last executing test programs:

2m24.475254863s ago: executing program 2 (id=987):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) (async)
recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) (async)
r3 = socket$key(0xf, 0x3, 0x2) (async)
r4 = socket(0x2, 0x80805, 0x0)
accept4(r1, &(0x7f0000000380)=@qipcrtr, &(0x7f0000000400)=0x80, 0x800) (async)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000000000002fa7cdf6186e38a9aa0c0b345300000000000000001f", @ANYRES32=0x0], 0x30}], 0x1, 0x44)
sendmsg$key(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)={0x2, 0x14, 0xd, 0x2, 0x4, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x1f}, @sadb_key={0x1, 0x9}]}, 0x20}}, 0x80) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') (async, rerun: 32)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r9=>0x0}) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r6, 0xc, 0x0, 0x25d4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a00000000000000000700", @ANYRES32=r9], 0x44}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64)
r11 = memfd_create(&(0x7f0000000ac0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x00\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<z\xebz\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL!\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xcf;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\xff\xff\xff\xff\xff\xff\xff\xff[M \xea\x03\xfd=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd\xa1`Yb&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"7{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02EL\xffI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\x9b{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x01\x80\x00\x00y\xd2~%\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x00\x00\x00\x00\x00\x00,\xb1|\x0f\"\x1dL\x10\x8e\x17D\xca\x8b\xe5\xca\xc1\xcf\xb2\xdc\xfc\x14+@\xdc\x9fXo\xd7\xc3\x1a\xfeA\xc2\x9a\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfb{\xf5\xdby\x9d;;30\xa7\x94\xfdh)\xa0\"r\xa4\xf4\n\xf7\xb4\xder\xc8\xf2\xa5\xc0\x15\xc5E\xf6\x1dTB\xa2\xa6\xfbN\xb7\xed\xad\x9e\xb6\x87.\xf7=\xd3U\xf0\x1dH\x99\xe6\x97\x92g\xdf\ra\x82\xc7\x00\x92\xdfB\xb2\xac\xf3V\ve\xdd(\x85u\x04\xfcD[\xa4\b\xc8Bt_\x19\xb4\xd9\x97\tD\x8a\xa6\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xf) (rerun: 64)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x801b013, r11, 0x0)

2m23.443031776s ago: executing program 2 (id=993):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x200040, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r4 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, r5, &(0x7f0000000040)={0x8000000000000001, 0x1, 0x1, 0x3})
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x8)
listen(r0, 0x100101)
accept4(r0, 0x0, 0x0, 0x80800)

2m23.057177219s ago: executing program 2 (id=994):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
io_uring_setup(0x3b72, &(0x7f00000001c0)={0x0, 0xba0, 0x0, 0x0, 0x160}) (async)
r0 = io_uring_setup(0x3b72, &(0x7f00000001c0)={0x0, 0xba0, 0x0, 0x0, 0x160})
r1 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0xf3e1, 0x0, 0x3, 0x287, 0x0, r0}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
r5 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x20000014}) (async)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x20000014})
epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x1000)
close_range(r4, 0xffffffffffffffff, 0x0) (async)
close_range(r4, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4afb3223265efd5, &(0x7f0000000080)=0x4, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4afb3223265efd5, &(0x7f0000000080)=0x4, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r1], 0x1})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async)
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e1304095c0009003f0020480a0000000d0085a168d0bf46d32345653600648d040012000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e0ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x15) (async)
sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e1304095c0009003f0020480a0000000d0085a168d0bf46d32345653600648d040012000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e0ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x15)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010104, @rand_addr=0x64010101, 0x4, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff000000, 0x80800000, 0x0, 0x0, {@mac=@multicast, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)

2m22.750621201s ago: executing program 2 (id=995):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
symlink(&(0x7f0000000180)='./file2\x00', &(0x7f0000000080)='./file2\x00')
openat$kvm(0x18, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00')
getdents64(r4, &(0x7f0000002440)=""/181, 0xb5)
write$sequencer(r4, &(0x7f0000000140)=[@v={0x93, 0x0, 0x90, 0x5, @MIDI_NOTEON=@note=0x2c, 0x6, 0x5}], 0x8)
r5 = syz_open_dev$video(&(0x7f0000000000), 0xf8, 0x105201)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x345, 0x0, 0x2ac}]})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0x8001, 0x9})

2m21.770385993s ago: executing program 2 (id=1001):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2def, 0x2e0e, 0x0, 0x0, 0xffffffffffffffa2)
mkdirat(r1, 0x0, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
mmap(&(0x7f00002e8000/0x3000)=nil, 0x3000, 0x1000000, 0x8112, r3, 0xe94d0000)
syz_usb_connect(0x2, 0x24, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000751000/0x2000)=nil})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000230000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="f599408d00040000"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
r7 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0)
r8 = fsopen(&(0x7f0000000280)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000080)='disBard', &(0x7f0000000200)='\x00', 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r9 = syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
sendto(r5, &(0x7f0000000400)="40c4cb4553f03db9dcc1c12eaced0a9bee1396688aa0ddbfc2809c05cd3e469cc6a9eebd7ada856d2cd319df9b8c5160fca1b6ed7ba4b03bb829352c9fe0f832138a3dfc7428c94995fbe3fc11a8dbec69eaf2704cd883da18aac3392e88d0013a995a4cba5a54afc0b1a7e58903f2610312c426ac0ad56de9f5fb9df852b56b936995288d5dc98d08602e3e63c1bc229c00ce1285165d2c63ae908fd0c240518cf6a84cf3e0626856cbb39bb9349176c1fd7220314cfd966f0b9020f2ee809f30e3e893eb059e26d9735a1cd10f123bfe666e056895cacfeba3d49c83801ab4c3ce5ee7d5f6a8667dbd7b420150", 0xee, 0x20040000, &(0x7f0000000180)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80)
mmap$IORING_OFF_SQ_RING(&(0x7f000062a000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r7, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc)

2m21.51593105s ago: executing program 2 (id=1005):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x2, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x100, 0x4}, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) (async)
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) (async)
gettid() (async)
timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000380)="90988b798ab39e009d6430a4af6b516acd6bba5f09a68fbb2f3c7541ea9ccf1a01ff8750bc371e1cb2519596fd5856121312b3cff82aeec9f88abf781ad0d949012f55270042f7da", &(0x7f0000000400)="d0bdfff9acfdf0a93670080413c52a61565d9d656f78e25af4f2b12c1c0d3cc8e97dc2bb66c23157c50b26f0286b00206dbfd70cbef6620295cac3f1a9b18362ea6334b0f4dee167a451d27900e6c9321f9f87bd51a3c9d7ceac561486005b18faf22d33650a812328ec8941f91df1003423759316a9c9ab62416261e013482d9ae353cc2d35b3aadb330de8bee1d4dd"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000240)=0x3) (async)
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) (async)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)) (async)
read$dsp(r5, &(0x7f0000000300)=""/79, 0x4f) (async)
r6 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x8c, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000640)=0xfffff801) (async)
close(r1)
r7 = socket(0x2, 0x80805, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x7d, 0x7fffffff, 0x10, @remote, @loopback={0x21, 0xffff888101827518}, 0x10, 0x40, 0x2, 0xfffffffd}})

2m21.126738728s ago: executing program 32 (id=1005):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x2, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x100, 0x4}, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) (async)
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) (async)
gettid() (async)
timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000380)="90988b798ab39e009d6430a4af6b516acd6bba5f09a68fbb2f3c7541ea9ccf1a01ff8750bc371e1cb2519596fd5856121312b3cff82aeec9f88abf781ad0d949012f55270042f7da", &(0x7f0000000400)="d0bdfff9acfdf0a93670080413c52a61565d9d656f78e25af4f2b12c1c0d3cc8e97dc2bb66c23157c50b26f0286b00206dbfd70cbef6620295cac3f1a9b18362ea6334b0f4dee167a451d27900e6c9321f9f87bd51a3c9d7ceac561486005b18faf22d33650a812328ec8941f91df1003423759316a9c9ab62416261e013482d9ae353cc2d35b3aadb330de8bee1d4dd"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000240)=0x3) (async)
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) (async)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)) (async)
read$dsp(r5, &(0x7f0000000300)=""/79, 0x4f) (async)
r6 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x8c, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000640)=0xfffff801) (async)
close(r1)
r7 = socket(0x2, 0x80805, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x7d, 0x7fffffff, 0x10, @remote, @loopback={0x21, 0xffff888101827518}, 0x10, 0x40, 0x2, 0xfffffffd}})

2.646639044s ago: executing program 1 (id=1667):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120002000200000000000000000010003c00050000000000000000000000ac1e0001000000000000000000000000ac1414000000000e000000000000000005000500000000000a00050000000000fe8000000000000000000000000000aa000000000000000005000600000000000a0000001b546ff75bb51fc60a23aeea00000000fc0200"/172], 0xa0}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@exit]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='xen_cpu_write_ldt_entry\x00', r1}, 0x18)
ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000240)={0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r2, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)

2.603020508s ago: executing program 3 (id=1668):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd24, 0x25dfdbf8, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080)
socket$kcm(0x11, 0xa, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0xff8, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xfcc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfba, 0x4, "fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b7eae6f43486f644f18c3a5c3134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397236fa9476ac5fac7c2c896babca09d74720004cd0e634327de4fd87ed72ae069c095d2c70caed52e3335478c1c3719925e24f2fd7755baebd5cde385727a0f0440dd3b662248c43ff5afc4f186ff0051ba8eaa07623b79c4bb6985f14c5ac15041a6ff7584f921982e5414481d4db4c76798d70a59b5aeccb6e7882aefe70993758b55b4dc4039c2b1c98452113aaf23ccdf68cb6eff6e048f9da6f39a2def3caaf80cdcbadb83b029b8738391f02fec90c8a8b6f036aae8ceaff5dca7d3e0098423fedc676c6774ab0e6a72bd246c0b3004d1988f802b846d62ca59e9a63ce12814176ec4380e1cf29d27e7b2f7e7eadcaae8f182498ad32e67323fe6ef9508fec40dd38897652053ef92e44a909060c237890c196f0c26ab10248f999001f6231813a81313971bea77a5470f312d185dce689adc99e430e4010a3a341482c51fb71c23c3cdf92303c7580c73775f9a74685a61ce9849eaca52b97ee7ffe2e672dc1be5267c285a102711b1b5d81d6dbb76494f2892fd4f85244ade3cdd3809fd5fdfce5157fc1658f0bceb379489732583707c170fc6392aa4f5b94843aeb18ca58e0156e029c2b722918b1b3dc7c151cb9c248ddd18423629b53cd4b0ab2693b0df29c88c04657f4eccdcf9357de8186fdc0ec86f92950734975921a2fde57c3e7176b57c871d76ff8a8f36520b67e64930cf34bcde9ad92d057a359ca022b646df18e2b7202845bd8ac4be5e5ebae436dc4b93dfaaf2778a53e7e4be937e83dac7d1d481bdbd8081ab0ac08af067e62580bbdbf397cbc629db9b023734b6fad7824d1a8b3257c1c18d6ebc928140060f004ec484b183560f830a1eb0c527c8600bb2600d761e847454e677aa29486aa407a9e9a5e9dc9542de038e3e55fdfec13184cdb16716556f972eef5c56230c43d146c86a9147265c309a279db6d138647920410896c5397c5f83634fa5e92b5161f786482d84830864388b91c2c1e3e9f9f038d5fa66f7fe904e14df0a60d46066c6b1f37cec6e13c35832f512be21da21a5921b81cc452b0076c2ec10fc5481cd0e1ca917b40cb3aa839b120ce6eb9773e942b74ececac6bdcd22eb8dd6cd9f148e0ebe5ef3094f42adc39bc5ca2259e1eab5059ccf5e82bb57b97d4d13a90747299b2e6b64f962aabf222e4f287503181de3c3a68fb2b0068583f3b97e40ce06e9805a7121eccac0527b8f1b18a62762efe0a9ce4114b7d1ba942bc93533ee0b1bd7f0a607207b976dfa1fbe3ce0868e7f4e31b41a0aada0ac6b291aefe22ea5338f07e57b981b8e4e4a121f231d2f46989fd5dd09a7c1d198f5886b4f1a222eccdabff096a81fef3c9e497621128562880938fe05a1f1c4da81daba55bf326f1e3a1712d79f01fbef2ee230615d4e454be67f0ad4dc2bfffaecbb683742925738b45854ab713ae548b9709e9ea2e28224ef466bced79e3ec6c163d45db187bc01c75afa85f78003927dcd122086acc8dd1b1224de41d62b83e34083dd39fe68aa5a479ba403f5dbddf9b763ca521b7efca6234be16484f1e0112d963672a6d24cdac15e80bcb82b3b22231670c41fe7e8a0a083b6df768e7fb0d94a004f8372f5cf8b9b45cc679eb67828a94d0ffabfe09d95ad2789cb8657f7ea86a46260416a72e6fc7b44e549a2e39fe015c7647cc0bec15fa63d26894be1cc5326331e7e0b1c505934182accf049bab033b026d48fda51de740afc0666e6c891e0c5192f4b2df21493477ff45319d7d8b816f0b73ccfa12d6846362feb4b85063ca42e950eb577c630300dc52698a38ca19cbbb398404a1e8e27d0be49987e59caef03da096d1ccbeed73bd7c9588325b747ab77f4d7c1c1f18388ce1771882ee680ed737ad197ff92f1052e5e79f6ffa5b85ba3fac5db13e0d0046c9dca0ab4b74b20299ba6bdd758940e088df31e1382cee6901503299028467a864d27affae30fd9aef5a6ff948c052124511a75a46d5a316e28fb6c5bfac787be5833c63c535557235b0e09f9a78a338aa8864613fc7a7e252d1975af2c4a6bcc969d1e20e3cd4dfc1b2fe34b70fd7804dbfde4fa4d950e5fb4eb926dece9e4601b12efe322bb42ac808158fef0a26900000000726654987e7de20d1e41e82c607c33c6bae7bb234744b51dc683d5857afd6ba8246cebc734e393806ef102a6baaf04f3a7c3cb888d5830e1c6ae170c5c920e806b4f518be4416b216cdf9b1658a412d9e4eab6c9b20ce99960f27e77fdf9a2e98b35c63859f9db6bdcbef1001a19e12e41370f9358531987851ab64c250e68a8569ace4418e2118caff7d3d4caf1c87bc50a8ae75770fdae88a8490c041b39d08190d8b7c908caddd66331a508929d53dd6bc2dbc86f97115ff0a364b70f96918e6ed354c97e59ea5e2c7b149cd51d7c85a27ac658e78b99326857818df0ac0ee240cbb6ee9d9ee6c2c2ff7c29dd25fd337dc08bddeb50305ed48b9f5d89c55ffedde29ce0412ea8e2c976f961eb0c4966d2a8be0b657a5e51048a8a10005c488e1f637ce208a35b5aed0c2067465191dc42ebf6e4853cc89998bdf2ef755f38a3cd985b62df36a5ebc3b47df32423ee46857f9db9d756ff69ecd4ef2f307dcaefd4a1f399543952df972269c28200df8ebacad4eed1c00b9ce9841799bea583cafdeaa8d4a371a8ae55d8ffe4846833985975d8b234adff63eace9d2c4d1680c370827ebe1831ef311077607e8c4920506e03528861085dcfdb918f1efe917563e708bca0a38377e1635c402ec1c34eddae986ffa8756b27f6c340907bae99f4a6b328fca8177b4dfaceea5ad3ceb901dbcefc15ded322bece4e750969e81935764ebe88749464af7e692e3d324c519b456013daae93bd63215540380a7fe08f0e050cdeb25db2a8b9b6f5720ad1e7d2c5b6d609712eccd321d6211fb642a4cdf72504aabd017a9b4827d1e0e0264435a5e1045dbe33834968d2db503972995559b1efe1b9ce475405118346b63f637b1abf8e8374e7100d6b41c9c672d2b244c7a82ffb882522efd9e903fc69db14c469685780005843856c6623591f305d383eae55a1a1d5619dfff0027413f26fa6a793a348ba8b192e1b088745a2175d55517a75d4b63cce41cc0dcaca9002cd37a1ccc6710ba2a099297b0824f976919e8abf3b1510b1305a95241fefbd036afa9d4538affc82f005d29b9f2c0e60d6c20f673b8ca28cb088e1e89efe334f25ffe1a3fb3581e5aa63b9a4a49f269b5538788aacbbc04d49902ae2af1f59d2484ab6ba7a9b477be0d92e221fc48cdbc00bef7125bfe36f9afb1cbd58fef21625ec99ffd2e35fb00767e3f22dba7d36163203cfaf1860a8b1afe0d878ea00fe08f68fd592a6395fb357acbdc2834c8ac85571527dbf1dbaaccede3d583e2b9bf076737716785f44aebc7ba917fb426d5541adff1e75836ab70fb0b43565ab5e24c5902879f31701cc006b4ee2f57be0916cf0b6cd489c4fa9129031a4af75a00048f20eb962f0c6f68cda0d7756a4e83f7d065c4a00b8263d95f6b979507b7ca01735e83a5e5ff0b76f077ef6e4c1150f9202b5311a231b76111d48a387e09075edb2448fb19d2869ae420ada8ee7577fe980ed7e057dc963c0a98db790bb5b7920220f8a55213b6530637b832abdf3c6fefdefb712a2c2c9eba8087ce39335ddabdadb86f493061e593981c6b2d70b4bac3b58885787c46f85c1022f5ff6cec16ba227aa5dac2e0be30522c08369f18d170b9cb454f3ebf86d1e923fdd65245d8e0c476bfedddcb772453f4d0e70d059e79b8811c379c9eff6e45d99f81186930b32b24cdcb906a41fe29c147ed834b37e77800a33c15e65d121ee85a924ef6bbc1c8f4a423fbc5d14645a08178227f4c7f111fa318823a6c075ddf9e131c9bca8d56dec4a68fbab9a0c1a128880d8b4dec59b89ec33c19eb76f09f31ad730cba735b60deba54c399119949e45af4de5c758281945fe6b6a25ac1cd57a81b48f11a6575e79b82e529d4ba1b2a1175cfa03ef6d149b165195fa64736b302e28ee6444368fb395a2d89c8747348b546a07ed0306682971539f0031d88ffa020d0b3d40369e0a3d2238293a75a155eb5c0749f64ed37a9af5be26d5a4322a55a23c33d176280bd0e4c5168f2e66bca925304d0f32074f5e68d7c43f9e2e3f14a6bcf3e77e6b71737131c3e90208072e37c8a6cad1cabd756aa694e85b86256ce13b43541a26438374b6029ee461d223ed34ed1e9a3e580cec7b2b41bc9823b3729e683f079a498636d022799dd94c5e870b6aa7f3d36fb51ffb6c5e317fcde6b5ae45073f8e90ee0fc1fa0641ff6f0b789dcc6df2fe9a3b5e6ed9d2be3403f5af96e7c6019b0a0ce4f8342323638a52c121956de068069fe5c44946b5023e1db7742fec29cb749bcdc09d795b683c553dbae1298540b2cf1bc3e5e52adf252bca47ba2182c80541daf1d11b1c67675171e69c1abe3c0bc3a0f2d1a6e2165ca1647c394970a404a6002621a258cef01e2ca12a138888dace9ad06d2f0c0209f286c11b289626aa557cc201560651054a6042e84c6fc5e345e2f702d61851fed5ffa36ade652f76db815dabb7b8eee016ea0836d0086f2a2f7bd1c4a4ceb1d706817b41347a891c34b45eb06a9ecb19041d5a39f050cb0413662dc4700385fac2e1823e1ce4d08c66692fde0862a057f2aa2425d511735fff53d0e3d88bfb245e7724ba4ba8452e469862d333dad5c63bfa778809c043132db3a57e122d0495441f7a07034a3ac1024b8fc063694d8316c29639cb6605ff362a853f976c763f6d10e4e0972760e60f08acdd8a73607e7311819fe24ad8b670bbf0adede086f91bd0839ce37927f43a263e3e8369932db9ab786ba66e1bba664bfa8aa50d98ed18fc90e560933c2e8da72757a4539756740a73c41180cf97fde47cf3e9e6005302459d831eea7a03157e0c3178776e4d4add3999b9a1efca7c99b8234ff9d33492431dd9bd0814301ee49260e30b8b6afc46ce8a733bc9d7850c789e5e98cdefbfb11131a85bc24e75453a16c6780ab4229b985d1fe7a255f71cfe18398e881d493ded88300b54f6c4a5567fd84a6e1f11835433448a00420ab1b3a49fcc0e9938da52b68f9409c94a0de61f0beb69532c4f7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0xff8}}, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = inotify_init1(0x0)
unshare(0x22020600)
fcntl$setstatus(r4, 0x4, 0x46400)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18)
prctl$PR_SET_NAME(0xf, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
rename(0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
creat(&(0x7f0000000240)='./file0\x00', 0x100)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r8, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0xaa, 0x2c, 0x800, 0xa0000000000, 0x3ff], 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}]}, 0x78)

2.412109689s ago: executing program 1 (id=1672):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
bind$can_raw(r0, &(0x7f0000000080), 0x10)

2.32982929s ago: executing program 3 (id=1674):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000600)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x4840)
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x358, 0x0)
r6 = syz_open_procfs(r2, &(0x7f00000000c0)='mountinfo\x00')
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r7}, 0x10)
io_uring_enter(r6, 0x8e5, 0xd6bd, 0x24, 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mlxsw_sp_acl_atcam_entry_add_ctcam_spill\x00', r10, 0x0, 0x6}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000380), &(0x7f00000003c0)=r10}, 0x20)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x80000000)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x6c}}, 0x0)

2.190532675s ago: executing program 1 (id=1675):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48)
r3 = msgget$private(0x0, 0xfffffffffffffffd)
getresgid(&(0x7f0000000400)=<r4=>0x0, &(0x7f00000005c0), &(0x7f00000007c0))
getresgid(&(0x7f0000000800)=<r5=>0x0, &(0x7f0000000840), &(0x7f0000000880))
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x6, 0x91c, [0x0, 0x200000002700, 0x200000002a84, 0x200000002d78], 0x0, 0x0, &(0x7f0000002700)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x62265f716228eb5c, 0x10, 'xfrm0\x00', 'caif0\x00', 'veth1_to_batadv\x00', 'veth0_to_hsr\x00', @random="3cb81e8a856c", [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x9e, 0x9e, 0x1ce, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x8e, 0x6f, 0x0, 0x1}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:insmod_exec_t:s0\x00'}}}}, {0x3, 0x4, 0x9, 'veth1_vlan\x00', 'netdevsim0\x00', 'netpci0\x00', 'veth0_to_batadv\x00', @empty, [0x0, 0xff, 0x0, 0x101, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0xd6, 0x11e, 0x14e, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x80000001, 0x5c, 0x4, 0x1}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0xfffffff8}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"11f2d39a4ef7534af99f33e7fda766b51340533be7b53938127a5f6f7ff6"}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x40, 0x0, 'veth0_virt_wifi\x00', 'batadv_slave_0\x00', 'bridge_slave_0\x00', 'wg1\x00', @local, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x19e, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x4, 'system_u:object_r:hostname_exec_t:s0\x00'}}}}, {0x11, 0x2a, 0x22eb, 'veth0_to_bridge\x00', 'batadv_slave_0\x00', 'vlan0\x00', 'bridge_slave_0\x00', @multicast, [0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0x0, 0xff], 0xf6, 0xf6, 0x126, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x100000001}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0x7, 0x7, 0x1}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x6}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{0x5, 0x40, 0x8884, 'tunl0\x00', 'pimreg\x00', 'veth0_macvtap\x00', 'ip6gre0\x00', @local, [0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x2, {0x10000}}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}, {0x5, 0x31, 0x88be, 'veth0_to_bridge\x00', 'bridge_slave_1\x00', 'team_slave_1\x00', 'bond0\x00', @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0x0, 0xff, 0xd5eef8dd195adb80, 0x0, 0xff], 0x11e, 0x16e, 0x1be, [@stp={{'stp\x00', 0x0, 0x48}, {{0x5, {0xe4, 0x81, 0x4, @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xc7a, 0x1b70, 0x129, 0x3, @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x4e21, 0x4e23, 0xfffb, 0x6, 0xffff, 0xc, 0xf0, 0x5, 0x0, 0x81}, 0x5c3, 0xc0}}}, @owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, r4, r5, 0x1, 0x4}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz0\x00', {0x5}}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x54, 'syz1\x00', {0x5}}}}}]}]}, 0x994)
setgroups(0x1, &(0x7f0000000740)=[r4])
msgrcv(r3, 0x0, 0x0, 0x1, 0x3000)
msgrcv(r3, 0x0, 0x0, 0x1, 0x0)
msgsnd(r3, &(0x7f0000000400)={0x1}, 0x8, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40, 0x0, r2, 0x9, '\x00', 0x0, r0, 0x0, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={<r11=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r10, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r11, 0x1}}, 0x18)
write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0x3, r11, 0x0, 0x0, 0x1}}, 0x20)
accept4$packet(r6, &(0x7f0000000180), &(0x7f00000001c0)=0x14, 0xc0c00)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES8=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={0x0, r13}, 0x18)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010028bd7010fddbdf251a0000000c0022800400008004b92a80070021"], 0x30}, 0x1, 0x0, 0x0, 0x20000054}, 0x44)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r12, 0x0, 0x3}, 0x18)
sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

2.063835617s ago: executing program 3 (id=1679):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
pidfd_send_signal(r3, 0x2, 0x0, 0x0)

1.870693304s ago: executing program 3 (id=1682):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = io_uring_setup(0x563b, &(0x7f00000000c0)={0x0, 0xfffffff6, 0x801, 0x400, 0x20002bb})
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf4ffffff}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

1.557463033s ago: executing program 3 (id=1687):
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00')

1.437456207s ago: executing program 3 (id=1689):
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[], 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r0 = socket(0x10, 0x3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94)
r1 = syz_io_uring_setup(0xcf, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x0, 0x2d2}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc080}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4e, 0x2004, @fd_index=0x6, 0xfffffffffffffff9, 0x0, 0x0, 0x8, 0x0, {0x3}})
io_uring_enter(r1, 0x13e4, 0x0, 0x0, 0x0, 0x7)

1.274465767s ago: executing program 4 (id=1692):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a001000010000100000000000000000064010102000000000000000000000000ff01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000e8b9d0fa3286c0d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1a0}}, 0x0)

1.237634179s ago: executing program 1 (id=1694):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

1.074696282s ago: executing program 4 (id=1697):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180b00000000000000000000000000001811001a", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

971.406829ms ago: executing program 0 (id=1699):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
timer_create(0x3, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

870.896182ms ago: executing program 4 (id=1700):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, 0x0, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000100))

797.461459ms ago: executing program 0 (id=1702):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x6, 0xbfab, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3)

714.927637ms ago: executing program 4 (id=1703):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0xfffffe11)

706.889824ms ago: executing program 5 (id=1704):
r0 = socket(0x1e, 0x80004, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
dup3(r2, r0, 0x0)

676.94812ms ago: executing program 0 (id=1705):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1c9640)

574.692812ms ago: executing program 5 (id=1706):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0xffffffff, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

574.308136ms ago: executing program 4 (id=1707):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x0)

506.982394ms ago: executing program 0 (id=1708):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0000780000800008", "0dd12f0d004fcf0000e8bfff1a8600", "cf0f00", "8657e2b7e63b34e4"}, 0x28)
write$binfmt_script(r1, &(0x7f0000001300), 0x8f)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1)

506.712677ms ago: executing program 5 (id=1709):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)

433.400523ms ago: executing program 4 (id=1710):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
r2 = socket$inet6(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB], 0x48)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x25dfdbfb, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x0, 0x5, 0xffff0000, 0x7, 0x6, 0xdcc, 0x81, 0x7, 0xf8, 0x9, 0x6e, 0xb, 0x10, 0x1f, 0x0, 0x5f7ee47a, 0x0, 0x76, 0x18000000, 0x2, 0x101, 0x2, 0x6, 0x4899a606, 0x81, 0x5, 0x5, 0x10, 0x20000000, 0x80, 0xfffffffd, 0x80000001, 0x7, 0x0, 0x7fff, 0x0, 0x1, 0x3, 0x2, 0xffff, 0x9, 0x1, 0x0, 0x2, 0xfc4, 0x5, 0x96ae, 0xffff, 0x1, 0x40, 0x2, 0x3, 0x4, 0x2, 0xfffffff7, 0x9, 0x80000000, 0x6, 0x1, 0x4, 0x4, 0x10002, 0x5, 0x4, 0x1, 0x6, 0x5, 0x8, 0x6bda55a8, 0x3, 0x5, 0x264, 0xc1, 0x0, 0x179ba908, 0x0, 0x7, 0x2a023d77, 0xfffffff7, 0x8, 0xaa, 0x9, 0x3, 0xa, 0xf, 0xffff6028, 0xbfffff07, 0xfffffff9, 0x6, 0x8, 0x7, 0x1, 0x0, 0x7ff, 0x63, 0x3, 0x7, 0x5, 0x2, 0x2d3, 0x200, 0xf, 0x3, 0xad, 0xffffffff, 0x10, 0x8, 0x4, 0x1, 0x1, 0x3, 0xc, 0x0, 0xc, 0xfffffffe, 0x1, 0x1, 0x7, 0x18, 0x7, 0x100, 0x5, 0x4, 0x9, 0x6, 0x4, 0x8, 0x4, 0x42, 0x3, 0x80, 0x0, 0x400, 0x4, 0x5, 0x101, 0x8, 0x2, 0x7f, 0x0, 0x7fff, 0xc, 0x15, 0x9, 0x7fffffff, 0x2, 0x80, 0x8001, 0x4, 0xb, 0xc00, 0xc, 0x9, 0xb9, 0x8, 0x2, 0x1000, 0x200, 0x1, 0x9, 0xfffffff7, 0x19, 0x3, 0xffffff81, 0x10000, 0x18, 0x4, 0xffff8001, 0x3, 0x6, 0x9, 0x6, 0x80000000, 0xc863, 0x81, 0x3, 0x4, 0x7, 0x2, 0x1, 0x2c2, 0x4, 0xfffffffb, 0x4, 0xf8, 0x7fff, 0x5, 0x80000000, 0x5, 0x9, 0x0, 0x3800, 0x9, 0x53, 0x47, 0x7fffffff, 0x1000, 0x3, 0x2, 0x81, 0x4, 0x80000001, 0x4, 0xe, 0xd, 0x6, 0x7, 0x1, 0x7ff, 0xfffff001, 0xa5, 0x10001, 0x3, 0x79, 0x807, 0x81, 0xe9ab, 0x6, 0x2, 0x4, 0x6, 0x7, 0x7, 0x3, 0x8c, 0x2, 0x718, 0x4, 0x0, 0x2, 0xab, 0x9, 0x9, 0x5, 0x4, 0xfffffff9, 0x7, 0x4, 0x4, 0x1, 0x90, 0xfffffd5d, 0x34ea, 0x6, 0x7, 0x8, 0x4, 0xfffffff7, 0x2, 0x2, 0xaa, 0x8, 0xfffffffd, 0x5, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x8, 0x9, 0x4, {0x3, 0x0, 0x53d, 0x5, 0x1ea, 0xe0000000}, {0x4, 0x1, 0x4, 0x7f, 0xc, 0x8}, 0x6, 0x40000, 0x5}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe0, 0x1, 0xa, 0x1, 0x0, 0x3, 0xfffffffe, 0x8, 0xfffffffe, 0x7, 0x74d, 0x13, 0x0, 0x8, 0xc6, 0x5, 0x4, 0x2, 0x4, 0xfffff800, 0x3, 0x1, 0x8, 0xb25a, 0x2, 0x2, 0x101, 0x9, 0xca, 0x7, 0x50000, 0xe, 0x8, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1, 0xfffffffd, 0x3, 0x80000001, 0xfff, 0x7, 0x40, 0x40, 0x86e, 0x40, 0x7, 0x8, 0x5, 0x0, 0x8000, 0x8, 0x8, 0x8, 0x5, 0x9, 0x6, 0x5, 0x9, 0x3, 0x8, 0x8, 0x5, 0x1000, 0xfffffffb, 0x5, 0x3, 0xf, 0x101, 0x5, 0x5, 0x7, 0x720f, 0x1, 0x8, 0x8, 0x5a1, 0x9, 0xe, 0xa684, 0xa000, 0x2, 0x5, 0xfffffffb, 0x4, 0x1000, 0x0, 0x41333142, 0x1, 0x2, 0xff, 0x605, 0x6, 0x4, 0x9f2b56b, 0xb0b7, 0xcd2, 0x6, 0x8, 0xb, 0x88, 0x1, 0x8000, 0x1, 0x8, 0x0, 0x2, 0x800, 0x5, 0x1c1c, 0xe0, 0xf06, 0x9, 0x7, 0xf6eb, 0x2, 0x2, 0x7, 0x8, 0x9, 0x6, 0x2, 0x1, 0x40, 0x4, 0x9600, 0xf8, 0x5, 0xfffffffc, 0x9, 0x2, 0x81, 0x10001, 0x4, 0x1, 0xfffffffd, 0xc, 0xab, 0x7, 0x0, 0x7fff, 0xffffffff, 0x10000, 0x7, 0x6, 0x9, 0x2, 0x8, 0x48e, 0xb, 0xfffffffc, 0x200, 0x0, 0x5eea, 0x7, 0x5, 0x7fffffff, 0x0, 0xc, 0x9, 0xfffffff5, 0x6, 0x9, 0x3, 0xf9, 0x800, 0x8, 0xfffff76c, 0x4, 0x0, 0x30f1554e, 0x1, 0x8, 0x2, 0x200, 0x7f, 0x20003, 0xd6a, 0x9, 0x3, 0x9, 0x1ff, 0xff, 0xef6, 0x800, 0x80, 0x2, 0x81, 0x8000, 0x4, 0x6, 0x9, 0x0, 0x3, 0x4d8f, 0x81, 0x9, 0x3, 0x7fff, 0x7f, 0x6, 0xc6a, 0x4, 0xfffffffb, 0x81a, 0xfffffffd, 0x1, 0xfffffffe, 0x952, 0x1, 0x40, 0x4, 0x8, 0x2, 0x2c, 0x60000, 0x0, 0xc0000000, 0x6, 0xfffffffb, 0x1, 0x8, 0x4, 0x1381, 0x2, 0x6, 0x4fc4, 0x800, 0x7, 0x2, 0x5, 0x80000000, 0x5, 0x2, 0x8, 0x5, 0x7, 0x3, 0xb, 0x100, 0x4, 0x40, 0x1053, 0x0, 0x0, 0x7, 0x7ff, 0x4, 0x18000, 0x70, 0x6, 0x7, 0x6, 0xfffffffc]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00'}, 0x10)

354.82265ms ago: executing program 0 (id=1711):
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x5a83, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1, 0x0, 0x8000000000}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000))

322.149418ms ago: executing program 5 (id=1712):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x2, 0x1}}, 0x40)

282.351431ms ago: executing program 0 (id=1713):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
unshare(0x64000600)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018000000000000000000000000000800650000000000000018000000000000000000000000000000950000000000000074030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$igmp(0x2, 0x3, 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

122.92055ms ago: executing program 5 (id=1714):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x8100, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x7)

122.812226ms ago: executing program 1 (id=1715):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2d, &(0x7f0000000000)=0x92d2, 0x4)

33.40888ms ago: executing program 5 (id=1716):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x36)

0s ago: executing program 1 (id=1717):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0)
r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r1=>0x0)
ptrace$poke(0x4, r1, &(0x7f00000000c0), 0x3)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000100)='mand\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0x3)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
unshare(0x6a040000)
inotify_init1(0x800)

kernel console output (not intermixed with test programs):

ound, idVendor=100d, idProduct=cb01, bcdDevice=84.d1
[  386.253690][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.263904][ T5896] usb 5-1: config 0 descriptor??
[  386.269911][T10775] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  386.287381][ T5896] cxacru 5-1:0.109: cxacru_bind: interface has incorrect endpoints
[  386.296723][ T5896] cxacru 5-1:0.109: usbatm_usb_probe: bind failed: -19!
[  386.363723][T10779] blktrace: Concurrent blktraces are not allowed on sg0
[  386.485492][ T5903] usb 5-1: USB disconnect, device number 65
[  386.887052][T10781] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1069'.
[  387.120292][ T5896] usb 4-1: USB disconnect, device number 72
[  387.412234][T10797] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  387.502732][T10787] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request
[  388.237902][T10809] input: syz1 as /devices/virtual/input/input27
[  388.524824][ T5894] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  388.618200][T10813] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1077'.
[  388.708417][ T5894] usb 4-1: Using ep0 maxpacket: 32
[  388.733050][ T5894] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  388.749589][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.799128][ T5894] usb 4-1: config 0 descriptor??
[  388.951994][T10819] loop8: detected capacity change from 0 to 7
[  388.974084][T10819] Dev loop8: unable to read RDB block 7
[  388.979910][T10819]  loop8: AHDI p1 p2 p3
[  388.984166][T10819] loop8: partition table partially beyond EOD, truncated
[  388.995279][T10819] loop8: p1 start 1601398130 is beyond EOD, truncated
[  389.002110][T10819] loop8: p2 start 1702059890 is beyond EOD, truncated
[  389.017609][ T5894] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  389.027139][ T5896] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  389.036214][ T5894] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  389.046337][ T5894] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  389.051372][ T5890] Dev loop8: unable to read RDB block 7
[  389.064173][ T5890]  loop8: AHDI p1 p2 p3
[  389.073367][ T5890] loop8: partition table partially beyond EOD, truncated
[  389.080766][ T5890] loop8: p1 start 1601398130 is beyond EOD, truncated
[  389.088245][ T5890] loop8: p2 start 1702059890 is beyond EOD, truncated
[  389.098322][T10822] Dev loop8: unable to read RDB block 7
[  389.103919][T10822]  loop8: AHDI p1 p2 p3
[  389.108641][T10822] loop8: partition table partially beyond EOD, truncated
[  389.120947][T10822] loop8: p1 start 1601398130 is beyond EOD, truncated
[  389.128314][T10822] loop8: p2 start 1702059890 is beyond EOD, truncated
[  389.195635][ T5896] usb 5-1: Using ep0 maxpacket: 16
[  389.197975][   T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  389.210821][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  389.232656][ T5896] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  389.256940][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.270835][ T5896] usb 5-1: Product: syz
[  389.278838][ T5896] usb 5-1: Manufacturer: syz
[  389.283470][ T5896] usb 5-1: SerialNumber: syz
[  389.293741][ T5896] usb 5-1: config 0 descriptor??
[  389.302137][ T5896] hub 5-1:0.0: bad descriptor, ignoring hub
[  389.308321][ T5896] hub 5-1:0.0: probe with driver hub failed with error -5
[  389.318669][ T5896] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input28
[  389.388989][   T10] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  389.401918][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.411082][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.422359][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  389.430524][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.439556][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.450722][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  389.458498][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.467610][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.480092][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  389.486867][ T5903] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  389.496436][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.506733][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.522810][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  389.530944][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.540414][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.551756][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  389.559319][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.568984][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.581266][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  389.589007][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.598531][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.609790][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  389.631268][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.643045][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.654590][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  389.662959][ T5903] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  389.673172][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.687587][   T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  389.704815][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.716181][   T10] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  389.724528][   T10] usb 2-1: Product: syz
[  389.728926][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0
[  389.735691][   T10] usb 2-1: Manufacturer: syz
[  389.740564][   T10] usb 2-1: SerialNumber: syz
[  389.746521][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.757274][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.769467][   T10] usb 2-1: config 0 descriptor??
[  389.781337][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0
[  389.793556][   T10] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  389.805129][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.831260][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.853047][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0
[  389.873519][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.884761][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.896292][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0
[  389.904583][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.914352][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.926373][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0
[  389.935279][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.944456][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.995046][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0
[  390.003465][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  390.060155][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  390.143961][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0
[  390.192126][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  390.202887][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  390.214308][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0
[  390.249349][ T5903] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  390.271085][ T5903] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  390.280595][ T5903] usb 6-1: Product: syz
[  390.290380][ T5903] usb 6-1: Manufacturer: syz
[  390.296713][ T5903] usb 6-1: SerialNumber: syz
[  390.325034][    C0] usb 2-1: yurex_control_callback - control failed: -2
[  390.346123][  T979] usb 2-1: USB disconnect, device number 73
[  390.360194][  T979] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  390.419539][ T5903] usb 6-1: config 0 descriptor??
[  390.439027][ T5903] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  390.681641][    C0] usb 6-1: yurex_control_callback - control failed: -2
[  390.721041][   T24] usb 6-1: USB disconnect, device number 7
[  390.809451][   T24] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  392.564877][ T5839] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  392.736943][ T5839] usb 2-1: Using ep0 maxpacket: 32
[  392.750934][ T5839] usb 2-1: unable to get BOS descriptor or descriptor too short
[  392.763146][ T5839] usb 2-1: config 7 has an invalid interface number: 187 but max is 0
[  392.771708][ T5839] usb 2-1: config 7 has no interface number 0
[  392.778006][ T5839] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16
[  392.788256][ T5839] usb 2-1: config 7 interface 187 has no altsetting 0
[  392.814983][ T5839] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  392.824370][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.832665][ T5839] usb 2-1: Product: syz
[  392.837184][ T5839] usb 2-1: Manufacturer: syz
[  392.841890][ T5839] usb 2-1: SerialNumber: syz
[  392.857913][T10854] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  393.096292][ T5839] usb 2-1: Cannot retrieve CPort count: 0
[  393.102164][ T5839] usb 2-1: Cannot retrieve CPort count: -5
[  393.166229][ T5839] es2_ap_driver 2-1:7.187: probe with driver es2_ap_driver failed with error -5
[  393.515009][  T979] usb 5-1: USB disconnect, device number 66
[  395.513361][  T979] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  395.533817][   T10] usb 2-1: USB disconnect, device number 74
[  395.695907][  T979] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  395.711195][  T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  395.743668][  T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  395.816928][  T979] usb 5-1: config 0 interface 0 has no altsetting 0
[  395.899348][  T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  395.943466][  T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  395.974784][  T979] usb 5-1: config 0 interface 0 has no altsetting 0
[  396.002494][  T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  396.025332][  T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  396.051991][  T979] usb 5-1: config 0 interface 0 has no altsetting 0
[  396.068885][  T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  396.078217][  T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  396.117510][  T979] usb 5-1: config 0 interface 0 has no altsetting 0
[  396.131858][  T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  396.141017][  T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  396.157310][  T979] usb 5-1: config 0 interface 0 has no altsetting 0
[  396.167323][  T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  396.207969][  T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  396.229529][  T979] usb 5-1: config 0 interface 0 has no altsetting 0
[  396.251498][  T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  396.272301][  T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  396.291525][   T30] audit: type=1326 audit(1749134360.500:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0138e929 code=0x7ffc0000
[  396.324321][  T979] usb 5-1: config 0 interface 0 has no altsetting 0
[  396.332507][   T30] audit: type=1326 audit(1749134360.510:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0138e929 code=0x7ffc0000
[  396.357631][   T30] audit: type=1326 audit(1749134360.550:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fbf0138e929 code=0x7ffc0000
[  396.381675][  T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  396.391644][  T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  396.406609][  T979] usb 5-1: config 0 interface 0 has no altsetting 0
[  396.419786][  T979] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  396.431058][  T979] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  396.442122][  T979] usb 5-1: Product: syz
[  396.446672][  T979] usb 5-1: Manufacturer: syz
[  396.451464][  T979] usb 5-1: SerialNumber: syz
[  396.459647][  T979] usb 5-1: config 0 descriptor??
[  396.585158][  T979] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  396.618229][T10889] netlink: 'syz.1.1099': attribute type 61 has an invalid length.
[  396.675184][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'.
[  396.867708][    C0] usb 5-1: yurex_control_callback - control failed: -2
[  396.889189][ T5896] usb 5-1: USB disconnect, device number 67
[  396.897927][ T5896] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  397.937830][T10909] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1104'.
[  398.675321][   T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  398.834718][   T10] usb 6-1: device descriptor read/64, error -71
[  399.084834][   T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  399.220026][T10929] fuse: Invalid rootmode
[  399.234860][   T10] usb 6-1: device descriptor read/64, error -71
[  399.346773][   T10] usb usb6-port1: attempt power cycle
[  399.384760][ T5896] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  399.584875][ T5896] usb 2-1: Using ep0 maxpacket: 16
[  399.643240][ T5896] usb 2-1: config 0 has no interfaces?
[  399.650658][ T5896] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  399.660167][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.687901][ T5896] usb 2-1: config 0 descriptor??
[  399.714873][   T10] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  399.745911][   T10] usb 6-1: device descriptor read/8, error -71
[  399.932512][T10925] [U] .��h��0F�wZ,��i�qg���ҏV2��sO��
[  399.941417][T10925] [U] ���`w*��B�BOLhU�
[  399.945979][T10925] [U] w$�n�|��#��%o.z\��̧mР��w
[  399.951642][T10925] [U] ���R{ꫢ� S���
[  399.995201][   T10] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  400.015574][   T10] usb 6-1: device descriptor read/8, error -71
[  400.125247][   T10] usb usb6-port1: unable to enumerate USB device
[  400.213076][T10934] blktrace: Concurrent blktraces are not allowed on sg0
[  401.559745][ T5896] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  401.744881][ T5896] usb 5-1: Using ep0 maxpacket: 16
[  401.769135][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  401.818795][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  401.863355][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  401.966622][ T5896] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  401.988933][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.035874][ T5896] usb 5-1: config 0 descriptor??
[  402.071651][T10919] [U] 
[  402.076438][   T24] usb 2-1: USB disconnect, device number 75
[  402.523659][ T5896] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  402.541091][ T5896] HID 045e:07da: Invalid code 65791 type 1
[  402.578310][ T5896] HID 045e:07da: Invalid code 65791 type 1
[  402.600363][ T5896] HID 045e:07da: Invalid code 65791 type 1
[  402.931827][ T5896] HID 045e:07da: Invalid code 65791 type 1
[  402.943127][ T5896] HID 045e:07da: Invalid code 65791 type 1
[  403.032844][ T5896] HID 045e:07da: Invalid code 65791 type 1
[  403.104868][ T5896] HID 045e:07da: Invalid code 65791 type 1
[  403.138755][ T5896] HID 045e:07da: Invalid code 65791 type 1
[  403.194871][ T5896] HID 045e:07da: Invalid code 65791 type 1
[  403.212203][ T5896] HID 045e:07da: Invalid code 65791 type 1
[  403.243797][ T5896] microsoft 0003:045E:07DA.0019: No inputs registered, leaving
[  403.295213][ T5896] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  403.357134][ T5896] microsoft 0003:045E:07DA.0019: no inputs found
[  403.384537][ T5896] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway
[  404.254783][ T5896] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  404.312934][ T5903] usb 5-1: USB disconnect, device number 68
[  404.524805][ T5896] usb 6-1: Using ep0 maxpacket: 32
[  404.544295][ T5896] usb 6-1: unable to get BOS descriptor or descriptor too short
[  404.572024][ T5896] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  404.608940][ T5896] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  404.639851][ T5896] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  404.641104][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1121'.
[  404.668235][ T5896] usb 6-1: config 128 has no interface number 0
[  404.687313][ T5896] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024
[  404.722791][ T5896] usb 6-1: config 128 interface 127 has no altsetting 0
[  404.745513][ T5896] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  404.759254][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.777265][ T5896] usb 6-1: Product: syz
[  404.788317][ T5896] usb 6-1: Manufacturer: syz
[  404.799958][ T5896] usb 6-1: SerialNumber: syz
[  404.923920][T10963] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  405.161971][T10971] fuse: Bad value for 'rootmode'
[  405.170700][T10972] blktrace: Concurrent blktraces are not allowed on sg0
[  405.297351][ T5896] usb 6-1: USB disconnect, device number 12
[  405.406824][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  405.784057][   T30] audit: type=1326 audit(1749134370.010:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.5.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  405.833270][   T30] audit: type=1326 audit(1749134370.010:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.5.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  405.860241][   T30] audit: type=1326 audit(1749134370.040:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.5.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  405.882735][    C0] vkms_vblank_simulate: vblank timer overrun
[  405.891005][   T30] audit: type=1326 audit(1749134370.040:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.5.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  405.913882][   T30] audit: type=1326 audit(1749134370.040:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.5.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  405.936305][    C0] vkms_vblank_simulate: vblank timer overrun
[  405.944173][   T30] audit: type=1326 audit(1749134370.040:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.5.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  405.966675][    C0] vkms_vblank_simulate: vblank timer overrun
[  405.980644][   T30] audit: type=1326 audit(1749134370.040:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.5.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  406.003072][    C0] vkms_vblank_simulate: vblank timer overrun
[  406.011797][   T30] audit: type=1326 audit(1749134370.040:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.5.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  406.034226][    C0] vkms_vblank_simulate: vblank timer overrun
[  406.191165][T10987] loop2: detected capacity change from 0 to 7
[  406.238474][T10987] Dev loop2: unable to read RDB block 7
[  406.263540][   T30] audit: type=1326 audit(1749134370.040:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.5.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  406.286003][    C0] vkms_vblank_simulate: vblank timer overrun
[  406.294521][T10987]  loop2: AHDI p2
[  406.307090][T10987] loop2: partition table partially beyond EOD, truncated
[  406.311114][   T30] audit: type=1326 audit(1749134370.040:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10977 comm="syz.5.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  406.605096][ T5896] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  406.785112][ T5896] usb 5-1: Using ep0 maxpacket: 32
[  406.825404][ T5896] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  406.913888][ T5896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  406.938623][ T5896] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  406.955969][ T5896] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  406.966529][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.974678][ T5896] usb 5-1: Product: 깹잩酞ꠒ敞ퟱ䫑炲₷׋蘈㾨媑퉨꩕᧕蓘陭൝짜㋩⻊뮺힐杕䁥眾蓩崈⯠澊ྰ㰅ṥ刦⚋㟛煭흯晲ꊡ嘴츗燶ᾪܖᦑ쎢ɂ醞们☔솛ꕢࠋ噔߻⒍ꈍ䠮朡֟⼡䵮셙쩦ﶍ打㲘偃쾽漊潊蛾螎髼ⵀ쿭튂逝퀡
[  407.004284][ T5896] usb 5-1: Manufacturer: 㰅韛Ἲ㸑빘獾檯䘆沣딅ᑎ朸ꜥఫᢒ纜ᚒ藹嚦ὤ哏䋜㛤﹦奮었齧鋴ᷭ줼⣡삸᳛⥐幝슐‒钯䏏콳둖ᅤ诊໢짆謯
[  407.059181][T10990] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  407.325499][T11000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1129'.
[  407.472456][T10990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.509942][T10990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.557722][ T5896] usb 5-1: 0:2 : does not exist
[  407.605600][ T5896] usb 5-1: USB disconnect, device number 69
[  407.667981][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  407.684208][   T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  407.878034][   T10] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.889318][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  407.896474][   T10] usb 2-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00
[  407.910928][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.965386][   T10] usb 2-1: config 0 descriptor??
[  408.149565][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1132'.
[  408.401272][   T10] hid-generic 0003:0463:1215.001A: unknown main item tag 0x1
[  408.434918][   T10] hid-generic 0003:0463:1215.001A: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.1-1/input0
[  408.963214][T11024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.982527][T11024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  409.077714][  T979] usb 2-1: USB disconnect, device number 76
[  409.136628][T11030] fuse: Bad value for 'rootmode'
[  409.176214][T11032] blktrace: Concurrent blktraces are not allowed on sg0
[  409.214804][   T24] usb 5-1: new full-speed USB device number 70 using dummy_hcd
[  409.474843][   T24] usb 5-1: config 150 has an invalid interface number: 204 but max is 1
[  409.503093][   T24] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  409.560790][   T24] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 2
[  409.587382][   T24] usb 5-1: config 150 has no interface number 0
[  409.600682][   T24] usb 5-1: config 150 interface 204 has no altsetting 0
[  409.633318][   T24] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  409.659934][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.706197][   T24] usb 5-1: Product: syz
[  409.713749][   T24] usb 5-1: Manufacturer: syz
[  409.724200][   T24] usb 5-1: SerialNumber: syz
[  410.381276][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1139'.
[  411.316947][T11053] binder: 11050:11053 ioctl c0306201 2000000003c0 returned -14
[  412.444304][T11077] usb usb8: usbfs: process 11077 (syz.3.1147) did not claim interface 0 before use
[  412.534566][   T24] usb 5-1: USB disconnect, device number 70
[  412.604195][   T50] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  412.709234][T11079] blktrace: Concurrent blktraces are not allowed on sg0
[  412.791263][   T50] usb 6-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config
[  412.812208][   T50] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  412.828190][   T50] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  412.837623][   T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.846226][   T50] usb 6-1: Product: syz
[  412.850618][   T50] usb 6-1: Manufacturer: syz
[  412.855629][   T50] usb 6-1: SerialNumber: syz
[  412.870477][   T50] usb 6-1: config 0 descriptor??
[  413.092998][T11073] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1148'.
[  413.103796][T11073] erspan0: entered promiscuous mode
[  413.117821][   T50] usb 6-1: USB disconnect, device number 13
[  413.576582][T11081] fuse: Bad value for 'rootmode'
[  414.681656][T11093] loop6: detected capacity change from 0 to 7
[  414.710764][T11093] Dev loop6: unable to read RDB block 7
[  414.729228][T11095] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1156'.
[  414.744248][T11093]  loop6: unable to read partition table
[  414.757521][T11093] loop6: partition table beyond EOD, truncated
[  414.782486][T11093] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  415.175581][   T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  415.265255][   T50] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  415.346776][   T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  415.358617][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  415.382940][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  415.404360][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  415.422226][   T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  415.431823][   T24] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  415.440277][   T50] usb 2-1: Using ep0 maxpacket: 16
[  415.445863][   T24] usb 6-1: Manufacturer: syz
[  415.456516][   T50] usb 2-1: config 0 has no interfaces?
[  415.462130][   T50] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  415.479577][   T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.521151][   T50] usb 2-1: config 0 descriptor??
[  415.542989][   T24] usb 6-1: config 0 descriptor??
[  415.554124][ T5839] IPVS: starting estimator thread 0...
[  415.665570][T11109] IPVS: using max 27 ests per chain, 64800 per kthread
[  415.762724][T11102] [U] .��h��0F�wZ,��i�qg���ҏV2��sO��
[  415.769095][T11102] [U] ���`w*��B�BOLhU�
[  415.773625][T11102] [U] w$�n�|��#��%o.z\��̧mР��w
[  415.781429][T11102] [U] ���R{ꫢ� S���
[  415.983665][   T24] appleir 0003:05AC:8243.001B: unknown main item tag 0x0
[  415.991794][   T24] appleir 0003:05AC:8243.001B: No inputs registered, leaving
[  416.017180][   T24] appleir 0003:05AC:8243.001B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  416.020621][T11116] blktrace: Concurrent blktraces are not allowed on sg0
[  416.094473][T11071] IPVS: stop unused estimator thread 0...
[  416.582932][T11124] fuse: Unknown parameter 'obj_user'
[  416.996947][T11101] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  417.031258][T11130] random: crng reseeded on system resumption
[  417.052960][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  417.052976][   T30] audit: type=1326 audit(1749134381.280:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.4.1163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x0
[  418.067276][T11099] [U] 
[  418.106283][ T5903] usb 2-1: USB disconnect, device number 77
[  418.179916][T11137] fuse: Unknown parameter 'use00000000000000000000'
[  418.312321][T11139] netlink: 'syz.5.1166': attribute type 10 has an invalid length.
[  418.327685][T11139] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  418.350177][T11139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  418.406430][   T24] usb 6-1: USB disconnect, device number 14
[  418.447666][T11145] loop6: detected capacity change from 0 to 7
[  418.461529][T11145] Dev loop6: unable to read RDB block 7
[  418.468996][T11145]  loop6: unable to read partition table
[  418.482561][T11145] loop6: partition table beyond EOD, truncated
[  418.491334][T11145] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  418.944771][   T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  419.104806][   T24] usb 6-1: Using ep0 maxpacket: 16
[  419.113891][   T24] usb 6-1: config index 0 descriptor too short (expected 5412, got 125)
[  419.128656][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  419.138848][T11155] fuse: Bad value for 'user_id'
[  419.138867][T11155] fuse: Bad value for 'user_id'
[  419.150788][   T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  419.160063][   T24] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  419.170966][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.184070][   T24] usb 6-1: config 0 descriptor??
[  419.434949][   T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  419.594115][   T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  419.615443][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.623765][   T24] usb 2-1: Product: syz
[  419.633603][   T24] usb 2-1: Manufacturer: syz
[  419.641388][   T24] usb 2-1: SerialNumber: syz
[  419.664251][   T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  419.750586][ T5839] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  419.818903][T11164] blktrace: Concurrent blktraces are not allowed on sg0
[  419.999858][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1175'.
[  420.010692][   T10] usb 2-1: USB disconnect, device number 78
[  420.036392][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1175'.
[  420.059651][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1175'.
[  420.080726][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1175'.
[  420.091514][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1175'.
[  420.101016][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1175'.
[  420.110616][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1175'.
[  420.121924][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1175'.
[  420.131311][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1175'.
[  420.141106][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1175'.
[  420.314757][   T24] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  420.465456][   T24] usb 5-1: too many configurations: 33, using maximum allowed: 8
[  420.481683][   T24] usb 5-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8
[  420.490931][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.500592][   T24] usb 5-1: Product: syz
[  420.505060][   T24] usb 5-1: Manufacturer: syz
[  420.509686][   T24] usb 5-1: SerialNumber: syz
[  420.518703][   T24] usb 5-1: config 0 descriptor??
[  420.529454][   T24] go7007-loader 5-1:0.0: can't handle multiple config
[  420.536283][   T24] go7007-loader 5-1:0.0: probe failed
[  420.730070][  T979] usb 5-1: USB disconnect, device number 71
[  420.799807][ T5839] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  420.809418][ T5839] ath9k_htc: Failed to initialize the device
[  420.818751][   T10] usb 2-1: ath9k_htc: USB layer deinitialized
[  421.115070][   T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  421.277001][   T10] usb 2-1: unable to read config index 0 descriptor/start: -61
[  421.287132][   T10] usb 2-1: can't read configurations, error -61
[  421.295021][T11178] loop6: detected capacity change from 0 to 7
[  421.309062][ T5890] Dev loop6: unable to read RDB block 7
[  421.315094][ T5890]  loop6: unable to read partition table
[  421.322083][ T5890] loop6: partition table beyond EOD, truncated
[  421.345228][T11178] Dev loop6: unable to read RDB block 7
[  421.350852][T11178]  loop6: unable to read partition table
[  421.366359][T11178] loop6: partition table beyond EOD, truncated
[  421.383913][T11178] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  421.414760][   T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  421.440508][T11180] fuse: Unknown parameter 'use00000000000000000000'
[  421.645615][  T979] usb 6-1: USB disconnect, device number 15
[  421.664257][   T10] usb 2-1: unable to read config index 0 descriptor/start: -61
[  421.706249][   T10] usb 2-1: can't read configurations, error -61
[  421.724559][T11187] blktrace: Concurrent blktraces are not allowed on sg0
[  421.735374][   T10] usb usb2-port1: attempt power cycle
[  421.792406][T11187] netlink: 'syz.4.1181': attribute type 20 has an invalid length.
[  422.134860][   T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  422.158098][   T10] usb 2-1: unable to read config index 0 descriptor/start: -61
[  422.166217][   T10] usb 2-1: can't read configurations, error -61
[  422.376384][   T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  422.397527][   T10] usb 2-1: unable to read config index 0 descriptor/start: -61
[  422.405533][   T10] usb 2-1: can't read configurations, error -61
[  422.415082][   T10] usb usb2-port1: unable to enumerate USB device
[  422.714437][T11196] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  422.988482][T11204] @: renamed from vlan0 (while UP)
[  423.048434][T11206] fuse: Bad value for 'fd'
[  423.282171][T11214] netlink: 'syz.3.1191': attribute type 3 has an invalid length.
[  423.524955][ T5839] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  423.791544][ T5839] usb 6-1: Using ep0 maxpacket: 8
[  423.849212][ T5839] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  423.910627][ T5839] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  423.986413][ T5839] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  424.002383][ T5839] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9C, changing to 0x8C
[  424.015905][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  424.027193][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 42318, setting to 1024
[  424.044108][ T5839] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  424.062797][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.072785][ T5839] usb 6-1: Product: syz
[  424.104139][ T5839] usb 6-1: Manufacturer: syz
[  424.120972][ T5839] usb 6-1: SerialNumber: syz
[  424.127807][T11230] fuse: Unknown parameter 'use00000000000000000000'
[  424.153333][ T5839] usb 6-1: config 0 descriptor??
[  424.160830][T11216] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  424.232849][   T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  424.445841][ T5839] hub 6-1:0.0: bad descriptor, ignoring hub
[  424.479782][ T5839] hub 6-1:0.0: probe with driver hub failed with error -5
[  424.523189][   T10] usb 5-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.60
[  424.533170][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.587281][   T10] usb 5-1: config 0 descriptor??
[  424.609454][ T5839] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input31
[  424.615989][   T10] ums-cypress 5-1:0.0: USB Mass Storage device detected
[  424.697023][ T5839] usb 6-1: USB disconnect, device number 16
[  424.891834][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  424.910409][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  424.979537][   T10] usb 5-1: USB disconnect, device number 72
[  425.229925][T11239] blktrace: Concurrent blktraces are not allowed on sg0
[  425.325691][ T5839] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  425.474747][ T5839] usb 2-1: Using ep0 maxpacket: 16
[  425.481608][ T5839] usb 2-1: config 0 has an invalid interface number: 68 but max is 0
[  425.494819][ T5839] usb 2-1: config 0 has no interface number 0
[  425.501099][ T5839] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  425.515050][ T5839] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[  425.525728][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.533901][ T5839] usb 2-1: Product: syz
[  425.540079][ T5839] usb 2-1: Manufacturer: syz
[  425.548577][ T5839] usb 2-1: SerialNumber: syz
[  425.567730][ T5839] usb 2-1: config 0 descriptor??
[  425.588750][ T5839] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  425.778477][T11237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.793303][T11237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.802442][T11071] usb 2-1: Failed to submit usb control message: -71
[  425.802725][   T10] usb 2-1: USB disconnect, device number 83
[  425.811339][T11071] usb 2-1: unable to send the bmi data to the device: -71
[  425.829749][T11071] usb 2-1: unable to get target info from device
[  425.837693][T11071] usb 2-1: could not get target info (-71)
[  425.843561][T11071] usb 2-1: could not probe fw (-71)
[  425.984950][ T5839] usb 5-1: new full-speed USB device number 73 using dummy_hcd
[  426.114913][ T5839] usb 5-1: device descriptor read/64, error -71
[  426.172234][T11258] __nla_validate_parse: 18 callbacks suppressed
[  426.172249][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1203'.
[  426.189470][T11258] FAULT_INJECTION: forcing a failure.
[  426.189470][T11258] name failslab, interval 1, probability 0, space 0, times 0
[  426.202951][T11258] CPU: 0 UID: 0 PID: 11258 Comm: syz.5.1203 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) 
[  426.202975][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  426.202996][T11258] Call Trace:
[  426.203003][T11258]  <TASK>
[  426.203011][T11258]  dump_stack_lvl+0x189/0x250
[  426.203045][T11258]  ? __pfx____ratelimit+0x10/0x10
[  426.203069][T11258]  ? __pfx_dump_stack_lvl+0x10/0x10
[  426.203096][T11258]  ? __pfx__printk+0x10/0x10
[  426.203118][T11258]  ? __mutex_trylock_common+0x153/0x260
[  426.203144][T11258]  should_fail_ex+0x414/0x560
[  426.203172][T11258]  should_failslab+0xa8/0x100
[  426.203194][T11258]  __kmalloc_cache_noprof+0x70/0x3d0
[  426.203213][T11258]  ? __hw_addr_add_ex+0x1f4/0x770
[  426.203237][T11258]  __hw_addr_add_ex+0x1f4/0x770
[  426.203257][T11258]  dev_addr_init+0x14f/0x230
[  426.203273][T11258]  ? __pfx_dev_addr_init+0x10/0x10
[  426.203284][T11258]  ? alloc_netdev_mqs+0xa6/0x11e0
[  426.203309][T11258]  alloc_netdev_mqs+0x2f3/0x11e0
[  426.203324][T11258]  ? __pfx_ipgre_tap_setup+0x10/0x10
[  426.203343][T11258]  rtnl_create_link+0x31f/0xd10
[  426.203363][T11258]  rtnl_newlink_create+0x25c/0xb00
[  426.203380][T11258]  ? __pfx_aa_get_newest_label+0x10/0x10
[  426.203400][T11258]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  426.203410][T11258]  ? rtnl_newlink+0x8db/0x1c70
[  426.203430][T11258]  ? __pfx___mutex_lock+0x10/0x10
[  426.203454][T11258]  ? ns_capable+0x8a/0xf0
[  426.203475][T11258]  rtnl_newlink+0x16d6/0x1c70
[  426.203494][T11258]  ? netlink_sendmsg+0x805/0xb30
[  426.203514][T11258]  ? __pfx_rtnl_newlink+0x10/0x10
[  426.203547][T11258]  ? kasan_quarantine_put+0xdd/0x220
[  426.203566][T11258]  ? lockdep_hardirqs_on+0x9c/0x150
[  426.203586][T11258]  ? nlmon_xmit+0xb0/0x100
[  426.203595][T11258]  ? kmem_cache_free+0x18f/0x400
[  426.203613][T11258]  ? __local_bh_enable_ip+0x12d/0x1c0
[  426.203631][T11258]  ? lockdep_hardirqs_on+0x9c/0x150
[  426.203647][T11258]  ? __local_bh_enable_ip+0x12d/0x1c0
[  426.203665][T11258]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  426.203686][T11258]  ? __dev_queue_xmit+0x27e/0x3a70
[  426.203709][T11258]  ? __lock_acquire+0xab9/0xd20
[  426.203742][T11258]  ? __pfx_rtnl_newlink+0x10/0x10
[  426.203778][T11258]  rtnetlink_rcv_msg+0x7cc/0xb70
[  426.203800][T11258]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  426.203819][T11258]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  426.203837][T11258]  ? ref_tracker_free+0x63a/0x7d0
[  426.203854][T11258]  ? __copy_skb_header+0xa7/0x550
[  426.203871][T11258]  ? __pfx_ref_tracker_free+0x10/0x10
[  426.203896][T11258]  netlink_rcv_skb+0x208/0x470
[  426.203909][T11258]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  426.203930][T11258]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  426.203951][T11258]  ? netlink_deliver_tap+0x2e/0x1b0
[  426.203963][T11258]  ? netlink_deliver_tap+0x2e/0x1b0
[  426.203979][T11258]  netlink_unicast+0x75b/0x8d0
[  426.204012][T11258]  netlink_sendmsg+0x805/0xb30
[  426.204031][T11258]  ? __pfx_netlink_sendmsg+0x10/0x10
[  426.204047][T11258]  ? aa_sock_msg_perm+0x94/0x160
[  426.204064][T11258]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  426.204082][T11258]  ? __pfx_netlink_sendmsg+0x10/0x10
[  426.204095][T11258]  __sock_sendmsg+0x21c/0x270
[  426.204115][T11258]  ____sys_sendmsg+0x505/0x830
[  426.204133][T11258]  ? __pfx_____sys_sendmsg+0x10/0x10
[  426.204153][T11258]  ? import_iovec+0x74/0xa0
[  426.204169][T11258]  ___sys_sendmsg+0x21f/0x2a0
[  426.204185][T11258]  ? __pfx____sys_sendmsg+0x10/0x10
[  426.204224][T11258]  ? __fget_files+0x2a/0x420
[  426.204239][T11258]  ? __fget_files+0x3a0/0x420
[  426.204262][T11258]  __x64_sys_sendmsg+0x19b/0x260
[  426.204278][T11258]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  426.204299][T11258]  ? __pfx_ksys_write+0x10/0x10
[  426.204315][T11258]  ? do_syscall_64+0xbe/0x3b0
[  426.204336][T11258]  do_syscall_64+0xfa/0x3b0
[  426.204353][T11258]  ? lockdep_hardirqs_on+0x9c/0x150
[  426.204369][T11258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.204382][T11258]  ? clear_bhb_loop+0x60/0xb0
[  426.204398][T11258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.204415][T11258] RIP: 0033:0x7f676578e929
[  426.204427][T11258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  426.204439][T11258] RSP: 002b:00007f67635f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  426.204453][T11258] RAX: ffffffffffffffda RBX: 00007f67659b5fa0 RCX: 00007f676578e929
[  426.204463][T11258] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  426.204471][T11258] RBP: 00007f67635f6090 R08: 0000000000000000 R09: 0000000000000000
[  426.204479][T11258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  426.204486][T11258] R13: 0000000000000000 R14: 00007f67659b5fa0 R15: 00007f6765adfa28
[  426.204506][T11258]  </TASK>
[  426.659528][    C0] vkms_vblank_simulate: vblank timer overrun
[  426.805282][ T5839] usb 5-1: new full-speed USB device number 74 using dummy_hcd
[  426.945213][ T5839] usb 5-1: device descriptor read/64, error -71
[  426.958380][T11274] fuse: Unknown parameter 'user_i00000000000000000000'
[  427.065184][ T5839] usb usb5-port1: attempt power cycle
[  427.155030][   T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  427.280853][T11284] blktrace: Concurrent blktraces are not allowed on sg0
[  427.315075][   T10] usb 6-1: Using ep0 maxpacket: 8
[  427.321780][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  427.332718][   T10] usb 6-1: config 0 has no interfaces?
[  427.340577][   T10] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76
[  427.350116][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.358678][   T10] usb 6-1: Product: syz
[  427.363872][   T10] usb 6-1: Manufacturer: syz
[  427.368771][   T10] usb 6-1: SerialNumber: syz
[  427.376964][   T10] usb 6-1: config 0 descriptor??
[  427.415003][ T5839] usb 5-1: new full-speed USB device number 75 using dummy_hcd
[  427.435488][ T5839] usb 5-1: device descriptor read/8, error -71
[  427.607101][   T10] usb 6-1: USB disconnect, device number 17
[  427.704997][ T5839] usb 5-1: new full-speed USB device number 76 using dummy_hcd
[  427.725668][ T5839] usb 5-1: device descriptor read/8, error -71
[  427.836511][ T5839] usb usb5-port1: unable to enumerate USB device
[  428.276299][T11302] loop2: detected capacity change from 0 to 7
[  428.314361][T11302] Dev loop2: unable to read RDB block 7
[  428.321642][T11302]  loop2: unable to read partition table
[  428.337607][T11302] loop2: partition table beyond EOD, truncated
[  428.344342][T11302] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  428.971204][T11322] binder: 11318:11322 ioctl 40046210 0 returned -14
[  429.008816][T11324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1223'.
[  429.129921][T11325] block device autoloading is deprecated and will be removed.
[  429.141597][T11325] syz.5.1221: attempt to access beyond end of device
[  429.141597][T11325] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  429.646720][T11329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  429.660309][T11329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.865108][ T5903] usb 2-1: new full-speed USB device number 84 using dummy_hcd
[  429.880918][T11332] fuse: Unknown parameter 'user_i00000000000000000000'
[  430.032123][ T5903] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  430.059307][ T5903] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 40805, setting to 64
[  430.071499][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0
[  430.082121][ T5903] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  430.091750][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.100147][ T5903] usb 2-1: Product: syz
[  430.104457][ T5903] usb 2-1: Manufacturer: syz
[  430.111411][ T5903] usb 2-1: SerialNumber: syz
[  430.128497][ T5903] usb 2-1: config 0 descriptor??
[  430.134546][T11328] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  430.364080][ T5903] usb 2-1: Can not set alternate setting to 1, error: -71
[  430.372151][ T5903] synaptics_usb 2-1:0.0: probe with driver synaptics_usb failed with error -71
[  430.386247][ T5903] usb 2-1: USB disconnect, device number 84
[  430.395258][   T50] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  430.535276][   T50] usb 6-1: device descriptor read/64, error -71
[  430.774877][   T50] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  430.878435][T11339] blktrace: Concurrent blktraces are not allowed on sg0
[  430.905022][   T50] usb 6-1: device descriptor read/64, error -71
[  431.014987][   T50] usb usb6-port1: attempt power cycle
[  431.175045][ T5903] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  431.341155][ T5903] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  431.356890][ T5903] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  431.357988][   T50] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  431.368400][ T5903] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  431.385686][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.399968][T11341] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  431.408143][   T50] usb 6-1: device descriptor read/8, error -71
[  431.412095][ T5903] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  431.613472][ T5903] usb 2-1: USB disconnect, device number 85
[  431.654890][   T50] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  431.686928][   T50] usb 6-1: device descriptor read/8, error -71
[  431.790496][T11350] IPVS: wlc: UDP 224.0.0.2:20004 - no destination available
[  431.798576][   T50] usb usb6-port1: unable to enumerate USB device
[  432.095079][ T5903] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  432.267350][T11360] loop2: detected capacity change from 0 to 7
[  432.277574][ T5903] usb 5-1: Using ep0 maxpacket: 32
[  432.284940][T11360] Dev loop2: unable to read RDB block 7
[  432.290778][T11360]  loop2: unable to read partition table
[  432.298020][T11360] loop2: partition table beyond EOD, truncated
[  432.304398][T11360] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  432.329683][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  432.384880][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  432.414673][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  432.439303][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  432.454431][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  432.469603][ T5903] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  432.479215][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.492327][ T5903] usb 5-1: Product: syz
[  432.499239][ T5903] usb 5-1: Manufacturer: syz
[  432.503964][ T5903] usb 5-1: SerialNumber: syz
[  432.525398][ T5903] usb 5-1: config 0 descriptor??
[  432.944067][ T5903] iforce 5-1:0.0: usb_submit_urb failed: -32
[  432.959037][ T5903] input input32: Device does not respond to id packet M
[  432.967189][ T5903] iforce 5-1:0.0: usb_submit_urb failed: -32
[  432.982449][ T5903] input input32: Device does not respond to id packet P
[  433.438190][T11367] binder: 11366:11367 ioctl 40046210 0 returned -14
[  433.993103][T11372] fuse: Unknown parameter 'user_i00000000000000000000'
[  434.076276][ T5903] iforce 5-1:0.0: usb_submit_urb failed: -110
[  434.090381][ T5903] input input32: Device does not respond to id packet B
[  434.098564][ T5903] iforce 5-1:0.0: usb_submit_urb failed: -32
[  434.104713][ T5903] input input32: Device does not respond to id packet N
[  434.112258][ T5903] iforce 5-1:0.0: usb_submit_urb failed: -32
[  434.120181][ T5903] iforce 5-1:0.0: usb_submit_urb failed: -32
[  434.127149][ T5903] iforce 5-1:0.0: usb_submit_urb failed: -32
[  434.134080][ T5903] iforce 5-1:0.0: usb_submit_urb failed: -32
[  434.144095][ T5903] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input32
[  434.605055][ T5903] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  434.794914][ T5903] usb 6-1: Using ep0 maxpacket: 8
[  434.806904][ T5903] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  434.828330][ T5903] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  434.854977][ T5903] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  434.884963][ T5903] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  434.904780][ T5903] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  434.913872][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.942658][   T10] usb 5-1: USB disconnect, device number 77
[  435.149259][T11386] blktrace: Concurrent blktraces are not allowed on sg0
[  435.198871][ T5903] usb 6-1: GET_CAPABILITIES returned 0
[  435.204463][ T5903] usbtmc 6-1:16.0: can't read capabilities
[  435.547054][  T979] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  435.818238][  T979] usb 2-1: Using ep0 maxpacket: 16
[  435.853951][  T979] usb 2-1: config 0 has no interfaces?
[  435.860965][  T979] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  435.903748][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.004212][  T979] usb 2-1: config 0 descriptor??
[  436.260787][T11389] [U] .��h��0F�wZ,��i�qg���ҏV2��sO��
[  436.295023][T11389] [U] ���`w*��B�BOLhU�
[  436.299596][T11389] [U] w$�n�|��#��%o.z\��̧mР��w
[  436.376750][T11389] [U] ���R{ꫢ� S���
[  437.340203][T11413] loop2: detected capacity change from 0 to 7
[  437.380883][T11413] Dev loop2: unable to read RDB block 7
[  437.386651][T11413]  loop2: unable to read partition table
[  437.489900][   T50] usb 6-1: USB disconnect, device number 22
[  437.637580][T11413] loop2: partition table beyond EOD, truncated
[  437.649801][T11413] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  437.698430][T11421] binder: 11419:11421 ioctl 40046210 0 returned -14
[  438.447697][T11388] [U] 
[  438.501020][   T50] usb 2-1: USB disconnect, device number 86
[  438.619561][T11433] fuse: Unknown parameter 'user_id00000000000000000000'
[  438.847151][T11438] blktrace: Concurrent blktraces are not allowed on sg0
[  438.964753][   T50] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  439.154723][   T50] usb 2-1: Using ep0 maxpacket: 8
[  439.163618][   T50] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  439.176880][   T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.185157][   T50] usb 2-1: Product: syz
[  439.189399][   T50] usb 2-1: Manufacturer: syz
[  439.194001][   T50] usb 2-1: SerialNumber: syz
[  439.208742][   T50] usb 2-1: config 0 descriptor??
[  439.235414][   T50] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  439.305763][T11445] fuse: Unknown parameter '0x0000000000000009'
[  439.540222][   T30] audit: type=1326 audit(1749134403.770:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40398e929 code=0x7ffc0000
[  439.577956][   T30] audit: type=1326 audit(1749134403.800:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40398e929 code=0x7ffc0000
[  439.661385][   T30] audit: type=1326 audit(1749134403.800:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7ff40398e929 code=0x7ffc0000
[  439.691628][   T30] audit: type=1326 audit(1749134403.800:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40398e929 code=0x7ffc0000
[  439.737323][   T30] audit: type=1326 audit(1749134403.800:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff403990847 code=0x7ffc0000
[  439.811861][   T30] audit: type=1326 audit(1749134403.800:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff4039907bc code=0x7ffc0000
[  439.873038][   T30] audit: type=1326 audit(1749134403.800:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff4039906f4 code=0x7ffc0000
[  439.934765][   T30] audit: type=1326 audit(1749134403.800:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff4039906f4 code=0x7ffc0000
[  439.968793][T11452] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.976016][   T30] audit: type=1326 audit(1749134403.800:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff40398d58a code=0x7ffc0000
[  439.976685][T11452] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.046248][   T30] audit: type=1326 audit(1749134403.800:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40398e929 code=0x7ffc0000
[  440.087411][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  440.093850][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  440.199943][T11452] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  440.216961][T11452] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  440.399426][T11452] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  440.409593][T11452] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  440.419126][T11452] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  440.466689][T11452] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.464575][T11472] binder: 11467:11472 ioctl 40046210 0 returned -14
[  441.734943][   T50] gspca_sonixj: reg_w1 err -110
[  441.780190][   T50] sonixj 2-1:0.0: probe with driver sonixj failed with error -110
[  443.060629][   T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  443.224849][   T10] usb 6-1: Using ep0 maxpacket: 16
[  443.257116][   T10] usb 6-1: config 0 has no interfaces?
[  443.288234][   T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  443.320196][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.422801][   T10] usb 6-1: config 0 descriptor??
[  443.680200][T11474] [U] .��h��0F�wZ,��i�qg���ҏV2��sO��
[  443.686663][T11474] [U] ���`w*��B�BOLhU�
[  443.691201][T11474] [U] w$�n�|��#��%o.z\��̧mР��w
[  443.696863][T11474] [U] ���R{ꫢ� S���
[  443.727649][   T10] usb 2-1: USB disconnect, device number 87
[  443.774749][   T50] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  443.992569][   T50] usb 5-1: config 0 has no interfaces?
[  444.036938][   T50] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  444.072303][   T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.140744][   T50] usb 5-1: Product: syz
[  444.214920][   T50] usb 5-1: Manufacturer: syz
[  444.237384][   T50] usb 5-1: SerialNumber: syz
[  444.267517][   T50] usb 5-1: config 0 descriptor??
[  444.711216][T11494] program syz.4.1265 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  445.209612][T11503] fuse: Unknown parameter 'user_id00000000000000000000'
[  445.376432][T11471] [U] 
[  445.388789][   T10] usb 6-1: USB disconnect, device number 23
[  445.454161][T11507] blktrace: Concurrent blktraces are not allowed on sg0
[  446.454717][   T24] usb 5-1: USB disconnect, device number 78
[  446.644119][T11533] binder: 11527:11533 ioctl 40046210 0 returned -14
[  446.864790][   T50] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  446.932123][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1280'.
[  446.941304][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1280'.
[  447.037673][   T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.073609][   T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.096851][   T50] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  447.126907][   T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.167771][   T50] usb 2-1: config 0 descriptor??
[  447.390626][T11530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1277'.
[  447.403986][   T24] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  447.452976][T11555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.466334][T11555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.544995][   T24] usb 6-1: device descriptor read/64, error -71
[  447.551832][   T50] usbhid 2-1:0.0: can't add hid device: -71
[  447.569563][   T50] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  447.676451][   T50] usb 2-1: USB disconnect, device number 88
[  447.825073][   T24] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  447.984760][   T24] usb 6-1: device descriptor read/64, error -71
[  448.065236][  T979] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  448.091429][T11562] fuse: Unknown parameter 'user_id00000000000000000000'
[  448.102055][   T24] usb usb6-port1: attempt power cycle
[  448.215195][  T979] usb 5-1: Using ep0 maxpacket: 16
[  448.228037][  T979] usb 5-1: unable to get BOS descriptor or descriptor too short
[  448.245899][  T979] usb 5-1: config 7 has an invalid interface number: 48 but max is 0
[  448.255444][  T979] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  448.265653][  T979] usb 5-1: config 7 has no interface number 0
[  448.271825][  T979] usb 5-1: config 7 interface 48 has no altsetting 0
[  448.283490][  T979] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c
[  448.292725][  T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.300832][  T979] usb 5-1: Product: syz
[  448.309153][  T979] usb 5-1: Manufacturer: syz
[  448.313769][  T979] usb 5-1: SerialNumber: syz
[  448.444743][   T24] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  448.465531][   T24] usb 6-1: device descriptor read/8, error -71
[  448.534525][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.549489][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.572440][  T979] cdc_phonet 5-1:7.48: probe with driver cdc_phonet failed with error -22
[  448.590430][  T979] usb 5-1: USB disconnect, device number 79
[  448.725156][   T24] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  448.756564][   T24] usb 6-1: device descriptor read/8, error -71
[  448.866121][   T24] usb usb6-port1: unable to enumerate USB device
[  449.040102][T11568] blktrace: Concurrent blktraces are not allowed on sg0
[  450.375440][ T5894] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  450.419749][ T5894] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  450.456459][ T5894] usb 4-1: USB disconnect, device number 73
[  450.530985][T11595] binder: 11592:11595 ioctl 40046210 0 returned -14
[  450.884688][   T24] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  451.044830][   T24] usb 5-1: Using ep0 maxpacket: 32
[  451.067052][   T24] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  451.075519][   T24] usb 5-1: config 0 has no interface number 0
[  451.086416][   T24] usb 5-1: config 0 interface 12 has no altsetting 0
[  451.110520][   T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  451.120636][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.129138][   T24] usb 5-1: Product: syz
[  451.137447][   T24] usb 5-1: Manufacturer: syz
[  451.142437][   T24] usb 5-1: SerialNumber: syz
[  451.153549][   T24] usb 5-1: config 0 descriptor??
[  451.524245][T11614] fuse: Bad value for 'fd'
[  451.767980][T11618] blktrace: Concurrent blktraces are not allowed on sg0
[  451.945245][  T979] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  452.032278][T11624] binder: 11623:11624 ioctl 4020ae46 200000000000 returned -22
[  452.111731][  T979] usb 6-1: config 0 has an invalid interface number: 160 but max is 0
[  452.126375][  T979] usb 6-1: config 0 has no interface number 0
[  452.143582][  T979] usb 6-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  452.190408][  T979] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=82.4e
[  452.238936][  T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.251421][  T979] usb 6-1: Product: syz
[  452.255733][  T979] usb 6-1: Manufacturer: syz
[  452.260431][  T979] usb 6-1: SerialNumber: syz
[  452.270568][  T979] usb 6-1: config 0 descriptor??
[  452.591732][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'.
[  452.732640][  T979] usb 6-1: USB disconnect, device number 28
[  453.628950][T11655] input: syz1 as /devices/virtual/input/input33
[  453.996096][   T24] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71
[  454.006419][   T24] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  454.020922][   T24] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  454.046853][   T24] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  454.080794][   T24] usb 5-1: USB disconnect, device number 80
[  454.170386][T11661] blktrace: Concurrent blktraces are not allowed on sg0
[  454.388656][T11672] fuse: Bad value for 'fd'
[  454.534876][   T24] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  454.703507][   T24] usb 5-1: config 0 has an invalid descriptor of length 215, skipping remainder of the config
[  454.723241][T11679] vlan2: entered promiscuous mode
[  454.733262][T11679] syz_tun: entered promiscuous mode
[  454.733272][   T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  454.764268][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  454.790769][   T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  454.812979][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.831470][   T24] usb 5-1: config 0 descriptor??
[  454.860031][   T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  455.835480][   T10] usb 5-1: USB disconnect, device number 81
[  456.075237][T11690] loop6: detected capacity change from 0 to 7
[  456.111186][T11690] Dev loop6: unable to read RDB block 7
[  456.150775][T11690]  loop6: unable to read partition table
[  456.180155][T11690] loop6: partition table beyond EOD, truncated
[  456.221644][T11690] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  456.523243][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  456.523262][   T30] audit: type=1326 audit(1749134420.740:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  456.600535][   T30] audit: type=1326 audit(1749134420.740:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  456.624483][  T979] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  456.644178][   T30] audit: type=1326 audit(1749134420.770:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  456.703499][   T30] audit: type=1326 audit(1749134420.770:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  456.845168][  T979] usb 6-1: Using ep0 maxpacket: 16
[  456.858558][  T979] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  456.878310][   T30] audit: type=1326 audit(1749134420.770:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  456.925518][  T979] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  456.952126][  T979] usb 6-1: config 0 interface 0 has no altsetting 0
[  456.972915][  T979] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  456.993074][   T30] audit: type=1326 audit(1749134420.770:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  457.050076][  T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.150849][T11694] syz.3.1318 (11694): drop_caches: 2
[  457.174278][  T979] usb 6-1: config 0 descriptor??
[  457.184787][   T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  457.194083][   T30] audit: type=1326 audit(1749134420.770:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  457.244024][   T30] audit: type=1326 audit(1749134420.770:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  457.273757][   T30] audit: type=1326 audit(1749134420.770:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  457.303149][   T30] audit: type=1326 audit(1749134420.770:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  457.377139][   T24] usb 2-1: device descriptor read/64, error -71
[  457.659044][   T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  457.670384][  T979] apple 0003:05AC:0247.001C: unexpected long global item
[  457.684747][ T5894] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  457.697361][  T979] apple 0003:05AC:0247.001C: parse failed
[  457.716925][  T979] apple 0003:05AC:0247.001C: probe with driver apple failed with error -22
[  457.795495][T11726] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[11726]
[  457.824763][   T24] usb 2-1: device descriptor read/64, error -71
[  457.854896][ T5894] usb 4-1: Using ep0 maxpacket: 32
[  457.866737][ T5894] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  457.877177][ T5894] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  457.896495][   T50] usb 6-1: USB disconnect, device number 29
[  457.915045][ T5894] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  457.945716][   T24] usb usb2-port1: attempt power cycle
[  457.960305][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  457.985851][ T5894] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  458.002910][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  458.019616][ T5894] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  458.029557][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.042582][ T5894] usb 4-1: config 0 descriptor??
[  458.112835][T11729] set match dimension is over the limit!
[  458.296171][ T5894] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 75 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  458.332594][ T5894] usb 4-1: USB disconnect, device number 75
[  458.352372][ T5894] usblp0: removed
[  458.357656][   T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  458.405527][   T24] usb 2-1: device descriptor read/8, error -71
[  458.644801][   T24] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  458.686235][   T24] usb 2-1: device descriptor read/8, error -71
[  458.815650][   T24] usb usb2-port1: unable to enumerate USB device
[  458.822083][ T5894] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  459.064946][ T5894] usb 4-1: Using ep0 maxpacket: 32
[  459.079759][ T5894] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  459.092864][ T5894] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  459.113076][ T5894] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  459.143422][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  459.181065][ T5894] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  459.211488][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  459.229337][ T5894] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  459.238618][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.267504][ T5894] usb 4-1: config 0 descriptor??
[  459.583243][T11747] fuse: Bad value for 'user_id'
[  459.588599][T11747] fuse: Bad value for 'user_id'
[  459.683370][ T5894] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  459.835215][ T5903] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  459.910804][T11716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.935825][T11716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.952940][  T979] usb 4-1: USB disconnect, device number 76
[  459.968111][  T979] usblp0: removed
[  460.005886][ T5903] usb 5-1: Using ep0 maxpacket: 16
[  460.013775][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  460.026771][ T5903] usb 5-1: config 0 has no interfaces?
[  460.035315][ T5903] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  460.044752][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.052792][ T5903] usb 5-1: Product: syz
[  460.058164][ T5903] usb 5-1: Manufacturer: syz
[  460.062841][ T5903] usb 5-1: SerialNumber: syz
[  460.072460][ T5903] usb 5-1: config 0 descriptor??
[  460.277224][T11757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1338'.
[  460.639468][  T979] usb 5-1: USB disconnect, device number 82
[  461.290151][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'.
[  461.730276][   T24] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  461.896756][   T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  461.905187][   T24] usb 5-1: config 0 has no interface number 0
[  461.911439][   T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.922716][   T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  461.932574][   T24] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  461.945733][   T24] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  461.954964][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.956441][  T979] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  461.969072][   T24] usb 5-1: config 0 descriptor??
[  462.125061][  T979] usb 4-1: Using ep0 maxpacket: 16
[  462.137215][  T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.162077][  T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.202531][  T979] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  462.255594][  T979] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  462.300701][  T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.327729][  T979] usb 4-1: config 0 descriptor??
[  462.679954][   T24] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.001D/input/input34
[  462.752979][T11775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.765610][T11775] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.786094][T11771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.796378][T11771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.966425][  T979] usbhid 4-1:0.0: can't add hid device: -71
[  462.987321][   T24] uclogic 0003:28BD:0042.001D: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1
[  463.027513][  T979] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  463.135413][  T979] usb 4-1: USB disconnect, device number 77
[  463.635439][   T10] usb 5-1: USB disconnect, device number 83
[  463.914907][ T5901] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  464.233792][ T5901] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  464.266537][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.278163][ T5901] usb 4-1: Product: syz
[  464.282460][ T5901] usb 4-1: Manufacturer: syz
[  464.288883][ T5901] usb 4-1: SerialNumber: syz
[  464.304302][ T5901] usb 4-1: config 0 descriptor??
[  464.336515][T11807] geneve2: entered promiscuous mode
[  464.355332][ T5901] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  465.117421][   T24] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  465.240239][T11828] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  465.423021][ T5901] usb 4-1: USB disconnect, device number 78
[  465.629369][   T24] usb 5-1: config 0 has no interfaces?
[  465.785055][   T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  465.835818][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.861158][   T24] usb 5-1: Product: syz
[  465.877350][   T24] usb 5-1: Manufacturer: syz
[  465.889032][   T24] usb 5-1: SerialNumber: syz
[  465.911330][   T24] usb 5-1: config 0 descriptor??
[  466.406787][T11839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.418499][T11839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.492233][T11839] xt_CT: No such helper "syz0"
[  467.084729][   T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  467.276720][   T24] usb 4-1: config 0 has no interfaces?
[  467.285150][   T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  467.294240][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.310587][   T24] usb 4-1: Product: syz
[  467.375713][   T24] usb 4-1: Manufacturer: syz
[  467.421264][   T24] usb 4-1: SerialNumber: syz
[  467.435445][ T5894] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  467.484250][   T24] usb 4-1: config 0 descriptor??
[  467.604837][ T5894] usb 6-1: Using ep0 maxpacket: 16
[  467.630692][ T5894] usb 6-1: config 0 has no interfaces?
[  467.647344][ T5894] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  467.694485][T11858] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1362'.
[  467.719382][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.791022][ T5894] usb 6-1: config 0 descriptor??
[  467.902933][T11861] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  468.104082][T11851] [U] .��h��0F�wZ,��i�qg���ҏV2��sO��
[  468.110341][T11851] [U] ���`w*��B�BOLhU�
[  468.114873][T11851] [U] w$�n�|��#��%o.z\��̧mР��w
[  468.121741][T11851] [U] ���R{ꫢ� S���
[  468.254705][ T5903] usb 5-1: USB disconnect, device number 84
[  468.405191][ T5901] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  468.566837][ T5901] usb 2-1: unable to get BOS descriptor or descriptor too short
[  468.581630][ T5901] usb 2-1: config 6 has an invalid interface number: 200 but max is 0
[  468.592862][ T5901] usb 2-1: config 6 has no interface number 0
[  468.608132][ T5901] usb 2-1: config 6 interface 200 has no altsetting 0
[  468.626294][ T5901] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  468.656195][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.732755][ T5901] usb 2-1: Product: syz
[  468.738355][ T5901] usb 2-1: Manufacturer: syz
[  468.745915][ T5901] usb 2-1: SerialNumber: syz
[  469.648751][ T5903] usb 4-1: USB disconnect, device number 79
[  470.388708][T11909] binder: 11908:11909 ioctl 400c620e 0 returned -14
[  470.452871][T11911] binder: 11908:11911 ioctl 400c620e 0 returned -14
[  471.201695][ T5901] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  471.249953][ T5901] dvb-usb: bulk message failed: -71 (3/0)
[  471.292243][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  471.328494][ T5901] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  471.367919][ T5901] usb 2-1: media controller created
[  471.509113][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  471.634288][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'.
[  471.671249][ T5901] dvb-usb: bulk message failed: -71 (6/0)
[  471.716603][T11930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1372'.
[  471.759128][ T5901] dvb-usb: bulk message failed: -71 (6/0)
[  471.773429][ T5901] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  471.798041][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35
[  471.839543][ T5901] dvb-usb: schedule remote query interval to 150 msecs.
[  471.850021][ T5901] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  471.899682][ T5901] usb 2-1: USB disconnect, device number 93
[  472.106470][T11850] [U] 
[  472.123633][ T5903] usb 6-1: USB disconnect, device number 30
[  472.234557][ T5901] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  472.693898][T11953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1376'.
[  472.774784][ T5901] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  472.968930][T11955] vlan3: entered allmulticast mode
[  472.992763][T11955] bond1: entered allmulticast mode
[  473.038150][ T5901] usb 6-1: config 0 has no interfaces?
[  473.071086][ T5901] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  473.172684][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.285130][ T5901] usb 6-1: Product: syz
[  473.303367][ T5901] usb 6-1: Manufacturer: syz
[  473.319015][ T5901] usb 6-1: SerialNumber: syz
[  473.385218][ T5894] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  473.418077][T11969] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  473.449829][ T5901] usb 6-1: config 0 descriptor??
[  473.555212][ T5894] usb 2-1: Using ep0 maxpacket: 16
[  473.579601][ T5894] usb 2-1: config 0 has no interfaces?
[  473.609484][ T5894] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  473.667890][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.716655][ T5894] usb 2-1: config 0 descriptor??
[  473.833794][T11951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.900668][T11951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.969029][T11964] [U] .��h��0F�wZ,��i�qg���ҏV2��sO��
[  473.975514][T11964] [U] ���`w*��B�BOLhU�
[  473.980060][T11964] [U] w$�n�|��#��%o.z\��̧mР��w
[  473.991176][T11964] [U] ���R{ꫢ� S���
[  474.095383][T11951] xt_CT: No such helper "syz0"
[  474.486613][ T5901] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  474.675086][ T5901] usb 4-1: Using ep0 maxpacket: 16
[  474.682268][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.697780][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.748348][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  474.825995][ T5901] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  474.894696][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.948149][ T5901] usb 4-1: config 0 descriptor??
[  475.592760][ T5901] usbhid 4-1:0.0: can't add hid device: -71
[  475.603519][ T5901] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  475.644311][ T5901] usb 4-1: USB disconnect, device number 80
[  475.787663][ T5894] usb 6-1: USB disconnect, device number 31
[  476.163069][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1384'.
[  476.181294][T12004] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  476.369248][T12004] batman_adv: batadv0: Removing interface: batadv_slave_1
[  476.597621][T11962] [U] 
[  476.615333][ T5903] usb 2-1: USB disconnect, device number 94
[  478.090667][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  478.132874][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  478.155046][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  478.173501][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  478.384698][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  478.454719][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  478.483201][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  478.521622][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  478.814886][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  478.837204][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  478.863753][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  478.884206][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  478.906978][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  478.931369][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.009990][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.078320][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.136826][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.150028][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.174331][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.191552][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.199294][ T5903] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  479.273408][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.283238][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.291246][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.291269][ T5901] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  479.299121][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.299167][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.299194][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.299220][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.299246][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.299272][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0
[  479.371721][ T5894] hid-generic 0000:007F:FFFFFFFE.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  479.385482][ T5903] usb 5-1: Using ep0 maxpacket: 8
[  479.499820][ T5903] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  479.541815][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0
[  479.562216][ T5903] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[  479.593812][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.645139][ T5903] usb 5-1: Product: syz
[  479.676476][ T5903] usb 5-1: Manufacturer: syz
[  479.705745][ T5903] usb 5-1: SerialNumber: syz
[  479.773475][ T5903] usb 5-1: config 0 descriptor??
[  479.835071][ T5901] usb 4-1: device descriptor read/64, error -71
[  479.883270][T12064] fido_id[12064]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  479.913965][ T5903] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found
[  479.993503][ T5903] snd_usb_toneport 5-1:0.0: cannot get proper max packet size
[  480.001623][ T5903] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected
[  480.013071][ T5903] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  480.209305][ T5901] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  480.355130][ T5901] usb 4-1: device descriptor read/64, error -71
[  480.475199][ T5901] usb usb4-port1: attempt power cycle
[  480.825795][ T5901] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  480.869173][ T5901] usb 4-1: device descriptor read/8, error -71
[  481.035179][  T979] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  481.125080][ T5901] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  481.157833][ T5901] usb 4-1: device descriptor read/8, error -71
[  481.204916][  T979] usb 2-1: Using ep0 maxpacket: 32
[  481.217762][  T979] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  481.226973][  T979] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  481.236157][  T979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  481.246091][  T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  481.256401][  T979] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  481.273692][  T979] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  481.292437][ T5901] usb usb4-port1: unable to enumerate USB device
[  481.311552][  T979] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  481.321770][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.338851][  T979] usb 2-1: config 0 descriptor??
[  481.563246][  T979] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 95 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  481.600998][  T979] usb 2-1: USB disconnect, device number 95
[  481.616937][  T979] usblp0: removed
[  482.074986][  T979] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  482.231755][  T979] usb 2-1: Using ep0 maxpacket: 32
[  482.269134][  T979] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  482.299506][  T979] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  482.333300][  T979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  482.353707][  T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  482.381860][  T979] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  482.433789][ T5901] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  482.444237][  T979] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  482.504162][  T979] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  482.542281][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.577336][  T979] usb 2-1: config 0 descriptor??
[  482.634885][ T5901] usb 4-1: Using ep0 maxpacket: 8
[  482.647884][ T5901] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  482.663777][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.688055][ T5901] usb 4-1: Product: syz
[  482.707080][ T5901] usb 4-1: Manufacturer: syz
[  482.724001][ T5901] usb 4-1: SerialNumber: syz
[  482.745356][ T5901] usb 4-1: config 0 descriptor??
[  482.762867][ T5901] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  482.935497][ T5903] usb 5-1: USB disconnect, device number 85
[  483.114160][T12097] openvswitch: netlink: Key type 16144 is out of range max 32
[  483.155225][T12098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.171796][  T979] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 96 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  483.190795][T12098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  483.536033][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  483.536051][   T30] audit: type=1326 audit(1749134447.770:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  483.587633][T12098] netlink: 'syz.1.1398': attribute type 1 has an invalid length.
[  483.687410][   T30] audit: type=1326 audit(1749134447.800:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  483.781421][   T30] audit: type=1326 audit(1749134447.800:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  483.853142][   T30] audit: type=1326 audit(1749134447.800:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  483.910173][   T30] audit: type=1326 audit(1749134447.800:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  483.937320][   T30] audit: type=1326 audit(1749134447.800:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  483.959807][    C1] vkms_vblank_simulate: vblank timer overrun
[  484.032404][T12109] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1409'.
[  484.369958][   T30] audit: type=1326 audit(1749134447.800:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  484.392474][    C1] vkms_vblank_simulate: vblank timer overrun
[  484.510982][   T30] audit: type=1326 audit(1749134447.800:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  484.542997][T12103] syz.4.1408 (12103): drop_caches: 2
[  484.710765][ T5901] gspca_sonixj: reg_r err -32
[  484.756438][ T5901] sonixj 4-1:0.0: probe with driver sonixj failed with error -32
[  484.907176][ T5894] usb 2-1: USB disconnect, device number 96
[  484.926416][ T5894] usblp0: removed
[  485.267881][T12127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1415'.
[  485.398233][T12129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  485.405818][T12129] IPv6: NLM_F_CREATE should be set when creating new route
[  485.464805][ T5894] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  485.604817][ T5894] usb 2-1: device descriptor read/64, error -71
[  485.855098][ T5894] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  485.984715][ T5894] usb 2-1: device descriptor read/64, error -71
[  486.104847][ T5894] usb usb2-port1: attempt power cycle
[  486.150989][ T5901] usb 4-1: USB disconnect, device number 85
[  486.455067][ T5894] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  486.507141][ T5894] usb 2-1: device descriptor read/8, error -71
[  486.635188][ T5901] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  486.749977][T12152] loop6: detected capacity change from 0 to 7
[  486.767794][T12152] Dev loop6: unable to read RDB block 7
[  486.773530][T12152]  loop6: unable to read partition table
[  486.795274][T12152] loop6: partition table beyond EOD, truncated
[  486.801265][ T5901] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  486.806653][ T5894] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  486.818974][T12152] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  486.839949][ T5901] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  486.857758][ T5901] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  486.873482][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  486.876550][ T5894] usb 2-1: device descriptor read/8, error -71
[  486.895457][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  486.912224][ T5901] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  486.939715][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  486.962787][ T5901] usb 4-1: Product: syz
[  486.974312][ T5901] usb 4-1: Manufacturer: syz
[  487.015955][ T5901] cdc_wdm 4-1:1.0: skipping garbage
[  487.021305][ T5901] cdc_wdm 4-1:1.0: skipping garbage
[  487.039636][ T5894] usb usb2-port1: unable to enumerate USB device
[  487.140772][ T5901] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  487.158921][T12159] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  487.171161][ T5901] cdc_wdm 4-1:1.0: Unknown control protocol
[  487.402430][ T5901] usb 4-1: USB disconnect, device number 86
[  488.565606][ T5901] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  488.735833][ T5901] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  488.748002][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  488.759859][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  488.774009][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  488.783836][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  488.797037][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  488.810502][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  488.818952][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  488.828519][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  488.840549][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  488.848815][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  488.858153][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  488.869179][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  488.878179][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  488.887497][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  488.898482][ T5903] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  488.914878][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  488.925368][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  488.934974][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  488.952208][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  488.962397][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  488.979219][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  488.991506][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  489.000070][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  489.028713][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  489.040320][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  489.051158][ T5901] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  489.062111][ T5901] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  489.070724][ T5901] usb 2-1: Product: syz
[  489.081091][ T5901] usb 2-1: Manufacturer: syz
[  489.086501][ T5901] usb 2-1: SerialNumber: syz
[  489.092042][ T5903] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  489.101462][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.112467][ T5903] usb 4-1: config 0 descriptor??
[  489.120616][ T5903] cp210x 4-1:0.0: cp210x converter detected
[  489.235928][ T5901] usb 2-1: config 0 descriptor??
[  489.272377][ T5901] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  489.530968][ T5903] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  489.544720][   T50] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  489.567316][ T5903] usb 4-1: cp210x converter now attached to ttyUSB0
[  489.718096][   T50] usb 6-1: device descriptor read/64, error -71
[  489.733318][    C0] usb 2-1: yurex_control_callback - control failed: -2
[  489.750296][ T5903] usb 4-1: USB disconnect, device number 87
[  489.772081][ T5903] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  489.807522][ T5901] usb 2-1: USB disconnect, device number 101
[  489.822026][ T5903] cp210x 4-1:0.0: device disconnected
[  489.830225][ T5901] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  489.964733][   T50] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  490.104797][   T50] usb 6-1: device descriptor read/64, error -71
[  490.214991][   T50] usb usb6-port1: attempt power cycle
[  490.292748][T12182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1436'.
[  490.373355][T12185] loop6: detected capacity change from 0 to 7
[  490.380570][T12185] Dev loop6: unable to read RDB block 7
[  490.388144][T12185]  loop6: unable to read partition table
[  490.394077][T12185] loop6: partition table beyond EOD, truncated
[  490.400829][T12185] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  490.554721][   T50] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  490.575826][   T50] usb 6-1: device descriptor read/8, error -71
[  490.725118][ T5903] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  490.825135][   T50] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  490.857448][   T50] usb 6-1: device descriptor read/8, error -71
[  490.907996][ T5903] usb 4-1: Using ep0 maxpacket: 8
[  490.920998][ T5903] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  490.985184][   T50] usb usb6-port1: unable to enumerate USB device
[  490.989163][ T5903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  491.024149][ T5903] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  491.040132][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.054013][ T5903] usb 4-1: Product: syz
[  491.058878][ T5903] usb 4-1: Manufacturer: syz
[  491.063683][ T5903] usb 4-1: SerialNumber: syz
[  491.294986][ T5901] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  491.328781][ T5903] usb 4-1: 0:2 : does not exist
[  491.421030][ T5903] usb 4-1: USB disconnect, device number 88
[  491.474994][ T5901] usb 2-1: Using ep0 maxpacket: 32
[  491.482239][ T5901] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  491.494195][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  491.501186][ T5901] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00
[  491.512287][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.526395][ T5901] usb 2-1: config 0 descriptor??
[  491.536232][T12195] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  491.904337][T12205] program syz.3.1446 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  492.154859][   T50] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  492.264735][ T5894] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  492.326817][   T50] usb 5-1: Using ep0 maxpacket: 32
[  492.339329][   T50] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  492.357589][T12210] loop6: detected capacity change from 0 to 7
[  492.366455][   T50] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  492.377282][T12210] Dev loop6: unable to read RDB block 7
[  492.382901][T12210]  loop6: unable to read partition table
[  492.388955][   T50] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  492.398196][T12210] loop6: partition table beyond EOD, truncated
[  492.404770][   T50] usb 5-1: Product: syz
[  492.415183][T12210] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  492.424481][   T50] usb 5-1: Manufacturer: syz
[  492.434698][   T50] usb 5-1: SerialNumber: syz
[  492.466022][   T50] usb 5-1: config 0 descriptor??
[  492.487546][T12206] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  492.523951][ T5901] usbhid 2-1:0.0: can't add hid device: -71
[  492.531905][ T5894] usb 4-1: config 0 has no interfaces?
[  492.541441][ T5901] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  492.574893][ T5901] usb 2-1: USB disconnect, device number 102
[  492.623764][ T5894] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  492.648825][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.664588][ T5894] usb 4-1: Product: syz
[  492.674100][ T5894] usb 4-1: Manufacturer: syz
[  492.688727][ T5894] usb 4-1: SerialNumber: syz
[  492.760698][   T50] usb 5-1: USB disconnect, device number 86
[  492.782059][ T5894] usb 4-1: config 0 descriptor??
[  493.522193][ T5901] usb 4-1: USB disconnect, device number 89
[  494.322403][T12252] binder: 12250:12252 ioctl 40046210 0 returned -14
[  495.126235][T12269] loop6: detected capacity change from 0 to 7
[  495.148085][T12269] Dev loop6: unable to read RDB block 7
[  495.176235][T12269]  loop6: unable to read partition table
[  495.219323][T12269] loop6: partition table beyond EOD, truncated
[  495.263950][T12269] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  495.724782][ T5894] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  495.904762][ T5894] usb 6-1: Using ep0 maxpacket: 16
[  496.042683][ T5894] usb 6-1: config 0 has no interfaces?
[  496.095725][   T50] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  496.125124][ T5894] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  496.185554][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.213115][ T5894] usb 6-1: config 0 descriptor??
[  496.357161][   T50] usb 2-1: config 0 has no interfaces?
[  496.367799][   T50] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  496.395171][   T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.435478][   T50] usb 2-1: Product: syz
[  496.439704][   T50] usb 2-1: Manufacturer: syz
[  496.444319][   T50] usb 2-1: SerialNumber: syz
[  496.483996][   T50] usb 2-1: config 0 descriptor??
[  497.083345][T12297] vlan2: entered promiscuous mode
[  497.161630][T12297] bridge0: entered promiscuous mode
[  498.474759][ T5845] Bluetooth: hci4: command 0x0406 tx timeout
[  498.792383][ T5894] usb 2-1: USB disconnect, device number 103
[  498.856880][T12326] loop6: detected capacity change from 0 to 7
[  498.901156][ T5903] usb 6-1: USB disconnect, device number 36
[  498.916540][T12326] Dev loop6: unable to read RDB block 7
[  498.923010][T12326]  loop6: unable to read partition table
[  498.947336][T12326] loop6: partition table beyond EOD, truncated
[  498.977215][T12326] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  499.086236][T12330] binder: 12329:12330 ioctl 40046210 0 returned -14
[  499.267408][T12337] binder: 12333:12337 ioctl 40046210 0 returned -14
[  499.369158][ T5903] usb 2-1: new full-speed USB device number 104 using dummy_hcd
[  499.566463][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  499.578058][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  499.590055][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  499.615643][ T5903] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  499.629395][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.638818][ T5903] usb 2-1: Product: syz
[  499.643072][ T5903] usb 2-1: Manufacturer: syz
[  499.652468][ T5903] usb 2-1: SerialNumber: syz
[  499.714768][ T5903] usb 2-1: config 0 descriptor??
[  499.723721][T12332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  499.732332][T12332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  499.741067][ T5903] usb 2-1: ucan: probing device on interface #0
[  500.292727][   T30] audit: type=1326 audit(1749134464.520:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12352 comm="syz.5.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  500.295399][T12351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1483'.
[  500.321717][   T30] audit: type=1326 audit(1749134464.520:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12352 comm="syz.5.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  500.373385][   T30] audit: type=1326 audit(1749134464.560:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12352 comm="syz.5.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  500.517679][ T5903] ucan 2-1:0.0 can0: registered device
[  500.517710][   T30] audit: type=1326 audit(1749134464.560:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12352 comm="syz.5.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  500.620468][   T30] audit: type=1326 audit(1749134464.560:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12352 comm="syz.5.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  500.647989][T12362] netlink: 4100 bytes leftover after parsing attributes in process `syz.0.1488'.
[  500.657499][T12362] openvswitch: netlink: Flow key attr not present in new flow.
[  501.350490][   T30] audit: type=1326 audit(1749134465.580:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.5.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  501.378704][   T30] audit: type=1326 audit(1749134465.610:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.5.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  501.402212][   T30] audit: type=1326 audit(1749134465.610:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.5.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  501.427205][   T30] audit: type=1326 audit(1749134465.610:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.5.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  501.450694][   T30] audit: type=1326 audit(1749134465.610:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.5.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  501.519984][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  501.526527][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  501.605469][ T5903] ucan 2-1:0.0 can0: firmware string: unknown
[  501.960936][T12414] netlink: 'syz.4.1512': attribute type 10 has an invalid length.
[  502.145463][ T5894] usb 2-1: USB disconnect, device number 104
[  502.733678][T12456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1528'.
[  503.334104][T12482] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1537'.
[  503.597407][ T5894] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  503.639565][ T5894] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  503.672519][T12493] netlink: 'syz.3.1542': attribute type 10 has an invalid length.
[  503.715115][T12493] veth0_macvtap: left promiscuous mode
[  503.756991][T12493] team0: Device veth0_macvtap failed to register rx_handler
[  504.181893][T12511] xt_CT: You must specify a L4 protocol and not use inversions on it
[  504.327307][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1549'.
[  504.357514][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'.
[  504.455503][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'.
[  504.633861][T12527] bridge3: the hash_elasticity option has been deprecated and is always 16
[  505.201338][T12560] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1567'.
[  505.508059][   T30] kauditd_printk_skb: 47 callbacks suppressed
[  505.508077][   T30] audit: type=1326 audit(1749134469.740:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12574 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  505.609888][   T30] audit: type=1326 audit(1749134469.780:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12574 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  505.672770][   T30] audit: type=1326 audit(1749134469.780:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12574 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  505.743245][   T30] audit: type=1326 audit(1749134469.780:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12574 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  505.807510][   T30] audit: type=1326 audit(1749134469.790:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12574 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  505.899265][   T30] audit: type=1326 audit(1749134469.790:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12574 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  505.924070][   T30] audit: type=1326 audit(1749134469.790:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12574 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  505.944905][T12595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1579'.
[  505.955215][   T30] audit: type=1326 audit(1749134469.790:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12574 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  505.955260][   T30] audit: type=1326 audit(1749134469.790:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12574 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  505.955301][   T30] audit: type=1326 audit(1749134469.790:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12574 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603018e929 code=0x7ffc0000
[  506.409446][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1592'.
[  506.654198][T12621] team0 (unregistering): Port device team_slave_0 removed
[  506.669997][T12621] team0 (unregistering): Port device team_slave_1 removed
[  506.698796][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1593'.
[  506.731242][T12623] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1728)
[  506.741157][T12623] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  507.569719][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1612'.
[  507.606902][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1612'.
[  507.637535][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1612'.
[  507.707209][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1612'.
[  507.742389][T12676] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1615'.
[  507.752072][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1612'.
[  507.777227][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1612'.
[  508.465010][T12713] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  508.704489][T12729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  509.610092][T12768] tipc: New replicast peer: 0.0.255.255
[  509.634974][T12768] tipc: Enabled bearer <udp:s>, priority 10
[  509.982467][T12787] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1728)
[  509.998652][T12787] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  510.364134][T12803] IPv6: Can't replace route, no match found
[  510.519946][   T30] kauditd_printk_skb: 269 callbacks suppressed
[  510.519966][   T30] audit: type=1326 audit(1749134474.750:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.5.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  510.526560][T12816] xt_CT: You must specify a L4 protocol and not use inversions on it
[  510.582867][   T30] audit: type=1326 audit(1749134474.750:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.5.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  510.682116][   T30] audit: type=1326 audit(1749134474.750:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.5.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  510.754691][ T5894] tipc: Node number set to 523894784
[  510.760467][   T30] audit: type=1326 audit(1749134474.750:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.5.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  510.791995][   T30] audit: type=1326 audit(1749134474.750:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.5.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  510.819595][   T30] audit: type=1326 audit(1749134474.750:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.5.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  510.844504][   T30] audit: type=1326 audit(1749134474.750:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.5.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  510.890214][   T30] audit: type=1326 audit(1749134474.750:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.5.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  510.942489][   T30] audit: type=1326 audit(1749134474.750:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.5.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  510.944423][T12829] tipc: Started in network mode
[  511.002824][   T30] audit: type=1326 audit(1749134474.790:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.5.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f676578e929 code=0x7ffc0000
[  511.084428][T12829] tipc: Node identity ac14140f, cluster identity 4711
[  511.121091][T12829] tipc: New replicast peer: 255.255.255.255
[  511.139140][T12837] random: crng reseeded on system resumption
[  511.158481][T12829] tipc: Enabled bearer <udp:syz2>, priority 10
[  511.275738][T12841] __nla_validate_parse: 35 callbacks suppressed
[  511.275756][T12841] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1692'.
[  511.395205][ T5903] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  511.534725][ T5903] usb 4-1: device descriptor read/64, error -71
[  511.784805][ T5903] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  511.919186][ T5903] usb 4-1: device descriptor read/64, error -71
[  511.938758][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.035256][ T5903] usb usb4-port1: attempt power cycle
[  512.121519][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.154172][T12882] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  512.275034][ T5894] tipc: Node number set to 2886997007
[  512.291323][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.368039][T12887] xt_connbytes: Forcing CT accounting to be enabled
[  512.388784][T12887] set match dimension is over the limit!
[  512.404848][ T5903] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  512.432604][ T5903] usb 4-1: device descriptor read/8, error -71
[  512.473574][   T13] bond0: (slave netdevsim0): Releasing backup interface
[  512.503860][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.554684][    C1] ------------[ cut here ]------------
[  512.560416][    C1] refcount_t: addition on 0; use-after-free.
[  512.567079][    C1] WARNING: CPU: 1 PID: 12892 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0
[  512.576587][    C1] Modules linked in:
[  512.580713][    C1] CPU: 1 UID: 0 PID: 12892 Comm: syz.0.1713 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) 
[  512.592585][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  512.602710][    C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[  512.608866][    C1] Code: 00 00 e8 09 2d ff fc 5b 41 5e e9 d1 4a a7 06 cc e8 fb 2c ff fc c6 05 63 ca c9 0a 01 90 48 c7 c7 c0 38 e2 8b e8 17 db c2 fc 90 <0f> 0b 90 90 eb d7 e8 db 2c ff fc c6 05 44 ca c9 0a 01 90 48 c7 c7
[  512.628542][    C1] RSP: 0018:ffffc90000a08828 EFLAGS: 00010246
[  512.634768][    C1] RAX: c4555aea42557700 RBX: 0000000000000002 RCX: ffff8880226e3c00
[  512.642809][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  512.650850][    C1] RBP: ffffc90000a089b0 R08: 0000000000000003 R09: 0000000000000004
[  512.658887][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: ffff888033e18000
[  512.666934][    C1] R13: dffffc0000000000 R14: ffff888033e1816c R15: ffff888057256000
[  512.674972][    C1] FS:  00007ff4048536c0(0000) GS:ffff888125d55000(0000) knlGS:0000000000000000
[  512.683953][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  512.690625][    C1] CR2: 0000555574291588 CR3: 000000001d2e6000 CR4: 00000000003526f0
[  512.698672][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  512.706717][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  512.714757][    C1] Call Trace:
[  512.718072][    C1]  <IRQ>
[  512.720950][    C1]  tipc_crypto_xmit+0x1820/0x22c0
[  512.726089][    C1]  ? __pfx_tipc_crypto_xmit+0x10/0x10
[  512.731515][    C1]  tipc_bearer_xmit_skb+0x245/0x400
[  512.736801][ T5903] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  512.736801][    C1]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  512.749711][    C1]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  512.755516][    C1]  tipc_disc_timeout+0x580/0x6d0
[  512.760487][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  512.766027][    C1]  call_timer_fn+0x17b/0x5f0
[  512.770640][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  512.776155][    C1]  ? call_timer_fn+0xbe/0x5f0
[  512.780866][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  512.785902][ T5903] usb 4-1: device descriptor read/8, error -71
[  512.786039][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  512.797397][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  512.802651][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  512.808207][    C1]  __run_timer_base+0x61a/0x860
[  512.813104][    C1]  ? ktime_get+0x3e/0x1f0
[  512.817536][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  512.822954][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  512.829306][    C1]  run_timer_softirq+0xb7/0x180
[  512.834231][    C1]  handle_softirqs+0x286/0x870
[  512.839110][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  512.843936][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  512.849333][    C1]  __irq_exit_rcu+0xca/0x1f0
[  512.853991][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  512.859302][    C1]  irq_exit_rcu+0x9/0x30
[  512.863595][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  512.869318][    C1]  </IRQ>
[  512.872299][    C1]  <TASK>
[  512.875304][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  512.881324][    C1] RIP: 0010:lock_is_held_type+0x137/0x190
[  512.887127][    C1] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 09 03 37 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[  512.906820][    C1] RSP: 0018:ffffc9000455f8d8 EFLAGS: 00000206
[  512.912932][    C1] RAX: c4555aea42557700 RBX: 0000000000000000 RCX: c4555aea42557700
[  512.916285][ T5903] usb usb4-port1: unable to enumerate USB device
[  512.920981][    C1] RDX: 0000000000000000 RSI: ffffffff8db695db RDI: ffffffff8be28340
[  512.935368][    C1] RBP: 00000000ffffffff R08: ffff8880226e3c07 R09: 1ffff110044dc780
[  512.943368][    C1] R10: dffffc0000000000 R11: ffffed10044dc781 R12: 0000000000000246
[  512.951410][    C1] R13: ffff8880226e3c00 R14: ffffffff8e13f0c0 R15: 0000000000000001
[  512.959470][    C1]  __might_resched+0xa6/0x610
[  512.964191][    C1]  ? follow_page_pte+0xe7e/0x14b0
[  512.969307][    C1]  ? __pfx___might_resched+0x10/0x10
[  512.974661][    C1]  ? __pfx_follow_page_pte+0x10/0x10
[  512.980001][    C1]  __get_user_pages+0x673/0x30b0
[  512.985027][    C1]  ? mt_find+0x15c/0x5f0
[  512.989327][    C1]  ? __pfx___get_user_pages+0x10/0x10
[  512.994805][    C1]  populate_vma_page_range+0x26b/0x340
[  513.000313][    C1]  ? __pfx_populate_vma_page_range+0x10/0x10
[  513.006375][    C1]  ? userfaultfd_unmap_complete+0x278/0x2d0
[  513.012318][    C1]  ? down_read+0x1ad/0x2e0
[  513.016844][    C1]  __mm_populate+0x24c/0x380
[  513.021470][    C1]  ? __pfx___mm_populate+0x10/0x10
[  513.026649][    C1]  ? up_write+0x1c4/0x420
[  513.031025][    C1]  vm_mmap_pgoff+0x3f0/0x4c0
[  513.035702][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  513.040844][    C1]  ? rcu_is_watching+0x15/0xb0
[  513.045666][    C1]  ? ksys_mmap_pgoff+0xf4/0x760
[  513.050544][    C1]  ? __x64_sys_mmap+0x7f/0x140
[  513.055409][    C1]  do_syscall_64+0xfa/0x3b0
[  513.059960][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  513.065219][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.071331][    C1]  ? clear_bhb_loop+0x60/0xb0
[  513.076057][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.081984][    C1] RIP: 0033:0x7ff40398e929
[  513.086479][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  513.106151][    C1] RSP: 002b:00007ff404853038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  513.114644][    C1] RAX: ffffffffffffffda RBX: 00007ff403bb5fa0 RCX: 00007ff40398e929
[  513.122643][    C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[  513.130685][    C1] RBP: 00007ff403a10b39 R08: ffffffffffffffff R09: 0000000000000000
[  513.138729][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  513.146778][    C1] R13: 0000000000000000 R14: 00007ff403bb5fa0 R15: 00007ff403cdfa28
[  513.154830][    C1]  </TASK>
[  513.157878][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  513.165186][    C1] CPU: 1 UID: 0 PID: 12892 Comm: syz.0.1713 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) 
[  513.176921][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  513.186984][    C1] Call Trace:
[  513.190274][    C1]  <IRQ>
[  513.193118][    C1]  dump_stack_lvl+0x99/0x250
[  513.197727][    C1]  ? __asan_memcpy+0x40/0x70
[  513.202330][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  513.207538][    C1]  ? __pfx__printk+0x10/0x10
[  513.212148][    C1]  panic+0x2db/0x790
[  513.216094][    C1]  ? __pfx_panic+0x10/0x10
[  513.220529][    C1]  ? show_trace_log_lvl+0x4fb/0x550
[  513.225775][    C1]  __warn+0x31b/0x4b0
[  513.229775][    C1]  ? refcount_warn_saturate+0xfa/0x1d0
[  513.235250][    C1]  ? refcount_warn_saturate+0xfa/0x1d0
[  513.240735][    C1]  report_bug+0x2be/0x4f0
[  513.245080][    C1]  ? refcount_warn_saturate+0xfa/0x1d0
[  513.250545][    C1]  ? refcount_warn_saturate+0xfa/0x1d0
[  513.256013][    C1]  ? refcount_warn_saturate+0xfc/0x1d0
[  513.261494][    C1]  handle_bug+0x84/0x160
[  513.265770][    C1]  exc_invalid_op+0x1a/0x50
[  513.270320][    C1]  asm_exc_invalid_op+0x1a/0x20
[  513.275201][    C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[  513.281298][    C1] Code: 00 00 e8 09 2d ff fc 5b 41 5e e9 d1 4a a7 06 cc e8 fb 2c ff fc c6 05 63 ca c9 0a 01 90 48 c7 c7 c0 38 e2 8b e8 17 db c2 fc 90 <0f> 0b 90 90 eb d7 e8 db 2c ff fc c6 05 44 ca c9 0a 01 90 48 c7 c7
[  513.300936][    C1] RSP: 0018:ffffc90000a08828 EFLAGS: 00010246
[  513.307029][    C1] RAX: c4555aea42557700 RBX: 0000000000000002 RCX: ffff8880226e3c00
[  513.315020][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  513.323011][    C1] RBP: ffffc90000a089b0 R08: 0000000000000003 R09: 0000000000000004
[  513.330987][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: ffff888033e18000
[  513.338972][    C1] R13: dffffc0000000000 R14: ffff888033e1816c R15: ffff888057256000
[  513.346988][    C1]  ? refcount_warn_saturate+0xf9/0x1d0
[  513.352473][    C1]  tipc_crypto_xmit+0x1820/0x22c0
[  513.357525][    C1]  ? __pfx_tipc_crypto_xmit+0x10/0x10
[  513.362931][    C1]  tipc_bearer_xmit_skb+0x245/0x400
[  513.368171][    C1]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  513.373467][    C1]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  513.379204][    C1]  tipc_disc_timeout+0x580/0x6d0
[  513.384160][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  513.389645][    C1]  call_timer_fn+0x17b/0x5f0
[  513.394249][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  513.399720][    C1]  ? call_timer_fn+0xbe/0x5f0
[  513.404412][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  513.409552][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  513.414772][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  513.420000][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  513.425474][    C1]  __run_timer_base+0x61a/0x860
[  513.430338][    C1]  ? ktime_get+0x3e/0x1f0
[  513.434707][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  513.440098][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  513.446371][    C1]  run_timer_softirq+0xb7/0x180
[  513.451231][    C1]  handle_softirqs+0x286/0x870
[  513.456014][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  513.460801][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  513.466105][    C1]  __irq_exit_rcu+0xca/0x1f0
[  513.470702][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  513.475919][    C1]  irq_exit_rcu+0x9/0x30
[  513.480173][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  513.485848][    C1]  </IRQ>
[  513.488798][    C1]  <TASK>
[  513.491737][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  513.497746][    C1] RIP: 0010:lock_is_held_type+0x137/0x190
[  513.503476][    C1] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 09 03 37 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[  513.523089][    C1] RSP: 0018:ffffc9000455f8d8 EFLAGS: 00000206
[  513.529160][    C1] RAX: c4555aea42557700 RBX: 0000000000000000 RCX: c4555aea42557700
[  513.537137][    C1] RDX: 0000000000000000 RSI: ffffffff8db695db RDI: ffffffff8be28340
[  513.545111][    C1] RBP: 00000000ffffffff R08: ffff8880226e3c07 R09: 1ffff110044dc780
[  513.553105][    C1] R10: dffffc0000000000 R11: ffffed10044dc781 R12: 0000000000000246
[  513.561079][    C1] R13: ffff8880226e3c00 R14: ffffffff8e13f0c0 R15: 0000000000000001
[  513.569097][    C1]  __might_resched+0xa6/0x610
[  513.573786][    C1]  ? follow_page_pte+0xe7e/0x14b0
[  513.578819][    C1]  ? __pfx___might_resched+0x10/0x10
[  513.584111][    C1]  ? __pfx_follow_page_pte+0x10/0x10
[  513.589413][    C1]  __get_user_pages+0x673/0x30b0
[  513.594391][    C1]  ? mt_find+0x15c/0x5f0
[  513.598662][    C1]  ? __pfx___get_user_pages+0x10/0x10
[  513.604058][    C1]  populate_vma_page_range+0x26b/0x340
[  513.609536][    C1]  ? __pfx_populate_vma_page_range+0x10/0x10
[  513.615535][    C1]  ? userfaultfd_unmap_complete+0x278/0x2d0
[  513.621448][    C1]  ? down_read+0x1ad/0x2e0
[  513.625877][    C1]  __mm_populate+0x24c/0x380
[  513.630494][    C1]  ? __pfx___mm_populate+0x10/0x10
[  513.635622][    C1]  ? up_write+0x1c4/0x420
[  513.639967][    C1]  vm_mmap_pgoff+0x3f0/0x4c0
[  513.644598][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  513.649725][    C1]  ? rcu_is_watching+0x15/0xb0
[  513.654495][    C1]  ? ksys_mmap_pgoff+0xf4/0x760
[  513.659352][    C1]  ? __x64_sys_mmap+0x7f/0x140
[  513.664130][    C1]  do_syscall_64+0xfa/0x3b0
[  513.668643][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  513.673859][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.679940][    C1]  ? clear_bhb_loop+0x60/0xb0
[  513.684638][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.690569][    C1] RIP: 0033:0x7ff40398e929
[  513.694995][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  513.714615][    C1] RSP: 002b:00007ff404853038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  513.723056][    C1] RAX: ffffffffffffffda RBX: 00007ff403bb5fa0 RCX: 00007ff40398e929
[  513.731036][    C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[  513.739017][    C1] RBP: 00007ff403a10b39 R08: ffffffffffffffff R09: 0000000000000000
[  513.747001][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  513.754979][    C1] R13: 0000000000000000 R14: 00007ff403bb5fa0 R15: 00007ff403cdfa28
[  513.762973][    C1]  </TASK>
[  513.766167][    C1] Kernel Offset: disabled
[  513.770504][    C1] Rebooting in 86400 seconds..