last executing test programs:

32.752292211s ago: executing program 0 (id=299):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect(0x6, 0x1f9, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xc7, 0x15, 0x53, 0x40, 0x403, 0xf0e9, 0xabb0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e7, 0x3, 0x9, 0x3c, 0x0, 0x4, "", [{{0x9, 0x4, 0x69, 0x26, 0x2, 0xe2, 0x30, 0x5c, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x303, 0x1, 0x4}]}], [{{0x9, 0x5, 0x4, 0x10, 0x400, 0xd, 0x5, 0x7, [@generic={0x26, 0x6, "1f3fd31ab79be6a9317306469149ea2cf420bfb1fdd8f34ddd40f2df1391dbc552bdf7b0"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x1, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}]}}]}}, {{0x9, 0x4, 0xeb, 0x10, 0x6, 0xff, 0x3, 0x2, 0x1, [@generic={0xf, 0x7, "ed82be168415a3f341d668b821"}], [{{0x9, 0x5, 0xc, 0x3, 0x8, 0xa, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5}]}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x5, 0x2, 0x4}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xe9, 0x0, 0x9}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x5, 0x8a, 0x9}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0xb, 0x2, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x0, 0x5, 0x8}}]}}, {{0x9, 0x4, 0x8a, 0x41, 0x3, 0x2, 0x6, 0x0, 0x5, [@generic={0x6e, 0x3, "4817f838123d1352829e00051a694389e571bd07e34ca0e43da106caed434f4fc684133efbc54a5b631189e2fbdab9f2aaedbcdf6b09366667be1d76bef562e82a8b2435061f8b6f26fd232594410cf5e328ea74cafa60a571da192c76fe97d6beeb6b47bcec454d4ba88886"}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "99"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0x9, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x3, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x1ff, 0xe, 0x1}, @obex={0x5, 0x24, 0x15, 0xc8e}, @mdlm={0x15, 0x24, 0x12, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xa3, 0x5, 0x6}]}], [{{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x0, 0x10, 0x9}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x7, 0x6, 0x1}}, {{0x9, 0x5, 0xd, 0x2, 0x3ff, 0x8, 0x5, 0x6, [@generic={0x40, 0x7, "95070c53ed4a668ca9b8f2e4122349186f759b38421d344e78e4693daff40c26a4e24c1af9f388335811869de0a3083f9a0e3e3daa338ab4fa48d163859d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9d, 0xfffb}]}}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x201, 0x93, 0x80, 0x9, 0xd7, 0x1}, 0x1d, &(0x7f0000000580)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x1, 0xf00f, 0x2, [0xffc000, 0xff0000, 0xf]}]}, 0x1, [{0x28, &(0x7f00000005c0)=@string={0x28, 0x3, "39cdc665cc5640d8380356ba95752cf49e213348e15c0fd367f68d55c8576bcb60bdd9b2ea53"}}]})
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68)
syz_io_uring_setup(0x39f6, &(0x7f0000000100)={0x0, 0xf921, 0x8, 0x0, 0x3c1, 0x0, r1}, 0x0, 0x0, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x11000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x176b90bd46832ffe}, {0xfff3, 0xe}, {0xd, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11)
syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100034b7ec740"], 0x0)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x0)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000009140)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000002140)={0x50, 0x0, r5, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0xfffc, 0x200, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50)
read$FUSE(r4, &(0x7f0000002900)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r4, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10)
syz_fuse_handle_req(r4, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0})

30.904684011s ago: executing program 1 (id=303):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x80000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
getpriority(0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1}, 0x80d1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x8804)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="3400000010000104000000000000000000000000000000000000000000000000140012000c000100626172657564700004000200", 0x34}], 0x1}, 0x0)
timer_create(0x6, &(0x7f0000000580)={0x0, 0x2b, 0x2, @thr={&(0x7f00000004c0)="59285fb8bd9a155d25e45cf2c920eb7f48074bd2610c067f7ead6d4bda54d1ec539ad9863c3073edc8b6d3e6f28da7fd67845977a32b295bd9850c79d09543a07d6da970bccc167dab704a04c0304ac434fe80bc", &(0x7f0000000540)}}, &(0x7f00000005c0))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r1], 0x18}}, 0x20048000)
r6 = syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x1ee1e2)
ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r6)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158, 0x0, r1}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0018000020010000000000000000000000000000fe80000000000000000000000000000000020000000000000709"], 0x0)

29.620487221s ago: executing program 1 (id=312):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x1, 0x1, 0x9, 0xfffffffffffffffd, 0xffffff01, 0xfffffffe, {0x44, 0x2, 0x7fffffff, 0x2, 0xb, 0x2, 0x1, 0xffffffff, 0x4, 0x2000, 0xa8, 0x0, 0x0, 0x8001, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x2800, 0x1000, 0x7})
r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'veth1\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, 0x0, 0x0, 0x4c004, &(0x7f0000000800)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0)
r10 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000180)={r0, r4})
sendmmsg$inet(r10, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40)
recvmmsg(r10, &(0x7f0000000400), 0x0, 0x0, 0x0)

29.42424584s ago: executing program 2 (id=313):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x1, 0x1, 0x9, 0xfffffffffffffffd, 0xffffff01, 0xfffffffe, {0x44, 0x2, 0x7fffffff, 0x2, 0xb, 0x2, 0x1, 0xffffffff, 0x4, 0x2000, 0xa8, 0x0, 0x0, 0x8001, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x2800, 0x1000, 0x7})
r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'veth1\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, 0x0, 0x0, 0x4c004, &(0x7f0000000800)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0)
r10 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000180)={r0, r4})
sendmmsg$inet(r10, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40)
recvmmsg(r10, &(0x7f0000000400), 0x0, 0x0, 0x0)

29.346992633s ago: executing program 0 (id=314):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x402, 0x89)
lseek(r3, 0x0, 0x0) (async, rerun: 32)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32)
r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64042, 0x0)
ppoll(&(0x7f00000001c0)=[{r4, 0x8030}, {r5, 0x2001}], 0x2, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3ffff9, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x1, 0x101, 0x286, 0x0, 0x0, 0x1, 0x8, 0x5, 0x101, 0x100000002], 0x4, 0x290fc4}) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
unshare(0x20400)
gettid()
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
r6 = epoll_create1(0x80000)
epoll_pwait(r6, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7) (async, rerun: 32)
r8 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r9 = socket$kcm(0x10, 0x2, 0x4)
close(r9) (async)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c00000021006bcd210000006e04000081000000000000007aa608644183ba25811d2d53db4285c46177565ba0d213a889d3788f3afc73a29d1d30f36bc5a51146c1b04b6e6a2ad40eaaa7f82a9cf7219fd0fe83fa7de841a9c4581e60d1c8ce29cf119e0ec2923a45f9e0b5cf600884", 0x70}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000280)="39000000130003474cbb65e1c3e4ffff06000d000100000007000000250000000d0016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1)

28.796129088s ago: executing program 1 (id=315):
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00420076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)

28.649004327s ago: executing program 3 (id=316):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b501020301090212000a000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

28.592025595s ago: executing program 1 (id=317):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000100), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa)
fchmod(r2, 0x184)
socket(0x400000000010, 0x3, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80000000, 0x0, 0x4, 0x0, 0xd4, 0x0, 0x3}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000003c0)={r7, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x8, 0x9}, 0x90)
setsockopt$inet_tcp_int(r3, 0x29, 0x18, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c)
listen(r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
bind$inet6(r9, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c)
listen(r9, 0x80000003)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r10, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

28.378968062s ago: executing program 2 (id=318):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4a8, 0x1e0, 0x0, 0xffffffff, 0x288, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd89286ae9b13d39b99407a9b6abe75a728baa18da576811985de44110b8602005e1298ea55f1c5087ab16f67b18ca90ac6040b3d6a068f727f7d23ab794d9ba59a5da2ff7f000000000000ae63e26b6fe772493180cfda2c9d49412e9469d85abdb467ba000000000000000000000000deffffff00", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wg0\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @icmp_id=0x68, @icmp_id=0x68}}}, {{@ip={@empty, @private=0xa010101, 0xffffffff, 0xff, 'wlan1\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x2, 0x4}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @loopback, @icmp_id=0x64, @port=0x4e20}}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty=0x40000, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508)

28.252848666s ago: executing program 2 (id=319):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c0020010000000000000005000000000002ff020000000000000000000000000001"], 0xfce)

27.773316999s ago: executing program 0 (id=320):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc848}, 0x4080)
gettid()
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x12, 0x32, 0x605, 0x70bd25, 0x25dfdbfe}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)='::,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a00)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c584, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x56, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4048000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], <r10=>0x0, 0x49, 0x0, 0x0, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7ac690a3962e9a40, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x4, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', r9, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0)
r11 = eventfd2(0x0, 0x81001)
io_uring_setup(0x7372, &(0x7f0000000040)={0x0, 0x8c7d, 0x2, 0x0, 0x2fa})
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff}, 0x0, 0x0)
writev(r11, &(0x7f0000000480)=[{&(0x7f0000000000)="f67804e83b4e100b", 0x8}, {0x0, 0x8}], 0x2)
socket(0x40000000015, 0x5, 0x0)

27.1061848s ago: executing program 3 (id=321):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
sendto$inet6(r0, &(0x7f0000000500)="6000000400142c400000000000000000000000000000000100000000000b000000000200a52af8348974", 0x2a, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)

26.860661942s ago: executing program 3 (id=322):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb00000800030003", @ANYRES32=r1, @ANYRESHEX=r0], 0x68}, 0x1, 0x0, 0x0, 0x8008000}, 0x50)
ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000880)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
close(0x3)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1, 0x2}, {0xf, 0x10}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x2000000000000000, 0x0, 0x84}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
r8 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
r9 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_G_PARM(r9, 0xc0cc5615, &(0x7f0000000140)={0x6, @capture={0x1000, 0x1, {0x1c139bea, 0x3}, 0x401, 0xe66}})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r7], 0x2c}}, 0x20008000)

26.58055975s ago: executing program 4 (id=323):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901)
r4 = socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x3}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4048061)
fchdir(r3)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300010001114de02fa503b14a9568529bd70b904f0bfa7eca17f821193e400fbdbdf2408004b002800000008003e770f88510004000003e4eda312fbd79cd70002000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x12202)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000540)={{}, {0x18, 0x7}, 0xffffffff, 0x6})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, 0x0)
close(r3)
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c010000100013072bbd7000fcdbd52564010101000000000000000000000000fe8000000000000000000000000000bb000000024e210002020000201d000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe32000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffff080000000000000001000000000000000900000000000000ffffff7f0000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000300000000000000000000002cbd7000003500000200000050000000000000001c00040007004e244e200000fe80000000000000000000000000002c60001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a"], 0x16c}, 0x1, 0x0, 0x0, 0x4000001}, 0x48080)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r11, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x4404c010)
listen(r0, 0x802)

26.481148428s ago: executing program 2 (id=324):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r2, 0x0, 0x600}, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000040)={'bond0\x00', @ifru_flags=0x2000})

26.288607732s ago: executing program 2 (id=325):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd1200110000000000000060ec97000f982c0020010000000000000000000000000802ff020000000000000000000000000001"], 0xfce)

26.288113005s ago: executing program 1 (id=326):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000180)={0x50, 0x0, 0x560c, {0x803, 0x100}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}})

26.158043341s ago: executing program 0 (id=327):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x1, 0x1, 0x9, 0xfffffffffffffffd, 0xffffff01, 0xfffffffe, {0x44, 0x2, 0x7fffffff, 0x2, 0xb, 0x2, 0x1, 0xffffffff, 0x4, 0x2000, 0xa8, 0x0, 0x0, 0x8001, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x2800, 0x1000, 0x7})
r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'veth1\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, 0x0, 0x0, 0x4c004, &(0x7f0000000800)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0)
r10 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000180)={r0, r4})
sendmmsg$inet(r10, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40)
recvmmsg(r10, &(0x7f0000000400), 0x0, 0x0, 0x0)

25.626866527s ago: executing program 4 (id=328):
r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x80, 0x1024002, 0x804d}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
statx(r4, 0x0, 0x1000, 0xc91802293bb1c2d9, 0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x40, 0x0, <r5=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0)
syz_io_uring_complete(r1, r2)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0)

25.349610298s ago: executing program 0 (id=329):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async, rerun: 64)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') (rerun: 64)
read$FUSE(r1, &(0x7f0000006040)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x17a9) (async)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) (async)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r4=>0xffffffffffffffff})
close_range(r0, r3, 0x0) (async)
ioctl$SYNC_IOC_FILE_INFO(r4, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x2000000, 0x0})
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000140)='./file0\x00', 0xa4000061) (async)
inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0xc100092e) (async)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585", @ANYRES8], 0x0) (async)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x8)
close_range(r0, r6, 0x2) (async)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioprio_set$pid(0x0, r2, 0x4004) (async)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
r10 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0)
syz_usb_control_io(r10, 0x0, 0x0)
syz_usb_control_io(r10, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
r11 = io_uring_setup(0x1c78, &(0x7f0000000040)={0x0, 0x7fd3, 0x200, 0x8, 0x4207, 0x0, r1}) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000180)=0x5, 0x4) (async, rerun: 32)
io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r7, 0xc01464ba, &(0x7f0000000480)={0x3, 0x0, 0x0, 0xcccccccc})

25.100748747s ago: executing program 0 (id=330):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x5, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf, 0x1, 0xe, 0x0, 0x5}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}]}}]}, 0x170}}, 0x0)

24.820489428s ago: executing program 3 (id=331):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000002000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0)

24.718940111s ago: executing program 1 (id=332):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = memfd_create(&(0x7f0000000080)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU._R5(;\x1c\xcf\xe7\xe9\x9eE\"\xcc\xbd\xa1\xe2\xc4\a\xb0zc\xf0\xc1\x819[9\xbb\x9f\xf6\xfb\xbbC\x99\x1enC\xda`Z\xa0\x02\x9d.*l\xa2q\xdd\xfa\x9a\xd3\xf6F\xb3LG5\xb1\xd8\x17\xc7i\xd21\xbdqW\xda(8\xab\xb6#\x12\x1c\xd2Z\xd3\x10\xdde\x9f\x9ejD\xa3\x8f\xdc<\n\x03\x93\xb4D^\x9dx\xe04\xa1p\xe7\x1bY<MR&z0\x8f\x9f\xff\xda\f\xc2\xc8/\xde\xa3\xd5\xf9\x9d\xebp$o\x9c\xf5\xb84\x97\xf6;\xbc\x95a\xc8`K\x06m{\x00(\xc9\x97\x06:7\xc4\xf8\x0e\r\xe8\'\xaa\xf2\xbbU)\x88W|\x85e0\xbbt\x96\xa3B\xa7)\xf9\xc7\x8f\xb1G\x98\xf7\xca@\xa9\xcf\xca\x10P\x84_1B~~\xd7-\x10\x14\xa6\xaf%=\xae\x8f\xad(b\xc5\xfdB\xceoY\xb2\xf2\x9bm\x9fi\x1d\xe3o\x97', 0x2)
r2 = dup(r1)
r3 = fanotify_init(0x200, 0x400)
fanotify_mark(r3, 0x1, 0x8000000, r2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r5, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101408d0e08060001000000010902270001010080fa09"], 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='cgroup.subtree_control\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r4, 0x0, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='%rdma '], 0xe)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800)
r9 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x103302)
ioctl$SG_IO(r9, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x3, 0x0, &(0x7f0000001640)=[{&(0x7f0000000040)=""/173, 0xad}, {&(0x7f0000000100)=""/214, 0x20}, {&(0x7f0000000640)=""/4071, 0xff0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0xfffffffc, 0x0})

24.612029107s ago: executing program 4 (id=333):
r0 = syz_io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x442, 0x1ff)
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001500)=""/4106, 0x100a}], 0x0}, 0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000014f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000280)=@vmx={0x103, 0x0, 0x2080, {0xeeef7000, 0x54000, {}, 0x1, 0x1}, {"d07ee511f368b2a747251cf1a94a5870db8535a3258ed7ba4130c84d13bc1903e6882414875944b82f10a32adad59953b7a890eff248264533942a68add3cd784a01567c6b0d9560e938d5a95542f7c44ffc40a36a3feb3e5a3361af429294817929705e32b6b48f388e93ca051ed017c49a75ba08d2220e3c4a16845c32fbd0f1f02e1fa8845a8982a3ac2a241adabdb23500b7be45c2995db01232accacc0c6a6f39b3cbd4b8009b7608dadf3ae9bd27b6be4aaec5c2666b8d08df000000007cc43faeeed57a95f17a81d8677b2f4b7dfd403adeaaa978afe637d027bcdc81ef81ee9345c362621d8eaefff4dac96def624351935f2ac6d573abae93a2ed5e1120a4e28a6f6a29fe2f8ee17582b17b682e66e576a5e42391d6b991f31795a7f3fb1a49a956d3d11d7b3ef39239065a548704677d9bc89f619fcd96d88b7a8674ae9d23da53c9c4a258fdc2d937213bd5b5e43f5550a0a4f4f5df6a428694a2b83b0cd2aeb1eb7dbae38c86f27292eae23e79a33a5264657ccf35ccd4507b8f0d879db556faf8278371ab25ac2c35d7d77fbe00dfdffeb722a90a2a6e78b56fa092bca0eb8a57e9784bedb38403903eaa0948c0611d30f8e2823daf14abd13207cc18f420d8ed21a29c53ee3c821ebefdddec8dd7e80bad1cca1acd2dfce368b6d3d87830517f5c06959ed3d9402664cf167998b3cf784c4787733f5d644e79b670952fb33b6be1f84ce73bd863b87d506dbd517dc247b1d54b6325bdf0f8cc026bb2c7aa64541e8e37c98cb17d5a7bbfe731994f780bcd91f5a7327d849bc718d3b669bde81bce23c0a516684b771dc961273a7e32917231a2b15a0554b3bc631efad8a807f8e8c910e788b59af76f2cad8330a0420b757872075201fd7e0a94761ffa10a26da432389e778ffd7d402cbcaed958f979a57fd82efc290d7540e7eff753606c663c046be13526e0a37faf74d9fb2f4518e83014403a74af69ad6987764d43cde4c295cc7c8720c642e72a6cb821b020385310af2cfc941131718d50c9f53ee807ba969db68a97bef3ebdc0c18c74b9ea64d91d408ca446d6ccf14c24f6153794721752f74ba44f575a1d66f002c49f18f7b35428f1bac27f758872c5624caa0ed3b76ca43a5907153dc0305c608f1498eff49fcae7b775cb1db295b40f59c0d47f18a2a5b2449c8e7aff042cf6e38b956a9893d6e43b1a9e95c90a1c08326ddb6cf1beac903717d8c2b89be82a2db9f4a42eb6b43368988345689a7ec76c2da4865caff776ed09cc51e6c3343b6d39b1cf318e0d5c251e3c741e384b971b3901ab57b35bd6d517aae1935ddce6296e60109f43f78b3e3d8cc203992015feda1d8036748e1bfa2ccdb7c2939bc4221944974d01d6a31dd1bbf6a6b9b17decedd550f2a8f6d2cdc7410e893375bf363b69d765a285a57762216dd6428f9cc4b4e2fe4f89b1cc92c629e64b29700fe75fe4a7929424769db1de2974473c2ef68cb104e79132e1cf29432a57552472451c78455f14aa3bcd6e2f0afe298a399e23270f3ce6075472e46d5fd22b0cf7f53005bc0a8fbc08bd88533c9a73d290b469b71d4f9f6fbc0c174f19b31dc05e54117d583d2879d90add5d2abbac1880f5459f9c501d39cdc85019401e87f4f1ff44675107e9db6e02bb8b894422cd95a1e1e133abd7a070f4184753973853613760743d618992f9515597297e345c5571731de7031e21faa156944f9cebcc2a2a2f81750766e9be2bc21d66ff24933cde48e387bac6e94f92f5a5beb261a7570d74782d5e7588c963a52b5f8d88b8abb60c9f3a1e23c5d803819a1c5523d23291164d33a4c1303963f420f07eb28e444cc5ac1e046a5c9682f1d050d03fc94720fa11f21fda510c32e2406c0f63e47860d59811af2a8d53b7acacecdbcfb60ee38897f02c7d72abab49a16e9c0711122f89a22d1f01db605804d270938a86973fdd517a7178912a8e7b9cc78c88700cf862e524c4d152d2d0201b1d5b080c97a58e25843c1b04e143937dcbd5d2875eb2c3b38003bd9c200a81367a9d6129a121375c89c782cbdb9b92ae006db33085df12dd65ec1e19ca013a284fc5666e8a0f66173c9dc7519a83349c0cea1ba33847ceb5ee150eddc6c7e823f43a336ff06690182515c8230e6ddf69c3e70e08c2900f1fdfe0ba4c6dd10e96cead6a7ed21a261d2e8e15bf041590439db5753bf10cae9683a822dd2a6631abe3941a86b05d815ce91fdb0d7a783ef8870a81bda624f65b049b16ad2ec373e0d9af75132ab3cabd0dc424c004b5e90a732f6b6c7ac3c676e779de4a0561c52ffc880c170872143144b133886912263e56b7dfb97d23f0e2491ba46a5053c1a5e42cb0fac52970a834496f1d10310f3b0946e531aacacc9d526a337f77c5a0e35fe6d2ca8c9eb87fce0fcfb659a86dbdc0fe6ff1de1ae8549c29274ec7e2daac612e2e0194974c6b0a9e65e724a76e54d3ebede753cf9f027759c79529eaac74ba94ef0da27cbf2fbdc7f06cd08243716826f7c901e257c3b40cb6392726a523010c4a7f4023043c715973a39db3683804f309bfe045280d204ca000505aa9efe079819f63f08e23adea81e0f8fc73a8ab1827476509410917b0091aa0702dedaae8b1e8bb1aad23b97a23d010c3fec37e625820d9375304cb318a0cd3865ff56f96f19dfd9110fa1ba8ba17bdf992c5aebf165053ce2e2245af1dda0b6af2770e968116ea6735e2f2136ca09d42a43da54801395b9ac182475ec6b2c4ccddec16d8fce4252352bcb9dfdcef2ab1770f8f6707f4ea1630d58edfdb200e5e8ade514b750721ab7c52c614ba51cd437fa238e9ae3b09f78c712febe138c754b27bafdbe8859ce1e5133e825ea8d8bd68684a8d2c4db066203f336b54207761b8ce0ed940a8ea494ed18b46c891c4b9c4b580c44cc04e53007a289f734db4d7dbb80d7b5183cf466c549af7ae3a9394e6b6c9fc2cb9e732a66c38acc858a8e12077d2de8827adf521661edfd317887fd9f1d4b8f17478ca2a7d1463c681a12f6abc80d8d12a3aff448182e0e08e1263d9edbad4d0c29aac3794a24e85d47defa58659b945d6add52b074220bc88423a5379819044274be0c23a7e08c08b7411337ddd2a6b3bed2647cf467c2edb78add7410b723577b7eb9a3a368829d250ffd173978b7e0066fe577586c2584442349cd1962104e22b128db56e7a7f1ab59ee963cee9e463647aafb0ba9ef90169c69fcbb2851d8340597f478d7201c67e8990b85f1d47a8dc78d5fe4ef321bdd8d52f79bc7ecb2ec3c29ddb0ab2859074af6635e3bec5e1679ace0b088e76a7f5232cbf93eb52b5435e58d3ae5bb8f9cf26966264243907d8dafc62989eda979a0a05b8e562d518fa3e2d92eafe1f2831a77d06abd69817644519576fb07a88c17f52fc74de32f140d8cc53ba673c7434c328cfd58f343f8ed0f19840ae80f0aaefeede42b74b4b5d0870280e6233890f41e9147bb4a1d8d15f62e4a1d0254b3463402b1300c078f251c8a336e80d003318d8e5b5e2e0afd7dbe3b57022adebc1de85209d24949c63af34bbab681747ef5960f58fd8db1b0c6a99fe0ae8c84b9b6e260cf71f8151bdce47b2a694bf7932b6a30639275a612c77f589101f571221bf0d4e64ce2a23301c53a380c53175fcca302563efb50452d3f4419f1f81e9dfd8e40bede6f9c73dfcb79edc8b8c60ffa738718765fd0b65859da8542e67f6ba3556d595cf8859810a83ca6161ef8381d348d7342c3b66edb402e323af4aef6684a7f72f3b49e5dc3c20c154db11fe4807dbb7876c7c7d84e5cf831da693e65b7769950872578ce87ff1696b2f26a8ae900154fd129a62c3dce2620cb753a7f1c96c6628df7b338a00ba20557ab15f8623b7c1bdf3f15e9b662bb65e1bb8dfaadf407d97ff3978848996f99c62bdd12ceeadf2be3d4bbc3e83c01bab738899568f1d90c799b9170c107645f543633e5cca5ba598ce28da37312e50dd3cc1413cb21c596920ab8d5779200682d527267e6564a93549b1ca13a10f57e593de6edfb9e1cd68108903f54e5a78a4c68cdffb31048c735161991fa149268fff0967c379ef1645f7716610c3230b452488f13632563a0d86d02d0e47546123d1e6b1dbeb8d1a38c6d2752c570142a30fbdb1e1daff58d065403dc731a650bf65e9f94492c4ff60ced6a0631cf1d9ddc9318bf067d4d28a0845b6b0b2b448f6c7d22b8490e17fcd602bdf954f7ec0183cb0f6df78935829d0c00372dee9102c9ff0f5423767b9d62d9a8ffd92d3af25fccc23e7961f5fd218903a136478754c53adf93e355ed5f12060c4bb707cd4875015617ab5f1f232a7cf044b7f50a1590613ec30be930edc70cb391d400a1406b02d612918a5c1d99bce875f260e40a3b779b38a1daa1054ad50f9a96d0204d7ce7ee96b3d03ae5c13e0ac53f374676fb457de8dc978c7331810dadbc6444f5fa7596a943b7f7836654e8387cfd07170134eac21428609bac2b85619d87789c51396fb04afefdea95848cc55054b0d3099f974ffee828e255be1a13d7e6a17e81562e55eca306d438f36cd5a9863c77f9d519b0d0af0900000000000000b9b8d130339193893c4937cab0b3619f775ff538696c30b9964bd04e2be4b8aaa90a7891c6e8a2806ead78cb170db650c68a7a844590c578788caf13f48d8b375dd725eee00bd0b17b0d2a87418c684ece2fd66db58eb7b601257ad692e8a6f27125f5cf77287a6da495ce839aad3fc9077abfb28e28ef09a1fd103045310e62faaa36198a6a22810585d90599f8d7988ad786057d57888cddb48152afcbcca3979bad2f2a498e96f11855be2481bfa17218c10f8962ca094d898e1f2a60cb7d663569739cd1195fbcb436c9cdbf729206d1d937276b4e67d47ef325c3e1abf7defd3bd69f4b5f47b05ef86f501527694fa16f17d266f4de07654c4e547908da3b8ebf89e87cd633509261418f6009cf53f6d73d4df249642dc9b65e1d762376c9a75ad057871b26479c9fd42b9fff1eb59f6817251014f1777a9be2d249dcd3eea21e92444c0e13a019100b7effb9d0c6c95448a72a1ae7ad520fe8809683545052fbe5dbad18ed399e317a0dbfd738f53b2405239b9ef60b076f768274da79bb674782f10789e506c38713d27c7996b6bfe516ac6dbf0fe1188ce65150ffa4e000d9dc1c28b7a8b00830719666c1d6b927fdebf23533be84b8250850f98160e2de1a97221aec2726e64677951dc1af88a1ad05ab3dabbb6407894661648f92e082b8c8cedb3c894c95bdfeea0218f16ed942b9bf7be2ecbae1df061c0d7a6c5f491605c1161deb626eba3587d17610f13cc3aa4bfda536cffcbee7a22de7826ba43047ed98f0474fc24d42246dcad449d346f21f557043099c5bbae70286a09c37f6976d11b31ac6af6e07b87bcf1149e777374314fbc807dfd88c9f0740728898fa88d93ab45731e41cc09ce235fbb4458a65510c67ae396af057aa90a020f86dccebedc51b0ca383d2868438c5a10435ec8d13b67f0171b6d67ba15db4d66ddcaec6227d1e3b1d0c9fcd72b99fced4b76e8f6bd4dfb8cd2adec2593d5933fcaff774136da3d754523bbfb68fc388dba10000bf11238e2536178ba9a480bb5abeba376fcebeb1403e0d223e3afc1a6a6688352056671a3ecde86cc9b7a6b08c1c096c024e12d40410a00487dcafed8520599f678b1f6b74f08ee595534fdd455baf5f7b6400", "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"}})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\\\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000200000000000000000000000000000000000000394a235bf40e546c394a28a21d901173daac963da91972ba605e2d791a863bf464cf783df66f1ac1282fd2f04b0500a164812bc4dfa32243009e31c56c5add81cb50efff6b552ef274bd4751ea288c46c50f"], 0x50)
ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f00000001c0)=0x8e15)
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
syz_clone(0x9c00000, 0x0, 0x0, 0x0, 0x0, 0x0)

24.365422193s ago: executing program 3 (id=334):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = syz_io_uring_setup(0xd3a, &(0x7f0000000380)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000780)=@IORING_OP_SENDMSG={0x9, 0xc88c23b822017404, 0x20, r0, 0x0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {0x0}], 0x2, 0x0, 0x1d8}, 0x2, 0x10})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x7f00}}, 0x0)

24.196667933s ago: executing program 3 (id=335):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x12800)
signalfd(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="8be911053e0ddb425893e6ccaa8b4b578ccb2f3f7aa3552e184c9d848d9163f7b1a3d1ff596905fecb8094c75e6ad3cec80fffe14d82ae68a3bdbcaf3d52e55c8e84d5fdcba591b5f4fb0aa0ceb46c20d9559b94adf253113bdea29c964d3a6e8250a201e0b3771702a73c73db4cad792b16a03ff947fad6ba18c0a7fd872a816507487584cb87620148fea6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]})
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000001000)=""/61)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0xd, 0x0, 0x0, @time={0x3, 0x83}, {0x0, 0x2}, {0x20}, @raw32={[0x0, 0xb2d1]}}], 0xfe52)
poll(&(0x7f0000000240)=[{r1, 0x20}], 0x1, 0xfbe)
pipe2$watch_queue(&(0x7f0000000200), 0x80)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x401, 0x7, {0x3, 0xbb}, 0x41, 0x2, 0x9})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00')
readlinkat(r3, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000040)=""/76, 0x4c)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

23.930441796s ago: executing program 4 (id=336):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001d00010000000000000000000700ffff", @ANYRES32=r1, @ANYBLOB="000096040a000200aaaaaaaaaa0c00000600050001"], 0x30}}, 0x48010)

23.716923348s ago: executing program 4 (id=337):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="bc00000000010104000000000000000002000000240001801400018008000120e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e"], 0xbc}}, 0x0)

23.603062553s ago: executing program 4 (id=338):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100004)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x4, 0x1, {0xa, @meta={0x44564956, 0x3a6343a1, 0x745f, 0xabd9, 0x20b5d06e}}})
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000000))
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0xa8, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000880}, 0x48000)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="30040000f66c02a16b04ffbe244b713d2918e13c2ac0f26266d1faf9302cdf65b9951db80414344407669a9b09ff6e54252f132968b0ce318c68880ccc705349", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf2512000000140009800800010008000000080002000400000008000280040004000402068008000100dddd00004200040067636d28616573290000000000000000000000000000000000000000000000001a00000024773d8ce0f578acca11f657d46f2274b9aec7290f83722bc43300004200040067636d28616573290000000000000000000000000000000000000000000000001a0000009496e009f83d7885c926cbc88b69dfa4b0fa86da499f8f943b5d000004000500a100030021f06228e1e6c5a7a622eb285ae1941b2eaf30980d560713d4dc201ae35086ea1284231ce81c29035b268a5b93a98465e6ac0b21e24156913e42e93e19ea5162d0d2a6bdc6f8fe8b736ce1c9acd85c6491c5eea26290ca0722873424c6092f76418ca342a1ffac4c6022a5471e7d54b0ad63bca6cce44f7064d3f54ea3ca3b171441d1bdd7c165a01504fd22adbd2893665ee0237162754bfd22308d84000000080006000400000004000200ba000300fa0886ef3e97339911d90cf8a451ee7c7966ca47798d8e47c270992e5561ca70b7f7cd244d1518f2427f28cd78c4414d0850566f6b155e232a3e8acd3419d132f9bcacd7eb86d764b9aee9dc107947687c261a84e6f08f93a563c4ce68b3e479e39613dada9108aacf57399d30ffad6ce76d417ef621e7f85ecafbc24bb5137682e19c6fc9d4a614a79fe69daa858420e7217012fd6d9e7735eb72a80c8430c79abace8164a8d5c580d1aa401d8985c1c0e9b8dce36f00000400068068000280080001004201000008000100030000001c0003800800010003000000080001000100000008000200faffffff2c00038008000100ff000000080001000a0000000800010004000000080001000700000008000100070000000400040004000400040004004c000980080002000600000008000200ff0300000800020001000000080002008900000008000100f3ffffff080001000100000008000200c218000008000200ce7700000800020006000000200004801c000780080003000700000008000300010000000800040002000000e800018044000400200001000a004e2300000008fc01000000000000000000000000000007000000200002000a004e2000000005fe8800000000000000000000000001012fae000008000300ff0300000800030007000000380004001400010002004e21ac1414aa0000000000000000200002000a004e220000000000000000000000000000ffffe0000001080000002c0004001400010002004e22ac1414bb00000000000000001400020002004e210a01010100000000000000002c0002800800030003000000080002000f0000000800020000000000080003008100000008000200010000003c00028008000100ff0700000400040008000100b4000000240003800800010004000000080001000000000008000200040000000800020008000000"], 0x430}, 0x1, 0x0, 0x0, 0x800}, 0x8000080)
mount$fuseblk(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x8, 0x0)

22.89061094s ago: executing program 2 (id=339):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x1, 0x1, 0x9, 0xfffffffffffffffd, 0xffffff01, 0xfffffffe, {0x44, 0x2, 0x7fffffff, 0x2, 0xb, 0x2, 0x1, 0xffffffff, 0x4, 0x2000, 0xa8, 0x0, 0x0, 0x8001, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x2800, 0x1000, 0x7})
r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'veth1\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, 0x0, 0x0, 0x4c004, &(0x7f0000000800)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0)
r10 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000180)={r0, r4})
sendmmsg$inet(r10, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40)
recvmmsg(r10, &(0x7f0000000400), 0x0, 0x0, 0x0)

0s ago: executing program 32 (id=330):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x5, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf, 0x1, 0xe, 0x0, 0x5}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}]}}]}, 0x170}}, 0x0)

kernel console output (not intermixed with test programs):

.770024][ T1107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.770076][ T1107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.788673][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.788692][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.815116][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.930768][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.968776][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.968810][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.990828][ T1143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.990988][ T1143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.991041][ T1143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.991079][ T1143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.034043][ T5712] loop6: detected capacity change from 0 to 2640
[   80.052268][ T5631] Buffer I/O error on dev loop6, logical block 0, async page read
[   80.064140][ T5631] Buffer I/O error on dev loop6, logical block 0, async page read
[   80.073045][ T5631] Buffer I/O error on dev loop6, logical block 0, async page read
[   80.082924][ T5631] Buffer I/O error on dev loop6, logical block 0, async page read
[   80.091387][  T119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.091410][  T119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.100410][ T5631] Buffer I/O error on dev loop6, logical block 0, async page read
[   80.264914][  T119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.264960][  T119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.291090][ T5714] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   80.364707][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.364741][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.479747][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.479798][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.652882][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.652925][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.744569][ T3342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.744611][ T3342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.829211][   T50] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   80.918771][   T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   80.990484][ T5708] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   81.000644][   T50] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[   81.032210][   T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.032254][   T50] usb 5-1: Product: syz
[   81.032318][   T50] usb 5-1: Manufacturer: syz
[   81.032336][   T50] usb 5-1: SerialNumber: syz
[   81.068990][   T44] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   81.070120][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.070149][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.070183][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.102448][ T5617] Bluetooth: hci0: command tx timeout
[   81.102480][ T5617] Bluetooth: hci2: command tx timeout
[   81.102501][ T5617] Bluetooth: hci1: command tx timeout
[   81.102638][ T5613] Bluetooth: hci3: command tx timeout
[   81.105007][   T30] audit: type=1326 audit(1787795391.344:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187579e0d9 code=0x7ffc0000
[   81.105056][   T30] audit: type=1326 audit(1787795391.344:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187579e0d9 code=0x7ffc0000
[   81.105088][   T30] audit: type=1326 audit(1787795391.344:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187579e0d9 code=0x7ffc0000
[   81.105123][   T30] audit: type=1326 audit(1787795391.344:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187579e0d9 code=0x7ffc0000
[   81.105157][   T30] audit: type=1326 audit(1787795391.344:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f187579e0d9 code=0x7ffc0000
[   81.105188][   T30] audit: type=1326 audit(1787795391.344:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187579e0d9 code=0x7ffc0000
[   81.105215][   T30] audit: type=1326 audit(1787795391.344:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187579e0d9 code=0x7ffc0000
[   81.105244][   T30] audit: type=1326 audit(1787795391.344:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187579e0d9 code=0x7ffc0000
[   81.105272][   T30] audit: type=1326 audit(1787795391.344:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f187579e0d9 code=0x7ffc0000
[   81.106372][   T44] usb 3-1: config 0 descriptor??
[   81.159656][   T30] audit: type=1326 audit(1787795391.374:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187579e0d9 code=0x7ffc0000
[   81.207833][ T5708] usb 2-1: device descriptor read/64, error -71
[   81.211143][ T5688] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   81.233631][   T50] usb 5-1: config 0 descriptor??
[   81.313285][   T50] gspca_main: sunplus-2.14.0 probing 04fc:504a
[   81.359127][ T5688] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[   81.366062][ T5688] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   81.366103][ T5688] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   81.366150][ T5688] usb 1-1: config 0 interface 0 has no altsetting 0
[   81.366182][ T5688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.375992][ T5688] usb 1-1: config 0 descriptor??
[   81.376687][ T5727] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   81.490465][ T5729] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   81.558476][ T5708] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   81.582347][   T44] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[   81.582570][   T44] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[   81.608277][   T44] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0001/input/input5
[   81.612144][ T5735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.648858][ T5729] usb 4-1: Using ep0 maxpacket: 16
[   81.650894][ T5735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.665620][ T5729] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   81.680337][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 26232, setting to 64
[   81.701076][ T5708] usb 2-1: device descriptor read/64, error -71
[   81.716246][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.716312][ T5729] usb 4-1: Product: syz
[   81.716346][ T5729] usb 4-1: Manufacturer: syz
[   81.716363][ T5729] usb 4-1: SerialNumber: syz
[   81.751313][ T5729] usb 4-1: config 0 descriptor??
[   81.777636][ T5729] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   81.789604][ T5729] em28xx 4-1:0.0: DVB interface 0 found: bulk
[   81.801378][   T44] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[   81.821964][   T50] gspca_sunplus: reg_r err -110
[   81.823831][ T5708] usb usb2-port1: attempt power cycle
[   81.872934][   T44] usb 3-1: USB disconnect, device number 2
[   82.092227][ T5688] usb 1-1: string descriptor 0 read error: -71
[   82.099117][ T5688] uclogic 0003:5543:3031.0002: failed retrieving string descriptor #200: -71
[   82.099227][ T5688] uclogic 0003:5543:3031.0002: failed retrieving pen parameters: -71
[   82.099250][ T5688] uclogic 0003:5543:3031.0002: failed probing pen v2 parameters: -71
[   82.099309][ T5688] uclogic 0003:5543:3031.0002: failed probing parameters: -71
[   82.099440][ T5688] uclogic 0003:5543:3031.0002: probe with driver uclogic failed with error -71
[   82.159582][ T5688] usb 1-1: USB disconnect, device number 2
[   82.188485][ T5708] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   82.217585][ T5708] usb 2-1: device descriptor read/8, error -71
[   82.290318][ T5739] fido_id[5739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   82.424193][ T5728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.424225][ T5728] IPv6: NLM_F_CREATE should be set when creating new route
[   82.424969][ T5728] IPv6: NLM_F_CREATE should be set when creating new route
[   82.448892][ T5708] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   82.486061][ T5728] openvswitch: netlink: IP tunnel dst address not specified
[   82.487120][ T5708] usb 2-1: device descriptor read/8, error -71
[   82.512434][ T5728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.512873][ T5728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.562103][ T5729] em28xx 4-1:0.0: chip ID is em2765
[   82.590000][ T5708] usb usb2-port1: unable to enumerate USB device
[   82.809642][ T5728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   82.901501][ T5729] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[   82.901576][ T5729] em28xx 4-1:0.0: board has no eeprom
[   82.978281][ T5729] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   82.986322][ T5729] em28xx 4-1:0.0: dvb set to bulk mode.
[   82.993374][   T44] em28xx 4-1:0.0: Binding DVB extension
[   83.012594][ T5729] usb 4-1: USB disconnect, device number 2
[   83.023538][ T5729] em28xx 4-1:0.0: Disconnecting em28xx
[   83.034012][ T5613] Bluetooth: hci4: command tx timeout
[   83.131845][   T44] em28xx 4-1:0.0: Registering input extension
[   83.149517][ T5729] em28xx 4-1:0.0: Closing input extension
[   83.181648][ T4933] Bluetooth: hci1: command tx timeout
[   83.181699][ T4933] Bluetooth: hci2: command tx timeout
[   83.181719][ T4933] Bluetooth: hci0: command tx timeout
[   83.181772][ T5613] Bluetooth: hci3: command tx timeout
[   83.235429][ T5729] em28xx: Freeing device
[   83.697888][ T5679] usb 5-1: USB disconnect, device number 2
[   83.770158][ T5729] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   83.810283][ T2003] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   83.852035][   T50] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   83.874124][ T5765] vlan2: entered allmulticast mode
[   83.880496][ T5765] bond0: entered allmulticast mode
[   83.886912][ T5765] bond_slave_0: entered allmulticast mode
[   83.886936][ T5765] bond_slave_1: entered allmulticast mode
[   83.929885][ T5729] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[   83.941042][ T5729] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 5376, setting to 1024
[   83.941088][ T5729] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[   83.970224][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.970265][ T5729] usb 1-1: Product: syz
[   83.970295][ T5729] usb 1-1: Manufacturer: syz
[   83.970313][ T5729] usb 1-1: SerialNumber: syz
[   83.994236][ T2003] usb 3-1: Using ep0 maxpacket: 8
[   84.003260][ T2003] usb 3-1: unable to get BOS descriptor or descriptor too short
[   84.003326][ T2003] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   84.019172][   T50] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[   84.020347][   T50] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[   84.022903][   T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.022926][   T50] usb 4-1: Product: syz
[   84.022940][   T50] usb 4-1: Manufacturer: syz
[   84.022954][   T50] usb 4-1: SerialNumber: syz
[   84.046632][ T2003] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[   84.046659][ T2003] usb 3-1: config 0 has no interface number 0
[   84.046696][ T2003] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   84.046719][ T2003] usb 3-1: config 0 interface 88 has no altsetting 0
[   84.053993][ T2003] usb 3-1: string descriptor 0 read error: -22
[   84.054117][ T2003] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   84.061374][ T5757] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   84.064152][ T2003] usb 3-1: config 0 descriptor??
[   84.142192][   T50] usb 4-1: config 0 descriptor??
[   84.159632][   T50] gspca_main: sonixb-2.14.0 probing 0c45:6005
[   84.191692][ T2003] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input7
[   84.354889][ T5729] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[   84.368414][   T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   84.419811][ T5729] usb 3-1: USB disconnect, device number 3
[   84.530161][   T44] usb 2-1: Using ep0 maxpacket: 32
[   84.534493][   T44] usb 2-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=35.09
[   84.535443][   T44] usb 2-1: config 2 has an invalid interface number: 51 but max is 0
[   84.535466][   T44] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   84.535497][   T44] usb 2-1: config 2 has no interface number 0
[   84.535534][   T44] usb 2-1: config 2 interface 51 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0
[   84.535556][   T44] usb 2-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[   84.535577][   T44] usb 2-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[   84.535598][   T44] usb 2-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[   84.535621][   T44] usb 2-1: config 2 interface 51 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64
[   84.535647][   T44] usb 2-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[   84.535668][   T44] usb 2-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[   84.535688][   T44] usb 2-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0x2, skipping
[   84.535709][   T44] usb 2-1: config 2 interface 51 has no altsetting 0
[   84.543201][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.543228][   T44] usb 2-1: Product: syz
[   84.543242][   T44] usb 2-1: Manufacturer: syz
[   84.543256][   T44] usb 2-1: SerialNumber: syz
[   84.568022][ T5769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   84.571964][ T5614] udevd[5614]: Error opening device "/dev/input/event4": No such file or directory
[   84.572093][ T5614] udevd[5614]: Unable to EVIOCGABS device "/dev/input/event4"
[   84.572186][ T5614] udevd[5614]: Unable to EVIOCGABS device "/dev/input/event4"
[   84.734211][   T50] usb 4-1: USB disconnect, device number 3
[   84.794498][ T5765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.794991][ T5765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.801477][ T5765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.801927][ T5765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.056050][   T51] usb 1-1: USB disconnect, device number 3
[   85.075589][   T51] usblp0: removed
[   85.231914][ T5786] netlink: 124 bytes leftover after parsing attributes in process `syz.2.21'.
[   85.288042][ T5789] netlink: 124 bytes leftover after parsing attributes in process `syz.2.21'.
[   85.989411][   T50] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   86.023667][ T5807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'.
[   86.152509][   T50] usb 3-1: unable to get BOS descriptor or descriptor too short
[   86.164250][   T50] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40
[   86.177603][   T50] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.188036][   T50] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   86.209463][   T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.209504][   T50] usb 3-1: Product: syz
[   86.209539][   T50] usb 3-1: Manufacturer: syz
[   86.209558][   T50] usb 3-1: SerialNumber: syz
[   86.317347][ T5815] trusted_key: encrypted_key: insufficient parameters specified
[   86.393179][ T5819] ip_tables: iptables: counters copy to user failed while replacing table
[   86.406922][ T5819] ip_tables: iptables: counters copy to user failed while replacing table
[   86.486072][   T50] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   86.494014][   T50] usb 3-1: MIDIStreaming interface descriptor not found
[   86.629310][   T50] usb 3-1: USB disconnect, device number 4
[   86.710982][   T10] cfg80211: failed to load regulatory.db
[   86.744582][ T5831] netlink: 80 bytes leftover after parsing attributes in process `syz.4.36'.
[   86.744632][ T5831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.36'.
[   86.787097][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   86.956247][   T44] keyspan_pda 2-1:2.51: required endpoints missing
[   87.043043][   T44] usb 2-1: USB disconnect, device number 6
[   87.077155][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'.
[   87.086086][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'.
[   87.148392][ T5709] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   87.301225][ T5709] usb 5-1: Using ep0 maxpacket: 8
[   87.303195][ T5709] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   87.305147][ T5709] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[   87.305171][ T5709] usb 5-1: config 179 has no interface number 0
[   87.305208][ T5709] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   87.305233][ T5709] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   87.305259][ T5709] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   87.305289][ T5709] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   87.305326][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.313301][ T5836] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   87.388890][ T2003] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   87.549048][ T2003] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   87.551618][ T5709] usb 5-1: USB disconnect, device number 3
[   87.554632][ T2003] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   87.554656][ T2003] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   87.554674][ T2003] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[   87.554715][ T2003] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   87.554739][ T2003] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   87.556551][ T2003] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   87.556572][ T2003] usb 1-1: Product: syz
[   87.556585][ T2003] usb 1-1: Manufacturer: syz
[   87.569798][ T2003] cdc_wdm 1-1:1.0: skipping garbage
[   87.569818][ T2003] cdc_wdm 1-1:1.0: skipping garbage
[   87.583369][ T2003] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[   87.583401][ T2003] cdc_wdm 1-1:1.0: Unknown control protocol
[   87.753818][ T5855] syzkaller0: entered promiscuous mode
[   87.760976][ T5855] syzkaller0: entered allmulticast mode
[   87.781864][ T5855] tipc: Started in network mode
[   87.781905][ T5855] tipc: Node identity 3651def6bd9a, cluster identity 4711
[   87.794662][ T5855] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.796240][ T5709] usb 1-1: USB disconnect, device number 4
[   87.802663][   T50] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   87.821735][ T5854] tipc: Resetting bearer <eth:syzkaller0>
[   87.853037][ T5854] tipc: Disabling bearer <eth:syzkaller0>
[   87.969115][   T50] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[   87.982356][   T50] usb 2-1: config 0 interface 0 has no altsetting 0
[   87.991042][   T50] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[   87.999507][   T50] usb 2-1: Product: syz
[   88.020649][   T50] usb 2-1: config 0 descriptor??
[   88.246653][   T50] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[   88.260227][   T50] usb 2-1: USB disconnect, device number 7
[   88.286581][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'.
[   88.562617][ T5874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'.
[   88.588433][ T2003] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   88.741398][ T2003] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   88.743057][ T2003] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   88.743082][ T2003] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   88.743100][ T2003] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   88.743147][ T2003] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   88.743171][ T2003] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   88.744619][ T2003] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   88.744641][ T2003] usb 5-1: Product: syz
[   88.744655][ T2003] usb 5-1: Manufacturer: syz
[   88.770014][ T2003] cdc_wdm 5-1:1.0: skipping garbage
[   88.770036][ T2003] cdc_wdm 5-1:1.0: skipping garbage
[   88.780065][ T2003] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   88.780087][ T2003] cdc_wdm 5-1:1.0: Unknown control protocol
[   88.876287][   T42] IPVS: starting estimator thread 0...
[   88.960353][ T5883] IPVS: using max 30 ests per chain, 72000 per kthread
[   89.035197][ T2003] usb 5-1: USB disconnect, device number 4
[   89.168155][ T5890] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[   89.299754][   T50] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   89.346038][ T5896] loop5: detected capacity change from 0 to 7
[   89.352086][ T5896] Dev loop5: unable to read RDB block 7
[   89.352159][ T5896]  loop5: unable to read partition table
[   89.352344][ T5896] loop5: partition table beyond EOD, truncated
[   89.352371][ T5896] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[   89.357366][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.357389][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.360249][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.360270][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.468706][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   89.489136][   T50] usb 3-1: Using ep0 maxpacket: 16
[   89.497360][   T50] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   89.507732][   T50] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[   89.517984][   T50] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[   89.531642][   T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.531682][   T50] usb 3-1: Product: Ԇ눶䱰ꐰ骜톕̰Ԧ篥伕ᇐ䵿쉇≛︔ꚴᆳ﹇ꌸၳ츏◪A荌쯏簾ⱬ整쨨椢⥒ᣠ쒜亂寁お䍂됰鹒ꖪ烦䙕䥥듇㲔ᗮꢪ銃䯥̀ᯪ귋믾퍺敠䎮틼㬬
[   89.531722][   T50] usb 3-1: Manufacturer: ј
[   89.531740][   T50] usb 3-1: SerialNumber: ⠉
[   89.648279][   T10] usb 1-1: Using ep0 maxpacket: 8
[   89.654367][   T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   89.664931][   T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[   89.673303][   T10] usb 1-1: config 179 has no interface number 0
[   89.682892][   T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   89.694350][   T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   89.694485][   T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   89.694512][   T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   89.694590][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.747551][ T5894] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   89.763652][ T5901] process 'syz.4.61' launched '/dev/fd/5' with NULL argv: empty string added
[   89.814950][ T5887] x_tables: duplicate underflow at hook 3
[   89.824856][ T5887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.825266][ T5887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.896132][   T50] cdc_ncm 3-1:1.0: bind() failure
[   89.914901][   T50] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[   89.925233][   T50] cdc_ncm 3-1:1.1: bind() failure
[   89.953366][   T50] usb 3-1: USB disconnect, device number 5
[   90.012227][ T5709] usb 1-1: USB disconnect, device number 5
[   90.306513][ T5913] syz.4.64 uses obsolete (PF_INET,SOCK_PACKET)
[   90.736583][ T5928] loop5: detected capacity change from 0 to 7
[   90.745948][ T5928] Dev loop5: unable to read RDB block 7
[   90.746017][ T5928]  loop5: unable to read partition table
[   90.746217][ T5928] loop5: partition table beyond EOD, truncated
[   90.746254][ T5928] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[   90.765212][ T5930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.71'.
[   90.812269][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.812318][ T5928] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.833248][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.833291][ T5928] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.910127][ T5709] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   90.920268][ T5936] Zero length message leads to an empty skb
[   91.058349][ T5709] usb 1-1: Using ep0 maxpacket: 8
[   91.059049][ T5709] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   91.064518][ T5709] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[   91.064566][ T5709] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   91.064586][ T5709] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   91.064610][ T5709] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   91.064631][ T5709] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   91.064669][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.268303][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   91.305167][ T5709] usb 1-1: GET_CAPABILITIES returned 0
[   91.305247][ T5709] usbtmc 1-1:16.0: can't read capabilities
[   91.404927][ T5948] vlan2: entered allmulticast mode
[   91.404970][ T5948] bond0: entered allmulticast mode
[   91.404983][ T5948] bond_slave_0: entered allmulticast mode
[   91.404999][ T5948] bond_slave_1: entered allmulticast mode
[   91.411547][ T5948] netlink: 14 bytes leftover after parsing attributes in process `syz.4.77'.
[   91.440902][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[   91.440969][   T10] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38
[   91.459176][   T10] usb 2-1: config 114 has an invalid interface number: 240 but max is 0
[   91.459217][   T10] usb 2-1: config 114 has no interface number 0
[   91.459270][   T10] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[   91.459298][   T10] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[   91.459327][   T10] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[   91.459353][   T10] usb 2-1: config 114 interface 240 has no altsetting 0
[   91.527633][   T10] usb 2-1: string descriptor 0 read error: -22
[   91.527771][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.556958][ T5937] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   91.557095][ T5937] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   91.575301][ T5948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.586576][   T10] ir_usb 2-1:114.240: IR Dongle converter detected
[   91.596413][ T5948] bond_slave_0: left allmulticast mode
[   91.634054][ T5948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.651741][ T5948] bond_slave_1: left allmulticast mode
[   91.671925][ T5948] bond0 (unregistering): Released all slaves
[   91.694258][ T5957] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   91.782762][ T5709] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   91.855794][   T10] usb 2-1: IR Dongle converter now attached to ttyUSB0
[   91.928361][ T5709] usb 5-1: Using ep0 maxpacket: 32
[   91.929597][ T5709] usb 5-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=35.09
[   91.930813][ T5709] usb 5-1: config 2 has an invalid interface number: 51 but max is 0
[   91.930837][ T5709] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   91.930855][ T5709] usb 5-1: config 2 has no interface number 0
[   91.930893][ T5709] usb 5-1: config 2 interface 51 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0
[   91.930917][ T5709] usb 5-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[   91.930937][ T5709] usb 5-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[   91.930958][ T5709] usb 5-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[   91.930981][ T5709] usb 5-1: config 2 interface 51 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64
[   91.931007][ T5709] usb 5-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[   91.931028][ T5709] usb 5-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[   91.931046][ T5709] usb 5-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0x2, skipping
[   91.931068][ T5709] usb 5-1: config 2 interface 51 has no altsetting 0
[   91.932963][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.932985][ T5709] usb 5-1: Product: syz
[   91.932998][ T5709] usb 5-1: Manufacturer: syz
[   91.933012][ T5709] usb 5-1: SerialNumber: syz
[   91.951752][ T5951] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[   92.038037][ T5679] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   92.106624][   T10] usb 2-1: USB disconnect, device number 8
[   92.153785][   T10] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[   92.164239][   T10] ir_usb 2-1:114.240: device disconnected
[   92.201473][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.205628][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.217589][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.218506][ T5679] usb 4-1: Using ep0 maxpacket: 8
[   92.222722][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.232585][ T5679] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   92.251392][ T5679] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[   92.260327][ T5679] usb 4-1: config 179 has no interface number 0
[   92.260399][ T5679] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   92.260429][ T5679] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   92.260460][ T5679] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   92.260486][ T5679] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   92.260530][ T5679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.325951][ T5960] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[   92.426683][ T5967] netlink: 'syz.2.82': attribute type 1 has an invalid length.
[   92.434884][ T5967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.450137][ T5967] netlink: 228 bytes leftover after parsing attributes in process `syz.2.82'.
[   92.568835][ T2003] usb 4-1: USB disconnect, device number 5
[   92.736774][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'.
[   92.809474][ T5976] batadv0: entered promiscuous mode
[   92.815949][ T5976] macsec1: entered promiscuous mode
[   92.822368][ T5976] macsec1: entered allmulticast mode
[   92.827795][ T5976] batadv0: entered allmulticast mode
[   92.835637][ T5976] 8021q: adding VLAN 0 to HW filter on device macsec1
[   92.859511][ T5976] batadv0: left allmulticast mode
[   92.864945][ T5976] batadv0: left promiscuous mode
[   92.891786][ T5978] loop5: detected capacity change from 0 to 7
[   92.896963][ T5978] Dev loop5: unable to read RDB block 7
[   92.897005][ T5978]  loop5: unable to read partition table
[   92.897326][ T5978] loop5: partition table beyond EOD, truncated
[   92.897553][ T5978] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[   93.028023][ T5981] netlink: 36 bytes leftover after parsing attributes in process `syz.2.86'.
[   93.143164][   T44] usb 1-1: USB disconnect, device number 6
[   93.154772][ T5985] Cannot find add_set index 0 as target
[   93.271861][ T5988] vlan2: entered allmulticast mode
[   93.271930][ T5988] bond0: entered allmulticast mode
[   93.271959][ T5988] bond_slave_0: entered allmulticast mode
[   93.271977][ T5988] bond_slave_1: entered allmulticast mode
[   93.284453][ T5992] netlink: 'syz.3.91': attribute type 11 has an invalid length.
[   93.320663][ T5988] netlink: 14 bytes leftover after parsing attributes in process `syz.2.90'.
[   93.401241][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.411135][ T5988] bond_slave_0: left allmulticast mode
[   93.431311][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.451214][ T5988] bond_slave_1: left allmulticast mode
[   93.460008][ T5988] bond0 (unregistering): Released all slaves
[   93.468723][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.93'.
[   93.678650][   T44] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   93.718314][   T10] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[   93.848350][   T44] usb 3-1: Using ep0 maxpacket: 32
[   93.849104][   T44] usb 3-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=35.09
[   93.851241][   T44] usb 3-1: config 2 has an invalid interface number: 51 but max is 0
[   93.851266][   T44] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   93.851284][   T44] usb 3-1: config 2 has no interface number 0
[   93.851321][   T44] usb 3-1: config 2 interface 51 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0
[   93.851345][   T44] usb 3-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[   93.851365][   T44] usb 3-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[   93.851386][   T44] usb 3-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[   93.851409][   T44] usb 3-1: config 2 interface 51 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64
[   93.851435][   T44] usb 3-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[   93.851456][   T44] usb 3-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[   93.851476][   T44] usb 3-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0x2, skipping
[   93.851497][   T44] usb 3-1: config 2 interface 51 has no altsetting 0
[   93.853966][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.853988][   T44] usb 3-1: Product: syz
[   93.854003][   T44] usb 3-1: Manufacturer: syz
[   93.854044][   T44] usb 3-1: SerialNumber: syz
[   93.861208][ T5997] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   93.869955][ T6005] netlink: 72 bytes leftover after parsing attributes in process `syz.0.95'.
[   93.932720][   T10] usb 2-1: device descriptor read/64, error -71
[   94.062750][    C1] IPv4: Oversized IP packet from 127.0.0.1
[   94.083588][ T5988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.101896][ T5988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.124947][ T5988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.125524][ T5988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.168293][   T10] usb 2-1: new low-speed USB device number 10 using dummy_hcd
[   94.308315][   T10] usb 2-1: device descriptor read/64, error -71
[   94.423746][   T10] usb usb2-port1: attempt power cycle
[   94.443480][ T5709] keyspan_pda 5-1:2.51: required endpoints missing
[   94.495686][ T5709] usb 5-1: USB disconnect, device number 5
[   94.559013][ T6014] loop5: detected capacity change from 0 to 7
[   94.562104][ T6014] Dev loop5: unable to read RDB block 7
[   94.562144][ T6014]  loop5: unable to read partition table
[   94.562559][ T6014] loop5: partition table beyond EOD, truncated
[   94.563100][ T6014] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[   94.591634][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.591659][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.604575][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.604597][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.780334][   T10] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[   94.803168][   T10] usb 2-1: device descriptor read/8, error -71
[   94.976019][ T6027] FAULT_INJECTION: forcing a failure.
[   94.976019][ T6027] name failslab, interval 1, probability 0, space 0, times 0
[   94.976091][ T6027] CPU: 0 UID: 0 PID: 6027 Comm: syz.4.104 Not tainted syzkaller #0 PREEMPT(full) 
[   94.976108][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   94.976125][ T6027] Call Trace:
[   94.976136][ T6027]  <TASK>
[   94.976144][ T6027]  dump_stack_lvl+0xe8/0x150
[   94.976191][ T6027]  should_fail_ex+0x410/0x560
[   94.976220][ T6027]  should_failslab+0xa8/0x100
[   94.976241][ T6027]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[   94.976269][ T6027]  kmem_cache_alloc_noprof+0xa1/0x600
[   94.976294][ T6027]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[   94.976320][ T6027]  ? kmem_cache_alloc_noprof+0x156/0x600
[   94.976345][ T6027]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[   94.976378][ T6027]  __kvm_mmu_topup_memory_cache+0x1b2/0x600
[   94.976416][ T6027]  mmu_topup_memory_caches+0x21/0x170
[   94.976438][ T6027]  kvm_mmu_load+0x9d/0x21e0
[   94.976459][ T6027]  ? kvm_msr_allowed+0x9a/0x490
[   94.976477][ T6027]  ? kvm_msr_allowed+0x9a/0x490
[   94.976504][ T6027]  ? kvm_msr_allowed+0x9a/0x490
[   94.976521][ T6027]  ? kvm_msr_allowed+0x3f4/0x490
[   94.976539][ T6027]  ? kvm_msr_allowed+0x9a/0x490
[   94.976557][ T6027]  ? kvm_apic_has_interrupt+0x740/0x770
[   94.976593][ T6027]  vcpu_run+0x4f68/0x79b0
[   94.976651][ T6027]  ? update_se+0x90/0x1020
[   94.976710][ T6027]  ? __pfx_vcpu_run+0x10/0x10
[   94.976737][ T6027]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[   94.976766][ T6027]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[   94.976795][ T6027]  ? fpu_swap_kvm_fpstate+0xcb/0x510
[   94.976829][ T6027]  kvm_arch_vcpu_ioctl_run+0xe87/0x19c0
[   94.976860][ T6027]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[   94.976889][ T6027]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[   94.976915][ T6027]  kvm_vcpu_ioctl+0xa61/0xfd0
[   94.976940][ T6027]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   94.976958][ T6027]  ? hook_file_ioctl+0x1f2/0x600
[   94.977000][ T6027]  ? __fget_files+0x2a/0x420
[   94.977026][ T6027]  ? __fget_files+0x2a/0x420
[   94.977047][ T6027]  ? __fget_files+0x3a2/0x420
[   94.977067][ T6027]  ? __fget_files+0x2a/0x420
[   94.977092][ T6027]  ? bpf_lsm_file_ioctl+0x9/0x20
[   94.977117][ T6027]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   94.977137][ T6027]  __se_sys_ioctl+0xfc/0x170
[   94.977167][ T6027]  do_syscall_64+0x166/0x520
[   94.977186][ T6027]  ? trace_irq_disable+0x3b/0x140
[   94.977203][ T6027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.977222][ T6027]  ? clear_bhb_loop+0x70/0xc0
[   94.977245][ T6027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.977264][ T6027] RIP: 0033:0x7f4de919e0d9
[   94.977288][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.977303][ T6027] RSP: 002b:00007f4dea05a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   94.977324][ T6027] RAX: ffffffffffffffda RBX: 00007f4de9425fa0 RCX: 00007f4de919e0d9
[   94.977338][ T6027] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000004f
[   94.977349][ T6027] RBP: 00007f4dea05a090 R08: 0000000000000000 R09: 0000000000000000
[   94.977361][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   94.977372][ T6027] R13: 00007f4de9426038 R14: 00007f4de9425fa0 R15: 00007f4de954fa48
[   94.977402][ T6027]  </TASK>
[   95.032657][ T5709] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   95.069379][   T10] usb 2-1: new low-speed USB device number 12 using dummy_hcd
[   95.092320][   T10] usb 2-1: device descriptor read/8, error -71
[   95.210183][   T10] usb usb2-port1: unable to enumerate USB device
[   95.232007][ T5709] usb 4-1: Using ep0 maxpacket: 8
[   95.291931][ T6035] netlink: 80 bytes leftover after parsing attributes in process `syz.4.107'.
[   95.291955][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.107'.
[   95.302583][ T5709] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   95.330668][ T5709] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[   95.330697][ T5709] usb 4-1: config 179 has no interface number 0
[   95.330735][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   95.330758][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   95.330808][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   95.330832][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   95.330853][ T5709] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   95.330893][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.350927][   T51] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   95.436585][   T30] kauditd_printk_skb: 143 callbacks suppressed
[   95.436600][   T30] audit: type=1326 audit(1787795405.684:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de919e0d9 code=0x7ffc0000
[   95.436819][   T30] audit: type=1326 audit(1787795405.684:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de919e0d9 code=0x7ffc0000
[   95.445342][   T30] audit: type=1326 audit(1787795405.684:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4de919e0d9 code=0x7ffc0000
[   95.449457][ T6023] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   95.454117][ T5709] xpad 4-1:179.65: probe with driver xpad failed with error -5
[   95.495395][   T30] audit: type=1326 audit(1787795405.744:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de919e0d9 code=0x7ffc0000
[   95.495450][   T30] audit: type=1326 audit(1787795405.744:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.4.109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4de915e90e code=0x7ffc0000
[   95.495486][   T30] audit: type=1326 audit(1787795405.744:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de919e0d9 code=0x7ffc0000
[   95.496831][   T30] audit: type=1326 audit(1787795405.744:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f4de919e0d9 code=0x7ffc0000
[   95.496876][   T30] audit: type=1326 audit(1787795405.744:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de919e0d9 code=0x7ffc0000
[   95.518362][   T30] audit: type=1326 audit(1787795405.744:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de919e0d9 code=0x7ffc0000
[   95.518410][   T30] audit: type=1326 audit(1787795405.744:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f4de919e0d9 code=0x7ffc0000
[   95.611559][   T51] usb 1-1: unable to get BOS descriptor or descriptor too short
[   95.611608][   T51] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   95.662024][   T51] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.662050][   T51] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   95.662111][   T51] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   95.676299][ T5688] usb 4-1: USB disconnect, device number 6
[   95.739410][ T5709] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   95.803509][   T51] usb 1-1: string descriptor 0 read error: -22
[   95.803634][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.888350][ T5709] usb 5-1: Using ep0 maxpacket: 16
[   95.889622][ T5709] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   95.891413][ T5709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.891434][ T5709] usb 5-1: config 0 has no interfaces?
[   95.895850][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.895872][ T5709] usb 5-1: Product: syz
[   95.895886][ T5709] usb 5-1: Manufacturer: syz
[   95.895899][ T5709] usb 5-1: SerialNumber: syz
[   95.906666][ T5709] usb 5-1: config 0 descriptor??
[   96.115987][ T6039] netlink: 56 bytes leftover after parsing attributes in process `syz.4.109'.
[   96.133483][ T6039] netlink: 44 bytes leftover after parsing attributes in process `syz.4.109'.
[   96.146293][ T6039] input: syz1 as /devices/virtual/input/input9
[   96.235970][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.242931][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.272231][   T44] keyspan_pda 3-1:2.51: required endpoints missing
[   96.325252][   T44] usb 3-1: USB disconnect, device number 6
[   96.415454][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'.
[   96.470674][   T51] usb 1-1: 2:0: failed to get current value for ch 0 (-71)
[   96.487668][   T51] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[   96.487720][   T51] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[   96.487738][   T51] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[   96.538067][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'.
[   96.549759][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'.
[   96.631754][ T6053] macvlan2: entered promiscuous mode
[   96.633438][ T6053] macvlan2: entered allmulticast mode
[   96.644480][ T6055] loop5: detected capacity change from 0 to 7
[   96.652470][ T6055] Dev loop5: unable to read RDB block 7
[   96.661051][ T6055]  loop5: unable to read partition table
[   96.661048][   T51] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[   96.674990][ T6055] loop5: partition table beyond EOD, truncated
[   96.683824][ T6055] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[   96.689004][ T5679] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   96.724693][   T51] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[   96.755239][   T44] usb 5-1: USB disconnect, device number 6
[   96.758112][   T51] usb 1-1: USB disconnect, device number 7
[   96.763714][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.763737][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.790235][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.790286][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.829113][ T5679] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[   96.845176][ T5679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.845230][ T5679] usb 4-1: Product: syz
[   96.845258][ T5679] usb 4-1: Manufacturer: syz
[   96.845272][ T5679] usb 4-1: SerialNumber: syz
[   96.903139][ T5679] ums_eneub6250 4-1:1.0: USB Mass Storage device detected
[   96.942530][ T5679] scsi host1: usb-storage 4-1:1.0
[   96.955886][ T6058] ip_tables: iptables: counters copy to user failed while replacing table
[   96.975814][ T6058] ip_tables: iptables: counters copy to user failed while replacing table
[   97.008111][ T6062] bridge_slave_0: left allmulticast mode
[   97.014240][ T6062] bridge_slave_0: left promiscuous mode
[   97.021528][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.044502][ T6062] bridge_slave_1: left allmulticast mode
[   97.052958][ T6062] bridge_slave_1: left promiscuous mode
[   97.053235][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.112377][ T6062] bond0: (slave bond_slave_0): Releasing backup interface
[   97.124278][ T6062] bond_slave_0: left allmulticast mode
[   97.173690][ T6062] bond0: (slave bond_slave_1): Releasing backup interface
[   97.202158][ T6062] bond_slave_1: left allmulticast mode
[   97.235332][ T6062] team0: Port device team_slave_0 removed
[   97.238865][ T5679] ums_eneub6250 4-1:1.0: probe with driver ums_eneub6250 failed with error 3
[   97.250026][ T5679] usb 4-1: USB disconnect, device number 7
[   97.255505][ T6062] team0: Port device team_slave_1 removed
[   97.283384][ T6062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   97.336292][ T6065] team0: Port device xfrm0 added
[   97.340709][ T6068] tipc: Started in network mode
[   97.340737][ T6068] tipc: Node identity ced470ee7c4f, cluster identity 4711
[   97.341059][ T6068] tipc: Enabled bearer <eth:team0>, priority 0
[   97.608608][   T51] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   97.760036][   T51] usb 1-1: Using ep0 maxpacket: 8
[   97.763602][   T51] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   97.765215][   T51] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[   97.765238][   T51] usb 1-1: config 179 has no interface number 0
[   97.765275][   T51] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   97.765301][   T51] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   97.765326][   T51] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   97.765349][   T51] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   97.765370][   T51] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   97.765408][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.779775][ T6071] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   97.791380][   T51] xpad 1-1:179.65: probe with driver xpad failed with error -5
[   97.991959][   T51] usb 1-1: USB disconnect, device number 8
[   98.116941][ T6092] netlink: 'syz.3.129': attribute type 1 has an invalid length.
[   98.183934][ T6092] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.304819][ T6098] loop5: detected capacity change from 0 to 7
[   98.307092][ T6098] Dev loop5: unable to read RDB block 7
[   98.307131][ T6098]  loop5: unable to read partition table
[   98.307337][ T6098] loop5: partition table beyond EOD, truncated
[   98.307353][ T6098] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[   98.462256][   T51] tipc: Node number set to 2996531438
[   98.660298][ T5679] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   98.708402][   T51] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   98.817048][ T5679] usb 4-1: Using ep0 maxpacket: 32
[   98.832498][ T5679] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[   98.839149][ T5679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.874586][ T5679] usb 4-1: config 0 descriptor??
[   98.912138][ T6123] __nla_validate_parse: 3 callbacks suppressed
[   98.914413][   T51] usb 5-1: Using ep0 maxpacket: 16
[   98.919829][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'.
[   98.920065][   T51] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   98.926337][ T5679] as10x_usb: device has been detected
[   98.926941][ T5679] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[   98.928030][   T51] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[   98.928052][   T51] usb 5-1: config 1 has no interface number 0
[   98.928092][   T51] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   98.928116][   T51] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   98.928137][   T51] usb 5-1: config 1 interface 105 has no altsetting 0
[   98.939415][   T51] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   98.939436][   T51] usb 5-1: Product: syz
[   98.939450][   T51] usb 5-1: Manufacturer: syz
[   98.939464][   T51] usb 5-1: SerialNumber: syz
[   98.959180][ T6103] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   98.959301][ T6103] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   99.150091][ T5679] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[   99.276475][ T6129] FAULT_INJECTION: forcing a failure.
[   99.276475][ T6129] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   99.292810][ T6129] CPU: 1 UID: 0 PID: 6129 Comm: syz.1.141 Not tainted syzkaller #0 PREEMPT(full) 
[   99.292836][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   99.292846][ T6129] Call Trace:
[   99.292854][ T6129]  <TASK>
[   99.292864][ T6129]  dump_stack_lvl+0xe8/0x150
[   99.292895][ T6129]  should_fail_ex+0x410/0x560
[   99.292924][ T6129]  _copy_from_user+0x2d/0xb0
[   99.292953][ T6129]  ____sys_sendmsg+0x303/0x850
[   99.292986][ T6129]  ? __pfx_____sys_sendmsg+0x10/0x10
[   99.293021][ T6129]  ? import_iovec+0x73/0xa0
[   99.293050][ T6129]  ___sys_sendmsg+0x2a5/0x360
[   99.293075][ T6129]  ? __lock_acquire+0x683/0x2cf0
[   99.293098][ T6129]  ? __pfx____sys_sendmsg+0x10/0x10
[   99.293156][ T6129]  ? __fget_files+0x2a/0x420
[   99.293178][ T6129]  ? __fget_files+0x3a2/0x420
[   99.293210][ T6129]  __x64_sys_sendmsg+0x1b1/0x290
[   99.293239][ T6129]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   99.293283][ T6129]  do_syscall_64+0x166/0x520
[   99.293304][ T6129]  ? trace_irq_disable+0x3b/0x140
[   99.293322][ T6129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.293342][ T6129]  ? clear_bhb_loop+0x70/0xc0
[   99.293364][ T6129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.293383][ T6129] RIP: 0033:0x7fb8beb9e0d9
[   99.293397][ T6129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.293412][ T6129] RSP: 002b:00007fb8bfa77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   99.293432][ T6129] RAX: ffffffffffffffda RBX: 00007fb8bee25fa0 RCX: 00007fb8beb9e0d9
[   99.293447][ T6129] RDX: 000000000400c804 RSI: 0000200000000900 RDI: 0000000000000003
[   99.293459][ T6129] RBP: 00007fb8bfa77090 R08: 0000000000000000 R09: 0000000000000000
[   99.293471][ T6129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.293483][ T6129] R13: 00007fb8bee26038 R14: 00007fb8bee25fa0 R15: 00007fb8bef4fa48
[   99.293512][ T6129]  </TASK>
[   99.346800][ T5679] as10x_usb: error during firmware upload part1
[   99.347502][ T5679] Registered device nBox DVB-T Dongle
[   99.406664][ T6103] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   99.406789][ T6103] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   99.456692][ T5679] usb 4-1: USB disconnect, device number 8
[   99.601011][ T5679] Unregistered device nBox DVB-T Dongle
[   99.609522][ T5679] as10x_usb: device has been disconnected
[   99.774246][ T6134] loop5: detected capacity change from 0 to 7
[   99.785154][ T6134] Dev loop5: unable to read RDB block 7
[   99.785201][ T6134]  loop5: unable to read partition table
[   99.785408][ T6134] loop5: partition table beyond EOD, truncated
[   99.785467][ T6134] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  100.062973][   T51] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  100.063630][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.066212][ T6150] FAULT_INJECTION: forcing a failure.
[  100.066212][ T6150] name failslab, interval 1, probability 0, space 0, times 0
[  100.066243][ T6150] CPU: 0 UID: 0 PID: 6150 Comm: syz.0.149 Not tainted syzkaller #0 PREEMPT(full) 
[  100.066263][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  100.066274][ T6150] Call Trace:
[  100.066281][ T6150]  <TASK>
[  100.066288][ T6150]  dump_stack_lvl+0xe8/0x150
[  100.066319][ T6150]  should_fail_ex+0x410/0x560
[  100.066348][ T6150]  should_failslab+0xa8/0x100
[  100.066369][ T6150]  ? __send_signal_locked+0x22a/0xeb0
[  100.066389][ T6150]  kmem_cache_alloc_noprof+0xa1/0x600
[  100.066414][ T6150]  ? sig_get_ucounts+0x26/0x450
[  100.066437][ T6150]  ? __send_signal_locked+0x22a/0xeb0
[  100.066456][ T6150]  ? sig_get_ucounts+0x3e4/0x450
[  100.066481][ T6150]  __send_signal_locked+0x22a/0xeb0
[  100.066515][ T6150]  send_signal_locked+0x138/0x9e0
[  100.066540][ T6150]  ? __pfx_send_signal_locked+0x10/0x10
[  100.066563][ T6150]  ? rcu_is_watching+0x16/0xb0
[  100.066594][ T6150]  force_sig_info_to_task+0x316/0x4b0
[  100.066623][ T6150]  force_sig_fault+0xf0/0x150
[  100.066647][ T6150]  ? __pfx_force_sig_fault+0x10/0x10
[  100.066675][ T6150]  ? __bad_area_nosemaphore+0x31e/0x6a0
[  100.066701][ T6150]  exc_page_fault+0x6a/0xc0
[  100.066722][ T6150]  asm_exc_page_fault+0x26/0x30
[  100.066741][ T6150] RIP: 0033:0x7ff60be52c79
[  100.066758][ T6150] Code: e8 1c ff ff ff 48 83 ec 08 b9 01 00 00 00 31 c0 6a 08 41 b8 01 00 00 00 ba 01 00 00 00 44 89 d6 bf aa 01 00 00 e8 47 b4 14 00 <48> 89 5d 00 8b 43 0c 48 83 c4 48 5b 5d c3 66 0f 1f 84 00 00 00 00
[  100.066773][ T6150] RSP: 002b:00007ff60ceddfc0 EFLAGS: 00010207
[  100.066791][ T6150] RAX: 0000000000000001 RBX: 0000200000000200 RCX: 00007ff60bf9e0d9
[  100.066804][ T6150] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003
[  100.066815][ T6150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008
[  100.066825][ T6150] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002
[  100.066836][ T6150] R13: 00007ff60c226038 R14: 00007ff60c225fa0 R15: 00007ff60c34fa48
[  100.066866][ T6150]  </TASK>
[  100.067312][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.180521][   T50] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  100.332011][   T51] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  100.353445][   T50] usb 2-1: Using ep0 maxpacket: 8
[  100.356724][   T50] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  100.377134][   T50] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  100.377183][   T50] usb 2-1: config 179 has no interface number 0
[  100.377217][   T50] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  100.377240][   T50] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  100.377265][   T50] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  100.377289][   T50] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  100.377310][   T50] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  100.377362][   T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.403311][ T6140] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  100.434704][   T50] xpad 2-1:179.65: probe with driver xpad failed with error -5
[  100.450252][   T51] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 26:60:bf:8a:ed:25
[  100.489039][   T51] usb 5-1: USB disconnect, device number 7
[  100.497291][   T51] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  100.518614][ T6161] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  100.528333][ T5679] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  100.570621][   T51] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  100.570759][   T51] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  100.570870][   T51] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  100.619804][   T50] usb 2-1: USB disconnect, device number 13
[  100.650291][   T44] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  100.668373][ T5679] usb 3-1: device descriptor read/64, error -71
[  100.808357][   T44] usb 1-1: Using ep0 maxpacket: 32
[  100.809216][   T44] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  100.810402][   T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.810430][   T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.810452][   T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  100.810496][   T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.813260][   T44] usb 1-1: config 0 descriptor??
[  100.928310][ T5679] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  101.008366][   T51] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  101.058348][ T5679] usb 3-1: device descriptor read/64, error -71
[  101.168573][   T51] usb 5-1: Using ep0 maxpacket: 8
[  101.173930][ T5679] usb usb3-port1: attempt power cycle
[  101.181578][   T51] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice=10.40
[  101.184951][ T6165] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  101.202869][   T51] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.202911][   T51] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  101.227328][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.227370][   T51] usb 5-1: Product: syz
[  101.227400][   T51] usb 5-1: Manufacturer: syz
[  101.227418][   T51] usb 5-1: SerialNumber: syz
[  101.271577][   T44] kye 0003:0458:5016.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  101.282983][   T44] kye 0003:0458:5016.0003: unknown main item tag 0x0
[  101.283019][   T44] kye 0003:0458:5016.0003: unknown main item tag 0x0
[  101.283046][   T44] kye 0003:0458:5016.0003: unknown main item tag 0x0
[  101.305856][   T44] kye 0003:0458:5016.0003: unknown main item tag 0x0
[  101.312981][   T44] kye 0003:0458:5016.0003: unknown main item tag 0x0
[  101.320014][   T44] kye 0003:0458:5016.0003: unknown main item tag 0x0
[  101.320046][   T44] kye 0003:0458:5016.0003: unknown main item tag 0x0
[  101.320073][   T44] kye 0003:0458:5016.0003: unknown main item tag 0x0
[  101.320098][   T44] kye 0003:0458:5016.0003: unknown main item tag 0x0
[  101.320123][   T44] kye 0003:0458:5016.0003: unknown main item tag 0x0
[  101.361512][   T44] kye 0003:0458:5016.0003: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0
[  101.372522][   T44] kye 0003:0458:5016.0003: tablet-enabling feature report not found
[  101.380698][   T44] kye 0003:0458:5016.0003: tablet enabling failed
[  101.476544][ T6159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.487768][ T6159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.503118][   T44] usb 1-1: USB disconnect, device number 9
[  101.548751][ T5679] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  101.570930][ T5679] usb 3-1: device descriptor read/8, error -71
[  101.585582][ T6174] loop5: detected capacity change from 0 to 7
[  101.587958][ T6174] Dev loop5: unable to read RDB block 7
[  101.587997][ T6174]  loop5: unable to read partition table
[  101.588174][ T6174] loop5: partition table beyond EOD, truncated
[  101.588240][ T6174] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  101.711116][ T6178] xt_ipcomp: unknown flags 1D
[  101.723048][   T51] usb 5-1: USB disconnect, device number 8
[  101.747884][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.752889][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.775626][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.800236][ T6181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.160'.
[  101.822682][ T5679] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  101.842449][ T5679] usb 3-1: device descriptor read/8, error -71
[  101.947882][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'.
[  101.959137][ T5679] usb usb3-port1: unable to enumerate USB device
[  101.978356][   T50] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  102.039634][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'.
[  102.128788][   T50] usb 4-1: Using ep0 maxpacket: 16
[  102.134988][   T50] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  102.135061][   T50] usb 4-1: too many configurations: 112, using maximum allowed: 8
[  102.171139][   T50] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0
[  102.171181][   T50] usb 4-1: Product: syz
[  102.171217][   T50] usb 4-1: Manufacturer: syz
[  102.199065][   T50] r8152-cfgselector 4-1: Unknown version 0x0000
[  102.199117][   T50] r8152-cfgselector 4-1: config 0 descriptor??
[  102.219031][   T50] cdc_acm 4-1:0.0: Zero length descriptor references
[  102.226322][   T50] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22
[  102.303693][   T51] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  102.327989][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'.
[  102.379557][ T6202] vlan3: entered allmulticast mode
[  102.379597][ T6202] bridge1: entered allmulticast mode
[  102.395013][ T6202] bridge1: port 1(erspan0) entered blocking state
[  102.395143][ T6202] bridge1: port 1(erspan0) entered disabled state
[  102.408708][ T6202] erspan0: entered allmulticast mode
[  102.417471][ T6202] erspan0: entered promiscuous mode
[  102.422351][   T44] r8152-cfgselector 4-1: USB disconnect, device number 9
[  102.432080][ T6202] bridge1: port 1(erspan0) entered blocking state
[  102.432215][ T6202] bridge1: port 1(erspan0) entered forwarding state
[  102.459228][   T51] usb 5-1: Using ep0 maxpacket: 8
[  102.465434][   T51] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  102.477578][   T51] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  102.477616][   T51] usb 5-1: config 179 has no interface number 0
[  102.477676][   T51] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  102.477704][   T51] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  102.477732][   T51] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  102.477758][   T51] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  102.477784][   T51] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  102.477824][   T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.551303][ T6208] loop5: detected capacity change from 0 to 7
[  102.553475][ T6208] Dev loop5: unable to read RDB block 7
[  102.553516][ T6208]  loop5: unable to read partition table
[  102.553697][ T6208] loop5: partition table beyond EOD, truncated
[  102.554897][ T6208] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  102.559601][ T6190] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  102.639049][ T5709] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  102.772246][ T2003] usb 5-1: USB disconnect, device number 9
[  102.772273][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  102.794287][ T5709] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  102.798559][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.986166][ T6216] netlink: 44 bytes leftover after parsing attributes in process `syz.3.173'.
[  102.995829][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'.
[  103.076919][ T5709] usbhid 1-1:1.0: can't add hid device: -71
[  103.077037][ T5709] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  103.100130][ T5709] usb 1-1: USB disconnect, device number 10
[  103.132661][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'.
[  103.223668][ T6221] netlink: 14 bytes leftover after parsing attributes in process `syz.3.174'.
[  103.549499][ T6220] vlan2: entered allmulticast mode
[  103.555650][ T6220] bond0: entered allmulticast mode
[  103.561864][ T6220] bond_slave_0: entered allmulticast mode
[  103.571636][ T6220] bond_slave_1: entered allmulticast mode
[  103.606540][ T6235] netlink: 80 bytes leftover after parsing attributes in process `syz.2.178'.
[  103.620968][ T5709] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  103.695141][ T6221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.715327][ T6221] bond_slave_0: left allmulticast mode
[  103.736032][ T6221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.740988][ T6221] bond_slave_1: left allmulticast mode
[  103.751668][ T6221] bond0 (unregistering): Released all slaves
[  103.778862][ T5709] usb 4-1: Using ep0 maxpacket: 32
[  103.782196][ T5709] usb 4-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=35.09
[  103.789000][ T5709] usb 4-1: config 2 has an invalid interface number: 51 but max is 0
[  103.789026][ T5709] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  103.789044][ T5709] usb 4-1: config 2 has no interface number 0
[  103.789082][ T5709] usb 4-1: config 2 interface 51 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0
[  103.789105][ T5709] usb 4-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  103.789125][ T5709] usb 4-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[  103.789146][ T5709] usb 4-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[  103.789169][ T5709] usb 4-1: config 2 interface 51 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  103.789194][ T5709] usb 4-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[  103.789214][ T5709] usb 4-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  103.789241][ T5709] usb 4-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0x2, skipping
[  103.789263][ T5709] usb 4-1: config 2 interface 51 has no altsetting 0
[  103.793208][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.793245][ T5709] usb 4-1: Product: syz
[  103.793259][ T5709] usb 4-1: Manufacturer: syz
[  103.793273][ T5709] usb 4-1: SerialNumber: syz
[  103.827894][ T6229] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  104.076231][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.095708][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.107670][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.119691][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.160511][ T6243] loop5: detected capacity change from 0 to 7
[  104.163586][ T6243] Dev loop5: unable to read RDB block 7
[  104.163648][ T6243]  loop5: unable to read partition table
[  104.163848][ T6243] loop5: partition table beyond EOD, truncated
[  104.165502][ T6243] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  104.200708][   T44] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  104.358307][   T44] usb 2-1: Using ep0 maxpacket: 32
[  104.364401][   T44] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  104.378572][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.389660][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.389709][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.415771][   T44] usb 2-1: config 0 descriptor??
[  104.429697][   T44] hub 2-1:0.0: USB hub found
[  104.469579][ T5672] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  104.489788][ T6248] netlink: 'syz.2.183': attribute type 11 has an invalid length.
[  104.489823][ T6248] netlink: 56 bytes leftover after parsing attributes in process `syz.2.183'.
[  104.618386][ T5672] usb 5-1: Using ep0 maxpacket: 32
[  104.625383][ T5672] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  104.636252][ T5672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.639878][   T44] hub 2-1:0.0: 26 ports detected
[  104.641977][   T44] hub 2-1:0.0: insufficient power available to use all downstream ports
[  104.665554][ T5672] usb 5-1: config 0 descriptor??
[  104.740742][ T1152] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  104.741737][ T6240] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  104.867698][   T44] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  104.880093][ T5672] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  104.883719][   T44] usbhid 2-1:0.0: can't add hid device: -71
[  104.883818][   T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  104.909961][ T5672] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  104.920528][ T5672] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  104.923465][   T44] usb 2-1: USB disconnect, device number 14
[  104.934788][ T5672] usb 5-1: media controller created
[  104.956797][ T5672] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  105.098552][ T5672] az6027: usb out operation failed. (-71)
[  105.109704][ T5672] az6027: usb out operation failed. (-71)
[  105.109737][ T5672] stb0899_attach: Driver disabled by Kconfig
[  105.109765][ T5672] az6027: no front-end attached
[  105.109765][ T5672] 
[  105.121907][ T5672] az6027: usb out operation failed. (-71)
[  105.121919][ T5672] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  105.146753][ T5672] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10
[  105.162880][ T5672] dvb-usb: schedule remote query interval to 400 msecs.
[  105.170112][ T5672] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  105.184210][ T5672] usb 5-1: USB disconnect, device number 10
[  105.235840][ T5672] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  105.328610][   T44] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  105.471051][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.188'.
[  105.478664][   T44] usb 2-1: Using ep0 maxpacket: 8
[  105.479583][   T44] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  105.486293][   T44] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  105.486319][   T44] usb 2-1: config 179 has no interface number 0
[  105.486359][   T44] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  105.486405][   T44] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  105.486432][   T44] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  105.486456][   T44] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  105.486487][   T44] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  105.486547][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.512576][ T6258] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  105.744709][ T5679] usb 2-1: USB disconnect, device number 15
[  105.744802][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  105.744849][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  105.818720][ T6281] loop5: detected capacity change from 0 to 7
[  105.827103][ T6281] Dev loop5: unable to read RDB block 7
[  105.827166][ T6281]  loop5: unable to read partition table
[  105.827393][ T6281] loop5: partition table beyond EOD, truncated
[  105.827411][ T6281] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  105.892902][ T6281] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.904290][ T6281] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.929834][ T6281] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.945928][ T6281] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.045847][ T6286] bridge_slave_0: left allmulticast mode
[  106.045892][ T6286] bridge_slave_0: left promiscuous mode
[  106.046679][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.075287][ T6286] bridge_slave_1: left allmulticast mode
[  106.075333][ T6286] bridge_slave_1: left promiscuous mode
[  106.075868][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.127350][ T6286] team0: Port device team_slave_0 removed
[  106.155555][ T6286] team0: Port device team_slave_1 removed
[  106.176027][ T6286] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  106.206803][ T5709] keyspan_pda 4-1:2.51: required endpoints missing
[  106.237913][ T5709] usb 4-1: USB disconnect, device number 10
[  106.253293][ T6287] team0: Port device xfrm0 added
[  106.257282][ T6288] tipc: Started in network mode
[  106.257311][ T6288] tipc: Node identity 86ef1acbc9d4, cluster identity 4711
[  106.257501][ T6288] tipc: Enabled bearer <eth:team0>, priority 0
[  106.270440][   T50] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  106.331632][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.197'.
[  106.438169][   T50] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=68.50
[  106.442411][   T50] usb 1-1: config 1 has an invalid interface number: 173 but max is 0
[  106.442439][   T50] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.442457][   T50] usb 1-1: config 1 has no interface number 0
[  106.442495][   T50] usb 1-1: config 1 interface 173 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.442516][   T50] usb 1-1: config 1 interface 173 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  106.446561][   T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.446586][   T50] usb 1-1: Product: syz
[  106.446599][   T50] usb 1-1: Manufacturer: syz
[  106.446613][   T50] usb 1-1: SerialNumber: syz
[  106.504327][ T6295] netlink: 'syz.3.199': attribute type 1 has an invalid length.
[  106.580118][ T6295] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.681343][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.681842][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.997797][ T6315] syzkaller0: entered promiscuous mode
[  106.997840][ T6315] syzkaller0: entered allmulticast mode
[  107.264207][ T5672] tipc: Node number set to 1329273547
[  107.325272][ T6320] loop5: detected capacity change from 0 to 7
[  107.341633][ T6320] Dev loop5: unable to read RDB block 7
[  107.341764][ T6320]  loop5: unable to read partition table
[  107.341976][ T6320] loop5: partition table beyond EOD, truncated
[  107.343157][ T6320] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  107.928332][ T5709] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  108.090506][ T5709] usb 4-1: Using ep0 maxpacket: 8
[  108.096176][ T5709] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  108.108537][ T5709] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  108.108596][ T5709] usb 4-1: config 179 has no interface number 0
[  108.108687][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  108.108726][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  108.108745][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  108.108763][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  108.108779][ T5709] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  108.108832][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.201136][ T6330] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  108.454948][ T5709] usb 4-1: USB disconnect, device number 11
[  108.455005][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  108.455053][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  108.844695][ T6347] FAULT_INJECTION: forcing a failure.
[  108.844695][ T6347] name failslab, interval 1, probability 0, space 0, times 0
[  108.844773][ T6347] CPU: 0 UID: 0 PID: 6347 Comm: syz.2.214 Not tainted syzkaller #0 PREEMPT(full) 
[  108.844795][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  108.844805][ T6347] Call Trace:
[  108.844813][ T6347]  <TASK>
[  108.844820][ T6347]  dump_stack_lvl+0xe8/0x150
[  108.844846][ T6347]  should_fail_ex+0x410/0x560
[  108.844877][ T6347]  should_failslab+0xa8/0x100
[  108.844897][ T6347]  ? dst_alloc+0x105/0x170
[  108.844916][ T6347]  kmem_cache_alloc_noprof+0xa1/0x600
[  108.844943][ T6347]  ? ip_check_mc_rcu+0x629/0x670
[  108.844966][ T6347]  ? dst_alloc+0x105/0x170
[  108.844983][ T6347]  ? __local_bh_enable_ip+0xd6/0x140
[  108.845011][ T6347]  dst_alloc+0x105/0x170
[  108.845027][ T6347]  ? ip_check_mc_rcu+0x629/0x670
[  108.845053][ T6347]  ip_route_output_key_hash_rcu+0x14ac/0x2720
[  108.845090][ T6347]  ? ip_route_output_key_hash+0xd8/0x2a0
[  108.845128][ T6347]  ip_route_output_key_hash+0x18d/0x2a0
[  108.845159][ T6347]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  108.845202][ T6347]  ip_route_output_flow+0x2a/0x150
[  108.845227][ T6347]  ? security_sk_classify_flow+0x6d/0x150
[  108.845252][ T6347]  raw_sendmsg+0x110d/0x1a20
[  108.845293][ T6347]  ? __pfx_raw_sendmsg+0x10/0x10
[  108.845317][ T6347]  ? __lock_acquire+0x683/0x2cf0
[  108.845354][ T6347]  ? aa_sk_perm+0x6e0/0x910
[  108.845390][ T6347]  ? sock_rps_record_flow+0x19/0x350
[  108.845419][ T6347]  ? inet_sendmsg+0x298/0x320
[  108.845449][ T6347]  ? __pfx_inet_sendmsg+0x10/0x10
[  108.845475][ T6347]  sock_sendmsg_nosec+0x10e/0x180
[  108.845496][ T6347]  ____sys_sendmsg+0x54e/0x850
[  108.845524][ T6347]  ? __pfx_____sys_sendmsg+0x10/0x10
[  108.845557][ T6347]  ? import_iovec+0x73/0xa0
[  108.845586][ T6347]  ___sys_sendmsg+0x2a5/0x360
[  108.845610][ T6347]  ? __lock_acquire+0x683/0x2cf0
[  108.845632][ T6347]  ? __pfx____sys_sendmsg+0x10/0x10
[  108.845690][ T6347]  ? __fget_files+0x2a/0x420
[  108.845713][ T6347]  ? __fget_files+0x3a2/0x420
[  108.845745][ T6347]  __x64_sys_sendmsg+0x1b1/0x290
[  108.845774][ T6347]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  108.845821][ T6347]  do_syscall_64+0x166/0x520
[  108.845842][ T6347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.845861][ T6347]  ? clear_bhb_loop+0x70/0xc0
[  108.845884][ T6347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.845903][ T6347] RIP: 0033:0x7f06c3f9e0d9
[  108.845922][ T6347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.845938][ T6347] RSP: 002b:00007f06c4e76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  108.845958][ T6347] RAX: ffffffffffffffda RBX: 00007f06c4225fa0 RCX: 00007f06c3f9e0d9
[  108.845972][ T6347] RDX: 000000000400c804 RSI: 0000200000000900 RDI: 0000000000000003
[  108.845985][ T6347] RBP: 00007f06c4e76090 R08: 0000000000000000 R09: 0000000000000000
[  108.845998][ T6347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.846010][ T6347] R13: 00007f06c4226038 R14: 00007f06c4225fa0 R15: 00007f06c434fa48
[  108.846040][ T6347]  </TASK>
[  109.281602][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'.
[  109.534833][   T50] peak_usb 1-1:1.173 can0: unable to request usb[type=0 value=1] err=-71
[  109.534886][   T50] peak_usb 1-1:1.173: unable to read PCAN-USB X6 firmware info (err -71)
[  109.702832][   T50] peak_usb 1-1:1.173: probe with driver peak_usb failed with error -71
[  109.724043][   T50] usb 1-1: USB disconnect, device number 11
[  109.755057][ T6359] loop5: detected capacity change from 0 to 7
[  109.757864][ T6359] Dev loop5: unable to read RDB block 7
[  109.757907][ T6359]  loop5: unable to read partition table
[  109.758093][ T6359] loop5: partition table beyond EOD, truncated
[  109.758110][ T6359] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  110.094931][ T6375] netlink: 28 bytes leftover after parsing attributes in process `syz.4.223'.
[  110.338463][   T50] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  110.435497][ T6393] loop5: detected capacity change from 0 to 7
[  110.451846][ T6393] Dev loop5: unable to read RDB block 7
[  110.457641][ T6393]  loop5: unable to read partition table
[  110.457775][ T6393] loop5: partition table beyond EOD, truncated
[  110.457796][ T6393] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  110.488362][   T50] usb 1-1: Using ep0 maxpacket: 32
[  110.494226][   T50] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  110.504499][   T50] usb 1-1: config 244 has an invalid descriptor of length 146, skipping remainder of the config
[  110.504554][   T50] usb 1-1: too many endpoints for config 244 interface 0 altsetting 0: 221, using maximum allowed: 30
[  110.504595][   T50] usb 1-1: config 244 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 221
[  110.547160][   T50] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  110.555473][   T50] usb 1-1: Product: syz
[  110.555530][   T50] usb 1-1: Manufacturer: syz
[  110.555548][   T50] usb 1-1: SerialNumber: syz
[  110.558309][   T44] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  110.589722][ T5709] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  110.635258][   T30] kauditd_printk_skb: 143 callbacks suppressed
[  110.635297][   T30] audit: type=1800 audit(1787795420.874:308): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.234" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  110.709098][   T44] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  110.710046][   T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  110.712411][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.712434][   T44] usb 5-1: Product: syz
[  110.712447][   T44] usb 5-1: Manufacturer: syz
[  110.712460][   T44] usb 5-1: SerialNumber: syz
[  110.721082][   T44] usb 5-1: config 0 descriptor??
[  110.740594][ T5709] usb 3-1: Using ep0 maxpacket: 8
[  110.741088][   T44] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  110.742852][ T5709] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  110.746092][ T5709] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  110.746117][ T5709] usb 3-1: config 179 has no interface number 0
[  110.746156][ T5709] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  110.746180][ T5709] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  110.746227][ T5709] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  110.746251][ T5709] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  110.746276][ T5709] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  110.746316][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.784057][ T6389] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  110.906630][ T6401] FAULT_INJECTION: forcing a failure.
[  110.906630][ T6401] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  110.906775][ T6401] CPU: 1 UID: 0 PID: 6401 Comm: syz.1.235 Not tainted syzkaller #0 PREEMPT(full) 
[  110.906799][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  110.906809][ T6401] Call Trace:
[  110.906817][ T6401]  <TASK>
[  110.906826][ T6401]  dump_stack_lvl+0xe8/0x150
[  110.906857][ T6401]  should_fail_ex+0x410/0x560
[  110.906889][ T6401]  _copy_from_iter+0x1d3/0x1660
[  110.906912][ T6401]  ? __alloc_skb+0x27a/0x7a0
[  110.906938][ T6401]  ? __alloc_skb+0x27a/0x7a0
[  110.906962][ T6401]  ? __alloc_skb+0x27a/0x7a0
[  110.906985][ T6401]  ? __pfx__copy_from_iter+0x10/0x10
[  110.907005][ T6401]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  110.907030][ T6401]  ? __alloc_skb+0x27a/0x7a0
[  110.907051][ T6401]  ? __alloc_skb+0x27a/0x7a0
[  110.907079][ T6401]  ? netlink_sendmsg+0x650/0xb40
[  110.907107][ T6401]  ? skb_put+0x112/0x210
[  110.907133][ T6401]  netlink_sendmsg+0x6c0/0xb40
[  110.907170][ T6401]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.907202][ T6401]  ? aa_sock_msg_perm+0xf6/0x1c0
[  110.907236][ T6401]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.907263][ T6401]  sock_sendmsg_nosec+0x13a/0x180
[  110.907286][ T6401]  ____sys_sendmsg+0x54e/0x850
[  110.907316][ T6401]  ? __pfx_____sys_sendmsg+0x10/0x10
[  110.907350][ T6401]  ? import_iovec+0x73/0xa0
[  110.907377][ T6401]  ___sys_sendmsg+0x2a5/0x360
[  110.907402][ T6401]  ? __lock_acquire+0x683/0x2cf0
[  110.907425][ T6401]  ? __pfx____sys_sendmsg+0x10/0x10
[  110.907483][ T6401]  ? __fget_files+0x2a/0x420
[  110.907507][ T6401]  ? __fget_files+0x3a2/0x420
[  110.907545][ T6401]  __sys_sendmmsg+0x273/0x4d0
[  110.907577][ T6401]  ? __pfx___sys_sendmmsg+0x10/0x10
[  110.907613][ T6401]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  110.907648][ T6401]  ? ksys_write+0x242/0x270
[  110.907675][ T6401]  ? __pfx_ksys_write+0x10/0x10
[  110.907707][ T6401]  __x64_sys_sendmmsg+0xa0/0xc0
[  110.907735][ T6401]  do_syscall_64+0x166/0x520
[  110.907754][ T6401]  ? trace_irq_disable+0x3b/0x140
[  110.907772][ T6401]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.907792][ T6401]  ? clear_bhb_loop+0x70/0xc0
[  110.907814][ T6401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.907833][ T6401] RIP: 0033:0x7fb8beb9e0d9
[  110.907851][ T6401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.907867][ T6401] RSP: 002b:00007fb8bfa77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  110.907888][ T6401] RAX: ffffffffffffffda RBX: 00007fb8bee25fa0 RCX: 00007fb8beb9e0d9
[  110.907903][ T6401] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  110.907916][ T6401] RBP: 00007fb8bfa77090 R08: 0000000000000000 R09: 0000000000000000
[  110.907927][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.907939][ T6401] R13: 00007fb8bee26038 R14: 00007fb8bee25fa0 R15: 00007fb8bef4fa48
[  110.907969][ T6401]  </TASK>
[  111.075463][ T6403] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  111.180801][ T5709] usb 5-1: USB disconnect, device number 11
[  111.252681][ T2003] usb 3-1: USB disconnect, device number 11
[  111.252755][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  111.252797][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  111.486598][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.239'.
[  111.515051][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'.
[  111.552528][   T50] hub 1-1:244.0: bad descriptor, ignoring hub
[  111.552579][   T50] hub 1-1:244.0: probe with driver hub failed with error -5
[  111.589020][   T50] usb 1-1: USB disconnect, device number 12
[  111.616720][ T6416] netlink: 36 bytes leftover after parsing attributes in process `syz.1.242'.
[  111.846559][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'.
[  112.065236][ T6433] netlink: 36 bytes leftover after parsing attributes in process `syz.2.247'.
[  112.088286][   T50] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  112.138094][ T6429] bond0: entered promiscuous mode
[  112.144880][ T6429] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.239660][   T50] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  112.250310][   T50] usb 1-1: config 244 has an invalid descriptor of length 146, skipping remainder of the config
[  112.261315][   T50] usb 1-1: too many endpoints for config 244 interface 0 altsetting 0: 221, using maximum allowed: 30
[  112.261399][   T50] usb 1-1: config 244 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 221
[  112.305488][   T50] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  112.305533][   T50] usb 1-1: Product: syz
[  112.305563][   T50] usb 1-1: Manufacturer: syz
[  112.305580][   T50] usb 1-1: SerialNumber: syz
[  112.469874][ T6437] netlink: 'syz.3.248': attribute type 11 has an invalid length.
[  112.621458][   T50] hub 1-1:244.0: bad descriptor, ignoring hub
[  112.628936][   T50] hub 1-1:244.0: probe with driver hub failed with error -5
[  112.671391][   T50] usb 1-1: USB disconnect, device number 13
[  112.887314][ T6444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.251'.
[  113.096393][ T6449] netlink: 40 bytes leftover after parsing attributes in process `syz.3.253'.
[  113.201604][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'.
[  113.276253][ T6451] vlan2: entered allmulticast mode
[  113.276285][ T6451] bridge1: entered allmulticast mode
[  113.282375][ T6451] bridge1: port 1(erspan0) entered blocking state
[  113.285177][ T6451] bridge1: port 1(erspan0) entered disabled state
[  113.285370][ T6451] erspan0: entered allmulticast mode
[  113.289472][ T6451] erspan0: entered promiscuous mode
[  113.290372][ T6451] bridge1: port 1(erspan0) entered blocking state
[  113.290476][ T6451] bridge1: port 1(erspan0) entered forwarding state
[  113.338852][ T5709] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  113.441269][ T6457] fuse: Bad value for 'fd'
[  113.445945][ T6457] fuse: Bad value for 'fd'
[  113.489933][ T5709] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  113.493647][ T6459] loop5: detected capacity change from 0 to 7
[  113.506541][ T6459] Dev loop5: unable to read RDB block 7
[  113.506600][ T6459]  loop5: unable to read partition table
[  113.506781][ T6459] loop5: partition table beyond EOD, truncated
[  113.506807][ T6459] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  113.506920][ T5709] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  113.506940][ T5709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.506958][ T5709] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  113.506978][ T5709] usb 4-1: config 1 has no interface number 1
[  113.507013][ T5709] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  113.507047][ T5709] usb 4-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  113.543468][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.543496][ T5709] usb 4-1: Product: syz
[  113.543523][ T5709] usb 4-1: Manufacturer: syz
[  113.543537][ T5709] usb 4-1: SerialNumber: syz
[  113.679133][ T5672] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  113.792474][ T5709] usb 4-1: No endpoint at altset 1, falling back to MIDI 1.0
[  113.792559][ T5709] usb 4-1: MIDIStreaming interface descriptor not found
[  113.838305][ T5672] usb 1-1: Using ep0 maxpacket: 8
[  113.843975][ T5672] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  113.858714][ T5672] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  113.867122][ T5672] usb 1-1: config 179 has no interface number 0
[  113.873517][ T5672] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  113.873572][ T5672] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  113.873600][ T5672] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  113.873627][ T5672] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  113.873653][ T5672] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  113.873696][ T5672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.947170][ T6455] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  114.402004][ T5709] usb 1-1: USB disconnect, device number 14
[  114.402019][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  114.408069][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  115.016955][ T6491] loop5: detected capacity change from 0 to 7
[  115.017753][ T6491] Dev loop5: unable to read RDB block 7
[  115.021966][ T6491]  loop5: unable to read partition table
[  115.022168][ T6491] loop5: partition table beyond EOD, truncated
[  115.022185][ T6491] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  115.113881][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'.
[  115.158901][ T5709] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  115.309014][ T5709] usb 2-1: Using ep0 maxpacket: 32
[  115.310200][ T5709] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  115.311159][ T5709] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  115.311182][ T5709] usb 2-1: config 0 has no interface number 0
[  115.311221][ T5709] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255
[  115.311244][ T5709] usb 2-1: config 0 interface 184 has no altsetting 0
[  115.313422][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.313443][ T5709] usb 2-1: Product: syz
[  115.313457][ T5709] usb 2-1: Manufacturer: syz
[  115.313470][ T5709] usb 2-1: SerialNumber: syz
[  115.323479][ T5709] usb 2-1: config 0 descriptor??
[  115.333651][ T6486] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  115.526375][ T6508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.275'.
[  115.554535][ T6486] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  115.958380][ T5709] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  115.958444][ T5709] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  116.165668][   T44] usb 4-1: USB disconnect, device number 12
[  116.538782][ T6539] vlan2: entered allmulticast mode
[  116.538815][ T6539] bond0: entered allmulticast mode
[  116.551577][ T6539] netlink: 14 bytes leftover after parsing attributes in process `syz.3.282'.
[  116.641768][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.283'.
[  116.688350][ T5679] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  116.742763][ T6547] netlink: 'syz.2.285': attribute type 1 has an invalid length.
[  116.792591][ T6548] veth7: entered promiscuous mode
[  116.801938][ T6548] bond0: (slave veth7): Enslaving as an active interface with a down link
[  116.848332][ T5679] usb 1-1: Using ep0 maxpacket: 8
[  116.854461][ T5679] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  116.866415][ T5679] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  116.868821][   T44] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  116.882970][ T5679] usb 1-1: config 179 has no interface number 0
[  116.889657][ T5679] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  116.889690][ T5679] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  116.889717][ T5679] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  116.889741][ T5679] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  116.889766][ T5679] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  116.889810][ T5679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.975785][ T6537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  117.028963][   T44] usb 4-1: Using ep0 maxpacket: 32
[  117.032839][   T44] usb 4-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=35.09
[  117.036163][   T44] usb 4-1: config 2 has an invalid interface number: 51 but max is 0
[  117.036190][   T44] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  117.036209][   T44] usb 4-1: config 2 has no interface number 0
[  117.036269][   T44] usb 4-1: config 2 interface 51 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0
[  117.036293][   T44] usb 4-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  117.036313][   T44] usb 4-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[  117.036335][   T44] usb 4-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[  117.036358][   T44] usb 4-1: config 2 interface 51 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  117.036406][   T44] usb 4-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[  117.036424][   T44] usb 4-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  117.036440][   T44] usb 4-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0x2, skipping
[  117.036458][   T44] usb 4-1: config 2 interface 51 has no altsetting 0
[  117.044675][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.044728][   T44] usb 4-1: Product: syz
[  117.044744][   T44] usb 4-1: Manufacturer: syz
[  117.044758][   T44] usb 4-1: SerialNumber: syz
[  117.068171][ T6541] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  117.286559][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.288936][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.291533][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.291998][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.320945][   T44] keyspan_pda 4-1:2.51: required endpoints missing
[  117.361499][   T44] usb 4-1: USB disconnect, device number 13
[  117.393914][ T5709] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  117.394009][ T5709] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  117.394045][ T5709] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  117.394270][ T5709] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  117.415743][ T5709] usb 2-1: USB disconnect, device number 16
[  117.437315][ T5688] usb 1-1: USB disconnect, device number 15
[  117.443132][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  117.443172][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  117.609081][ T5729] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  117.738505][ T5729] usb 5-1: device descriptor read/64, error -71
[  117.989866][ T5729] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  118.149435][ T5729] usb 5-1: device descriptor read/64, error -71
[  118.260153][ T5729] usb usb5-port1: attempt power cycle
[  118.304543][ T6595] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  118.628295][ T5729] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  118.629145][ T5672] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  118.650173][ T5729] usb 5-1: device descriptor read/8, error -71
[  118.668688][   T50] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  118.778713][ T5672] usb 2-1: Using ep0 maxpacket: 8
[  118.788117][ T5672] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  118.800214][ T5672] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  118.800282][ T5672] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.800322][ T5672] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.800350][ T5672] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  118.800377][ T5672] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.800422][ T5672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.840540][   T50] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  118.872050][   T50] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.872117][   T50] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  118.872169][   T50] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  118.872213][   T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.899341][ T5729] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  118.920508][ T5729] usb 5-1: device descriptor read/8, error -71
[  119.019407][ T5729] usb usb5-port1: unable to enumerate USB device
[  119.147217][ T5672] usb 2-1: GET_CAPABILITIES returned 0
[  119.147309][ T5672] usbtmc 2-1:16.0: can't read capabilities
[  119.226926][ T6600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.227359][ T6600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.290624][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.300559][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.354477][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'.
[  119.484233][ T5688] usb 2-1: USB disconnect, device number 17
[  119.658938][ T6637] FAULT_INJECTION: forcing a failure.
[  119.658938][ T6637] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.672529][ T6637] CPU: 0 UID: 0 PID: 6637 Comm: syz.3.301 Not tainted syzkaller #0 PREEMPT(full) 
[  119.672547][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  119.672554][ T6637] Call Trace:
[  119.672559][ T6637]  <TASK>
[  119.672565][ T6637]  dump_stack_lvl+0xe8/0x150
[  119.672591][ T6637]  should_fail_ex+0x410/0x560
[  119.672608][ T6637]  _copy_from_iter+0x1d3/0x1660
[  119.672622][ T6637]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  119.672635][ T6637]  ? __pfx_policy_nodemask+0x10/0x10
[  119.672648][ T6637]  ? __pfx__copy_from_iter+0x10/0x10
[  119.672662][ T6637]  ? alloc_pages_mpol+0x256/0x390
[  119.672684][ T6637]  copy_page_from_iter+0x219/0x2d0
[  119.672699][ T6637]  tun_get_user+0x1c16/0x44d0
[  119.672714][ T6637]  ? tun_get_user+0x70a/0x44d0
[  119.672733][ T6637]  ? aa_file_perm+0x4ed/0x15f0
[  119.672743][ T6637]  ? __pfx_tun_get_user+0x10/0x10
[  119.672756][ T6637]  ? __lock_acquire+0x683/0x2cf0
[  119.672773][ T6637]  ? ref_tracker_alloc+0x341/0x4b0
[  119.672785][ T6637]  ? get_pid_task+0x20/0x1f0
[  119.672796][ T6637]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  119.672810][ T6637]  ? tun_get+0x1c/0x2f0
[  119.672822][ T6637]  ? tun_get+0x1c/0x2f0
[  119.672835][ T6637]  ? tun_get+0x1c/0x2f0
[  119.672846][ T6637]  ? tun_get+0x1c/0x2f0
[  119.672860][ T6637]  tun_chr_write_iter+0x113/0x200
[  119.672873][ T6637]  vfs_write+0x612/0xba0
[  119.672894][ T6637]  ? __pfx_vfs_write+0x10/0x10
[  119.672912][ T6637]  ? __fget_files+0x2a/0x420
[  119.672929][ T6637]  ksys_write+0x150/0x270
[  119.672944][ T6637]  ? __pfx_ksys_write+0x10/0x10
[  119.672962][ T6637]  do_syscall_64+0x166/0x520
[  119.672973][ T6637]  ? trace_irq_disable+0x3b/0x140
[  119.672983][ T6637]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.672993][ T6637]  ? clear_bhb_loop+0x70/0xc0
[  119.673006][ T6637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.673016][ T6637] RIP: 0033:0x7f187575e90e
[  119.673029][ T6637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  119.673038][ T6637] RSP: 002b:00007f1876665fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  119.673051][ T6637] RAX: ffffffffffffffda RBX: 00007f18766666c0 RCX: 00007f187575e90e
[  119.673059][ T6637] RDX: 0000000000000056 RSI: 0000200000000000 RDI: 00000000000000c8
[  119.673066][ T6637] RBP: 00007f1876666090 R08: 0000000000000000 R09: 0000000000000000
[  119.673073][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.673079][ T6637] R13: 00007f1875a26038 R14: 00007f1875a25fa0 R15: 00007f1875b4fa48
[  119.673094][ T6637]  </TASK>
[  120.126813][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'.
[  120.408835][   T51] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  120.552088][ T6654] netlink: 'syz.2.307': attribute type 1 has an invalid length.
[  120.588648][   T51] usb 2-1: Using ep0 maxpacket: 32
[  120.595167][   T51] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  120.608362][ T5729] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  120.620170][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.628827][   T51] usb 2-1: Product: syz
[  120.633508][   T51] usb 2-1: Manufacturer: syz
[  120.638170][   T51] usb 2-1: SerialNumber: syz
[  120.650384][   T51] usb 2-1: config 0 descriptor??
[  120.692283][ T6654] bond1: entered promiscuous mode
[  120.701204][ T6654] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.760460][ T5729] usb 4-1: Using ep0 maxpacket: 8
[  120.763389][ T5729] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  120.764706][ T5729] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  120.764729][ T5729] usb 4-1: config 179 has no interface number 0
[  120.764768][ T5729] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  120.764793][ T5729] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  120.764820][ T5729] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  120.764844][ T5729] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  120.764869][ T5729] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  120.764909][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.781058][ T6651] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  121.176008][ T6663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'.
[  121.208081][   T51] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-71
[  121.208150][   T51] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71)
[  121.231557][ T5729] usb 4-1: USB disconnect, device number 14
[  121.231657][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  121.231704][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  121.400216][   T51] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71
[  121.414145][   T51] usb 2-1: USB disconnect, device number 18
[  121.420801][   T50] cxacru 1-1:1.0: send of cm 0x91 failed (-104)
[  121.429279][   T50] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -104
[  121.429298][   T50] ATM dev 0: usbatm_atm_init: atm_start failed: -104!
[  121.491940][   T50] cxacru 1-1:1.0: probe with driver cxacru failed with error -104
[  121.642241][ T6672] loop5: detected capacity change from 0 to 7
[  121.645053][ T6672] Dev loop5: unable to read RDB block 7
[  121.645098][ T6672]  loop5: unable to read partition table
[  121.647547][ T6672] loop5: partition table beyond EOD, truncated
[  121.647569][ T6672] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  121.692972][   T50] usb 1-1: USB disconnect, device number 16
[  121.852847][ T6670] ip_tables: iptables: counters copy to user failed while replacing table
[  121.869329][ T6670] ip_tables: iptables: counters copy to user failed while replacing table
[  122.788534][   T50] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  122.845016][ T6694] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  122.949741][   T50] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  122.960558][   T50] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 10
[  122.972616][   T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.982037][   T50] usb 4-1: Product: syz
[  122.982058][   T50] usb 4-1: Manufacturer: syz
[  122.982073][   T50] usb 4-1: SerialNumber: syz
[  123.001010][   T50] usb 4-1: config 0 descriptor??
[  123.016822][   T50] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  123.440552][   T51] usb 4-1: USB disconnect, device number 15
[  123.578767][   T50] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  123.738798][   T50] usb 1-1: Using ep0 maxpacket: 32
[  123.745699][   T50] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  123.756756][   T50] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  123.764988][   T50] usb 1-1: config 0 has no interface number 0
[  123.776620][   T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.785027][   T50] usb 1-1: Product: syz
[  123.785047][   T50] usb 1-1: Manufacturer: syz
[  123.785062][   T50] usb 1-1: SerialNumber: syz
[  123.802643][   T50] usb 1-1: config 0 descriptor??
[  123.818991][   T50] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  124.048030][   T50] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  124.063743][   T50] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  124.252761][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'.
[  124.275049][ T6696] libceph: resolve '
[  124.275049][ T6696] -&���f�Y�ǝ�a���2i�
[  124.275049][ T6696] .���?��&�*��&' (ret=-3): failed
[  124.326262][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  124.334756][   T51] usb 1-1: USB disconnect, device number 17
[  124.355541][   T51] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  124.390463][   T51] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  124.408579][   T51] quatech2 1-1:0.51: device disconnected
[  124.542685][ T6701] team0: Port device team_slave_0 removed
[  124.670861][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'.
[  125.070712][ T6719] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  125.079942][   T51] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  125.124794][ T6718] loop5: detected capacity change from 0 to 7
[  125.134671][ T6718] Dev loop5: unable to read RDB block 7
[  125.141036][ T6718]  loop5: unable to read partition table
[  125.142617][ T6718] loop5: partition table beyond EOD, truncated
[  125.142646][ T6718] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  125.248288][   T51] usb 2-1: Using ep0 maxpacket: 8
[  125.257154][   T51] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  125.268883][   T51] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  125.268924][   T51] usb 2-1: config 179 has no interface number 0
[  125.268979][   T51] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  125.269011][   T51] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  125.269044][   T51] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  125.269075][   T51] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  125.269106][   T51] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  125.269162][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.360337][ T6714] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  125.542520][   T30] audit: type=1326 audit(1787795435.794:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.4.328" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4de919e0d9 code=0x0
[  125.792569][   T50] usb 2-1: USB disconnect, device number 19
[  125.792642][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  125.792689][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  126.315349][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.331'.
[  126.507452][ T6735] vlan3: entered allmulticast mode
[  126.514100][ T6735] bridge2: entered allmulticast mode
[  126.523742][ T6738] bridge2: port 1(erspan0) entered blocking state
[  126.523977][ T6738] bridge2: port 1(erspan0) entered disabled state
[  126.524123][ T6738] erspan0: entered allmulticast mode
[  126.565620][ T6738] erspan0: entered promiscuous mode
[  126.566809][ T6738] bridge2: port 1(erspan0) entered blocking state
[  126.566922][ T6738] bridge2: port 1(erspan0) entered forwarding state
[  127.190053][ T5680] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  127.211473][   T50] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  127.362161][ T5680] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  127.374930][ T5680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.385755][   T50] usb 2-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00
[  127.397787][   T50] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.397826][   T50] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  127.397875][   T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.433654][ T6752] netlink: 80 bytes leftover after parsing attributes in process `syz.4.337'.
[  127.485548][ T5680] usb 4-1: config 0 descriptor??
[  127.958021][ T6737] netlink: 132 bytes leftover after parsing attributes in process `syz.1.332'.
[  127.995422][   T50] usb 2-1: USB disconnect, device number 20
[  128.401391][ T6758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.321732][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  134.354991][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  135.398660][    C1] sched: DL replenish lagged too much
[  144.141070][ T5680] usb 4-1: Cannot read MAC address
[  144.166982][ T5680] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32
[  151.482656][ T6758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.498073][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  194.512636][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  201.703612][ T5624] Bluetooth: hci4: command 0x0406 tx timeout
[  201.821832][ T5624] Bluetooth: hci3: command 0x0406 tx timeout
[  202.768801][ T5624] Bluetooth: hci1: command 0x0406 tx timeout
[  202.787258][ T5624] Bluetooth: hci2: command 0x0406 tx timeout
[  203.339741][ T5624] Bluetooth: hci0: command 0x0406 tx timeout
[  256.831531][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  256.846864][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  297.872729][   T31] INFO: task kworker/u8:5:119 blocked for more than 143 seconds.
[  297.890776][   T31]       Not tainted syzkaller #0
[  297.909045][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  297.927022][   T31] task:kworker/u8:5    state:D stack:23016 pid:119   tgid:119   ppid:2      task_flags:0x4208060 flags:0x00080000
[  297.965808][   T31] Workqueue: ipv6_addrconf addrconf_dad_work
[  298.996447][   T31] Call Trace:
[  299.014123][   T31]  <TASK>
[  299.031713][   T31]  __schedule+0x17d4/0x5820
[  299.049468][   T31]  ? irqentry_exit+0x218/0x910
[  299.067374][   T31]  ? irqentry_exit+0x218/0x910
[  299.085230][   T31]  ? __pfx___schedule+0x10/0x10
[  299.102840][   T31]  ? schedule+0x90/0x2b0
[  299.120637][   T31]  schedule+0x164/0x2b0
[  299.138355][   T31]  schedule_preempt_disabled+0x13/0x30
[  299.155832][   T31]  __mutex_lock+0x7c1/0x1550
[  299.173890][   T31]  ? __mutex_lock+0x5d4/0x1550
[  299.192308][   T31]  ? addrconf_dad_work+0x116/0x15c0
[  299.210092][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  299.228154][   T31]  addrconf_dad_work+0x116/0x15c0
[  299.246194][   T31]  ? __pfx_addrconf_dad_work+0x10/0x10
[  299.264060][   T31]  ? process_scheduled_works+0x97a/0x1630
[  299.282023][   T31]  ? rcu_is_watching+0x16/0xb0
[  299.299505][   T31]  ? process_scheduled_works+0x97a/0x1630
[  299.317099][   T31]  process_scheduled_works+0xc3d/0x1630
[  299.334689][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  299.352397][   T31]  ? assign_work+0x3cf/0x5d0
[  299.370265][   T31]  worker_thread+0xa47/0xfb0
[  299.388056][   T31]  ? __kthread_parkme+0x71/0x1f0
[  299.405856][   T31]  kthread+0x38b/0x480
[  299.423490][   T31]  ? __pfx_worker_thread+0x10/0x10
[  299.441261][   T31]  ? __pfx_kthread+0x10/0x10
[  299.458925][   T31]  ret_from_fork+0x514/0xb70
[  299.476688][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  299.494630][   T31]  ? __switch_to+0xc89/0x1420
[  299.512207][   T31]  ? __pfx_kthread+0x10/0x10
[  299.529848][   T31]  ret_from_fork_asm+0x1a/0x30
[  299.547827][   T31]  </TASK>
[  299.565573][   T31] 
[  299.565573][   T31] Showing all locks held in the system:
[  299.583195][   T31] locks held by kthreadd/2: 1, last CPU#0:
[  308.511082][   T31]  #0: ffffffff8eeab310 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  308.602514][   T31] locks held by kworker/R-kvfre/6: 1, last CPU#1:
[  308.617262][   T31]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  308.645787][   T31] locks held by kworker/0:0/9: 2, last CPU#0:
[  308.645803][   T31]  #0: ffff888056ef8d40 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  308.645861][   T31]  #1: ffffc900000e7c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  308.645919][   T31] locks held by kworker/0:1/10: 3, on CPU#0:
[  308.645932][   T31]  #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  308.645982][   T31]  #1: ffffc900000f7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  308.646032][   T31]  #2: ffffffff9024ccc0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110
[  308.646080][   T31] locks held by kworker/u8:0/12: 4, last CPU#0: