_partition_table(): Disk read failed.
[  108.950636][ T6238] Buffer I/O error on dev loop6, logical block 0, async page read
[  108.959673][ T6238] Buffer I/O error on dev loop6, logical block 0, async page read
[  108.971809][ T6238] Dev loop6: unable to read RDB block 0
[  108.983766][ T6238]  loop6: unable to read partition table
[  108.995811][ T6238] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  109.533230][ T6248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.81'.
[  109.574549][ T6250] FAULT_INJECTION: forcing a failure.
[  109.574549][ T6250] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  109.634714][ T6250] CPU: 0 UID: 0 PID: 6250 Comm: syz.0.80 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  109.634740][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  109.634758][ T6250] Call Trace:
[  109.634768][ T6250]  <TASK>
[  109.634777][ T6250]  dump_stack_lvl+0x189/0x250
[  109.634803][ T6250]  ? __pfx____ratelimit+0x10/0x10
[  109.634824][ T6250]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.634843][ T6250]  ? __pfx__printk+0x10/0x10
[  109.634878][ T6250]  should_fail_ex+0x414/0x560
[  109.634902][ T6250]  _copy_to_user+0x31/0xb0
[  109.634927][ T6250]  simple_read_from_buffer+0xe1/0x170
[  109.634950][ T6250]  proc_fail_nth_read+0x1df/0x250
[  109.634976][ T6250]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  109.634999][ T6250]  ? rw_verify_area+0x258/0x650
[  109.635024][ T6250]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  109.635047][ T6250]  vfs_read+0x200/0x980
[  109.635077][ T6250]  ? __pfx___mutex_lock+0x10/0x10
[  109.635098][ T6250]  ? __pfx_vfs_read+0x10/0x10
[  109.635127][ T6250]  ? __fget_files+0x2a/0x420
[  109.635151][ T6250]  ? __fget_files+0x3a0/0x420
[  109.635171][ T6250]  ? __fget_files+0x2a/0x420
[  109.635201][ T6250]  ksys_read+0x145/0x250
[  109.635231][ T6250]  ? __pfx_ksys_read+0x10/0x10
[  109.635252][ T6250]  ? do_syscall_64+0xbe/0x3b0
[  109.635275][ T6250]  do_syscall_64+0xfa/0x3b0
[  109.635293][ T6250]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.635312][ T6250]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.635331][ T6250]  ? clear_bhb_loop+0x60/0xb0
[  109.635352][ T6250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.635370][ T6250] RIP: 0033:0x7f2d7098d5fc
[  109.635393][ T6250] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  109.635408][ T6250] RSP: 002b:00007f2d71818030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  109.635427][ T6250] RAX: ffffffffffffffda RBX: 00007f2d70bb5fa0 RCX: 00007f2d7098d5fc
[  109.635441][ T6250] RDX: 000000000000000f RSI: 00007f2d718180a0 RDI: 000000000000000a
[  109.635453][ T6250] RBP: 00007f2d71818090 R08: 0000000000000000 R09: 0000000000000000
[  109.635465][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.635475][ T6250] R13: 00007f2d70bb6038 R14: 00007f2d70bb5fa0 R15: 00007ffec611b118
[  109.635506][ T6250]  </TASK>
[  109.961761][ T6254] netlink: 92 bytes leftover after parsing attributes in process `syz.4.82'.
[  110.628814][    T9] IPVS: starting estimator thread 0...
[  111.445465][ T6268] IPVS: using max 27 ests per chain, 64800 per kthread
[  111.529168][ T6262] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[  111.539244][ T6262] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[  112.249965][ T6279] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.401233][ T6287] netlink: 'syz.3.90': attribute type 10 has an invalid length.
[  113.948030][ T6303] loop6: detected capacity change from 0 to 524287999
[  113.965550][ T6303] buffer_io_error: 7 callbacks suppressed
[  113.965589][ T6303] Buffer I/O error on dev loop6, logical block 0, async page read
[  113.982527][ T6303] Buffer I/O error on dev loop6, logical block 0, async page read
[  114.036972][ T6287] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  114.175658][ T6303] Buffer I/O error on dev loop6, logical block 0, async page read
[  114.215642][ T6303] Buffer I/O error on dev loop6, logical block 0, async page read
[  114.367703][ T6303] Buffer I/O error on dev loop6, logical block 0, async page read
[  114.596555][ T6303] Buffer I/O error on dev loop6, logical block 0, async page read
[  114.609258][ T6303] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.339202][ T6303] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.348381][ T6303] ldm_validate_partition_table(): Disk read failed.
[  115.386192][ T6303] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.394135][ T6303] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.463339][ T6303] Dev loop6: unable to read RDB block 0
[  116.081768][ T6303]  loop6: unable to read partition table
[  116.114949][ T6303] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  116.529580][ T6338] syz.3.98 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  118.536057][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.102'.
[  118.941366][ T6365] netlink: 'syz.1.106': attribute type 10 has an invalid length.
[  119.129923][ T6365] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  120.141976][ T5905] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  120.505407][ T5905] usb 1-1: Using ep0 maxpacket: 8
[  120.941308][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D
[  120.955582][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  121.051647][ T5905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[  121.074976][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[  121.091201][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  121.127852][ T5905] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f
[  121.142873][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.153953][ T5905] usb 1-1: Product: syz
[  121.162418][ T5905] usb 1-1: Manufacturer: syz
[  121.167219][ T5905] usb 1-1: SerialNumber: syz
[  121.192877][ T5905] usb 1-1: config 0 descriptor??
[  122.176379][ T5905] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  122.225426][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  122.262188][ T5905] usb 1-1: USB disconnect, device number 2
[  122.422846][    T9] usb 3-1: Using ep0 maxpacket: 32
[  123.415578][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.478565][    T9] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  123.501749][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  123.543193][    T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  123.568121][    T9] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  123.580222][    T9] usb 3-1: Product: syz
[  123.584523][    T9] usb 3-1: Manufacturer: syz
[  123.601781][    T9] usb 3-1: SerialNumber: syz
[  123.638298][    T9] usb 3-1: config 0 descriptor??
[  123.657056][    T9] gs_usb 3-1:0.0: Required endpoints not found
[  123.804217][ T6419] binder: 6418:6419 ioctl c0306201 200000000280 returned -14
[  124.990185][ T5971] usb 3-1: USB disconnect, device number 3
[  127.768028][ T6459] netlink: 92 bytes leftover after parsing attributes in process `syz.2.129'.
[  128.584756][ T6471] warning: `syz.0.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  129.021275][ T6477] support for cryptoloop has been removed.  Use dm-crypt instead.
[  129.171576][ T6476] binder: 6470:6476 ioctl c0306201 200000000280 returned -14
[  130.105657][ T5971] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  130.275342][ T5971] usb 2-1: Using ep0 maxpacket: 8
[  130.292584][ T5971] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  130.617567][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.684442][ T5971] pvrusb2: Hardware description: Terratec Grabster AV400
[  130.693892][ T5971] pvrusb2: **********
[  130.705456][ T5971] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  130.724349][ T5971] pvrusb2: Important functionality might not be entirely working.
[  130.733593][ T5971] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  130.755399][ T5837] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  130.783272][ T5971] pvrusb2: **********
[  130.854443][ T2343] pvrusb2: Invalid write control endpoint
[  131.075491][ T5837] usb 4-1: Using ep0 maxpacket: 16
[  131.082204][ T5837] usb 4-1: too many configurations: 60, using maximum allowed: 8
[  131.094446][ T2343] pvrusb2: Invalid write control endpoint
[  131.293165][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  131.335761][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  131.455321][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  131.616934][ T2343] pvrusb2: Device being rendered inoperable
[  131.898283][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  131.921753][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  131.934299][ T2343] pvrusb2: Attached sub-driver cx25840
[  131.944332][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  131.986090][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  132.059948][ T5837] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9
[  132.073100][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204
[  132.082190][ T5837] usb 4-1: Product: syz
[  132.086757][ T5837] usb 4-1: Manufacturer: syz
[  132.091377][ T5837] usb 4-1: SerialNumber: syz
[  132.105436][ T5837] usb 4-1: config 0 descriptor??
[  132.122276][ T5837] pwc: Philips SPC 880NC USB webcam detected.
[  132.780417][ T5837] pwc: Warning: more than 1 configuration available.
[  132.838036][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  132.862474][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  133.955391][ T5837] pwc: Failed to set LED on/off time (-71)
[  134.022423][ T5837] pwc: send_video_command error -71
[  134.036652][ T5837] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  134.056405][ T5837] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  134.078429][ T5837] usb 4-1: USB disconnect, device number 4
[  134.109720][ T5971] usb 2-1: USB disconnect, device number 2
[  134.144458][ T6516] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  134.775470][ T5905] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  134.785886][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.143'.
[  135.038700][ T6530] 9pnet_fd: Insufficient options for proto=fd
[  135.048893][ T6530] fuse: Bad value for 'fd'
[  135.691515][ T5905] usb 4-1: Using ep0 maxpacket: 8
[  135.801132][ T5905] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  135.815561][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.877551][ T6535] tipc: Started in network mode
[  135.882974][ T6535] tipc: Node identity 7f000001, cluster identity 4711
[  135.895190][ T5905] pvrusb2: Hardware description: Terratec Grabster AV400
[  135.914009][ T5905] pvrusb2: **********
[  135.919586][ T6535] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  135.935249][ T5905] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  135.959233][ T5905] pvrusb2: Important functionality might not be entirely working.
[  135.979483][ T5905] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  136.001638][ T5905] pvrusb2: **********
[  136.030233][ T6540] netlink: 'syz.2.149': attribute type 29 has an invalid length.
[  136.075772][ T6540] netlink: 'syz.2.149': attribute type 3 has an invalid length.
[  136.095520][ T2343] pvrusb2: Invalid write control endpoint
[  136.121154][ T6540] netlink: 56 bytes leftover after parsing attributes in process `syz.2.149'.
[  136.309983][ T6518] netlink: 'syz.3.144': attribute type 21 has an invalid length.
[  136.326036][ T5905] usb 4-1: USB disconnect, device number 5
[  136.814204][ T2343] pvrusb2: Invalid write control endpoint
[  136.863810][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  136.877175][ T6549] netlink: 'syz.4.154': attribute type 10 has an invalid length.
[  136.898141][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  136.932653][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  136.955712][ T2343] pvrusb2: Device being rendered inoperable
[  136.983202][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  137.000840][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  137.118656][ T2343] pvrusb2: Attached sub-driver cx25840
[  137.124176][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  137.135041][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  137.192495][ T6549] team0: Port device wlan1 added
[  137.197817][ T6552] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  137.204559][ T6552] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  137.226013][ T6552] vhci_hcd vhci_hcd.0: Device attached
[  137.568891][    T9] usb 37-1: new high-speed USB device number 2 using vhci_hcd
[  137.965507][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  138.571711][   T24] usb 2-1: Using ep0 maxpacket: 16
[  138.607799][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  138.668196][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  138.716409][   T24] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  138.719496][ T6574] program syz.0.153 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  138.752680][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.772025][   T24] usb 2-1: Product: syz
[  138.782593][   T24] usb 2-1: Manufacturer: syz
[  138.794197][   T24] usb 2-1: SerialNumber: syz
[  138.820394][   T24] usb 2-1: config 0 descriptor??
[  138.856176][   T24] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  139.935567][ T6453] usb 2-1: Failed to submit usb control message: -110
[  140.854553][   T24] usb 2-1: USB disconnect, device number 3
[  140.865373][ T6453] usb 2-1: unable to send the bmi data to the device: -110
[  140.934487][ T6453] usb 2-1: unable to get target info from device
[  140.941304][ T6453] usb 2-1: could not get target info (-110)
[  140.948028][ T6453] usb 2-1: could not probe fw (-110)
[  141.112765][ T6553] vhci_hcd: connection reset by peer
[  141.134855][ T1085] vhci_hcd: stop threads
[  141.149267][ T1085] vhci_hcd: release socket
[  141.218512][ T1085] vhci_hcd: disconnect device
[  141.339329][ T6591] 9pnet_fd: Insufficient options for proto=fd
[  141.350010][ T6591] fuse: Bad value for 'fd'
[  142.384322][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'.
[  143.575387][    T9] vhci_hcd: vhci_device speed not set
[  144.552047][ T6612] loop6: detected capacity change from 0 to 524287999
[  144.559839][ T6612] buffer_io_error: 7 callbacks suppressed
[  144.559849][ T6612] Buffer I/O error on dev loop6, logical block 0, async page read
[  144.573696][ T6612] Buffer I/O error on dev loop6, logical block 0, async page read
[  144.582131][ T6612] Buffer I/O error on dev loop6, logical block 0, async page read
[  144.590025][ T6612] Buffer I/O error on dev loop6, logical block 0, async page read
[  144.598030][ T6612] Buffer I/O error on dev loop6, logical block 0, async page read
[  144.605940][ T6612] Buffer I/O error on dev loop6, logical block 0, async page read
[  144.613844][ T6612] Buffer I/O error on dev loop6, logical block 0, async page read
[  144.621760][ T6612] Buffer I/O error on dev loop6, logical block 0, async page read
[  144.629644][ T6612] ldm_validate_partition_table(): Disk read failed.
[  144.636297][ T6612] Buffer I/O error on dev loop6, logical block 0, async page read
[  144.645527][ T6612] Buffer I/O error on dev loop6, logical block 0, async page read
[  144.653559][ T6612] Dev loop6: unable to read RDB block 0
[  144.659557][ T6612]  loop6: unable to read partition table
[  144.665374][ T6612] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  145.115079][ T6631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.174'.
[  146.346815][ T6643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.176'.
[  150.898540][ T6677] block device autoloading is deprecated and will be removed.
[  151.182096][ T6697] netlink: 'syz.1.190': attribute type 10 has an invalid length.
[  151.651877][ T6702] loop6: detected capacity change from 0 to 524287999
[  151.661553][ T6702] buffer_io_error: 7 callbacks suppressed
[  151.661583][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read
[  151.682677][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read
[  151.697002][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.025824][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.065655][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.080171][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.100735][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.113407][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.133787][ T6702] ldm_validate_partition_table(): Disk read failed.
[  152.144077][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.155311][ T6702] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.175102][ T6702] Dev loop6: unable to read RDB block 0
[  152.201311][ T6702]  loop6: unable to read partition table
[  152.213091][ T6702] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  153.233560][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.196'.
[  153.730669][ T6728] netlink: 48 bytes leftover after parsing attributes in process `syz.4.199'.
[  155.556532][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'.
[  156.572364][ T6752] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  160.774352][ T5890] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  161.293184][ T6768] sctp: [Deprecated]: syz.4.209 (pid 6768) Use of int in maxseg socket option.
[  161.293184][ T6768] Use struct sctp_assoc_value instead
[  162.031884][ T6773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'.
[  162.152643][   T30] audit: type=1326 audit(1755814162.724:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61578ebe9 code=0x7ffc0000
[  162.516502][   T30] audit: type=1326 audit(1755814162.724:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61578ebe9 code=0x7ffc0000
[  162.864196][   T30] audit: type=1326 audit(1755814162.764:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe61578ebe9 code=0x7ffc0000
[  163.264372][   T30] audit: type=1326 audit(1755814162.764:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61578ebe9 code=0x7ffc0000
[  163.405871][ T6790] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.216'.
[  163.824867][   T30] audit: type=1326 audit(1755814162.764:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61578ebe9 code=0x7ffc0000
[  163.846127][    C0] vkms_vblank_simulate: vblank timer overrun
[  163.925508][   T30] audit: type=1326 audit(1755814162.764:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe61578d550 code=0x7ffc0000
[  163.946824][    C0] vkms_vblank_simulate: vblank timer overrun
[  164.051326][   T30] audit: type=1326 audit(1755814162.764:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61578ebe9 code=0x7ffc0000
[  164.823208][   T30] audit: type=1326 audit(1755814162.764:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61578ebe9 code=0x7ffc0000
[  164.860902][   T30] audit: type=1326 audit(1755814162.764:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe61578ebe9 code=0x7ffc0000
[  164.882039][    C0] vkms_vblank_simulate: vblank timer overrun
[  165.711400][ T5890] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  165.876357][ T5890] usb 2-1: device descriptor read/64, error -71
[  166.120279][ T5890] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  166.295467][ T5890] usb 2-1: device descriptor read/64, error -71
[  166.405387][ T5918] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  166.409099][ T5890] usb usb2-port1: attempt power cycle
[  167.287436][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  167.295292][ T5890] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[  167.315391][ T5918] usb 3-1: config 0 has no interfaces?
[  167.321269][ T5918] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  167.332183][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.350245][ T5890] usb 2-1: device descriptor read/8, error -71
[  167.374107][ T5918] usb 3-1: config 0 descriptor??
[  167.735402][ T5890] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[  168.026092][ T5890] usb 2-1: device descriptor read/8, error -71
[  168.149642][ T5890] usb usb2-port1: unable to enumerate USB device
[  169.415729][ T5890] usb 3-1: USB disconnect, device number 4
[  170.993059][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'.
[  171.495420][ T5890] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  171.677645][ T5890] usb 2-1: Using ep0 maxpacket: 16
[  171.743474][ T5890] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  171.755051][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.366461][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  172.547414][ T5890] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  172.667885][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.683535][ T5890] usb 2-1: Product: syz
[  172.688948][ T5890] usb 2-1: Manufacturer: syz
[  172.693729][ T5890] usb 2-1: SerialNumber: syz
[  172.917991][   T30] audit: type=1107 audit(1755814173.494:14): pid=6903 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='u_|™é•²·°õÐÚ‘Ž5H'’àõû�.ìÍ�j<D|*\è„ȼ4
[  172.917991][   T30] s.›u— 8›uýûÞ~ÅíБÛ'
[  173.607989][ T5890] usb 2-1: 0:2 : does not exist
[  173.733259][ T6915] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  173.772062][ T6915] set match dimension is over the limit!
[  173.822738][ T6915] netlink: 36 bytes leftover after parsing attributes in process `syz.4.249'.
[  173.998751][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.017892][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.945285][ T6409] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  175.403271][ T6409] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.524156][ T6409] usb 3-1: config 0 has no interfaces?
[  175.530361][ T6409] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  175.543832][ T6409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.607706][ T6409] usb 3-1: config 0 descriptor??
[  175.658306][ T6409] usb 2-1: USB disconnect, device number 8
[  175.836795][ T6943] syzkaller0: entered promiscuous mode
[  175.842447][ T6943] syzkaller0: entered allmulticast mode
[  176.103792][ T6951] Illegal XDP return value 950455562 on prog  (id 59) dev N/A, expect packet loss!
[  176.657704][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.668173][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.771427][ T6969] mmap: syz.1.261 (6969): VmData 37597184 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data.
[  176.886244][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  177.075500][    T9] usb 4-1: Using ep0 maxpacket: 16
[  177.149072][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  177.281882][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  177.382677][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  177.443635][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.452571][    T9] usb 4-1: Product: syz
[  177.461386][    T9] usb 4-1: Manufacturer: syz
[  177.467564][    T9] usb 4-1: SerialNumber: syz
[  177.496408][   T24] usb 3-1: USB disconnect, device number 5
[  177.825600][    T9] usb 4-1: 0:2 : does not exist
[  178.096165][    T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  178.528536][    T9] usb 4-1: USB disconnect, device number 7
[  179.371454][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  182.075727][ T7030] netlink: 92 bytes leftover after parsing attributes in process `syz.1.278'.
[  182.255056][ T7035] overlayfs: missing 'lowerdir'
[  185.108269][ T7069] netlink: 'syz.0.289': attribute type 10 has an invalid length.
[  185.175419][   T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  186.146219][ T7069] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  186.225408][   T24] usb 4-1: Using ep0 maxpacket: 16
[  186.239927][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.390469][   T24] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  186.435603][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.479480][   T24] usb 4-1: Product: syz
[  186.483720][   T24] usb 4-1: Manufacturer: syz
[  186.528650][   T24] usb 4-1: SerialNumber: syz
[  186.589399][   T24] usb 4-1: config 0 descriptor??
[  186.684243][   T24] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22
[  186.728561][ T7088] netlink: 92 bytes leftover after parsing attributes in process `syz.2.292'.
[  186.798145][   T24] sr9700 4-1:0.0: probe with driver sr9700 failed with error -22
[  187.141453][   T24] usb 4-1: USB disconnect, device number 8
[  187.216679][ T7091] =======================================================
[  187.216679][ T7091] WARNING: The mand mount option has been deprecated and
[  187.216679][ T7091]          and is ignored by this kernel. Remove the mand
[  187.216679][ T7091]          option from the mount to silence this warning.
[  187.216679][ T7091] =======================================================
[  187.284895][ T7091] netlink: 36 bytes leftover after parsing attributes in process `syz.4.294'.
[  191.065496][ T7124] binder: 7123:7124 ioctl c0306201 200000000280 returned -14
[  191.141002][ T7139] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  191.150983][ T7139] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  191.221481][ T7139] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  191.248632][   T10] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  191.283729][ T7139] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  191.308993][ T7139] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  191.322912][ T7139] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  191.341821][ T7139] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  191.349992][ T7139] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  191.360988][ T7139] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  191.380118][ T7139] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  191.391207][ T7139] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  191.527742][ T7150] netlink: 92 bytes leftover after parsing attributes in process `syz.3.311'.
[  191.786617][   T10] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  191.795886][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.821402][ T7139] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  191.822879][   T10] usb 2-1: config 0 descriptor??
[  191.836201][   T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  191.861832][ T7139] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  191.881213][ T7139] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  191.889693][ T7139] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  192.094339][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'.
[  192.436723][   T10] gp8psk: usb in 128 operation failed.
[  192.659723][   T10] gp8psk: usb in 146 operation failed.
[  193.215336][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[  193.295321][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout
[  194.021338][   T10] gp8psk: failed to get FW version
[  194.030612][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout
[  194.036842][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout
[  194.042981][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout
[  194.094823][   T10] gp8psk: usb in 149 operation failed.
[  194.110834][   T10] gp8psk: failed to get FPGA version
[  194.149535][   T10] gp8psk: usb in 138 operation failed.
[  194.185457][   T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  194.234797][   T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  194.263271][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  194.266310][   T10] usb 2-1: USB disconnect, device number 9
[  194.275557][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  194.290798][ T7164] sp0: Synchronizing with TNC
[  194.650996][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.318'.
[  195.426071][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[  195.432322][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout
[  196.069957][ T7194] /dev/nullb0: Can't open blockdev
[  196.109960][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout
[  196.116255][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout
[  196.122617][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout
[  196.129055][ T5936] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  196.294687][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.325'.
[  196.295964][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.322443][ T5936] usb 4-1: config 0 has no interfaces?
[  196.333164][ T5936] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  196.432410][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.727045][ T5936] usb 4-1: config 0 descriptor??
[  197.456725][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout
[  197.463188][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout
[  198.176106][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout
[  198.176115][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout
[  198.176153][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout
[  199.894805][ T5905] usb 4-1: USB disconnect, device number 9
[  206.824684][ T7304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.350'.
[  209.835349][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  210.019449][    T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.072748][    T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.114850][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  210.132180][    T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  210.172641][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.217212][    T9] usb 4-1: config 0 descriptor??
[  211.137317][    T9] usb 4-1: string descriptor 0 read error: -22
[  211.609564][ T7346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.816783][ T7346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.973590][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'.
[  212.406509][ T5918] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  212.663323][ T5918] usb 3-1: config 0 has an invalid interface number: 84 but max is 0
[  212.695097][    T9] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input7
[  212.734691][ T5918] usb 3-1: config 0 has an invalid interface number: 66 but max is 0
[  212.966842][ T5918] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  213.161003][ T5918] usb 3-1: config 0 has no interface number 0
[  213.288901][ T5918] usb 3-1: config 0 has no interface number 1
[  213.408782][ T5918] usb 3-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64
[  213.672647][ T5918] usb 3-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  213.937135][ T5918] usb 3-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30
[  214.155014][ T5918] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32
[  214.262752][ T7393] NILFS (nullb0): couldn't find nilfs on the device
[  214.269638][ T5918] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2
[  214.269689][ T5918] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86
[  214.269714][ T5918] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 53
[  214.269735][ T5918] usb 3-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216
[  214.269760][ T5918] usb 3-1: config 0 interface 66 has no altsetting 0
[  214.347321][    T9] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[  214.362137][ T5918] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[  214.366557][    T9] usb 4-1: USB disconnect, device number 10
[  214.445903][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.467422][ T5918] usb 3-1: Product: syz
[  214.471760][ T5918] usb 3-1: Manufacturer: syz
[  214.502765][ T5918] usb 3-1: SerialNumber: syz
[  214.528824][ T5918] usb 3-1: config 0 descriptor??
[  214.567379][ T5918] ljca 3-1:0.84: bulk endpoints not found
[  214.675002][ T5918] ljca 3-1:0.66: probe with driver ljca failed with error -71
[  215.154302][ T7396] fido_id[7396]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  215.176013][ T5918] usb 3-1: USB disconnect, device number 6
[  221.781151][ T7472] netlink: 780 bytes leftover after parsing attributes in process `syz.0.388'.
[  222.290616][ T7456] syzkaller0: entered promiscuous mode
[  222.298012][ T7456] syzkaller0: entered allmulticast mode
[  222.416853][ T7477] 9pnet: p9_errstr2errno: server reported unknown error �@í΂0x0000000000000007
[  223.735950][ T6409] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  224.105719][ T6409] usb 2-1: Using ep0 maxpacket: 8
[  224.169652][ T6409] usb 2-1: config 0 has an invalid interface number: 176 but max is 2
[  224.182349][ T6409] usb 2-1: config 0 has an invalid interface number: 49 but max is 2
[  224.195652][ T6409] usb 2-1: config 0 has no interface number 1
[  224.203803][ T6409] usb 2-1: config 0 has no interface number 2
[  224.239799][ T6409] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  224.249468][ T6409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.293402][ T6409] usb 2-1: config 0 descriptor??
[  224.308064][ T6409] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22
[  225.143944][ T7504] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  225.154276][ T7492] netlink: 'syz.3.393': attribute type 3 has an invalid length.
[  225.163142][ T7492] netlink: 666 bytes leftover after parsing attributes in process `syz.3.393'.
[  225.166361][ T6409] usb 2-1: Could not set interface, error -71
[  225.248271][ T6409] usb 2-1: USB disconnect, device number 10
[  233.288934][ T7593] gre1: entered allmulticast mode
[  238.102500][ T7625] binder_alloc: 7619: binder_alloc_buf, no vma
[  238.348301][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'.
[  239.321283][ T7649] mkiss: ax0: crc mode is auto.
[  240.938502][ T5918] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  241.085474][ T5918] usb 4-1: device descriptor read/64, error -71
[  241.325742][ T5918] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  241.401989][ T7683] 9pnet_fd: Insufficient options for proto=fd
[  241.411375][ T7683] fuse: Bad value for 'fd'
[  241.485836][ T5918] usb 4-1: device descriptor read/64, error -71
[  241.641533][ T5918] usb usb4-port1: attempt power cycle
[  243.265703][ T5918] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  243.319546][ T5918] usb 4-1: device descriptor read/8, error -71
[  243.386716][ T7688] netlink: 'syz.4.438': attribute type 4 has an invalid length.
[  243.401290][ T7688] netlink: 209028 bytes leftover after parsing attributes in process `syz.4.438'.
[  243.565819][ T5918] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  243.597876][ T5918] usb 4-1: device descriptor read/8, error -71
[  243.719567][ T5918] usb usb4-port1: unable to enumerate USB device
[  248.292077][ T7730] program syz.4.450 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  248.385052][ T7732] 9pnet_fd: Insufficient options for proto=fd
[  248.395256][ T7732] fuse: Bad value for 'fd'
[  249.252329][ T7735] netlink: 48 bytes leftover after parsing attributes in process `syz.3.452'.
[  249.343544][ T7740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.454'.
[  249.358245][ T7740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.454'.
[  249.370288][ T7740] netlink: 32 bytes leftover after parsing attributes in process `syz.1.454'.
[  249.421555][ T7743] netlink: 452 bytes leftover after parsing attributes in process `syz.3.455'.
[  249.525333][ T5905] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  249.755859][   T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  249.879901][ T5905] usb 5-1: config 0 has an invalid interface number: 112 but max is 0
[  249.898661][ T5905] usb 5-1: config 0 has no interface number 0
[  249.977683][ T5905] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[  250.004213][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.033442][ T5905] usb 5-1: Product: syz
[  250.049203][ T5905] usb 5-1: Manufacturer: syz
[  250.065732][ T5905] usb 5-1: SerialNumber: syz
[  250.191816][ T5905] usb 5-1: config 0 descriptor??
[  250.794087][   T43] usb 4-1: device descriptor read/64, error -71
[  250.811986][ T5905] mvusb_mdio 5-1:0.112: probe with driver mvusb_mdio failed with error -5
[  250.869717][ T5905] usb 5-1: USB disconnect, device number 3
[  251.915825][   T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  252.055695][   T43] usb 4-1: device descriptor read/64, error -71
[  252.166169][   T43] usb usb4-port1: attempt power cycle
[  252.906302][   T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  253.136086][   T43] usb 4-1: device not accepting address 17, error -71
[  253.298596][ T7765] 9pnet_fd: Insufficient options for proto=fd
[  253.309054][ T7765] fuse: Bad value for 'fd'
[  253.572760][ T7767] evm: overlay not supported
[  254.877421][   T30] audit: type=1326 audit(1755814255.454:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7772 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246958ebe9 code=0x7ffc0000
[  255.474751][   T30] audit: type=1326 audit(1755814255.474:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7772 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246958ebe9 code=0x7ffc0000
[  255.550079][   T30] audit: type=1326 audit(1755814255.474:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7772 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f246958ebe9 code=0x7ffc0000
[  255.575330][   T30] audit: type=1326 audit(1755814255.474:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7772 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246958ebe9 code=0x7ffc0000
[  255.720106][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.733438][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  255.771273][   T30] audit: type=1326 audit(1755814255.474:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7772 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246958ebe9 code=0x7ffc0000
[  255.808978][   T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  255.928330][   T30] audit: type=1326 audit(1755814255.474:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7772 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f246958ebe9 code=0x7ffc0000
[  256.066343][   T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.112983][   T30] audit: type=1326 audit(1755814255.474:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7772 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246958ebe9 code=0x7ffc0000
[  256.135720][   T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  256.144651][   T43] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  256.205836][   T30] audit: type=1326 audit(1755814255.474:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7772 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f246958ebe9 code=0x7ffc0000
[  256.251179][   T43] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  256.262494][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.290280][   T30] audit: type=1326 audit(1755814255.474:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7772 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246958ebe9 code=0x7ffc0000
[  256.315649][   T43] usb 2-1: Product: syz
[  256.319865][   T43] usb 2-1: Manufacturer: syz
[  256.324480][   T43] usb 2-1: SerialNumber: syz
[  256.349241][   T43] usb 2-1: config 0 descriptor??
[  256.367341][   T30] audit: type=1326 audit(1755814255.474:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7772 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f246958ebe9 code=0x7ffc0000
[  256.391882][   T43] usb 2-1: Found UVC 34.00 device syz (8086:0b5b)
[  256.407712][   T43] usb 2-1: No valid video chain found.
[  256.517705][ T7791] binder: 7790:7791 ioctl c0306201 200000000280 returned -14
[  256.888570][   T43] usb 2-1: USB disconnect, device number 11
[  258.223489][ T7813] netlink: 92 bytes leftover after parsing attributes in process `syz.1.475'.
[  258.355579][   T43] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  258.569249][   T43] usb 4-1: Using ep0 maxpacket: 16
[  258.812386][   T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  258.842075][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  258.993976][   T43] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  259.010847][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.020296][   T43] usb 4-1: Product: syz
[  259.024665][   T43] usb 4-1: Manufacturer: syz
[  259.629910][   T43] usb 4-1: SerialNumber: syz
[  259.660540][   T43] usb 4-1: config 0 descriptor??
[  259.763021][ T7821] 9pnet_fd: Insufficient options for proto=fd
[  259.776771][ T7821] fuse: Bad value for 'fd'
[  259.985067][   T43] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  260.147632][   T43] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  260.358376][   T43] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  260.870335][   T43] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  260.968973][   T43] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  261.000571][   T43] em28xx 4-1:0.0: No AC97 audio processor
[  261.058429][   T43] usb 4-1: USB disconnect, device number 19
[  261.088930][   T43] em28xx 4-1:0.0: Disconnecting em28xx
[  261.122706][   T43] em28xx 4-1:0.0: Freeing device
[  262.717135][ T7848] ubi: mtd0 is already attached to ubi31
[  265.163020][ T7872] netlink: 92 bytes leftover after parsing attributes in process `syz.1.489'.
[  266.185203][ T7882] 9pnet_fd: Insufficient options for proto=fd
[  266.196389][ T7882] fuse: Bad value for 'fd'
[  267.087913][ T7890] sctp: failed to load transform for md5: -2
[  267.104206][ T5890] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  267.130476][ T7892] sctp: failed to load transform for md5: -2
[  267.219817][ T5837] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  267.285249][ T5890] usb 5-1: Using ep0 maxpacket: 16
[  267.296746][ T5890] usb 5-1: config 0 has an invalid interface number: 9 but max is 2
[  267.296773][ T5890] usb 5-1: config 0 has an invalid interface number: 9 but max is 2
[  267.296802][ T5890] usb 5-1: config 0 has an invalid interface number: 157 but max is 2
[  267.296823][ T5890] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  267.296843][ T5890] usb 5-1: config 0 has no interface number 0
[  267.296860][ T5890] usb 5-1: config 0 has no interface number 1
[  267.296928][ T5890] usb 5-1: config 0 interface 9 has no altsetting 0
[  267.296945][ T5890] usb 5-1: config 0 interface 9 has no altsetting 1
[  267.296963][ T5890] usb 5-1: config 0 interface 157 has no altsetting 0
[  267.317346][ T7901] capability: warning: `syz.1.493' uses deprecated v2 capabilities in a way that may be insecure
[  267.334145][ T5890] usb 5-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0
[  267.334172][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.334191][ T5890] usb 5-1: Product: syz
[  267.334352][ T5890] usb 5-1: Manufacturer: syz
[  267.334367][ T5890] usb 5-1: SerialNumber: syz
[  267.336420][ T5890] usb 5-1: config 0 descriptor??
[  267.405665][ T5837] usb 3-1: Using ep0 maxpacket: 16
[  267.620063][ T5837] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  267.698531][ T5837] usb 3-1: config 0 descriptor has 1 excess byte, ignoring
[  268.726167][ T5837] usb 3-1: config 0 has no interface number 0
[  268.762708][ T7876] Cannot find del_set index 0 as target
[  268.788973][ T5837] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  268.807581][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.832301][ T5837] usb 3-1: Product: syz
[  268.845326][ T5837] usb 3-1: Manufacturer: syz
[  268.860667][ T5837] usb 3-1: SerialNumber: syz
[  268.873521][ T5890] usb 5-1: selecting invalid altsetting 1
[  268.888221][ T5890] sierra 5-1:0.9: Sierra USB modem converter detected
[  268.920334][ T5837] usb 3-1: config 0 descriptor??
[  268.927765][ T5890] usb 5-1: Sierra USB modem converter now attached to ttyUSB0
[  268.956138][ T5890] usb 5-1: USB disconnect, device number 4
[  268.971059][ T5837] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  269.000523][ T5837] usb 3-1: No valid video chain found.
[  269.016124][   T43] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  269.205975][   T43] usb 4-1: Using ep0 maxpacket: 32
[  269.429964][   T43] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  269.560882][ T7878] 9pnet_fd: Insufficient options for proto=fd
[  269.599366][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.618296][   T43] usb 4-1: Product: syz
[  269.624484][   T43] usb 4-1: Manufacturer: syz
[  269.633690][   T43] usb 4-1: SerialNumber: syz
[  269.679654][   T43] usb 4-1: config 0 descriptor??
[  269.680292][ T5890] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  269.767489][ T5890] sierra 5-1:0.9: device disconnected
[  269.807317][    T9] usb 3-1: USB disconnect, device number 7
[  272.184853][   T43] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  272.216066][   T43] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  272.351702][ T7930] comedi comedi0: mpc624: I/O port conflict (0xee,16)
[  272.368590][ T7937] ubi31: detaching mtd0
[  272.426237][ T7937] ubi31: mtd0 is detached
[  272.962292][   T43] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71
[  273.005948][   T43] usb 4-1: USB disconnect, device number 20
[  274.195542][    T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  275.260573][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  275.301803][    T9] usb 2-1: config 0 has no interfaces?
[  275.334406][    T9] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  275.404120][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.464567][ T7969] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0
[  275.486705][    T9] usb 2-1: config 0 descriptor??
[  275.492384][ T7968] IPVS: stopping master sync thread 7969 ...
[  275.587901][    T9] usb 2-1: can't set config #0, error -71
[  275.642295][    T9] usb 2-1: USB disconnect, device number 12
[  275.791843][ T7975] hfsplus: unable to find HFS+ superblock
[  275.826734][ T6409] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  276.009746][ T6409] usb 3-1: config index 0 descriptor too short (expected 7768, got 18)
[  276.650754][ T6409] usb 3-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config
[  276.661715][ T6409] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  276.670868][ T6409] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[  276.686467][ T6409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.717612][ T6409] usb 3-1: config 0 descriptor??
[  276.963491][   T43] usb 3-1: USB disconnect, device number 8
[  277.053095][ T7993] netlink: 248 bytes leftover after parsing attributes in process `syz.1.520'.
[  279.936333][   T43] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  280.413918][   T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  280.431894][   T43] usb 3-1: config 0 has no interfaces?
[  280.438258][   T43] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  280.448081][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.506243][   T43] usb 3-1: config 0 descriptor??
[  280.657217][ T6409] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  280.715774][ T5837] kernel write not supported for file /amidi2 (pid: 5837 comm: kworker/1:3)
[  280.733473][ T5890] usb 3-1: USB disconnect, device number 9
[  280.845393][ T6409] usb 5-1: Using ep0 maxpacket: 32
[  280.890123][ T6409] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65289, setting to 1024
[  280.916961][ T6409] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  280.990655][ T8057] 9pnet_fd: Insufficient options for proto=fd
[  281.000828][ T8057] fuse: Bad value for 'fd'
[  281.112880][ T6409] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  281.188477][ T6409] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.267909][ T6409] usb 5-1: Product: syz
[  281.318619][ T6409] usb 5-1: Manufacturer: syz
[  281.399973][ T6409] usb 5-1: SerialNumber: syz
[  281.595740][ T6409] usb 5-1: config 0 descriptor??
[  281.607032][ T8032] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  281.694651][ T6409] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8
[  282.008805][ T6409] usb 5-1: USB disconnect, device number 5
[  282.014705][    C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  283.828666][ T8091] JFS: discard option not supported on device
[  284.111800][ T8091] Mount JFS Failure: -22
[  284.118065][ T8091] jfs_mount failed w/return code = -22
[  284.319768][ T8108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.350344][ T8108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.545'.
[  284.475997][ T8108] Invalid ELF header magic: != ELF
[  284.581133][ T8120] 9pnet_fd: Insufficient options for proto=fd
[  284.591368][ T8120] fuse: Bad value for 'fd'
[  287.789945][    T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  288.052109][ T8152] x_tables: ip_tables: osf match: only valid for protocol 6
[  288.071672][ T8152] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  288.544063][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  288.565111][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  288.846027][ T8161] netlink: 92 bytes leftover after parsing attributes in process `syz.3.555'.
[  288.869240][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  288.998394][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.304055][    T9] usb 5-1: Product: syz
[  289.394395][    T9] usb 5-1: Manufacturer: syz
[  289.399512][    T9] usb 5-1: SerialNumber: syz
[  290.284903][    T9] usb 5-1: cannot find UAC_HEADER
[  290.338095][    T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  290.461457][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.511066][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.571920][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  290.962689][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.068894][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.228322][ T8199] loop6: detected capacity change from 0 to 524287999
[  291.236601][ T8199] buffer_io_error: 7 callbacks suppressed
[  291.236617][ T8199] Buffer I/O error on dev loop6, logical block 0, async page read
[  291.251310][ T8199] Buffer I/O error on dev loop6, logical block 0, async page read
[  291.265204][ T8199] Buffer I/O error on dev loop6, logical block 0, async page read
[  291.280435][ T8199] Buffer I/O error on dev loop6, logical block 0, async page read
[  291.298864][ T8199] Buffer I/O error on dev loop6, logical block 0, async page read
[  291.311120][ T8199] Buffer I/O error on dev loop6, logical block 0, async page read
[  291.325264][ T8199] Buffer I/O error on dev loop6, logical block 0, async page read
[  291.345300][ T8199] Buffer I/O error on dev loop6, logical block 0, async page read
[  291.355231][ T8199] ldm_validate_partition_table(): Disk read failed.
[  291.372104][ T8199] Buffer I/O error on dev loop6, logical block 0, async page read
[  291.385227][ T8199] Buffer I/O error on dev loop6, logical block 0, async page read
[  291.395431][ T8199] Dev loop6: unable to read RDB block 0
[  291.415715][ T8199]  loop6: unable to read partition table
[  291.425366][ T8199] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  292.639004][ T5971] usb 5-1: USB disconnect, device number 6
[  295.926734][ T8236] /dev/nullb0: Can't open blockdev
[  297.615003][ T8242] Bluetooth: MGMT ver 1.23
[  298.745458][ T8257] loop6: detected capacity change from 0 to 524287999
[  298.793843][ T8257] buffer_io_error: 7 callbacks suppressed
[  298.793860][ T8257] Buffer I/O error on dev loop6, logical block 0, async page read
[  298.820840][ T8257] Buffer I/O error on dev loop6, logical block 0, async page read
[  298.847365][ T8257] Buffer I/O error on dev loop6, logical block 0, async page read
[  298.869618][ T8257] Buffer I/O error on dev loop6, logical block 0, async page read
[  298.879678][ T8257] Buffer I/O error on dev loop6, logical block 0, async page read
[  298.888798][ T8257] Buffer I/O error on dev loop6, logical block 0, async page read
[  298.904756][ T8257] Buffer I/O error on dev loop6, logical block 0, async page read
[  298.946208][ T8257] Buffer I/O error on dev loop6, logical block 0, async page read
[  298.954074][ T8257] ldm_validate_partition_table(): Disk read failed.
[  299.114403][ T8257] Buffer I/O error on dev loop6, logical block 0, async page read
[  299.170700][ T8257] Buffer I/O error on dev loop6, logical block 0, async page read
[  299.191829][ T8257] Dev loop6: unable to read RDB block 0
[  299.226089][ T8257]  loop6: unable to read partition table
[  299.232165][ T8257] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  300.179683][ T8287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.217433][ T8284] mkiss: ax0: crc mode is auto.
[  300.838641][ T5837] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  301.092793][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.251791][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  301.445463][ T5837] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  301.454550][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.544537][ T5837] usb 3-1: config 0 descriptor??
[  302.257863][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.305696][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.458515][ T5837] usbhid 3-1:0.0: can't add hid device: -71
[  302.466057][ T5837] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  302.818590][ T5837] usb 3-1: USB disconnect, device number 10
[  305.285467][ T5837] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  305.456150][ T5837] usb 2-1: Using ep0 maxpacket: 32
[  305.529411][ T5837] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  305.633390][ T5837] usb 2-1: config 0 has no interface number 0
[  305.848041][ T5837] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  305.891010][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.905881][ T5837] usb 2-1: Product: syz
[  305.910716][ T5837] usb 2-1: Manufacturer: syz
[  305.921092][ T5837] usb 2-1: SerialNumber: syz
[  306.232478][ T8343] mkiss: ax0: crc mode is auto.
[  306.413561][ T5837] usb 2-1: config 0 descriptor??
[  306.440663][ T5837] smsc95xx v2.0.0
[  307.171555][ T5837] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  307.332900][ T5837] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  307.544199][ T5837] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  307.616000][ T5837] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61
[  307.641862][ T8351] netlink: 'syz.3.606': attribute type 6 has an invalid length.
[  308.631923][ T8372] netlink: 92 bytes leftover after parsing attributes in process `syz.4.608'.
[  309.329602][ T5890] usb 2-1: USB disconnect, device number 13
[  309.762750][ T5837] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  310.616811][ T5837] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.768582][ T5837] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  310.782946][ T5837] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  310.793332][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  311.262208][ T5837] usb 4-1: SerialNumber: syz
[  311.596828][ T8406] Can't find ip_set type hash:net,port,Pet
[  311.927765][ T5837] usb 4-1: 0:2 : does not exist
[  311.990876][ T5837] usb 4-1: USB disconnect, device number 21
[  312.114781][ T8417] capability: warning: `syz.0.619' uses 32-bit capabilities (legacy support in use)
[  312.141996][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  312.620023][ T8436] netlink: 92 bytes leftover after parsing attributes in process `syz.2.624'.
[  312.640028][   T30] kauditd_printk_skb: 48 callbacks suppressed
[  312.640078][   T30] audit: type=1326 audit(1755814313.204:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61578ebe9 code=0x7fc00000
[  312.730664][   T30] audit: type=1326 audit(1755814313.274:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61578ebe9 code=0x7fc00000
[  313.086139][   T30] audit: type=1326 audit(1755814313.284:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61578ebe9 code=0x7fc00000
[  313.373750][ T8443] loop6: detected capacity change from 0 to 524287999
[  313.392476][ T8443] buffer_io_error: 7 callbacks suppressed
[  313.392512][ T8443] Buffer I/O error on dev loop6, logical block 0, async page read
[  313.412432][ T8443] Buffer I/O error on dev loop6, logical block 0, async page read
[  313.465782][ T8443] Buffer I/O error on dev loop6, logical block 0, async page read
[  313.559406][ T8443] Buffer I/O error on dev loop6, logical block 0, async page read
[  313.567745][ T8443] Buffer I/O error on dev loop6, logical block 0, async page read
[  313.576840][ T8443] Buffer I/O error on dev loop6, logical block 0, async page read
[  313.585355][ T8443] Buffer I/O error on dev loop6, logical block 0, async page read
[  313.594476][ T8443] Buffer I/O error on dev loop6, logical block 0, async page read
[  313.602998][ T8443] ldm_validate_partition_table(): Disk read failed.
[  313.617496][ T8443] Buffer I/O error on dev loop6, logical block 0, async page read
[  313.627225][ T8443] Buffer I/O error on dev loop6, logical block 0, async page read
[  313.635410][ T8443] Dev loop6: unable to read RDB block 0
[  313.645226][ T8443]  loop6: unable to read partition table
[  313.652255][ T8443] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  314.095315][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  314.134753][ T8451] netlink: 140 bytes leftover after parsing attributes in process `syz.0.629'.
[  314.265379][    T9] usb 4-1: Using ep0 maxpacket: 32
[  314.736778][ T8457] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  314.736778][ T8457]    program syz.2.628 not setting count and/or reply_len properly
[  315.138255][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  315.150983][    T9] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  315.182260][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  315.194537][    T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  315.204363][    T9] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  315.214500][    T9] usb 4-1: Product: syz
[  315.219347][    T9] usb 4-1: Manufacturer: syz
[  315.226537][    T9] usb 4-1: SerialNumber: syz
[  315.237455][    T9] usb 4-1: config 0 descriptor??
[  315.745621][    T9] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  316.106874][    T9] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EREMOTEIO)
[  316.360095][    T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121
[  317.146097][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.152694][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  317.938582][    T9] usb 4-1: USB disconnect, device number 22
[  318.504566][ T8491] loop6: detected capacity change from 0 to 524287999
[  318.520103][ T8491] buffer_io_error: 7 callbacks suppressed
[  318.520120][ T8491] Buffer I/O error on dev loop6, logical block 0, async page read
[  318.539963][ T8491] Buffer I/O error on dev loop6, logical block 0, async page read
[  318.551467][ T8491] Buffer I/O error on dev loop6, logical block 0, async page read
[  318.565436][ T8491] Buffer I/O error on dev loop6, logical block 0, async page read
[  318.575593][ T8491] Buffer I/O error on dev loop6, logical block 0, async page read
[  318.585409][ T8491] Buffer I/O error on dev loop6, logical block 0, async page read
[  318.595411][ T8491] Buffer I/O error on dev loop6, logical block 0, async page read
[  318.605597][ T8491] Buffer I/O error on dev loop6, logical block 0, async page read
[  318.616682][ T8491] ldm_validate_partition_table(): Disk read failed.
[  318.675299][ T8491] Buffer I/O error on dev loop6, logical block 0, async page read
[  318.694330][ T8491] Buffer I/O error on dev loop6, logical block 0, async page read
[  318.705567][ T8491] Dev loop6: unable to read RDB block 0
[  318.737866][ T8491]  loop6: unable to read partition table
[  318.745403][ T8491] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  319.194559][ T5204] ldm_validate_partition_table(): Disk read failed.
[  319.215725][ T8494] netlink: 92 bytes leftover after parsing attributes in process `syz.4.639'.
[  319.235418][ T5204] Dev loop6: unable to read RDB block 0
[  319.242407][ T5204]  loop6: unable to read partition table
[  320.999879][ T8519] input: syz1 as /devices/virtual/input/input9
[  321.225784][   T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  321.329971][ T8527] trusted_key: encrypted_key: master key parameter 'defauyz' is invalid
[  321.375358][ T5905] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  321.396583][   T43] usb 5-1: Using ep0 maxpacket: 32
[  321.406414][   T43] usb 5-1: no configurations
[  321.436453][   T43] usb 5-1: can't read configurations, error -22
[  321.525631][ T5905] usb 4-1: Using ep0 maxpacket: 8
[  321.533249][ T5905] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  321.542800][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.570573][ T5905] usb 4-1: config 0 descriptor??
[  321.575783][   T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  321.747342][   T43] usb 5-1: Using ep0 maxpacket: 32
[  321.756752][   T43] usb 5-1: no configurations
[  321.761401][   T43] usb 5-1: can't read configurations, error -22
[  321.768729][   T43] usb usb5-port1: attempt power cycle
[  321.800340][ T5905] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  322.117036][   T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  322.159272][   T43] usb 5-1: Using ep0 maxpacket: 32
[  322.166308][   T43] usb 5-1: no configurations
[  322.171205][   T43] usb 5-1: can't read configurations, error -22
[  323.106759][   T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  323.142103][   T43] usb 5-1: Using ep0 maxpacket: 32
[  323.156682][   T43] usb 5-1: no configurations
[  323.157092][ T5905] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  323.161310][   T43] usb 5-1: can't read configurations, error -22
[  323.190822][ T5905] asix 4-1:0.0: probe with driver asix failed with error -71
[  323.205517][ T5905] usb 4-1: USB disconnect, device number 23
[  323.348728][   T43] usb usb5-port1: unable to enumerate USB device
[  323.627691][ T8541] 9pnet_fd: Insufficient options for proto=fd
[  323.636924][ T8541] fuse: Bad value for 'fd'
[  328.797622][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'.
[  329.433627][ T8587] 9pnet_fd: Insufficient options for proto=fd
[  329.444532][ T8587] fuse: Bad value for 'fd'
[  332.320396][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'.
[  332.440354][ T8620] sg_write: data in/out 65500/10 bytes for SCSI command 0xfd-- guessing data in;
[  332.440354][ T8620]    program syz.1.673 not setting count and/or reply_len properly
[  333.163016][ T8643] 9pnet_fd: Insufficient options for proto=fd
[  333.174159][ T8643] fuse: Bad value for 'fd'
[  333.898480][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.680'.
[  336.378137][ T8684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.692'.
[  336.402291][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.469724][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.603996][ T8694] 9pnet_fd: Insufficient options for proto=fd
[  336.612893][ T8694] fuse: Bad value for 'fd'
[  338.023814][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.697'.
[  338.631168][ T8721] netlink: 'syz.4.699': attribute type 10 has an invalid length.
[  338.699785][ T8721] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  338.783063][ T8726] syz_tun: entered allmulticast mode
[  338.830589][ T8725] syz_tun: left allmulticast mode
[  339.994671][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'.
[  343.655295][ T6409] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  344.215197][ T6409] usb 4-1: Using ep0 maxpacket: 8
[  344.230746][ T6409] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  344.260808][ T6409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.287616][ T6409] usb 4-1: Product: syz
[  344.292106][ T6409] usb 4-1: Manufacturer: syz
[  344.297554][ T6409] usb 4-1: SerialNumber: syz
[  344.313080][ T6409] usb 4-1: config 0 descriptor??
[  344.328046][ T6409] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  344.831241][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  345.030204][ T8788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  345.047191][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  345.051594][ T8788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  345.137528][ T8794] loop8: detected capacity change from 0 to 8
[  345.170126][ T5853] Dev loop8: unable to read RDB block 8
[  345.188572][ T5853]  loop8: unable to read partition table
[  345.224834][ T5853] loop8: partition table beyond EOD, truncated
[  345.253708][ T8794] Dev loop8: unable to read RDB block 8
[  345.269396][ T6409] gspca_sonixj: reg_r err -71
[  345.274254][ T6409] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  345.288839][ T6409] usb 4-1: USB disconnect, device number 24
[  345.295344][ T8794]  loop8: unable to read partition table
[  345.304981][ T8794] loop8: partition table beyond EOD, truncated
[  345.332516][ T8794] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  347.582940][ T8801] loop8: detected capacity change from 0 to 7
[  347.651756][ T8801] Dev loop8: unable to read RDB block 7
[  347.657480][ T8801]  loop8: AHDI p1 p2 p3
[  347.661631][ T8801] loop8: partition table partially beyond EOD, truncated
[  347.682013][ T8801] loop8: p1 start 1601398130 is beyond EOD, truncated
[  347.688942][ T8801] loop8: p2 start 1702059890 is beyond EOD, truncated
[  349.897550][ T8827] comedi comedi3: comedi_config --init_data is deprecated
[  351.155534][ T8841] netlink: 92 bytes leftover after parsing attributes in process `syz.0.731'.
[  354.940653][ T8865] loop8: detected capacity change from 0 to 7
[  355.234205][ T8864] vivid-007: kernel_thread() failed
[  355.284144][ T8865] Dev loop8: unable to read RDB block 7
[  355.290010][ T8865]  loop8: AHDI p1 p2 p3
[  355.294235][ T8865] loop8: partition table partially beyond EOD, truncated
[  355.301864][ T8865] loop8: p1 start 1601398130 is beyond EOD, truncated
[  355.308901][ T8865] loop8: p2 start 1702059890 is beyond EOD, truncated
[  356.139580][ T8875] No such timeout policy "syz1"
[  358.128451][ T8893] syzkaller1: entered promiscuous mode
[  358.155443][ T8893] syzkaller1: entered allmulticast mode
[  358.198328][ T8896] netlink: 'syz.4.744': attribute type 1 has an invalid length.
[  358.512589][ T8903] IPVS: Error joining to the multicast group
[  358.844177][ T8906] syz_tun: entered allmulticast mode
[  358.887581][ T8905] syz_tun: left allmulticast mode
[  360.500247][ T8923] 9pnet_fd: Insufficient options for proto=fd
[  360.511862][ T8923] fuse: Bad value for 'fd'
[  361.535319][ T8933] netlink: 92 bytes leftover after parsing attributes in process `syz.1.754'.
[  362.916600][    T9] hid-generic 0000:0081:03FF.0002: unknown main item tag 0x7
[  362.955395][    T9] hid-generic 0000:0081:03FF.0002: unexpected long global item
[  362.995639][    T9] hid-generic 0000:0081:03FF.0002: probe with driver hid-generic failed with error -22
[  364.462991][ T8965] binder: 8963:8965 ioctl c0306201 200000000280 returned -14
[  366.635576][ T8992] netlink: 92 bytes leftover after parsing attributes in process `syz.4.770'.
[  367.326494][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'.
[  367.395894][ T5971] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  367.556074][ T5837] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  368.009240][ T5837] usb 3-1: device descriptor read/64, error -71
[  368.808307][ T5971] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  368.824648][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.834104][ T5971] usb 2-1: Product: syz
[  368.839527][ T5971] usb 2-1: Manufacturer: syz
[  368.844552][ T5971] usb 2-1: SerialNumber: syz
[  368.850309][ T5837] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  369.005911][ T5837] usb 3-1: device descriptor read/64, error -71
[  369.163454][ T5971] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  369.196099][ T5837] usb usb3-port1: attempt power cycle
[  369.354390][   T43] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  369.771812][ T9027] 9pnet_fd: Insufficient options for proto=fd
[  369.781196][ T9027] fuse: Bad value for 'fd'
[  370.204608][ T5837] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  370.607547][ T5837] usb 3-1: device descriptor read/8, error -71
[  370.662109][ T9032] loop8: detected capacity change from 0 to 8
[  370.702114][ T5853] Dev loop8: unable to read RDB block 8
[  370.717480][ T5853]  loop8: unable to read partition table
[  370.742583][ T5853] loop8: partition table beyond EOD, truncated
[  370.773141][ T9032] Dev loop8: unable to read RDB block 8
[  370.822348][ T9032]  loop8: unable to read partition table
[  370.844941][ T9032] loop8: partition table beyond EOD, truncated
[  370.859451][ T9032] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  370.887494][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.900381][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.925000][ T9023] xt_l2tp: v2 sid > 0xffff: 262144
[  371.106348][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.785'.
[  371.694047][   T43] usb 2-1: Service connection timeout for: 257
[  371.824489][   T43] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  371.936804][    T9] usb 2-1: USB disconnect, device number 14
[  371.943809][   T43] ath9k_htc: Failed to initialize the device
[  371.968197][    T9] usb 2-1: ath9k_htc: USB layer deinitialized
[  372.022627][ T9056] kAFS: unable to lookup cell '.,'
[  372.354009][ T6409] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  372.534451][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  372.885188][    T9] usb 2-1: Using ep0 maxpacket: 16
[  372.911069][ T6409] usb 3-1: Using ep0 maxpacket: 8
[  372.918548][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.988754][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  373.224487][ T6409] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  373.233753][ T6409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.243734][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  373.260296][ T6409] usb 3-1: Product: syz
[  373.266407][ T6409] usb 3-1: Manufacturer: syz
[  373.271032][ T6409] usb 3-1: SerialNumber: syz
[  373.288146][    T9] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  373.307905][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.316966][ T6409] usb 3-1: config 0 descriptor??
[  373.339525][ T6409] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244)
[  373.358234][    T9] usb 2-1: config 0 descriptor??
[  373.399810][    T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10
[  373.445019][ T5189] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  373.483122][ T5189] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  373.498755][ T5189] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  373.531361][ T5851] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  373.593124][ T9079] 9pnet_fd: Insufficient options for proto=fd
[  373.603004][ T9079] fuse: Bad value for 'fd'
[  373.688600][ T5189] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  373.776628][ T9061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.837436][ T5189] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  373.968790][ T9061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.110531][ T5189] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  374.155317][ T5837] usb 2-1: USB disconnect, device number 15
[  374.155664][ T5189] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[  374.390559][ T6409] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  374.404223][ T6409] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  374.420882][ T6409] usb 3-1: USB disconnect, device number 15
[  374.856773][ T9097] process 'syz.1.799' launched './file0' with NULL argv: empty string added
[  376.134183][ T9100] mmap: syz.3.800 (9100) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  376.871841][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'.
[  378.583095][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.593293][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  380.310755][ T9152] binder: 9151:9152 ioctl 4018620d 0 returned -22
[  381.801622][ T9167] loop8: detected capacity change from 0 to 8
[  381.812647][ T9167] Dev loop8: unable to read RDB block 8
[  381.925858][ T9167]  loop8: unable to read partition table
[  381.931744][ T9167] loop8: partition table beyond EOD, truncated
[  381.945428][   T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  381.963985][ T9167] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  382.110968][   T10] usb 2-1: Using ep0 maxpacket: 8
[  382.132872][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  382.249724][ T9175] 9pnet_fd: Insufficient options for proto=fd
[  382.260682][ T9175] fuse: Bad value for 'fd'
[  382.799528][   T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  383.109630][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.164985][   T10] usb 2-1: config 0 descriptor??
[  383.643458][   T10] usb 2-1: can't set config #0, error -71
[  383.789012][   T10] usb 2-1: USB disconnect, device number 16
[  384.161110][ T9195] binder: 9193:9195 ioctl 4018620d 0 returned -22
[  384.925819][ T9201] input: syz0 as /devices/virtual/input/input11
[  385.425495][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  385.618423][   T10] usb 2-1: config 19 has too many interfaces: 204, using maximum allowed: 32
[  385.656178][ T9225] 9pnet_fd: Insufficient options for proto=fd
[  385.665638][ T9225] fuse: Bad value for 'fd'
[  386.448935][   T10] usb 2-1: config 19 has an invalid descriptor of length 179, skipping remainder of the config
[  386.471572][ T9228] binder: BINDER_SET_CONTEXT_MGR already set
[  386.479362][ T9228] binder: 9227:9228 ioctl 4018620d 2000000001c0 returned -16
[  386.499316][   T10] usb 2-1: config 19 has 0 interfaces, different from the descriptor's value: 204
[  386.530501][   T10] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  386.565224][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.985841][ T9231] syz_tun: entered allmulticast mode
[  387.014156][ T9230] syz_tun: left allmulticast mode
[  387.498355][ T9242] openvswitch: netlink: Message has 20 unknown bytes.
[  387.505340][ T9242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.455609][ T5837] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  388.489422][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'.
[  388.498563][ T9270] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  388.546130][ T9270] batman_adv: batadv0: Removing interface: batadv_slave_1
[  388.619205][ T5837] usb 3-1: Using ep0 maxpacket: 32
[  388.630502][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  388.657710][ T5837] usb 3-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13
[  388.677793][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.688439][ T5837] usb 3-1: Product: syz
[  388.695018][ T5837] usb 3-1: Manufacturer: syz
[  388.704704][ T5837] usb 3-1: SerialNumber: syz
[  388.722407][ T5837] usb 3-1: config 0 descriptor??
[  388.740062][ T5837] rndis_host 3-1:0.0: skipping garbage
[  388.755849][ T5837] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22
[  388.953369][ T9278] binder: BINDER_SET_CONTEXT_MGR already set
[  388.967349][ T9260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.990300][ T9278] binder: 9277:9278 ioctl 4018620d 2000000001c0 returned -16
[  389.006328][ T9260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.027288][ T5837] usb 3-1: USB disconnect, device number 16
[  389.241077][   T10] usb 2-1: USB disconnect, device number 17
[  391.435297][ T9307] loop6: detected capacity change from 0 to 524287999
[  391.445430][ T9307] buffer_io_error: 23 callbacks suppressed
[  391.445446][ T9307] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.460822][ T9307] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.469963][ T9307] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.479193][ T9307] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.495467][ T9307] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.504263][ T9307] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.513745][ T9307] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.522968][ T9307] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.534786][ T9307] ldm_validate_partition_table(): Disk read failed.
[  391.542172][ T9307] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.554856][ T9307] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.575642][ T9307] Dev loop6: unable to read RDB block 0
[  391.585155][ T9307]  loop6: unable to read partition table
[  391.593080][ T9307] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  393.058552][ T9331] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.066385][ T9331] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.698417][    T9] usb 2-1: new low-speed USB device number 18 using dummy_hcd
[  394.187100][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  394.225054][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  394.240463][    T9] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  394.250677][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.277267][    T9] usb 2-1: config 0 descriptor??
[  394.287966][ T9341] binder: BINDER_SET_CONTEXT_MGR already set
[  394.294291][ T9341] binder: 9340:9341 ioctl 4018620d 2000000001c0 returned -16
[  394.865808][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  394.883074][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  394.949821][    T9] usb 2-1: USB disconnect, device number 18
[  396.227345][ T9368] loop8: detected capacity change from 0 to 7
[  396.630636][ T9368] Dev loop8: unable to read RDB block 7
[  396.636490][ T9368]  loop8: AHDI p1 p2 p3
[  396.640668][ T9368] loop8: partition table partially beyond EOD, truncated
[  396.648138][ T9368] loop8: p1 start 1601398130 is beyond EOD, truncated
[  396.655553][ T9368] loop8: p2 start 1702059890 is beyond EOD, truncated
[  396.990845][ T9373] loop8: detected capacity change from 0 to 8
[  397.004892][ T5853] Dev loop8: unable to read RDB block 8
[  397.012064][ T5853]  loop8: unable to read partition table
[  397.022061][ T5853] loop8: partition table beyond EOD, truncated
[  397.619138][ T9373] Dev loop8: unable to read RDB block 8
[  397.635048][ T9373]  loop8: unable to read partition table
[  397.658511][ T9373] loop8: partition table beyond EOD, truncated
[  397.685959][ T9373] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  397.764981][   T43] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  397.955985][   T43] usb 5-1: device descriptor read/64, error -71
[  398.195639][   T43] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  398.369232][   T43] usb 5-1: device descriptor read/64, error -71
[  398.486251][   T43] usb usb5-port1: attempt power cycle
[  399.944478][   T43] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  399.967634][ T9407] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  400.112689][   T43] usb 5-1: device descriptor read/8, error -71
[  400.201316][ T9411] netlink: 44 bytes leftover after parsing attributes in process `syz.4.894'.
[  400.323289][ T9411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  400.955959][   T43] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  400.987292][   T43] usb 5-1: Using ep0 maxpacket: 32
[  400.999797][   T43] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  401.022038][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.040902][   T43] usb 5-1: Product: syz
[  401.078101][   T43] usb 5-1: Manufacturer: syz
[  401.169998][   T43] usb 5-1: SerialNumber: syz
[  401.183704][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'.
[  401.201657][   T43] usb 5-1: config 0 descriptor??
[  401.233544][ T9429] hpfs: Bad magic ... probably not HPFS
[  401.612380][   T43] airspy 5-1:0.0: Board ID: 00
[  401.617798][   T43] airspy 5-1:0.0: Firmware version: 
[  402.828051][   T43] airspy 5-1:0.0: usb_control_msg() failed -110 request 11
[  403.108058][   T43] airspy 5-1:0.0: Registered as swradio24
[  403.113924][   T43] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  404.086521][   T43] usb 5-1: USB disconnect, device number 14
[  404.635283][   T10] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  404.805570][   T10] usb 2-1: device descriptor read/64, error -71
[  405.086503][   T10] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  405.245826][   T10] usb 2-1: device descriptor read/64, error -71
[  405.397630][   T10] usb usb2-port1: attempt power cycle
[  405.765682][   T10] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  405.896272][   T10] usb 2-1: device descriptor read/8, error -71
[  406.235923][   T10] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  406.475208][   T10] usb 2-1: device descriptor read/8, error -71
[  406.640314][   T10] usb usb2-port1: unable to enumerate USB device
[  409.082007][ T9487] netlink: 'syz.3.915': attribute type 29 has an invalid length.
[  411.655507][ T9506] IPVS: Error joining to the multicast group
[  414.282128][ T9513] loop8: detected capacity change from 0 to 7
[  414.616759][ T9513] Dev loop8: unable to read RDB block 7
[  414.622377][ T9513]  loop8: AHDI p1 p2 p3
[  414.627073][ T9513] loop8: partition table partially beyond EOD, truncated
[  414.634321][ T9513] loop8: p1 start 1601398130 is beyond EOD, truncated
[  414.641665][ T9513] loop8: p2 start 1702059890 is beyond EOD, truncated
[  417.890220][ T9521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.922'.
[  419.167078][ T9540] netlink: 40 bytes leftover after parsing attributes in process `syz.0.925'.
[  419.177058][ T5918] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  419.345681][ T5918] usb 4-1: device descriptor read/64, error -71
[  420.075639][ T5918] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  420.605435][ T5918] usb 4-1: device descriptor read/64, error -71
[  420.736764][ T5918] usb usb4-port1: attempt power cycle
[  421.290708][ T9562] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  421.444769][ T9567] IPVS: Error joining to the multicast group
[  422.489820][ T9580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.936'.
[  422.745453][ T6409] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  422.915253][ T6409] usb 4-1: Using ep0 maxpacket: 32
[  422.947551][ T9591] netlink: 40 bytes leftover after parsing attributes in process `syz.2.939'.
[  422.990782][ T6409] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  423.006180][   T43] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  423.020691][ T6409] usb 4-1: config 0 has no interface number 0
[  423.059914][ T6409] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  423.087299][ T6409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.144114][ T6409] usb 4-1: Product: syz
[  423.187915][ T6409] usb 4-1: Manufacturer: syz
[  423.233612][ T6409] usb 4-1: SerialNumber: syz
[  423.294496][ T6409] usb 4-1: config 0 descriptor??
[  423.295782][   T43] usb 2-1: Using ep0 maxpacket: 32
[  423.327619][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.328213][ T6409] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  423.353439][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  423.365887][   T43] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  423.378556][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.436602][   T43] usb 2-1: config 0 descriptor??
[  424.948186][   T43] ft260 0003:0403:6030.0003: unknown main item tag 0x7
[  424.963880][ T6409] usb 4-1: qt2_attach - failed to power on unit: -71
[  425.009229][ T6409] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71
[  425.041771][ T6409] usb 4-1: USB disconnect, device number 28
[  425.177065][   T43] ft260 0003:0403:6030.0003: chip code: 5e24 8100
[  425.922743][   T43] ft260 0003:0403:6030.0003: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0
[  425.959660][   T43] ft260 0003:0403:6030.0003: failed to retrieve status: -32, no wakeup
[  426.516859][   T43] usb 2-1: USB disconnect, device number 23
[  427.259916][ T9627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.947'.
[  427.731006][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'.
[  428.879993][ T9644] syz_tun: entered allmulticast mode
[  428.887380][ T9643] syz_tun: left allmulticast mode
[  430.684402][ T9664] JFS: discard option not supported on device
[  430.812359][ T9666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.960'.
[  431.370857][ T9664] Mount JFS Failure: -22
[  431.389652][ T9664] jfs_mount failed w/return code = -22
[  431.571261][ T9673] JFS: discard option not supported on device
[  431.620898][ T9673] Mount JFS Failure: -22
[  431.645542][ T9673] jfs_mount failed w/return code = -22
[  431.774864][ T9678] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  431.963971][ T9682] syz_tun: entered allmulticast mode
[  431.971206][ T9681] syz_tun: left allmulticast mode
[  432.622864][ T9688] loop6: detected capacity change from 0 to 524287999
[  432.639718][ T9688] buffer_io_error: 7 callbacks suppressed
[  432.639754][ T9688] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.655209][ T9688] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.665217][ T9688] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.702551][ T9688] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.715173][ T9688] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.732087][ T9688] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.743262][ T9688] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.757586][ T9688] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.773977][ T9688] ldm_validate_partition_table(): Disk read failed.
[  432.782589][ T9688] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.797031][ T9688] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.815239][ T9688] Dev loop6: unable to read RDB block 0
[  432.845181][ T9688]  loop6: unable to read partition table
[  432.866597][ T9688] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  434.221687][ T9699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.971'.
[  436.497463][ T9720] syz_tun: entered allmulticast mode
[  436.516632][ T9718] syz_tun: left allmulticast mode
[  438.411454][ T9741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.982'.
[  439.084783][ T9749] loop8: detected capacity change from 0 to 8
[  439.097543][ T9749] Dev loop8: unable to read RDB block 8
[  439.107976][ T9749]  loop8: unable to read partition table
[  439.114192][ T9749] loop8: partition table beyond EOD, truncated
[  439.134525][ T9749] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  439.324363][ T5971] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  440.295925][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  440.309598][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  442.126609][ T5971] usb 5-1: Using ep0 maxpacket: 32
[  444.140392][ T9763] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.314564][ T9763] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.342175][ T5971] usb 5-1: unable to read config index 0 descriptor/start: -71
[  444.364820][ T5971] usb 5-1: can't read configurations, error -71
[  444.430413][ T9763] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.507457][ T9763] bond0: (slave netdevsim0): Releasing backup interface
[  444.518924][ T9763] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.772391][ T9763] bridge_slave_1: left allmulticast mode
[  444.781460][ T9763] bridge_slave_1: left promiscuous mode
[  444.789463][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.821151][ T9763] bridge_slave_0: left allmulticast mode
[  444.835505][ T9763] bridge_slave_0: left promiscuous mode
[  444.862855][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.348289][ T9763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  445.373485][ T9763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  445.383987][ T9763] bond0 (unregistering): Released all slaves
[  445.538873][ T9763] IPVS: stopping backup sync thread 7504 ...
[  445.774594][ T9763] hsr_slave_0: left promiscuous mode
[  445.781380][ T9763] hsr_slave_1: left promiscuous mode
[  445.788073][ T9763] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.796084][ T9763] batman_adv: batadv0: Removing interface: batadv_slave_0
[  445.806444][ T9763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.813870][ T9763] batman_adv: batadv0: Removing interface: batadv_slave_1
[  445.857690][ T9763] veth1_macvtap: left promiscuous mode
[  445.863716][ T9763] veth0_macvtap: left promiscuous mode
[  445.873516][ T9763] veth1_vlan: left promiscuous mode
[  445.881546][ T9763] veth0_vlan: left promiscuous mode
[  446.338810][ T9763] team0 (unregistering): Port device team_slave_1 removed
[  446.378204][ T9763] team0 (unregistering): Port device team_slave_0 removed
[  447.111111][ T9763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.176710][ T9763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.234691][ T9763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.332676][ T9763] bond0: (slave netdevsim0): Releasing backup interface
[  447.346662][ T9763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.548509][ T9763] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.623823][ T9763] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.714512][ T9763] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.819942][ T9763] bond0: (slave netdevsim0): Releasing backup interface
[  447.831910][ T9763] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.034792][ T9763] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.118832][ T9763] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.197307][ T9763] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.298500][ T9763] bond0: (slave netdevsim0): Releasing backup interface
[  448.309597][ T9763] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.490270][ T9763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.604917][ T9763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.681490][ T9763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.731966][ T9763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.915014][ T9763] bridge_slave_1: left allmulticast mode
[  448.922012][ T9763] bridge_slave_1: left promiscuous mode
[  448.931416][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.942643][ T9763] bridge_slave_0: left allmulticast mode
[  448.952760][ T9763] bridge_slave_0: left promiscuous mode
[  448.959100][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.974856][ T9763] bridge_slave_1: left allmulticast mode
[  448.984686][ T9763] bridge_slave_1: left promiscuous mode
[  448.994143][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.003896][ T9763] bridge_slave_0: left allmulticast mode
[  449.013998][ T9763] bridge_slave_0: left promiscuous mode
[  449.019954][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.036765][ T9763] bridge_slave_1: left allmulticast mode
[  449.042442][ T9763] bridge_slave_1: left promiscuous mode
[  449.051906][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.062947][ T9763] bridge_slave_0: left allmulticast mode
[  449.073432][ T9763] bridge_slave_0: left promiscuous mode
[  449.081922][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.098444][ T9763] bridge_slave_1: left promiscuous mode
[  449.104123][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.117925][ T9763] bridge_slave_0: left allmulticast mode
[  449.123636][ T9763] bridge_slave_0: left promiscuous mode
[  449.129549][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.496203][ T9763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  449.508751][ T9763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  449.518755][ T9763] bond0 (unregistering): Released all slaves
[  449.767241][ T9763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  449.778100][ T9763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  449.789175][ T9763] bond0 (unregistering): Released all slaves
[  450.067944][ T9763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  450.078583][ T9763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  450.089018][ T9763] bond0 (unregistering): Released all slaves
[  450.373997][ T9763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  450.385385][ T9763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  450.395910][ T9763] bond0 (unregistering): Released all slaves
[  450.589759][ T9763] tipc: Left network mode
[  450.917814][ T9763] 
[  450.920186][ T9763] ======================================================
[  450.927212][ T9763] WARNING: possible circular locking dependency detected
[  450.934245][ T9763] 6.16.0-syzkaller #0 Not tainted
[  450.939257][ T9763] ------------------------------------------------------
[  450.946261][ T9763] kworker/u8:21/9763 is trying to acquire lock:
[  450.952499][ T9763] ffff888032788e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0
[  450.962112][ T9763] 
[  450.962112][ T9763] but task is already holding lock:
[  450.969475][ T9763] ffff888029480768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[  450.979834][ T9763] 
[  450.979834][ T9763] which lock already depends on the new lock.
[  450.979834][ T9763] 
[  450.990225][ T9763] 
[  450.990225][ T9763] the existing dependency chain (in reverse order) is:
[  450.999229][ T9763] 
[  450.999229][ T9763] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  451.006961][ T9763]        lock_acquire+0x120/0x360
[  451.011987][ T9763]        __mutex_lock+0x182/0xe80
[  451.017011][ T9763]        ieee80211_open+0xed/0x1f0
[  451.022117][ T9763]        __dev_open+0x470/0x880
[  451.026964][ T9763]        netif_open+0xaa/0x170
[  451.031723][ T9763]        dev_open+0x125/0x260
[  451.036393][ T9763]        team_add_slave+0xb36/0x2840
[  451.041676][ T9763]        do_set_master+0x530/0x6d0
[  451.046786][ T9763]        do_setlink+0xcf0/0x41c0
[  451.051806][ T9763]        rtnl_newlink+0x160b/0x1c70
[  451.057006][ T9763]        rtnetlink_rcv_msg+0x7cc/0xb70
[  451.062463][ T9763]        netlink_rcv_skb+0x205/0x470
[  451.067743][ T9763]        netlink_unicast+0x75c/0x8e0
[  451.073029][ T9763]        netlink_sendmsg+0x805/0xb30
[  451.078326][ T9763]        __sock_sendmsg+0x21c/0x270
[  451.083515][ T9763]        ____sys_sendmsg+0x505/0x830
[  451.088798][ T9763]        ___sys_sendmsg+0x21f/0x2a0
[  451.093992][ T9763]        __x64_sys_sendmsg+0x19b/0x260
[  451.099445][ T9763]        do_syscall_64+0xfa/0x3b0
[  451.104457][ T9763]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.110857][ T9763] 
[  451.110857][ T9763] -> #0 (team->team_lock_key#5){+.+.}-{4:4}:
[  451.119027][ T9763]        validate_chain+0xb9b/0x2140
[  451.124311][ T9763]        __lock_acquire+0xab9/0xd20
[  451.129502][ T9763]        lock_acquire+0x120/0x360
[  451.134513][ T9763]        __mutex_lock+0x182/0xe80
[  451.139541][ T9763]        team_del_slave+0x32/0x1c0
[  451.144649][ T9763]        team_device_event+0x285/0xa20
[  451.150098][ T9763]        notifier_call_chain+0x1b3/0x3e0
[  451.155722][ T9763]        unregister_netdevice_many_notify+0x15d8/0x2320
[  451.162648][ T9763]        unregister_netdevice_queue+0x33c/0x380
[  451.168876][ T9763]        _cfg80211_unregister_wdev+0x165/0x590
[  451.175024][ T9763]        ieee80211_remove_interfaces+0x49a/0x6d0
[  451.181362][ T9763]        ieee80211_unregister_hw+0x5d/0x2c0
[  451.187340][ T9763]        mac80211_hwsim_del_radio+0x275/0x460
[  451.193410][ T9763]        hwsim_exit_net+0x584/0x640
[  451.198613][ T9763]        ops_undo_list+0x497/0x990
[  451.203728][ T9763]        cleanup_net+0x4c5/0x800
[  451.208671][ T9763]        process_scheduled_works+0xade/0x17b0
[  451.214817][ T9763]        worker_thread+0x8a0/0xda0
[  451.219916][ T9763]        kthread+0x70e/0x8a0
[  451.224498][ T9763]        ret_from_fork+0x3fc/0x770
[  451.229601][ T9763]        ret_from_fork_asm+0x1a/0x30
[  451.234888][ T9763] 
[  451.234888][ T9763] other info that might help us debug this:
[  451.234888][ T9763] 
[  451.245107][ T9763]  Possible unsafe locking scenario:
[  451.245107][ T9763] 
[  451.252542][ T9763]        CPU0                    CPU1
[  451.257897][ T9763]        ----                    ----
[  451.263267][ T9763]   lock(&rdev->wiphy.mtx);
[  451.267864][ T9763]                                lock(team->team_lock_key#5);
[  451.275321][ T9763]                                lock(&rdev->wiphy.mtx);
[  451.282337][ T9763]   lock(team->team_lock_key#5);
[  451.287276][ T9763] 
[  451.287276][ T9763]  *** DEADLOCK ***
[  451.287276][ T9763] 
[  451.295408][ T9763] 5 locks held by kworker/u8:21/9763:
[  451.300770][ T9763]  #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  451.311647][ T9763]  #1: ffffc900056c7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  451.322174][ T9763]  #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  451.331504][ T9763]  #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0
[  451.341446][ T9763]  #4: ffff888029480768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[  451.352245][ T9763] 
[  451.352245][ T9763] stack backtrace:
[  451.358403][ T9763] CPU: 0 UID: 0 PID: 9763 Comm: kworker/u8:21 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  451.358425][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  451.358437][ T9763] Workqueue: netns cleanup_net
[  451.358491][ T9763] Call Trace:
[  451.358502][ T9763]  <TASK>
[  451.358510][ T9763]  dump_stack_lvl+0x189/0x250
[  451.358530][ T9763]  ? __pfx_dump_stack_lvl+0x10/0x10
[  451.358547][ T9763]  ? __pfx__printk+0x10/0x10
[  451.358567][ T9763]  ? print_lock_name+0xde/0x100
[  451.358588][ T9763]  print_circular_bug+0x2ee/0x310
[  451.358608][ T9763]  check_noncircular+0x134/0x160
[  451.358629][ T9763]  validate_chain+0xb9b/0x2140
[  451.358650][ T9763]  ? lockdep_hardirqs_on+0x9c/0x150
[  451.358671][ T9763]  __lock_acquire+0xab9/0xd20
[  451.358688][ T9763]  ? team_del_slave+0x32/0x1c0
[  451.358708][ T9763]  lock_acquire+0x120/0x360
[  451.358722][ T9763]  ? team_del_slave+0x32/0x1c0
[  451.358744][ T9763]  ? __mutex_trylock_common+0x153/0x260
[  451.358766][ T9763]  __mutex_lock+0x182/0xe80
[  451.358783][ T9763]  ? team_del_slave+0x32/0x1c0
[  451.358803][ T9763]  ? rcu_is_watching+0x15/0xb0
[  451.358823][ T9763]  ? team_del_slave+0x32/0x1c0
[  451.358844][ T9763]  ? __pfx___mutex_lock+0x10/0x10
[  451.358861][ T9763]  ? bond_netdev_event+0xd9/0xe80
[  451.358885][ T9763]  ? __pfx___mutex_lock+0x10/0x10
[  451.358901][ T9763]  ? __pfx_bond_netdev_event+0x10/0x10
[  451.358927][ T9763]  team_del_slave+0x32/0x1c0
[  451.358949][ T9763]  team_device_event+0x285/0xa20
[  451.358966][ T9763]  notifier_call_chain+0x1b3/0x3e0
[  451.358987][ T9763]  unregister_netdevice_many_notify+0x15d8/0x2320
[  451.359012][ T9763]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  451.359031][ T9763]  ? __lock_acquire+0xab9/0xd20
[  451.359053][ T9763]  unregister_netdevice_queue+0x33c/0x380
[  451.359077][ T9763]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  451.359097][ T9763]  _cfg80211_unregister_wdev+0x165/0x590
[  451.359121][ T9763]  ieee80211_remove_interfaces+0x49a/0x6d0
[  451.359141][ T9763]  ? __pfx_synchronize_rcu+0x10/0x10
[  451.359160][ T9763]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  451.359179][ T9763]  ? rcu_is_watching+0x15/0xb0
[  451.359198][ T9763]  ieee80211_unregister_hw+0x5d/0x2c0
[  451.359223][ T9763]  mac80211_hwsim_del_radio+0x275/0x460
[  451.359248][ T9763]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  451.359275][ T9763]  hwsim_exit_net+0x584/0x640
[  451.359296][ T9763]  ? __pfx_hwsim_exit_net+0x10/0x10
[  451.359317][ T9763]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  451.359341][ T9763]  ops_undo_list+0x497/0x990
[  451.359365][ T9763]  ? __pfx_ops_undo_list+0x10/0x10
[  451.359389][ T9763]  cleanup_net+0x4c5/0x800
[  451.359411][ T9763]  ? __pfx_cleanup_net+0x10/0x10
[  451.359433][ T9763]  ? _raw_spin_unlock_irq+0x23/0x50
[  451.359446][ T9763]  ? process_scheduled_works+0x9ef/0x17b0
[  451.359462][ T9763]  ? process_scheduled_works+0x9ef/0x17b0
[  451.359479][ T9763]  process_scheduled_works+0xade/0x17b0
[  451.359505][ T9763]  ? __pfx_process_scheduled_works+0x10/0x10
[  451.359527][ T9763]  worker_thread+0x8a0/0xda0
[  451.359545][ T9763]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  451.359572][ T9763]  ? __kthread_parkme+0x7b/0x200
[  451.359593][ T9763]  kthread+0x70e/0x8a0
[  451.359614][ T9763]  ? __pfx_worker_thread+0x10/0x10
[  451.359630][ T9763]  ? __pfx_kthread+0x10/0x10
[  451.359651][ T9763]  ? _raw_spin_unlock_irq+0x23/0x50
[  451.359664][ T9763]  ? lockdep_hardirqs_on+0x9c/0x150
[  451.359679][ T9763]  ? __pfx_kthread+0x10/0x10
[  451.359699][ T9763]  ret_from_fork+0x3fc/0x770
[  451.359715][ T9763]  ? __pfx_ret_from_fork+0x10/0x10
[  451.359731][ T9763]  ? __switch_to_asm+0x39/0x70
[  451.359750][ T9763]  ? __switch_to_asm+0x33/0x70
[  451.359768][ T9763]  ? __pfx_kthread+0x10/0x10
[  451.359788][ T9763]  ret_from_fork_asm+0x1a/0x30
[  451.359813][ T9763]  </TASK>