last executing test programs:

2m15.922603043s ago: executing program 2 (id=237):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x2b, 0x0, [0x81, 0x3, 0x10001, 0x6, 0x9, 0x40, 0x9, 0x3, 0xd, 0xd06, 0x0, 0x10001, 0x4, 0x100, 0x1000]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3d64b08b1134200c5c00000000109021b0001000420000904"], 0x0) (async)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1120000005000000", 0x29}], 0x1) (async)
getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f00000000c0)=0x28)
syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c)

2m15.641067844s ago: executing program 2 (id=240):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000004000", [0x0, 0xffffffff9673e35d]}})

2m15.434717939s ago: executing program 2 (id=241):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0xb, 0x0, 0x4, 0x3}, &(0x7f0000000180)=0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, &(0x7f0000000100))

2m15.324512359s ago: executing program 2 (id=242):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="5c00000015006b05c84e21020ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e61821466cdc3dc0048dfd8cdbf9367b098fa51f60a64c9f408000007e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)

2m15.19455529s ago: executing program 2 (id=244):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'sit0\x00', 0x200})
mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r2, 0x6f000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="016f0800010027000000270000004600004c00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078001309c4000502004a5101c5e2000000000007000002d588389e9f5f0d1342"], 0xfd6c)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r4, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r3])
ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0xe4a3, 0x1, 0x3, 0x101}, {0xd1e, 0x5, 0xe5, 0x7}, {0x4, 0x3, 0x9}, {0x1, 0x2c, 0x9, 0x7}, {0x5, 0xd, 0xf8, 0xc6}, {0x1, 0x10, 0x98, 0x3}, {0x7, 0x0, 0x81, 0x4}]})

2m13.293071747s ago: executing program 2 (id=249):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000524500", [0x0, 0xffffffff9673e35d]}})

1m57.825501343s ago: executing program 32 (id=249):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000524500", [0x0, 0xffffffff9673e35d]}})

42.342586894s ago: executing program 1 (id=772):
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) (async)
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0)
socket(0x2, 0x3, 0x67) (async)
r1 = socket(0x2, 0x3, 0x67)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c)
sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e1}, 0x6e)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x18, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1}, 0x800) (async)
sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x18, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1}, 0x800)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x3e32b2bcac918f74, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b1c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x89, 0x1, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x7, 0x52, 0x1, {0x22, 0x4df}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7f, 0x3, 0x42}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x3, 0x7, 0x6}}]}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x300, 0xee, 0x9, 0x0, 0xff, 0xd0}, 0x51, &(0x7f0000000880)={0x5, 0xf, 0x51, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xb, 0x0, 0x100, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x6, 0x9}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0xe6eb, 0xff00, 0x9, [0xffc037, 0xffffc0, 0x30, 0x3e80]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "21633f48b2fa782781013e9292f11242"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0xe, 0x4}]}, 0x3, [{0x77, &(0x7f0000000900)=@string={0x77, 0x3, "3da02d9555c4f555f1431b9bb303c514a241203ab75c7e6109c61fc662f2d9199d7ee4f74ea8c2e72f284224e66881b602173c5fc4455fda6ef2fedaf46532e5d63a90226f5bbddb5948fedc33644c345a43619ad42d99d4c29fe0c00a9429ce3d0a74b8e5c17525e90f70b7556721b613f8681b03"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x426}}]})
bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r2, 0x0, 0x0, 0x800)
r5 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0xfff, 0x2}, 0x1c)
sendmsg$tipc(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48040}, 0x1) (async)
sendmsg$tipc(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48040}, 0x1)
sendmmsg$alg(r4, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018"], 0x60}], 0x1, 0x8001)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_connect$printer(0xfb54a099d90eb875, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x86, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x31, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7a, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x59, 0xe, 0x3}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x3, 0x8, 0x9, 0x8, 0x3}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x412}}, {0x36, &(0x7f0000000280)=@string={0x36, 0x3, "415e790463a005a408af5f348a9e853dd05d11f4869e501568f7e85146e9cc1ea25bb90130199771de9767a390d24731f3b401be"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x403}}]}) (async)
r7 = syz_usb_connect$printer(0xfb54a099d90eb875, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x86, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x31, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7a, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x59, 0xe, 0x3}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x3, 0x8, 0x9, 0x8, 0x3}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x412}}, {0x36, &(0x7f0000000280)=@string={0x36, 0x3, "415e790463a005a408af5f348a9e853dd05d11f4869e501568f7e85146e9cc1ea25bb90130199771de9767a390d24731f3b401be"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x403}}]})
syz_usb_control_io$printer(r7, &(0x7f0000000400)={0x14, &(0x7f0000000380)={0x0, 0x23, 0x31, {0x31, 0x1, "e958d69d2c8772c7cebef852f2cfa5716d9e3f9709bfe2ae951fc40d5d178c3f67acee1c81eff04e84ffdb670abbf2"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, &(0x7f0000000780)={0x34, &(0x7f0000000500)={0x20, 0x1, 0x3b, "ec645ac17d39f10a57cb85ae57dc1423672db8afd3169475c76a90cad756277b104e714d387beeb05aa6bb62491302a688299533cac341832458f9"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x17}, &(0x7f0000000600)={0x20, 0x0, 0xce, {0xcc, "60faa74a065983692474620631e41930ba33c44e17760c389557bbe5ee154a1d037cc480892a9508b671c76ebb9c211fc3fbc36cf80afdf10b59322e940dfd3a236d70da782db2f21100501627cfdefc235258f9c144a3c5f7813aa853e15b2f37e006804215c4c305e3673504816bee173a98d1aceb464a83e460d0a76418a324810cea254884e5e6ab87d29916550bccdfcb88773a38dd2ef576201dbbeb58702a3e99dcfb49a8ede3b6d1710219b9a2a8eaa3894c30711e75091320afd1d362fa7780671e0deae38d1036"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0xc}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x2}}) (async)
syz_usb_control_io$printer(r7, &(0x7f0000000400)={0x14, &(0x7f0000000380)={0x0, 0x23, 0x31, {0x31, 0x1, "e958d69d2c8772c7cebef852f2cfa5716d9e3f9709bfe2ae951fc40d5d178c3f67acee1c81eff04e84ffdb670abbf2"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, &(0x7f0000000780)={0x34, &(0x7f0000000500)={0x20, 0x1, 0x3b, "ec645ac17d39f10a57cb85ae57dc1423672db8afd3169475c76a90cad756277b104e714d387beeb05aa6bb62491302a688299533cac341832458f9"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x17}, &(0x7f0000000600)={0x20, 0x0, 0xce, {0xcc, "60faa74a065983692474620631e41930ba33c44e17760c389557bbe5ee154a1d037cc480892a9508b671c76ebb9c211fc3fbc36cf80afdf10b59322e940dfd3a236d70da782db2f21100501627cfdefc235258f9c144a3c5f7813aa853e15b2f37e006804215c4c305e3673504816bee173a98d1aceb464a83e460d0a76418a324810cea254884e5e6ab87d29916550bccdfcb88773a38dd2ef576201dbbeb58702a3e99dcfb49a8ede3b6d1710219b9a2a8eaa3894c30711e75091320afd1d362fa7780671e0deae38d1036"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0xc}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x2}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000001ac0)=ANY=[@ANYBLOB="00140b000000a7", @ANYBLOB="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"/4297], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x12, 0x2, "35c6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="4c300300000056f99e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

41.693403288s ago: executing program 1 (id=773):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000002380)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64, @ANYRES16=r0, @ANYBLOB="c4fcf464224560d8df7a5cbc45cc5076eb857f99ddaf9e8d54d76c317223fb80245951df1867f7bc3b34a025"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000140), 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @empty, 0x8}, 0x1c)

41.586718623s ago: executing program 1 (id=774):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000002100)={0xb16, 0x30314752, 0x3, @discrete={0x8, 0x2}}) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x134) (async)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0xe4e770d38a54a7cb, 0x800, 0x0, 0x1}, 0x20) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="33000e0080000000ffffffffffff080269808a2e02da0ba7b3110000001361068044c90000000000000000000064"], 0x68}}, 0x0)

41.585348481s ago: executing program 1 (id=775):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r3, 0x4b41, 0x10000000000004)
r4 = dup(r2)
getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000001c0)={@mcast1}, &(0x7f0000000240)=0x14)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
move_mount(r4, &(0x7f0000000140)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x64)
umount2(&(0x7f00000002c0)='./file0\x00', 0xc)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x8000, '\x00', @p_u8=&(0x7f0000000080)=0x4}})
syz_usb_connect(0x2, 0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0)

40.926031412s ago: executing program 1 (id=779):
getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0)
getrandom(&(0x7f0000000000)=""/255, 0xff, 0x3)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="17", 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x13f, 0x5}}, 0x20)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(0x0, 0x0)
getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) (async)
getrandom(&(0x7f0000000000)=""/255, 0xff, 0x3) (async)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="17", 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x13f, 0x5}}, 0x20) (async)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
syz_emit_vhci(0x0, 0x0) (async)

40.651979734s ago: executing program 1 (id=781):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000500", [0x0, 0xffffffff9673e35d]}})

40.483849276s ago: executing program 33 (id=781):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000500", [0x0, 0xffffffff9673e35d]}})

10.218823784s ago: executing program 5 (id=937):
pipe2$9p(&(0x7f0000000100), 0x80000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030006ac0f"], 0x58}}, 0x0)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x7)
r7 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0)
ftruncate(r7, 0x51a9497)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x2000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x14, 0x4, 0x201, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x4040000)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r10=>0x0})
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', <r12=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r9, 0x200, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}]}, 0x24}}, 0x4000)
r13 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000f00)=""/258, 0x102}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000001040)=""/222, 0xde}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/190, 0xbe}, {&(0x7f0000001140)=""/171, 0xab}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000540)=""/96, 0x60}], 0x9}, 0x40012100)
r14 = creat(&(0x7f00000002c0)='./file0\x00', 0x2)
getsockopt$inet_sctp_SCTP_INITMSG(r14, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8)
r15 = socket$inet(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r15, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10)
setsockopt$inet_opts(r15, 0x0, 0x4, &(0x7f0000000100)="441f089a3d1ef360a05a1301000000e0c94ef57300cc3b27c108000000", 0x1d)

10.082516548s ago: executing program 5 (id=938):
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, 0x0, 0xa7})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES64=r1, @ANYRES16=r1, @ANYRES16, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESHEX=r2], 0x7f})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x8000000000000]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
r5 = gettid()
rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xfffffffffffffffc, 0x0, 0x8)
tkill(r5, 0x7)
r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
timer_create(0x7, 0x0, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000000100)={0x0, 0x0})
ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f00000001c0)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0})
syz_open_dev$usbfs(&(0x7f0000000180), 0x10, 0x80100)
r8 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f0000000380)={0x1d, r9, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18)
sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=ANY=[], 0x46c}, 0x1, 0x0, 0x0, 0xc800}, 0x20008010)
close(0x3)
syz_usb_connect(0x1, 0x2d, 0x0, 0x0)
sendmsg(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008001e00fff3c00e", 0x24}], 0x1}, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x42000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x1, 0x4, 0x1000, &(0x7f0000feb000/0x1000)=nil})

6.92842091s ago: executing program 5 (id=946):
prctl$PR_SCHED_CORE(0x3f, 0x1, 0x0, 0x2, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000000}}, 0xb8}}, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100)={0x33, 0xd, '\x00', [@generic={0x7f, 0x53, "5ae445c7f8bd28357f73e463eaf5bc172b0115f4216ce77528f78479ecb9dcf1647454a3bc440a7127433ffa40410ae5b9b28b963f7a42bc1a3f9658f517f2a409a7f03a7cbd60401a7c362a953abdd6e2d4ea"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0xe}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x9}]}, 0x78)
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
close(r3)
r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r4, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
preadv(r6, &(0x7f0000000200)=[{&(0x7f00000012c0)=""/166, 0xb3}], 0x1, 0x7fb, 0x233)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x800, 0x0)
read(r2, &(0x7f00000005c0)=""/134, 0x86)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000080))
timer_create(0x2, 0x0, &(0x7f00000017c0))

5.685667668s ago: executing program 4 (id=951):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0000008019000000000000000000002200", [0x0, 0xffffffff9673e35d]}})

5.564677949s ago: executing program 4 (id=952):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x10, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setresuid(0xee01, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xf}, 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x98a3, 0x4)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}})
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0, 0x0)

5.390211152s ago: executing program 4 (id=954):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x74, 0x8, 0x3, 0x6}, 0x10)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040))
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x1, 0x4, 0xb0})
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000000c0)={0xffffffff, 0x1000})
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={<r1=>0x0, 0x0, 0x10}, &(0x7f0000000140)=0xc)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={<r2=>r1, @in6={{0xa, 0x4e24, 0x9, @remote, 0x7fffffff}}, [0x101, 0x8, 0x9ac, 0x5, 0x3, 0xe2, 0x7f, 0xc64, 0x9, 0xfffffffffffffffd, 0xa, 0x3, 0x7fffffff, 0xfffffffffffffff8, 0x7fff]}, &(0x7f0000000280)=0x100)
bind(r0, &(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x80)
sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000340)={0x2a, 0x0, 0x3fff}, 0xc, &(0x7f0000000580)=[{&(0x7f0000000380)="37671d0e75b468a7eb6c4c0d27d3ea419cef825018b2e72b5431a7320e7f7e457f4c27609ca6ace29a7d13e3896dff099a523940e2ae00d4ff2a28ecc293bc9f5c0f5cf355f8a686ed57610342e639d53ca67a016b1551cbd1b14528e8d2c9", 0x5f}, {&(0x7f0000000400)="12fb4443cd64cd2d3cda7178d47884b790ab79048ce3f8de33ebedc2004514ce85e11c9951ed7aac0a46c6304eb39c9ae582fda1deb85179d5fec9d242d5a34be4403b7d1e67216952783368e2a72c2eea97238028e7929ac770c2e137e8d6aa0f37a0a352851d03562cad624e096d5406c5619fe9d2e7e99d7f909c380b951249a1452c1b8b", 0x86}, {&(0x7f00000004c0)="9b9c27b9fc845eafb1ca16f7132d2a553de20eb9eb2a7b64b94d3b9c3abab2b7205615888433e04aa5eae03a1b9f92275e614efbe8b2c5065b36a4029ea5d8b561ad266c763a3904b79fc5360268cb044250711ddd047478cf03bcb09adda6a2810afd321c712699b7c98f5faadd79f4eecddb39685deb2e7ed50614733e28cfadf75dc9e43ffd5fe2b1fa2aba73d984074a13ec7def539948664aa26fe0c0ae3365319287508ef41f78d971", 0xac}], 0x3, &(0x7f00000005c0)=[{0xe0, 0x108, 0x81, "df9a3002bc794394a91f32ad922ce4b9e706a211fe2e08c4b9db369bff05cf91e5ec42818ee6a8624a0812513e177b66c3f5fc5b8042f3263ef1b40bb6f03da46ac0a18f5be07db6b7def6162d014b7ac41aa94c46dbb1c12a5279b1d82ce752e16ab8ae96e959eb13a2fbe4c8c1ad4d81d731219b4f149294bfadf67bc6cf04025b08f93dc3ff1f48e74619162ff2116153354d4b41dc8fcca88f8ee4483376de6af5852c133828560ab370cbe33fd70fc48d2d905d69838f340f6c31364a1629861bc1b71cd658e03c4731"}, {0xb8, 0x117, 0x7, "4931665efb885ddcc43786bd0d74491d87d029947bf6671fa29a08ac71c722d0ef97ad814a181f605e354a9e8d4eddfb302acb6cad82e4577ea412088302cbff4fcaa6a464767bf6f912f6c1781be677b2bf5565543b28e3fdadc5d0d90582d3fb76e72b24aba32c9228710abb2da933df8e0bc0ef55e96f41b679688973d23183c99af81a73349522b5cd3d4e122fee07e0abc276f9dabfbe821a512c99e57ec004"}, {0x80, 0x118, 0xffffff42, "a5bd699859204ce04eaeb9a282eba53249591168e92c7234a209aebefdef5c0748c53a3f7e72a586f7755dcc1b4d043f173eb38c0f58ee0c059ef18f2f1ba2b615904ace341fefa64dd5dd3e87e86abca0ce9b5e3c72eb335cd8415a47070499ebdd83361efdc0bf60448f3cc90d7e"}, {0x18, 0x104, 0x8, "fd"}], 0x230, 0x48000}, 0x38)
r3 = syz_open_dev$cec(&(0x7f0000000840), 0x0, 0x401)
ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000880)={"e0ccb03e", 0x3, 0x2, 0x0, 0x40, 0x6, "5cf8360b980924896a07a4fe1d8115", "aee1212d", "78537a02", "51aa6b45", ["e9cca6ac9f194f0abb704e4d", "c1bce25e76ffa951a36e5cd3", "e10a0c0d9c81b5b2b4a2a6a0", "62cbfb5b4c65d73d1df21879"]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x2000c011)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a00), 0x202, 0x0)
getsockname$packet(r5, &(0x7f0000000a40)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000ac0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @private2, @remote, 0x8, 0x8, 0xfb59, 0x400, 0x1, 0x0, r6})
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r4)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000e40)={&(0x7f0000000b40), 0xc, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x218, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000e80)={0x8, 0x9, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, 'vxcan1\x00'})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x50, r7, 0x300, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x82}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001040), r4)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x30, r8, 0x400, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x4814)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000001140), &(0x7f0000001180)=0x6)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000011c0)={r2, 0x4}, 0x8)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000001200))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r5)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, r9, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0xa}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd4a8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040090}, 0x4015)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000013c0), r3)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x6c, r10, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24008090)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001500)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'})

5.294284345s ago: executing program 4 (id=956):
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109", @ANYRES64], 0x0)
close(0xffffffffffffffff)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x40, 0x2, 0xa1, {0xa1, 0x30, "82250a0c2d13f28d4fce2e836630b61983a212fa0f6085a26266a0723c11c0f65fdabbb818e2a261cb7952110392055d8eb39c9c149fb064509961f4ea4a3d80439b21fab04fa4c4415f3e187124dbbeb0e71c0d44e53ed0a27591e41139eea776b5d1e1132b3311da60c4fcf1a98d6e2216ec1f3635212f53c3ae8315e7c0fb31abf3ba7cc5408e1a19debd0e45c5ca1c8c686c78c32236158037c7397028"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, &(0x7f0000000640)={0x34, &(0x7f00000003c0)={0x0, 0x15, 0xfe, "bfd53cad0ee6ccf07d1e9efc07c7fd608bde2a150dbd222f02055421609463756b92df70497846990f59bf8d7508e93548388d30748ac41ae20806f9cfe336ddd227a6cacec67d08bdf4a101a815cee4ab046156c6c11f59efb842d3dca82e016a89c401832be94b4b82f07b96b501a9433b9abbd3d5ba1b45562772c1bfce3baa1577bcb7efbf89c0372cb65ffb72a736127d9444f4a62736356b35745baeb4fa4f862747e888f7a867d8e6d388bbd32948eeb32bf1f96b0b09f73fba96c73c93f97583ed6bb7c8c282b627e445427f724a52dce492598d293ec8e6b88e98b4105effd62fcf2d1e7b66c3fbe7b94e9b006c5537e36911b0d8cd6a4f43cf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x0, 0x99, {0x97, "8ec12ffd772f4b3219cd6798d4380407ece5666abadfc4e458ead2b2c3b4233b52b462674444fce178aa75e4fd12cf45a4652d4f71a13e466c362b18b3b004fbe012a6515031a3976d9f0c15d2bdae9e4a3ab1c6a7a34225e333952977ad66f3deabe7235cc90a22bd9ea6b2b4f6d45f34b0895c279351c1b2fa038b78f2e8c50edbcb30ba32d95326e0056b7ae24ea74e1f7f7eb3ded6"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0x7}})

3.749863457s ago: executing program 5 (id=969):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x1, @broadcast, 0x2, 0x43, 'fo\x00', 0x6, 0x20000000, 0x3a}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x1, 0x2000, 0x0, 0xba0, 0xdffffffe}}, 0x44)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0xd, 0x1, 0x0, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000008060000"], 0xfdef)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040))
r3 = syz_open_procfs$userns(0x0, &(0x7f0000000000))
setns(r3, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000202505a1a440000102034a0902860002010900200904000001020d00000524060001052400f8090d24241a0500201524122700a317a88b045e4f01a607c0ffcb7e392a1524120700a317a88b045e4f01a607cb7e392a0905810308000c05ac0904010000020d00000904010102020d0000090582020002ff0106090503020800020081000000000000000000000000e9877f0b7d3e7da98989dbcc944a25112958cfab130388cc763af251a52c2b41bdcb3f85500000000000000000"], 0x0)

2.378635879s ago: executing program 3 (id=979):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (fail_nth: 2)

2.297129088s ago: executing program 0 (id=980):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0000008019000000000000000000524500", [0x0, 0xffffffff9673e35d]}})

2.220148728s ago: executing program 4 (id=981):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x20af3, 0x9, 0x1, 0x4}, 0x10)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74)
recvmmsg(r4, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2040, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0)
close(r1)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

2.078584661s ago: executing program 3 (id=982):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0)
close(r2)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

2.078135485s ago: executing program 0 (id=983):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000380)=0x200000000)
r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = dup2(r1, r2)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r3, &(0x7f0000002540)={0x2020}, 0x2020)
write$vhost_msg_v2(r3, &(0x7f0000000440)={0x2, 0x0, {&(0x7f00000001c0)=""/143, 0x8f, 0x0, 0x2, 0x2}}, 0x48)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = socket(0x22, 0x2, 0x4)
setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, 0x0, 0x0)
ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080))
ioctl$KVM_SET_PIT2(r4, 0x4010ae67, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5}]})
r6 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f00000001c0)=""/112, 0x70}, {&(0x7f0000001780)=""/13, 0xd}], 0x6}, 0x40000100)
sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)

1.914433599s ago: executing program 3 (id=984):
r0 = gettid()
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @netrom}, [@rose, @netrom, @default, @default, @null, @netrom, @remote, @default]}, &(0x7f00000000c0)=0x48, 0x800)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
write$dsp(r1, &(0x7f0000000200)="dce480", 0x3)
r2 = socket$inet(0x2, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x3, 0x4)
listen(r2, 0x4)
listen(r2, 0x0)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
getpid()
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7)
sendfile(r4, r4, 0x0, 0x8000002)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

1.847984189s ago: executing program 0 (id=985):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0000008019000000000000000000000000524500", [0x0, 0xffffffff9673e35d]}})

1.674483565s ago: executing program 0 (id=986):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r0, 0x118, 0x2f, 0x0, &(0x7f00000003c0))
ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000180)=""/198)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)

1.571042194s ago: executing program 0 (id=987):
r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4)
r2 = fsmount(r0, 0x0, 0xf)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='dirsync\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00')
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x1d6, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002c25c4308711f06331b74010203010902c401010448580c0904"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0})

1.357879928s ago: executing program 3 (id=988):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

675.779997ms ago: executing program 3 (id=989):
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904", @ANYRES64], 0x0)
close(0xffffffffffffffff)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x40, 0x2, 0xa1, {0xa1, 0x30, "82250a0c2d13f28d4fce2e836630b61983a212fa0f6085a26266a0723c11c0f65fdabbb818e2a261cb7952110392055d8eb39c9c149fb064509961f4ea4a3d80439b21fab04fa4c4415f3e187124dbbeb0e71c0d44e53ed0a27591e41139eea776b5d1e1132b3311da60c4fcf1a98d6e2216ec1f3635212f53c3ae8315e7c0fb31abf3ba7cc5408e1a19debd0e45c5ca1c8c686c78c32236158037c7397028"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, &(0x7f0000000640)={0x34, &(0x7f00000003c0)={0x0, 0x15, 0xfe, "bfd53cad0ee6ccf07d1e9efc07c7fd608bde2a150dbd222f02055421609463756b92df70497846990f59bf8d7508e93548388d30748ac41ae20806f9cfe336ddd227a6cacec67d08bdf4a101a815cee4ab046156c6c11f59efb842d3dca82e016a89c401832be94b4b82f07b96b501a9433b9abbd3d5ba1b45562772c1bfce3baa1577bcb7efbf89c0372cb65ffb72a736127d9444f4a62736356b35745baeb4fa4f862747e888f7a867d8e6d388bbd32948eeb32bf1f96b0b09f73fba96c73c93f97583ed6bb7c8c282b627e445427f724a52dce492598d293ec8e6b88e98b4105effd62fcf2d1e7b66c3fbe7b94e9b006c5537e36911b0d8cd6a4f43cf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x0, 0x99, {0x97, "8ec12ffd772f4b3219cd6798d4380407ece5666abadfc4e458ead2b2c3b4233b52b462674444fce178aa75e4fd12cf45a4652d4f71a13e466c362b18b3b004fbe012a6515031a3976d9f0c15d2bdae9e4a3ab1c6a7a34225e333952977ad66f3deabe7235cc90a22bd9ea6b2b4f6d45f34b0895c279351c1b2fa038b78f2e8c50edbcb30ba32d95326e0056b7ae24ea74e1f7f7eb3ded6"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0x7}})

623.118236ms ago: executing program 5 (id=990):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (fail_nth: 3)

541.952657ms ago: executing program 3 (id=991):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000)

187.562936ms ago: executing program 5 (id=992):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0000008019000000000000000000455200", [0x0, 0xffffffff9673e35d]}})

78.668741ms ago: executing program 4 (id=993):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @loopback}, 0xc)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000280)={0x8, {{0x2, 0x4e1f, @multicast1}}, {{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x108)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000440)={@multicast1, @loopback, 0x1}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r5, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

0s ago: executing program 0 (id=994):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="400d02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000080002000100005ccaef423a0000000000070c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000100140006000000"], 0x90}, 0x1, 0x7}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read$midi(r4, &(0x7f00000012c0)=""/232, 0xe8)
sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
close(r6)
recvfrom(r7, 0x0, 0x0, 0x40002062, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000d80)=0x101, 0x4)
sendto$inet6(r8, &(0x7f0000000000)='X', 0x1, 0x4000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

-1: string descriptor 0 read error: -22
[  218.004832][ T5972] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[  218.014087][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.234259][ T8037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.244605][ T8037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.255921][ T8037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.265121][ T8037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.275087][ T5972] usb 4-1: USB disconnect, device number 61
[  218.445154][ T8052] binder: 8051:8052 ioctl c0306201 2000000001c0 returned -22
[  218.536916][ T8055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.553298][ T8056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.567073][ T8056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.585867][ T8055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.777346][ T8063] loop2: detected capacity change from 0 to 7
[  218.787669][ T5963] Dev loop2: unable to read RDB block 7
[  218.796278][ T5963]  loop2: unable to read partition table
[  218.804481][ T5963] loop2: partition table beyond EOD, truncated
[  218.828677][ T8063] Dev loop2: unable to read RDB block 7
[  218.834498][ T8063]  loop2: unable to read partition table
[  218.846953][ T8063] loop2: partition table beyond EOD, truncated
[  218.854156][ T8063] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  218.871850][ T5231] Dev loop2: unable to read RDB block 7
[  218.877689][ T5231]  loop2: unable to read partition table
[  218.883705][ T5231] loop2: partition table beyond EOD, truncated
[  219.008712][ T8069] loop2: detected capacity change from 0 to 7
[  219.017103][ T5963] Dev loop2: unable to read RDB block 7
[  219.026297][ T5963]  loop2: unable to read partition table
[  219.032636][ T5963] loop2: partition table beyond EOD, truncated
[  219.041732][ T8069] Dev loop2: unable to read RDB block 7
[  219.047361][ T8069]  loop2: unable to read partition table
[  219.057755][ T8069] loop2: partition table beyond EOD, truncated
[  219.073231][ T8069] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  219.178570][ T8079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.192469][ T8079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.490048][ T8096] loop2: detected capacity change from 0 to 7
[  219.497256][ T8096] Dev loop2: unable to read RDB block 7
[  219.503196][ T8096]  loop2: unable to read partition table
[  219.511365][ T8096] loop2: partition table beyond EOD, truncated
[  219.517678][ T8096] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  219.629042][ T5972] usb 1-1: new full-speed USB device number 74 using dummy_hcd
[  219.778547][ T5972] usb 1-1: device descriptor read/64, error -71
[  219.808538][ T8108] netlink: 76 bytes leftover after parsing attributes in process `syz.1.625'.
[  219.882622][ T8108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.892343][ T8108] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.018484][ T5972] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[  220.096276][ T5916] usb 5-1: USB disconnect, device number 22
[  220.150219][ T5972] usb 1-1: device descriptor read/64, error -71
[  220.180733][ T8110] loop2: detected capacity change from 0 to 7
[  220.193659][ T8110] Dev loop2: unable to read RDB block 7
[  220.200022][ T8110]  loop2: unable to read partition table
[  220.206081][ T8110] loop2: partition table beyond EOD, truncated
[  220.215709][ T8110] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  220.278855][ T5972] usb usb1-port1: attempt power cycle
[  220.638417][ T5972] usb 1-1: new full-speed USB device number 76 using dummy_hcd
[  220.661650][ T5972] usb 1-1: device descriptor read/8, error -71
[  220.698534][ T5953] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  220.848560][ T5953] usb 5-1: Using ep0 maxpacket: 16
[  220.855280][ T5953] usb 5-1: config 0 has an invalid interface number: 107 but max is 0
[  220.863723][ T5953] usb 5-1: config 0 has no interface number 0
[  220.869957][ T5953] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  220.880023][ T5953] usb 5-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  220.894200][ T5953] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  220.903621][ T5972] usb 1-1: new full-speed USB device number 77 using dummy_hcd
[  220.911426][ T5953] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  220.919901][ T5953] usb 5-1: Product: syz
[  220.924289][ T5953] usb 5-1: Manufacturer: syz
[  220.928955][ T5953] usb 5-1: SerialNumber: syz
[  220.936542][ T5953] usb 5-1: config 0 descriptor??
[  220.943098][ T5972] usb 1-1: device descriptor read/8, error -71
[  221.059133][ T5972] usb usb1-port1: unable to enumerate USB device
[  221.147606][ T5953] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected
[  221.161352][ T5953] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81
[  221.176789][ T5953] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1
[  221.193625][ T5953] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  221.211348][ T5953] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2
[  221.219999][ T8127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.225177][ T5953] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  221.231151][ T8127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.253043][ T5953] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4
[  221.263469][ T5953] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  221.274680][ T5953] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6
[  221.285519][ T5953] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  221.305495][ T5953] usb 5-1: USB disconnect, device number 23
[  221.317539][ T5953] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  221.332502][ T5953] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  221.345031][ T5953] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  221.373305][ T5953] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  221.385698][ T5953] keyspan 5-1:0.107: device disconnected
[  221.658401][  T983] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  221.725482][ T8131] loop2: detected capacity change from 0 to 7
[  221.732837][ T8131] Dev loop2: unable to read RDB block 7
[  221.743323][ T8131]  loop2: unable to read partition table
[  221.750008][ T8131] loop2: partition table beyond EOD, truncated
[  221.759358][ T8131] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  221.789765][ T5231] Dev loop2: unable to read RDB block 7
[  221.795411][ T5231]  loop2: unable to read partition table
[  221.802429][ T5231] loop2: partition table beyond EOD, truncated
[  221.819522][  T983] usb 4-1: Using ep0 maxpacket: 8
[  221.837247][ T8133] loop2: detected capacity change from 0 to 7
[  221.849580][  T983] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  221.860877][ T5963] Dev loop2: unable to read RDB block 7
[  221.866515][ T5963]  loop2: unable to read partition table
[  221.872344][  T983] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  221.889519][  T983] usb 4-1: config 0 has no interface number 0
[  221.896127][  T983] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  221.906346][ T5963] loop2: partition table beyond EOD, truncated
[  221.921968][  T983] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  221.927604][ T8133] Dev loop2: unable to read RDB block 7
[  221.934129][  T983] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  221.951419][ T8133]  loop2: unable to read partition table
[  221.956721][  T983] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  221.963903][ T8133] loop2: partition table beyond EOD, truncated
[  221.971932][  T983] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  221.984197][ T8133] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  221.984231][  T983] usb 4-1: Product: syz
[  222.004313][  T983] usb 4-1: config 0 descriptor??
[  222.026415][ T8129] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  222.142494][ T8141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.151594][ T8141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.164295][ T8143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.174903][ T8143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.186645][ T8141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.198122][ T8141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.528012][ T8151] input: syz1 as /devices/virtual/input/input35
[  222.715228][  T983] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input34
[  222.774632][ T8160] loop2: detected capacity change from 0 to 7
[  222.789328][ T5879] Dev loop2: unable to read RDB block 7
[  222.801463][ T5879]  loop2: unable to read partition table
[  222.807943][ T5879] loop2: partition table beyond EOD, truncated
[  222.817166][ T8160] Dev loop2: unable to read RDB block 7
[  222.825210][ T8160]  loop2: unable to read partition table
[  222.833673][ T8160] loop2: partition table beyond EOD, truncated
[  222.842023][ T8160] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  222.888946][ T5916] usb 1-1: new full-speed USB device number 78 using dummy_hcd
[  223.028543][ T5916] usb 1-1: device descriptor read/64, error -71
[  223.037517][ T8162] loop2: detected capacity change from 0 to 7
[  223.047099][ T8162] Dev loop2: unable to read RDB block 7
[  223.054130][ T8162]  loop2: unable to read partition table
[  223.060665][ T8162] loop2: partition table beyond EOD, truncated
[  223.072199][ T8162] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  223.299844][ T5916] usb 1-1: new full-speed USB device number 79 using dummy_hcd
[  223.448329][ T5916] usb 1-1: device descriptor read/64, error -71
[  223.558767][ T5916] usb usb1-port1: attempt power cycle
[  223.608456][ T5972] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  223.760138][ T5972] usb 5-1: Using ep0 maxpacket: 16
[  223.772178][ T5972] usb 5-1: unable to get BOS descriptor or descriptor too short
[  223.782383][ T5972] usb 5-1: config 4 has an invalid interface number: 231 but max is 0
[  223.791692][ T5972] usb 5-1: config 4 has no interface number 0
[  223.799615][ T5972] usb 5-1: config 4 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  223.817262][ T5972] usb 5-1: New USB device found, idVendor=04fc, idProduct=7333, bcdDevice=48.7a
[  223.827206][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.835828][ T5972] usb 5-1: Product: syz
[  223.840707][ T5972] usb 5-1: Manufacturer: syz
[  223.845610][ T5972] usb 5-1: SerialNumber: syz
[  223.918476][ T5916] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[  223.960015][ T5916] usb 1-1: device descriptor read/8, error -71
[  223.975367][ T8179] netlink: 132 bytes leftover after parsing attributes in process `syz.1.651'.
[  224.040661][ T8181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.049678][ T8181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.086191][ T5972] gspca_main: spca500-2.14.0 probing 04fc:7333
[  224.129587][ T5972] usb 5-1: USB disconnect, device number 24
[  224.153938][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.171765][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.189366][   T30] audit: type=1800 audit(1757045021.179:1307): pid=8186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.653" name="bus" dev="tmpfs" ino=1072 res=0 errno=0
[  224.218980][ T5916] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[  224.249185][ T5916] usb 1-1: device descriptor read/8, error -71
[  224.358641][ T5916] usb usb1-port1: unable to enumerate USB device
[  224.437273][  T980] usb 4-1: USB disconnect, device number 62
[  224.437845][    C1] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  224.489184][ T8189] loop2: detected capacity change from 0 to 7
[  224.496684][ T8189] Dev loop2: unable to read RDB block 7
[  224.503910][ T8189]  loop2: unable to read partition table
[  224.511074][ T8189] loop2: partition table beyond EOD, truncated
[  224.517336][ T8189] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  224.586487][ T8191] loop2: detected capacity change from 0 to 7
[  224.595905][ T8191] Dev loop2: unable to read RDB block 7
[  224.604649][ T8191]  loop2: unable to read partition table
[  224.612748][ T8191] loop2: partition table beyond EOD, truncated
[  224.622145][ T8191] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  224.938545][ T5972] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  225.018493][  T983] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  225.090877][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.102455][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.112459][ T5972] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  225.122825][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.133695][ T5972] usb 5-1: config 0 descriptor??
[  225.168368][  T983] usb 4-1: Using ep0 maxpacket: 8
[  225.175573][  T983] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15
[  225.185146][  T983] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  225.198292][  T983] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  225.207789][  T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.216086][  T983] usb 4-1: Product: syz
[  225.226931][  T983] usb 4-1: Manufacturer: syz
[  225.232808][  T983] usb 4-1: SerialNumber: syz
[  225.243863][  T983] usb 4-1: config 0 descriptor??
[  225.253803][  T983] powermate 4-1:0.0: probe with driver powermate failed with error -22
[  225.456658][ T8199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.466226][ T8199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.512350][  T980] usb 4-1: USB disconnect, device number 63
[  225.553871][ T5972] cm6533_jd 0003:0D8C:0022.0017: item fetching failed at offset 2/5
[  225.563636][ T5972] cm6533_jd 0003:0D8C:0022.0017: parse failed
[  225.570201][ T5972] cm6533_jd 0003:0D8C:0022.0017: probe with driver cm6533_jd failed with error -22
[  225.702048][ T8204] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  225.831514][ T8212] capability: warning: `syz.1.664' uses deprecated v2 capabilities in a way that may be insecure
[  225.906667][ T8215] loop2: detected capacity change from 0 to 7
[  225.914713][ T8215] Dev loop2: unable to read RDB block 7
[  225.925162][ T8215]  loop2: unable to read partition table
[  225.931393][ T8215] loop2: partition table beyond EOD, truncated
[  225.948865][ T8215] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  226.042246][ T5916] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  226.108430][ T8219] loop2: detected capacity change from 0 to 7
[  226.122280][ T5963] Dev loop2: unable to read RDB block 7
[  226.128092][ T5963]  loop2: unable to read partition table
[  226.134279][ T5963] loop2: partition table beyond EOD, truncated
[  226.143296][ T8219] Dev loop2: unable to read RDB block 7
[  226.150178][ T8219]  loop2: unable to read partition table
[  226.156158][ T8219] loop2: partition table beyond EOD, truncated
[  226.164415][ T8219] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  226.230994][ T5916] usb 1-1: Using ep0 maxpacket: 8
[  226.248488][ T5916] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  226.265258][ T5916] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  226.294487][ T5916] usb 1-1: config 0 has no interface number 0
[  226.315037][ T5916] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  226.370955][ T5916] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  226.415198][ T5916] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  226.457420][ T5916] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  226.485090][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  226.497819][ T5916] usb 1-1: Product: syz
[  226.533773][ T5916] usb 1-1: config 0 descriptor??
[  226.541995][ T8209] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  226.795992][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.809915][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.818716][ T5972] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  226.826755][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.842777][ T8231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.852023][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.865741][ T8231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.978514][ T5972] usb 4-1: device descriptor read/64, error -71
[  227.165801][ T5916] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input36
[  227.223796][ T5972] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  227.358428][ T5972] usb 4-1: device descriptor read/64, error -71
[  227.371751][   T44] usb 1-1: USB disconnect, device number 82
[  227.371759][    C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  227.446544][ T8233] fuse: Bad value for 'group_id'
[  227.452518][ T8233] fuse: Bad value for 'group_id'
[  227.460520][ T8233] netlink: 'syz.1.672': attribute type 10 has an invalid length.
[  227.478822][ T8233] team0: Port device geneve1 added
[  227.484837][ T5972] usb usb4-port1: attempt power cycle
[  227.533326][ T8235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.542486][ T8235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.564430][ T8235] syzkaller1: entered promiscuous mode
[  227.571946][ T8235] syzkaller1: entered allmulticast mode
[  227.715576][  T980] usb 5-1: USB disconnect, device number 25
[  227.828311][ T5972] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  227.852553][ T5972] usb 4-1: device descriptor read/8, error -71
[  227.932068][ T8237] loop2: detected capacity change from 0 to 7
[  227.945242][ T8237] Dev loop2: unable to read RDB block 7
[  227.953528][ T8237]  loop2: unable to read partition table
[  227.966531][ T8237] loop2: partition table beyond EOD, truncated
[  227.981793][ T8237] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  228.009308][ T5231] Dev loop2: unable to read RDB block 7
[  228.015022][ T5231]  loop2: unable to read partition table
[  228.021726][ T5231] loop2: partition table beyond EOD, truncated
[  228.108520][ T5972] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  228.135041][ T8239] loop2: detected capacity change from 0 to 7
[  228.139241][ T5972] usb 4-1: device descriptor read/8, error -71
[  228.149939][ T8239] Dev loop2: unable to read RDB block 7
[  228.167883][ T8239]  loop2: unable to read partition table
[  228.185024][ T8239] loop2: partition table beyond EOD, truncated
[  228.197853][ T8239] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  228.252218][ T5972] usb usb4-port1: unable to enumerate USB device
[  228.269675][ T5972] kernel write not supported for file /uinput (pid: 5972 comm: kworker/1:7)
[  228.494634][ T8252] max out of range
[  228.516906][ T8252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.526838][ T8252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.948413][ T5972] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  228.948413][  T980] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  229.098360][  T980] usb 5-1: device descriptor read/64, error -71
[  229.110700][ T5972] usb 1-1: Using ep0 maxpacket: 8
[  229.117318][ T5972] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  229.125731][ T5972] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  229.134068][ T5972] usb 1-1: config 0 has no interface number 0
[  229.140372][ T5972] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  229.152032][ T5972] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  229.163317][ T5972] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  229.176596][ T5972] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  229.185741][ T5972] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  229.194280][ T5972] usb 1-1: Product: syz
[  229.206108][ T5972] usb 1-1: config 0 descriptor??
[  229.212430][ T8256] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  229.348306][  T980] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  229.478307][  T980] usb 5-1: device descriptor read/64, error -71
[  229.598346][  T980] usb usb5-port1: attempt power cycle
[  229.839622][ T5972] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input38
[  229.914953][ T8264] loop2: detected capacity change from 0 to 7
[  229.923794][ T8264] Dev loop2: unable to read RDB block 7
[  229.931532][ T8264]  loop2: unable to read partition table
[  229.937969][ T8264] loop2: partition table beyond EOD, truncated
[  229.948127][ T8264] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  229.958282][  T980] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  230.000252][  T980] usb 5-1: device descriptor read/8, error -71
[  230.053452][ T5972] usb 1-1: USB disconnect, device number 83
[  230.059607][    C1] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  230.073233][ T8266] loop2: detected capacity change from 0 to 7
[  230.091583][ T5963] Dev loop2: unable to read RDB block 7
[  230.097377][ T5963]  loop2: unable to read partition table
[  230.103846][ T5963] loop2: partition table beyond EOD, truncated
[  230.111796][ T8266] Dev loop2: unable to read RDB block 7
[  230.122006][ T8266]  loop2: unable to read partition table
[  230.128027][ T8266] loop2: partition table beyond EOD, truncated
[  230.134903][ T8266] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  230.259304][  T980] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  230.280898][  T980] usb 5-1: device descriptor read/8, error -71
[  230.399266][  T980] usb usb5-port1: unable to enumerate USB device
[  230.468315][ T5929] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  230.638821][ T5929] usb 4-1: Using ep0 maxpacket: 16
[  230.647745][ T5929] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.659473][ T5929] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.669668][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0
[  230.676317][ T5929] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  230.685524][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.695937][ T5929] usb 4-1: config 0 descriptor??
[  230.838321][ T5972] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  230.988393][ T5972] usb 1-1: Using ep0 maxpacket: 32
[  230.995393][ T5972] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  231.005339][ T5972] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  231.015232][ T5972] usb 1-1: config 0 interface 0 has no altsetting 0
[  231.025912][ T5972] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  231.035176][ T5972] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  231.043944][ T5972] usb 1-1: Product: syz
[  231.048395][ T5972] usb 1-1: Manufacturer: syz
[  231.053020][ T5972] usb 1-1: SerialNumber: syz
[  231.064443][ T5972] usb 1-1: config 0 descriptor??
[  231.111201][ T5929] usbhid 4-1:0.0: can't add hid device: -71
[  231.117437][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  231.135516][ T5929] usb 4-1: USB disconnect, device number 68
[  231.285584][ T8270] can0: slcan on ttyprintk.
[  231.494782][ T5972] gs_usb 1-1:0.0: Couldn't get device config: (err=-121)
[  231.508306][ T5972] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121
[  232.052091][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'.
[  232.414302][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.424451][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  232.434566][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  232.455802][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.519986][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  232.597052][ T8307] loop2: detected capacity change from 0 to 7
[  232.606787][ T8307] Dev loop2: unable to read RDB block 7
[  232.619325][ T8307]  loop2: unable to read partition table
[  232.625364][ T8307] loop2: partition table beyond EOD, truncated
[  232.642434][ T8307] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  232.671230][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  232.684797][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  232.711121][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  232.770973][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  232.817577][ T8310] loop2: detected capacity change from 0 to 7
[  232.831159][ T8310] Dev loop2: unable to read RDB block 7
[  232.837132][ T8310]  loop2: unable to read partition table
[  232.844569][ T8310] loop2: partition table beyond EOD, truncated
[  232.852836][ T8310] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  232.879709][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  232.898837][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  233.248420][ T5929] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  233.408927][ T5929] usb 5-1: Using ep0 maxpacket: 8
[  233.416331][ T5929] usb 5-1: unable to get BOS descriptor or descriptor too short
[  233.425424][ T5929] usb 5-1: config 190 has an invalid interface number: 42 but max is 0
[  233.433849][ T5929] usb 5-1: config 190 has no interface number 0
[  233.440303][ T5929] usb 5-1: config 190 interface 42 has no altsetting 0
[  233.450747][ T5929] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=77.12
[  233.460015][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.468151][ T5929] usb 5-1: Product: syz
[  233.472476][ T5929] usb 5-1: Manufacturer: syz
[  233.477097][ T5929] usb 5-1: SerialNumber: syz
[  233.629000][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  233.760815][ T8270] can0 (unregistered): slcan off ttyprintk.
[  233.782141][ T8314] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[  233.789153][ T8314] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  233.805914][ T8314] vhci_hcd vhci_hcd.0: Device attached
[  233.815563][ T8321] vhci_hcd: connection closed
[  233.818173][ T5972] usb 1-1: USB disconnect, device number 84
[  233.835281][   T60] vhci_hcd: stop threads
[  233.848102][   T60] vhci_hcd: release socket
[  233.869133][   T60] vhci_hcd: disconnect device
[  233.884771][ T5929] usb 5-1: Found UVC 0.00 device syz (046d:0821)
[  233.901401][ T5929] usb 5-1: No valid video chain found.
[  233.933855][ T5929] usb 5-1: USB disconnect, device number 30
[  234.119218][ T5953] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  234.258718][ T5972] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  234.288304][ T5953] usb 4-1: Using ep0 maxpacket: 16
[  234.296125][ T5953] usb 4-1: config 4 has an invalid interface number: 51 but max is 0
[  234.305309][ T5953] usb 4-1: config 4 has no interface number 0
[  234.311857][ T5953] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[  234.322652][ T5953] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  234.333993][ T5953] usb 4-1: config 4 interface 51 has no altsetting 0
[  234.347857][ T5953] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  234.361612][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.370978][ T5953] usb 4-1: Product: syz
[  234.375347][ T5953] usb 4-1: Manufacturer: syz
[  234.382769][ T5953] usb 4-1: SerialNumber: syz
[  234.392232][ T8319] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  234.409766][ T8319] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  234.438657][ T5972] usb 1-1: Using ep0 maxpacket: 8
[  234.447039][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  234.459083][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  234.470500][ T5972] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  234.482354][ T5972] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49
[  234.526148][ T5972] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  234.538648][ T5972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.551805][ T5972] usb 1-1: config 0 descriptor??
[  234.558533][ T8327] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  234.632305][ T8319] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  234.653213][ T8319] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  234.691780][ T5953] cdc_eem 4-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.3-1, CDC EEM Device, 12:ef:35:4b:f9:df
[  234.792787][    C1] Bluetooth: hci4: Unexpected continuation: 1 bytes
[  234.802043][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.809250][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.816854][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.827494][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.835719][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.842823][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.851938][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.859321][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.866545][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.874790][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.881920][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.888950][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.893635][ T5929] usb 4-1: USB disconnect, device number 69
[  234.896166][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.908933][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.915823][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.922823][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.930450][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.937333][ T5929] cdc_eem 4-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.3-1, CDC EEM Device
[  234.937391][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.954817][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.961845][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.978385][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.985340][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  234.992306][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  235.000363][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  235.007297][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  235.014981][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  235.021965][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  235.029883][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  235.037003][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  235.044696][  T980] usb 1-1: USB disconnect, device number 85
[  235.046372][ T5876] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  235.217181][ T8357] loop2: detected capacity change from 0 to 7
[  235.226496][ T8357] Dev loop2: unable to read RDB block 7
[  235.257624][ T8357]  loop2: unable to read partition table
[  235.272709][ T8357] loop2: partition table beyond EOD, truncated
[  235.280253][ T8357] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  235.404725][ T8360] loop2: detected capacity change from 0 to 7
[  235.425964][ T8360] Dev loop2: unable to read RDB block 7
[  235.438386][ T8360]  loop2: unable to read partition table
[  235.464796][ T8360] loop2: partition table beyond EOD, truncated
[  235.474289][ T8360] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  235.688464][ T5929] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  235.841999][ T5929] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  235.852094][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16
[  235.860802][ T5929] usb 5-1: SerialNumber: syz
[  235.868683][ T5929] usb 5-1: config 0 descriptor??
[  235.868920][ T5953] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  236.028280][ T5953] usb 1-1: Using ep0 maxpacket: 8
[  236.035332][ T5953] usb 1-1: unable to get BOS descriptor or descriptor too short
[  236.043303][ T5972] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  236.052270][ T5953] usb 1-1: config 11 has an invalid interface number: 244 but max is 0
[  236.061348][ T5953] usb 1-1: config 11 has no interface number 0
[  236.067632][ T5953] usb 1-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0
[  236.077788][ T5953] usb 1-1: config 11 interface 244 has no altsetting 0
[  236.086772][ T5929] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e
[  236.099534][ T5929] hackrf 5-1:0.0: Could not detect board
[  236.101007][ T5953] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a
[  236.105405][ T5929] hackrf 5-1:0.0: probe with driver hackrf failed with error -71
[  236.118635][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.133424][ T5953] usb 1-1: Product: syz
[  236.137634][ T5953] usb 1-1: Manufacturer: syz
[  236.144225][ T5953] usb 1-1: SerialNumber: syz
[  236.150861][ T5929] usb 5-1: USB disconnect, device number 31
[  236.208532][ T5972] usb 4-1: Using ep0 maxpacket: 8
[  236.216188][ T5972] usb 4-1: unable to get BOS descriptor or descriptor too short
[  236.227902][ T5972] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  236.241524][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  236.253177][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  236.263753][ T5972] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  236.273555][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  236.283449][ T5972] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 166
[  236.296517][ T5972] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  236.306117][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.314330][ T5972] usb 4-1: Product: syz
[  236.323616][ T5972] usb 4-1: Manufacturer: syz
[  236.330661][ T5972] usb 4-1: SerialNumber: syz
[  236.342011][ T5972] usb 4-1: config 0 descriptor??
[  236.348897][ T8376] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  236.356306][ T8382] loop2: detected capacity change from 0 to 7
[  236.366921][ T8376] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  236.367451][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.375232][ T8382] Dev loop2: unable to read RDB block 7
[  236.391493][ T8382]  loop2: unable to read partition table
[  236.392837][ T5972] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  236.397422][ T8382] loop2: partition table beyond EOD, 
[  236.406550][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.408379][ T8382] truncated
[  236.443226][ T5953] peak_usb 1-1:11.244 can0: unable to request usb[type=0 value=1] err=-71
[  236.452017][ T8382] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  236.458390][ T5953] peak_usb 1-1:11.244: unable to read PCAN-USB X6 firmware info (err -71)
[  236.566820][ T5953] peak_usb 1-1:11.244: probe with driver peak_usb failed with error -71
[  236.598398][ T8384] loop2: detected capacity change from 0 to 7
[  236.608181][ T5953] usb 1-1: USB disconnect, device number 86
[  236.616272][  T980] usb 4-1: USB disconnect, device number 70
[  236.645031][ T5963] Dev loop2: unable to read RDB block 7
[  236.652509][ T5963]  loop2: unable to read partition table
[  236.684916][ T5963] loop2: partition table beyond EOD, truncated
[  236.703997][ T8384] Dev loop2: unable to read RDB block 7
[  236.713667][ T8384]  loop2: unable to read partition table
[  236.724253][ T8384] loop2: partition table beyond EOD, truncated
[  236.730968][ T8384] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  237.400628][ T8411] loop2: detected capacity change from 0 to 7
[  237.419556][ T8411] Dev loop2: unable to read RDB block 7
[  237.425650][ T8411]  loop2: unable to read partition table
[  237.439341][ T8411] loop2: partition table beyond EOD, truncated
[  237.445601][ T8411] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  237.511616][ T8416] loop2: detected capacity change from 0 to 7
[  237.525512][ T5963] Dev loop2: unable to read RDB block 7
[  237.543826][ T5963]  loop2: unable to read partition table
[  237.559764][ T5963] loop2: partition table beyond EOD, truncated
[  237.572318][ T8416] Dev loop2: unable to read RDB block 7
[  237.583845][ T8416]  loop2: unable to read partition table
[  237.596905][ T8416] loop2: partition table beyond EOD, truncated
[  237.614617][ T8416] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  237.624811][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'.
[  237.634038][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'.
[  237.646301][ T8421] bridge_slave_1: left allmulticast mode
[  237.684140][ T8421] bridge_slave_1: left promiscuous mode
[  237.703526][ T8421] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.733369][ T8421] bridge_slave_0: left allmulticast mode
[  237.744102][ T8421] bridge_slave_0: left promiscuous mode
[  237.750432][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.763467][ T8424] netlink: 'syz.4.728': attribute type 1 has an invalid length.
[  237.771775][ T8424] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.728'.
[  238.018956][ T5953] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  238.023049][ T8435] netlink: 256 bytes leftover after parsing attributes in process `syz.1.733'.
[  238.040708][ T8436] netlink: 256 bytes leftover after parsing attributes in process `syz.1.733'.
[  238.176286][ T5953] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  238.193212][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.195514][ T8444] loop2: detected capacity change from 0 to 7
[  238.207202][ T5953] usb 5-1: config 0 descriptor??
[  238.214939][ T8444] Dev loop2: unable to read RDB block 7
[  238.221447][ T8444]  loop2: unable to read partition table
[  238.227562][ T8444] loop2: partition table beyond EOD, truncated
[  238.229330][ T5953] cp210x 5-1:0.0: cp210x converter detected
[  238.239382][ T8444] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  238.249827][ T5916] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  238.408331][ T5916] usb 4-1: Using ep0 maxpacket: 16
[  238.416468][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.418634][ T5962] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  238.427982][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.445173][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  238.458151][ T5916] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  238.467367][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.479313][ T5916] usb 4-1: config 0 descriptor??
[  238.588373][ T5962] usb 1-1: Using ep0 maxpacket: 32
[  238.595721][ T5962] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  238.607663][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  238.619138][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  238.629023][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  238.640367][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  238.656598][ T5953] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  238.666416][ T5962] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  238.677448][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.685786][ T5962] usb 1-1: Product: syz
[  238.686069][ T5953] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[  238.698149][ T5962] usb 1-1: Manufacturer: syz
[  238.702877][ T5962] usb 1-1: SerialNumber: syz
[  238.708835][ T5953] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  238.721079][ T5962] usb 1-1: config 0 descriptor??
[  238.732845][ T5953] usb 5-1: cp210x converter now attached to ttyUSB0
[  238.744080][ T5953] usb 5-1: USB disconnect, device number 32
[  238.761341][ T5953] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  238.770066][ T5953] cp210x 5-1:0.0: device disconnected
[  238.906784][ T8448] loop2: detected capacity change from 0 to 7
[  238.915751][ T8448] Dev loop2: unable to read RDB block 7
[  238.922209][ T8448]  loop2: unable to read partition table
[  238.929805][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.940444][ T8448] loop2: partition table beyond EOD, truncated
[  238.944874][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.956637][ T8448] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  238.965165][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.995374][ T5916] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0018/input/input40
[  239.002681][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.029237][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.051702][ T5916] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  239.083404][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.109423][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.139321][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.153107][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.164026][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.187763][ T8449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.229537][ T8449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.237443][ T8452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.265264][ T8452] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.280275][ T5962] input input39: Device does not respond to id packet M
[  239.347155][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.740'.
[  239.480856][ T5962] iforce 1-1:0.0: usb_submit_urb failed: -71
[  239.492055][ T5962] input input39: Device does not respond to id packet P
[  239.508478][ T5962] iforce 1-1:0.0: usb_submit_urb failed: -71
[  239.514662][ T5962] input input39: Device does not respond to id packet B
[  239.522651][ T5962] iforce 1-1:0.0: usb_submit_urb failed: -71
[  239.530853][ T5962] input input39: Device does not respond to id packet N
[  239.548424][ T5962] iforce 1-1:0.0: usb_submit_urb failed: -71
[  239.561889][ T5962] iforce 1-1:0.0: usb_submit_urb failed: -71
[  239.569088][ T5962] iforce 1-1:0.0: usb_submit_urb failed: -71
[  239.583257][ T5962] iforce 1-1:0.0: usb_submit_urb failed: -71
[  239.595054][ T5962] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input39
[  239.627966][ T5962] usb 1-1: USB disconnect, device number 87
[  239.867189][ T8465] loop2: detected capacity change from 0 to 7
[  239.877499][ T8465] Dev loop2: unable to read RDB block 7
[  239.883559][ T8465]  loop2: unable to read partition table
[  239.889967][ T8465] loop2: partition table beyond EOD, truncated
[  239.896154][ T8465] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  239.953968][   T44] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  240.088709][   T44] usb 5-1: device descriptor read/64, error -71
[  240.122239][ T8471] loop2: detected capacity change from 0 to 7
[  240.131787][ T8471] Dev loop2: unable to read RDB block 7
[  240.137554][ T8471]  loop2: unable to read partition table
[  240.143602][ T8471] loop2: partition table beyond EOD, truncated
[  240.151332][ T8471] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  240.338485][   T44] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  240.488316][   T44] usb 5-1: device descriptor read/64, error -71
[  240.547084][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.561731][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.577033][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.594588][ T8484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.606508][ T8484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.617006][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.626415][   T44] usb usb5-port1: attempt power cycle
[  240.637829][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.651242][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.868578][ T8496] loop2: detected capacity change from 0 to 7
[  240.884449][ T8496] Dev loop2: unable to read RDB block 7
[  240.890594][ T8496]  loop2: unable to read partition table
[  240.896463][ T8496] loop2: partition table beyond EOD, truncated
[  240.903148][ T8496] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  240.968349][   T44] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  240.990011][   T44] usb 5-1: device descriptor read/8, error -71
[  241.024032][ T5953] usb 4-1: USB disconnect, device number 71
[  241.079295][ T8502] loop2: detected capacity change from 0 to 7
[  241.096940][ T5983] Dev loop2: unable to read RDB block 7
[  241.108411][ T5916] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  241.116599][ T5983]  loop2: unable to read partition table
[  241.125192][ T5983] loop2: partition table beyond EOD, truncated
[  241.133554][ T8502] Dev loop2: unable to read RDB block 7
[  241.145978][ T8502]  loop2: unable to read partition table
[  241.152324][ T8502] loop2: partition table beyond EOD, truncated
[  241.161993][ T8502] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  241.248396][   T44] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  241.269080][   T44] usb 5-1: device descriptor read/8, error -71
[  241.292740][ T5916] usb 1-1: Using ep0 maxpacket: 8
[  241.300243][ T5916] usb 1-1: config 148 has an invalid interface number: 18 but max is 2
[  241.308646][ T5916] usb 1-1: config 148 contains an unexpected descriptor of type 0x1, skipping
[  241.317894][ T5916] usb 1-1: config 148 has an invalid interface number: 173 but max is 2
[  241.326351][ T5916] usb 1-1: config 148 has no interface number 0
[  241.332685][ T5916] usb 1-1: config 148 has no interface number 1
[  241.339094][ T5916] usb 1-1: config 148 interface 18 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  241.350357][ T5916] usb 1-1: config 148 interface 18 altsetting 7 bulk endpoint 0xB has invalid maxpacket 32
[  241.360448][ T5916] usb 1-1: config 148 interface 173 altsetting 3 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  241.371647][ T5916] usb 1-1: config 148 interface 173 altsetting 3 has a duplicate endpoint with address 0x7, skipping
[  241.379488][   T44] usb usb5-port1: unable to enumerate USB device
[  241.384875][ T5916] usb 1-1: config 148 interface 2 altsetting 59 has an endpoint descriptor with address 0x97, changing to 0x87
[  241.402765][ T5916] usb 1-1: config 148 interface 2 altsetting 59 has a duplicate endpoint with address 0x87, skipping
[  241.413982][ T5916] usb 1-1: config 148 interface 2 altsetting 59 has a duplicate endpoint with address 0xB, skipping
[  241.425204][ T5916] usb 1-1: config 148 interface 2 altsetting 59 has an invalid descriptor for endpoint zero, skipping
[  241.436248][ T5916] usb 1-1: config 148 interface 2 altsetting 59 has a duplicate endpoint with address 0x7, skipping
[  241.447100][ T5916] usb 1-1: config 148 interface 2 altsetting 59 endpoint 0x3 has an invalid bInterval 73, changing to 7
[  241.460518][ T5916] usb 1-1: config 148 interface 2 altsetting 59 has a duplicate endpoint with address 0xE, skipping
[  241.471945][ T5916] usb 1-1: config 148 interface 2 altsetting 59 endpoint 0xA has an invalid bInterval 129, changing to 11
[  241.484457][ T5916] usb 1-1: config 148 interface 2 altsetting 59 has a duplicate endpoint with address 0x9, skipping
[  241.495331][ T5916] usb 1-1: config 148 interface 2 altsetting 59 has an invalid descriptor for endpoint zero, skipping
[  241.506343][ T5916] usb 1-1: config 148 interface 2 altsetting 59 has a duplicate endpoint with address 0xE, skipping
[  241.517278][ T5916] usb 1-1: config 148 interface 18 has no altsetting 0
[  241.524213][ T5916] usb 1-1: config 148 interface 173 has no altsetting 0
[  241.531287][  T980] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  241.539290][ T5916] usb 1-1: config 148 interface 2 has no altsetting 0
[  241.546534][ T5916] usb 1-1: New USB device found, idVendor=0856, idProduct=ac26, bcdDevice=bc.dd
[  241.555655][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.567264][ T8498] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  241.678426][  T980] usb 4-1: device descriptor read/64, error -71
[  241.790072][ T5916] usb 1-1: string descriptor 0 read error: -71
[  241.803673][ T5916] ftdi_sio 1-1:148.18: FTDI USB Serial Device converter detected
[  241.815092][ T5916] ftdi_sio ttyUSB0: unknown device type: 0xbcdd
[  241.831613][ T5916] ftdi_sio 1-1:148.173: FTDI USB Serial Device converter detected
[  241.843603][ T5916] ftdi_sio ttyUSB1: unknown device type: 0xbcdd
[  241.855337][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.857307][ T5916] ftdi_sio 1-1:148.2: FTDI USB Serial Device converter detected
[  241.872138][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.884108][ T5916] ftdi_sio ttyUSB2: unknown device type: 0xbcdd
[  241.886164][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.905602][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.920089][ T5916] usb 1-1: USB disconnect, device number 88
[  241.928669][  T980] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  241.943310][ T5916] ftdi_sio 1-1:148.18: device disconnected
[  241.958011][ T5916] ftdi_sio 1-1:148.173: device disconnected
[  241.971485][ T5916] ftdi_sio 1-1:148.2: device disconnected
[  242.078488][  T980] usb 4-1: device descriptor read/64, error -71
[  242.188673][  T980] usb usb4-port1: attempt power cycle
[  242.526848][ T8520] netlink: 'syz.1.765': attribute type 10 has an invalid length.
[  242.539414][  T980] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  242.568787][  T980] usb 4-1: device descriptor read/8, error -71
[  242.592701][ T8525] loop2: detected capacity change from 0 to 7
[  242.602923][ T8525] Dev loop2: unable to read RDB block 7
[  242.613104][ T8525]  loop2: unable to read partition table
[  242.630471][ T8525] loop2: partition table beyond EOD, truncated
[  242.637425][ T8525] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  242.799254][ T8531] netlink: 4424 bytes leftover after parsing attributes in process `syz.1.767'.
[  242.809066][  T980] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  242.849016][  T980] usb 4-1: device descriptor read/8, error -71
[  242.968812][  T980] usb usb4-port1: unable to enumerate USB device
[  243.088426][ T5916] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  243.091994][ T8544] loop2: detected capacity change from 0 to 7
[  243.104200][ T8544] Dev loop2: unable to read RDB block 7
[  243.110718][ T8544]  loop2: unable to read partition table
[  243.116828][ T8544] loop2: partition table beyond EOD, truncated
[  243.123743][ T8544] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  243.192385][ T8546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.203460][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.204551][ T8546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.214006][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.229494][ T8546] raw_sendmsg: syz.1.772 forgot to set AF_INET. Fix it!
[  243.239488][ T8546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.250097][ T8546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.251365][ T5916] usb 5-1: Using ep0 maxpacket: 32
[  243.269027][ T5916] usb 5-1: config 4 has an invalid interface number: 128 but max is 0
[  243.277538][ T5916] usb 5-1: config 4 has no interface number 0
[  243.283832][ T5916] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.295041][ T5916] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.305277][  T980] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  243.313206][ T5916] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  243.323115][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.340326][ T5916] hub 5-1:4.128: USB hub found
[  243.488332][  T980] usb 1-1: Using ep0 maxpacket: 8
[  243.495164][  T980] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  243.503969][  T980] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  243.512143][  T980] usb 1-1: config 0 has no interface number 0
[  243.518435][  T980] usb 1-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  243.533716][  T980] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  243.546197][  T980] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  243.553902][ T8530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.556360][  T980] usb 1-1: Product: syz
[  243.568682][ T8530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.578745][  T980] usb 1-1: config 0 descriptor??
[  243.584677][ T5916] hub 5-1:4.128: 9 ports detected
[  243.594240][ T5916] hub 5-1:4.128: Using single TT (err -22)
[  243.601653][ T5916] hub 5-1:4.128: insufficient power available to use all downstream ports
[  243.788054][ T5916] hub 5-1:4.128: hub_hub_status failed (err = -71)
[  243.808356][ T5916] hub 5-1:4.128: config failed, can't get hub status (err -71)
[  243.840864][ T5916] usb 5-1: USB disconnect, device number 37
[  243.979947][ T8556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.989217][ T8556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.447619][ T8561] loop2: detected capacity change from 0 to 7
[  244.457930][ T8561] Dev loop2: unable to read RDB block 7
[  244.463632][ T8561]  loop2: unable to read partition table
[  244.469644][ T8561] loop2: partition table beyond EOD, truncated
[  244.475868][ T8561] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  244.829576][ T7872] raw-gadget.2 gadget.1: failed to queue disconnect event
[  244.978400][ T5916] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  245.138466][ T5916] usb 5-1: Using ep0 maxpacket: 16
[  245.151212][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.168994][ T5916] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  245.179609][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.195552][ T5916] usb 5-1: config 0 descriptor??
[  245.255462][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.266256][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.343391][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.368914][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  245.372612][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.386818][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  245.395938][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  245.407213][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  245.416365][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  245.488464][ T5953] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  245.622205][ T5916] sunplus 0003:04FC:05D8.0019: reserved main item tag 0xd
[  245.632100][ T5916] sunplus 0003:04FC:05D8.0019: unexpected long global item
[  245.642091][ T5916] sunplus 0003:04FC:05D8.0019: probe with driver sunplus failed with error -22
[  245.660124][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7
[  245.683501][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024
[  245.684358][ T8575] chnl_net:caif_netlink_parms(): no params data found
[  245.697248][ T5953] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  245.711345][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.729547][ T5953] usb 4-1: config 0 descriptor??
[  245.846208][ T8575] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.850639][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'.
[  245.858565][ T8575] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.874639][ T8575] bridge_slave_0: entered allmulticast mode
[  245.883119][ T8575] bridge_slave_0: entered promiscuous mode
[  245.893919][   T44] usb 5-1: USB disconnect, device number 38
[  245.897943][ T8575] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.912189][ T8575] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.924611][ T8575] bridge_slave_1: entered allmulticast mode
[  245.935622][ T8575] bridge_slave_1: entered promiscuous mode
[  245.980592][ T8575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  245.994836][ T8575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.039582][ T8575] team0: Port device team_slave_0 added
[  246.048396][ T8575] team0: Port device team_slave_1 added
[  246.095339][ T5962] usb 1-1: USB disconnect, device number 89
[  246.095601][ T8575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.128422][ T8575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.154453][    C0] vkms_vblank_simulate: vblank timer overrun
[  246.161207][ T8575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.177329][ T8575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.188458][ T8575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.215230][ T8575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.282477][ T8585] kvm: pic: non byte write
[  246.306947][ T8575] hsr_slave_0: entered promiscuous mode
[  246.313983][ T8575] hsr_slave_1: entered promiscuous mode
[  246.320554][ T8575] debugfs: 'hsr0' already exists in 'hsr'
[  246.326327][ T8575] Cannot create hsr debugfs directory
[  246.608479][ T5962] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  246.674551][ T8575] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  246.687373][ T8575] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  246.702286][ T8575] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  246.767025][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.791202][ T5962] usb 1-1: Using ep0 maxpacket: 8
[  246.806627][ T5962] usb 1-1: config 0 interface 0 has no altsetting 0
[  246.811813][ T8575] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  246.828539][ T5962] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00
[  246.845085][ T5953] ath6kl: Failed to submit usb control message: -110
[  246.858331][ T5953] ath6kl: unable to send the bmi data to the device: -110
[  246.865690][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.891979][ T5953] ath6kl: Unable to send get target info: -110
[  246.912363][ T5962] usb 1-1: config 0 descriptor??
[  246.922450][ T5953] ath6kl: Failed to init ath6kl core: -110
[  246.944469][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.946908][ T5953] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110
[  246.969785][ T5962] usbhid 1-1:0.0: can't add hid device: -22
[  246.996022][ T5962] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  247.102480][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.187222][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.244805][ T8575] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.352938][ T8575] 8021q: adding VLAN 0 to HW filter on device team0
[  247.382871][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.390082][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.457896][ T8602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.459706][ T5876] Bluetooth: hci1: command tx timeout
[  247.466922][ T8602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.514662][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.521913][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.683537][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  247.702840][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  247.713655][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  247.722958][   T13] bridge_slave_1: left allmulticast mode
[  247.730912][   T13] bridge_slave_1: left promiscuous mode
[  247.736926][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  247.745926][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.755341][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  247.786961][   T13] bridge_slave_0: left allmulticast mode
[  247.793107][   T13] bridge_slave_0: left promiscuous mode
[  247.799362][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.232750][   T13] team0: Port device geneve0 removed
[  248.360534][ T8625] loop2: detected capacity change from 0 to 7
[  248.379539][ T5963] Dev loop2: unable to read RDB block 7
[  248.385347][ T5963]  loop2: unable to read partition table
[  248.396908][ T5963] loop2: partition table beyond EOD, truncated
[  248.407158][ T8625] Dev loop2: unable to read RDB block 7
[  248.413140][ T8625]  loop2: unable to read partition table
[  248.423845][ T8625] loop2: partition table beyond EOD, truncated
[  248.438316][ T8625] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  248.561451][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.572076][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.583787][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.585975][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.604288][   T13] bond0 (unregistering): Released all slaves
[  248.632318][ T8575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  249.093412][ T8575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.147468][ T8604] chnl_net:caif_netlink_parms(): no params data found
[  249.348950][ T5916] usb 1-1: USB disconnect, device number 90
[  249.478294][ T8656] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000004
[  249.539328][ T5870] Bluetooth: hci1: command tx timeout
[  249.541585][ T8604] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.555117][ T8604] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.564023][ T8604] bridge_slave_0: entered allmulticast mode
[  249.575856][ T8604] bridge_slave_0: entered promiscuous mode
[  249.584512][ T8658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.590130][ T8604] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.598938][ T8658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.605268][ T8604] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.615380][ T8604] bridge_slave_1: entered allmulticast mode
[  249.633617][ T8604] bridge_slave_1: entered promiscuous mode
[  249.751193][ T8604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.783082][ T8604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.858601][ T5870] Bluetooth: hci2: command tx timeout
[  249.907080][ T8604] team0: Port device team_slave_0 added
[  249.917452][ T8604] team0: Port device team_slave_1 added
[  249.997335][ T8604] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.005863][ T8604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.033057][ T8604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.067898][ T8604] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.076981][ T8604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.110139][ T8604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.227099][ T8575] veth0_vlan: entered promiscuous mode
[  250.308518][ T5953] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  250.374206][ T8604] hsr_slave_0: entered promiscuous mode
[  250.383109][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.400794][ T8604] hsr_slave_1: entered promiscuous mode
[  250.403792][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.407510][ T8604] debugfs: 'hsr0' already exists in 'hsr'
[  250.436845][ T8604] Cannot create hsr debugfs directory
[  250.468938][ T8575] veth1_vlan: entered promiscuous mode
[  250.480356][ T5953] usb 1-1: Using ep0 maxpacket: 8
[  250.484719][ T5953] usb 1-1: config 2 has an invalid interface number: 31 but max is 0
[  250.484752][ T5953] usb 1-1: config 2 has no interface number 0
[  250.484797][ T5953] usb 1-1: config 2 interface 31 has no altsetting 0
[  250.497281][ T5953] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  250.497315][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.497359][ T5953] usb 1-1: Product: syz
[  250.497377][ T5953] usb 1-1: Manufacturer: syz
[  250.497393][ T5953] usb 1-1: SerialNumber: syz
[  250.572887][   T13] hsr_slave_0: left promiscuous mode
[  250.574156][   T13] hsr_slave_1: left promiscuous mode
[  250.574967][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.574990][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.575908][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.575930][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.605196][   T13] veth1_macvtap: left promiscuous mode
[  250.605302][   T13] veth0_macvtap: left promiscuous mode
[  250.605500][   T13] veth1_vlan: left promiscuous mode
[  250.605562][   T13] veth0_vlan: left promiscuous mode
[  250.948094][ T8674] netlink: 'syz.0.797': attribute type 28 has an invalid length.
[  250.998659][ T5953] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22
[  251.030371][ T5953] usb 1-1: USB disconnect, device number 91
[  251.318596][ T8693] loop2: detected capacity change from 0 to 7
[  251.327609][ T5963] Dev loop2: unable to read RDB block 7
[  251.333485][ T5963]  loop2: unable to read partition table
[  251.339949][ T5963] loop2: partition table beyond EOD, truncated
[  251.347154][ T8693] Dev loop2: unable to read RDB block 7
[  251.354048][ T8693]  loop2: unable to read partition table
[  251.360579][ T8693] loop2: partition table beyond EOD, truncated
[  251.366882][ T8693] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  251.461574][ T8696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.470930][ T8696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.489758][   T13] team0 (unregistering): Port device team_slave_1 removed
[  251.562300][   T13] team0 (unregistering): Port device team_slave_0 removed
[  251.622341][ T5870] Bluetooth: hci1: command tx timeout
[  251.888428][ T5929] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  251.948489][ T5870] Bluetooth: hci2: command tx timeout
[  252.038399][ T5929] usb 1-1: Using ep0 maxpacket: 16
[  252.063184][ T5929] usb 1-1: config 0 has an invalid interface number: 7 but max is 0
[  252.071695][ T5929] usb 1-1: config 0 has no interface number 0
[  252.078492][ T5929] usb 1-1: config 0 interface 7 has no altsetting 0
[  252.099045][ T5929] usb 1-1: New USB device found, idVendor=1199, idProduct=9063, bcdDevice= b.d6
[  252.126176][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.154723][ T5929] usb 1-1: Product: syz
[  252.159106][ T5929] usb 1-1: Manufacturer: syz
[  252.163806][ T5929] usb 1-1: SerialNumber: syz
[  252.196732][ T5929] usb 1-1: config 0 descriptor??
[  252.303549][ T8709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.317147][ T8709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.407912][ T5854] usb 1-1: USB disconnect, device number 92
[  252.462103][ T8575] veth0_macvtap: entered promiscuous mode
[  252.539421][ T8575] veth1_macvtap: entered promiscuous mode
[  252.662507][ T8575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.754710][ T8575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.760288][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'.
[  252.785393][ T1167] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.814847][ T1167] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.841277][ T1167] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.973132][ T1167] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.020828][ T8733] loop2: detected capacity change from 0 to 7
[  253.035217][ T5963] Dev loop2: unable to read RDB block 7
[  253.041459][ T5963]  loop2: unable to read partition table
[  253.047487][ T5963] loop2: partition table beyond EOD, truncated
[  253.084349][ T8733] Dev loop2: unable to read RDB block 7
[  253.102200][ T8733]  loop2: unable to read partition table
[  253.110942][ T8733] loop2: partition table beyond EOD, truncated
[  253.126809][ T8733] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  253.393723][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.421171][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.506233][ T8746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.540061][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.558775][ T8746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.579401][ T5929] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  253.589136][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.691895][ T8604] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  253.701258][ T5870] Bluetooth: hci1: command tx timeout
[  253.720776][ T8604] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  253.738672][ T5929] usb 1-1: device descriptor read/64, error -71
[  253.789237][ T8604] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  253.822489][ T8604] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  254.016959][ T8604] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.018578][ T5929] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  254.024373][ T5870] Bluetooth: hci2: command tx timeout
[  254.064003][ T8604] 8021q: adding VLAN 0 to HW filter on device team0
[  254.078917][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.086151][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.129942][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.137175][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.208398][ T5929] usb 1-1: device descriptor read/64, error -71
[  254.322951][ T5929] usb usb1-port1: attempt power cycle
[  254.678536][ T5929] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  254.755944][ T5929] usb 1-1: device descriptor read/8, error -71
[  254.776226][ T8604] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.893692][ T8798] netlink: 'syz.3.815': attribute type 10 has an invalid length.
[  255.002970][ T5929] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  255.033853][ T8806] loop2: detected capacity change from 0 to 7
[  255.042248][ T5929] usb 1-1: device descriptor read/8, error -71
[  255.054650][ T8806] Dev loop2: unable to read RDB block 7
[  255.062088][ T8806]  loop2: unable to read partition table
[  255.068166][ T8806] loop2: partition table beyond EOD, truncated
[  255.088521][ T8806] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  255.124924][ T5231] Dev loop2: unable to read RDB block 7
[  255.142523][ T5231]  loop2: unable to read partition table
[  255.169252][ T5929] usb usb1-port1: unable to enumerate USB device
[  255.181273][ T5231] loop2: partition table beyond EOD, truncated
[  255.471966][ T8604] veth0_vlan: entered promiscuous mode
[  255.493498][ T8604] veth1_vlan: entered promiscuous mode
[  255.585717][ T8604] veth0_macvtap: entered promiscuous mode
[  255.596745][ T8604] veth1_macvtap: entered promiscuous mode
[  255.649506][ T8604] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.689440][ T8604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.723294][ T1341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.734404][ T1341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.765333][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.785810][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.926837][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.948940][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.955289][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  255.978961][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.071371][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.083450][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.104666][ T5870] Bluetooth: hci2: command tx timeout
[  256.272778][ T8841] loop2: detected capacity change from 0 to 7
[  256.309717][ T8841] Dev loop2: unable to read RDB block 7
[  256.316543][ T8841]  loop2: unable to read partition table
[  256.330404][ T8841] loop2: partition table beyond EOD, truncated
[  256.358902][ T8841] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  256.524242][ T8849] kvm: kvm [8848]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1201ba41f1f636b2
[  256.531484][ T8851] 9pnet_fd: p9_fd_create_tcp (8851): problem binding to privport
[  256.607549][ T8855] loop2: detected capacity change from 0 to 7
[  256.656595][ T8855] Dev loop2: unable to read RDB block 7
[  256.671206][ T8855]  loop2: unable to read partition table
[  256.684016][ T8855] loop2: partition table beyond EOD, truncated
[  256.708410][ T8855] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  257.129785][ T8868] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  257.149640][ T5929] usb 1-1: new full-speed USB device number 97 using dummy_hcd
[  257.174003][ T8868] overlayfs: missing 'lowerdir'
[  257.320521][ T5929] usb 1-1: not running at top speed; connect to a high speed hub
[  257.357125][ T5929] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  257.378685][ T5929] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  257.407119][ T5929] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  257.419870][ T5929] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  257.433732][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.442002][ T5929] usb 1-1: Product: syz
[  257.446204][ T5929] usb 1-1: Manufacturer: syz
[  257.451052][ T5929] usb 1-1: SerialNumber: syz
[  257.730655][ T5929] usb 1-1: 0:2 : does not exist
[  257.795500][ T5929] usb 1-1: USB disconnect, device number 97
[  257.850656][ T5854] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  257.958743][ T8882] loop2: detected capacity change from 0 to 7
[  257.966219][ T8882] Dev loop2: unable to read RDB block 7
[  257.977526][ T8882]  loop2: unable to read partition table
[  257.983664][ T8882] loop2: partition table beyond EOD, truncated
[  257.994947][ T8882] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  258.018615][ T5854] usb 5-1: device descriptor read/64, error -71
[  258.259830][ T5854] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  258.319382][ T8895] loop2: detected capacity change from 0 to 7
[  258.335578][ T5963] Dev loop2: unable to read RDB block 7
[  258.354630][ T5963]  loop2: unable to read partition table
[  258.360895][ T5963] loop2: partition table beyond EOD, truncated
[  258.380234][ T8895] Dev loop2: unable to read RDB block 7
[  258.386035][ T8895]  loop2: unable to read partition table
[  258.392577][ T8895] loop2: partition table beyond EOD, truncated
[  258.399730][ T5854] usb 5-1: device descriptor read/64, error -71
[  258.408947][ T8895] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  258.507139][ T8901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.840'.
[  258.521687][ T5854] usb usb5-port1: attempt power cycle
[  258.657058][ T8909] netlink: 'syz.0.842': attribute type 1 has an invalid length.
[  258.663078][ T8912] loop2: detected capacity change from 0 to 7
[  258.673603][ T8912] Dev loop2: unable to read RDB block 7
[  258.679992][ T8912]  loop2: unable to read partition table
[  258.681550][ T8909] netlink: 228 bytes leftover after parsing attributes in process `syz.0.842'.
[  258.686201][ T8912] loop2: partition table beyond EOD, truncated
[  258.689213][ T8912] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  258.823582][ T8916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.847458][ T8916] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.859219][ T5854] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  258.905960][ T5854] usb 5-1: device descriptor read/8, error -71
[  259.148380][ T5854] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  259.170101][ T5854] usb 5-1: device descriptor read/8, error -71
[  259.178429][  T980] usb 1-1: new low-speed USB device number 98 using dummy_hcd
[  259.278865][ T5854] usb usb5-port1: unable to enumerate USB device
[  259.330449][  T980] usb 1-1: config 0 has an invalid interface number: 183 but max is 0
[  259.338788][  T980] usb 1-1: config 0 has no interface number 0
[  259.344947][  T980] usb 1-1: config 0 interface 183 has no altsetting 0
[  259.434643][ T8922] Invalid ELF header len 16
[  259.447196][ T8922] blk_print_req_error: 2 callbacks suppressed
[  259.447212][ T8922] I/O error, dev loop3, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  259.466339][ T8922] gfs2: error -5 reading superblock
[  259.686989][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.696206][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.697945][ T8929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.715983][ T8927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.725525][ T8929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.729007][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.744282][ T8927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.751196][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.753945][ T8929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.770129][ T8929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.775710][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.792802][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.675045][ T8931] loop2: detected capacity change from 0 to 7
[  260.684042][ T5963] Dev loop2: unable to read RDB block 7
[  260.690330][ T5963]  loop2: unable to read partition table
[  260.696390][ T5963] loop2: partition table beyond EOD, truncated
[  260.704753][ T8931] Dev loop2: unable to read RDB block 7
[  260.714432][ T8931]  loop2: unable to read partition table
[  260.720596][ T8931] loop2: partition table beyond EOD, truncated
[  260.726914][ T8931] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  261.205046][ T8940] loop2: detected capacity change from 0 to 7
[  261.213958][ T8940] Dev loop2: unable to read RDB block 7
[  261.220623][ T8940]  loop2: unable to read partition table
[  261.226512][ T8940] loop2: partition table beyond EOD, truncated
[  261.233056][ T8940] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  261.268453][ T5854] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  261.338875][ T8942] netlink: 60 bytes leftover after parsing attributes in process `syz.5.854'.
[  261.348075][ T8942] netlink: 'syz.5.854': attribute type 5 has an invalid length.
[  261.448390][ T5854] usb 5-1: Using ep0 maxpacket: 16
[  261.465303][ T5854] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00
[  261.481497][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.490419][ T5854] usb 5-1: Product: syz
[  261.494766][ T5854] usb 5-1: Manufacturer: syz
[  261.502767][ T5854] usb 5-1: SerialNumber: syz
[  261.513700][ T5854] usb 5-1: config 0 descriptor??
[  261.531059][ T5854] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  261.545189][ T5854] usb 5-1: Detected FT4233HP
[  261.733098][ T8938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.742426][ T8938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.752263][ T5854] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  261.763008][ T5854] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  261.772758][ T5854] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  261.785953][ T5854] usb 5-1: USB disconnect, device number 43
[  261.803228][ T5854] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  261.813635][ T5854] ftdi_sio 5-1:0.0: device disconnected
[  261.966477][  T980] usb 1-1: New USB device found, idVendor=1bc7, idProduct=10b1, bcdDevice=37.36
[  261.989504][  T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.001340][  T980] usb 1-1: config 0 descriptor??
[  262.006947][  T980] usb 1-1: can't set config #0, error -71
[  262.014629][  T980] usb 1-1: USB disconnect, device number 98
[  262.039015][ T8952] loop2: detected capacity change from 0 to 7
[  262.046208][ T8952] Dev loop2: unable to read RDB block 7
[  262.052972][ T8952]  loop2: unable to read partition table
[  262.061039][ T8952] loop2: partition table beyond EOD, truncated
[  262.067352][ T8952] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  262.334709][ T8960] loop2: detected capacity change from 0 to 7
[  262.346025][ T8960] Dev loop2: unable to read RDB block 7
[  262.351877][ T8960]  loop2: unable to read partition table
[  262.357793][ T8960] loop2: partition table beyond EOD, truncated
[  262.373505][ T8960] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  262.698450][  T980] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  262.821811][ T8973] loop2: detected capacity change from 0 to 7
[  262.830138][ T8973] Dev loop2: unable to read RDB block 7
[  262.835869][ T8973]  loop2: unable to read partition table
[  262.844117][ T8973] loop2: partition table beyond EOD, truncated
[  262.850578][  T980] usb 5-1: device descriptor read/64, error -71
[  262.852471][ T8973] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  263.108570][  T980] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  263.130085][ T8981] loop2: detected capacity change from 0 to 7
[  263.137432][ T8981] Dev loop2: unable to read RDB block 7
[  263.144053][ T8981]  loop2: unable to read partition table
[  263.152707][ T8981] loop2: partition table beyond EOD, truncated
[  263.159170][ T8981] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  263.233728][ T8983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.243734][ T8983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.248966][  T980] usb 5-1: device descriptor read/64, error -71
[  263.261679][ T8983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.270445][ T8983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.368722][  T980] usb usb5-port1: attempt power cycle
[  263.708622][  T980] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  263.739016][  T980] usb 5-1: device descriptor read/8, error -71
[  263.825227][ T8985] 8021q: VLANs not supported on ip_vti0
[  263.863403][ T8985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.873'.
[  263.998904][  T980] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  264.021942][  T980] usb 5-1: device descriptor read/8, error -71
[  264.025202][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.043818][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.148810][  T980] usb usb5-port1: unable to enumerate USB device
[  264.643187][ T8995] loop2: detected capacity change from 0 to 7
[  264.661869][ T8995] Dev loop2: unable to read RDB block 7
[  264.667518][ T8995]  loop2: unable to read partition table
[  264.680162][ T8995] loop2: partition table beyond EOD, truncated
[  264.686389][ T8995] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  264.820736][ T9010] kvm: kvm [9009]: vcpu0, guest rIP: 0x8000000 Unhandled WRMSR(0x4000003a) = 0x0
[  265.066899][ T9024] loop2: detected capacity change from 0 to 7
[  265.082412][ T9024] Dev loop2: unable to read RDB block 7
[  265.090352][ T9024]  loop2: unable to read partition table
[  265.096274][ T9024] loop2: partition table beyond EOD, truncated
[  265.102658][ T9024] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  265.342693][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.883'.
[  265.352497][ T9037] netlink: 'syz.5.883': attribute type 29 has an invalid length.
[  265.361238][ T9038] netlink: 'syz.5.883': attribute type 29 has an invalid length.
[  265.423784][ T9041] netlink: 'syz.5.884': attribute type 10 has an invalid length.
[  265.432752][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.5.884'.
[  265.446357][ T9041] batman_adv: batadv0: Adding interface: virt_wifi0
[  265.455152][ T9041] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.481980][ T9041] batman_adv: batadv0: Interface activated: virt_wifi0
[  265.814064][ T9061] netlink: 'syz.3.887': attribute type 27 has an invalid length.
[  265.831388][ T9061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.842259][ T9061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.059389][ T5962] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  266.188359][ T5962] usb 5-1: device descriptor read/64, error -71
[  266.428333][ T5962] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  266.520651][ T9075] loop2: detected capacity change from 0 to 7
[  266.528157][ T9075] Dev loop2: unable to read RDB block 7
[  266.535767][ T9075]  loop2: unable to read partition table
[  266.543605][ T9075] loop2: partition table beyond EOD, truncated
[  266.549911][ T9075] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  266.559355][ T5962] usb 5-1: device descriptor read/64, error -71
[  266.625655][ T9080] loop2: detected capacity change from 0 to 7
[  266.633317][ T9080] Dev loop2: unable to read RDB block 7
[  266.640650][ T9080]  loop2: unable to read partition table
[  266.646607][ T9080] loop2: partition table beyond EOD, truncated
[  266.655326][ T9080] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  266.668684][ T5962] usb usb5-port1: attempt power cycle
[  266.724410][ T9085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.739313][ T9085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.020862][ T5962] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  267.049680][ T5962] usb 5-1: device descriptor read/8, error -71
[  267.302284][ T5962] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  267.335033][ T5962] usb 5-1: device descriptor read/8, error -71
[  267.428449][   T44] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[  267.448938][ T5962] usb usb5-port1: unable to enumerate USB device
[  267.578297][   T44] usb 1-1: device descriptor read/64, error -71
[  267.767551][ T9102] Bluetooth: MGMT ver 1.23
[  267.832561][   T44] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[  267.968328][   T44] usb 1-1: device descriptor read/64, error -71
[  268.088655][ T9120] tmpfs: Unknown parameter 'tmpfs'
[  268.094372][   T44] usb usb1-port1: attempt power cycle
[  268.097102][ T9120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.115145][ T9120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.461280][   T44] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[  268.489098][   T44] usb 1-1: device descriptor read/8, error -71
[  268.652779][ T9128] loop2: detected capacity change from 0 to 7
[  268.682243][ T9128] Dev loop2: unable to read RDB block 7
[  268.707697][ T9128]  loop2: unable to read partition table
[  268.713872][ T9128] loop2: partition table beyond EOD, truncated
[  268.725937][ T9128] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  268.741374][   T44] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[  268.769037][ T5231] Dev loop2: unable to read RDB block 7
[  268.774821][ T5231]  loop2: unable to read partition table
[  268.782417][   T44] usb 1-1: device descriptor read/8, error -71
[  268.790405][ T5231] loop2: partition table beyond EOD, truncated
[  268.909029][   T44] usb usb1-port1: unable to enumerate USB device
[  269.679436][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.689470][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.268556][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.286264][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.421278][ T9184] loop2: detected capacity change from 0 to 7
[  270.430795][ T9184] Dev loop2: unable to read RDB block 7
[  270.436576][ T9184]  loop2: unable to read partition table
[  270.443490][ T9184] loop2: partition table beyond EOD, truncated
[  270.450038][ T9184] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  270.749837][   T44] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[  270.833953][ T9194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.843140][ T9194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.908469][   T44] usb 1-1: Using ep0 maxpacket: 16
[  270.920205][   T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  270.936307][   T44] usb 1-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=7f.c5
[  270.946827][   T44] usb 1-1: New USB device strings: Mfr=242, Product=2, SerialNumber=3
[  270.960594][   T44] usb 1-1: Product: syz
[  270.964813][   T44] usb 1-1: Manufacturer: syz
[  270.974048][   T44] usb 1-1: SerialNumber: syz
[  270.992044][   T44] usb 1-1: config 0 descriptor??
[  271.001373][   T44] usb 1-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state
[  271.024448][   T44] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  271.039771][   T44] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT)
[  271.052264][   T44] usb 1-1: media controller created
[  271.096892][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  271.140378][   T44] usb 1-1: selecting invalid altsetting 2
[  271.146171][   T44] set interface failed
[  271.147778][   T44] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  271.164218][   T44] error writing reg: 0xff, val: 0x00
[  271.248290][   T44] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  271.286211][ T9189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.304484][ T9189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.398784][  T980] usb 1-1: USB disconnect, device number 103
[  271.444286][ T9219] loop2: detected capacity change from 0 to 7
[  271.455002][ T9219] Dev loop2: unable to read RDB block 7
[  271.461540][ T9219]  loop2: unable to read partition table
[  271.467506][ T9219] loop2: partition table beyond EOD, truncated
[  271.477401][ T9219] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  271.509465][ T5231] Dev loop2: unable to read RDB block 7
[  271.515206][ T5231]  loop2: unable to read partition table
[  271.522243][ T5231] loop2: partition table beyond EOD, truncated
[  271.665116][ T9225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.679948][ T9225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.115370][ T9256] binder: 9255:9256 ioctl c018620c 200000000340 returned -1
[  272.128766][ T9256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.141316][ T9259] netlink: 'syz.4.918': attribute type 10 has an invalid length.
[  272.143268][ T9256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.155265][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.164734][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.181574][ T9259] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.188817][ T9259] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.196370][ T9259] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.203670][ T9259] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.218323][  T980] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[  272.235674][ T9259] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  272.264151][ T9265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.279733][ T9265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.388361][  T980] usb 1-1: Using ep0 maxpacket: 8
[  272.397580][  T980] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b
[  272.411391][  T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.419774][  T980] usb 1-1: Product: syz
[  272.423993][  T980] usb 1-1: Manufacturer: syz
[  272.428928][  T980] usb 1-1: SerialNumber: syz
[  272.437269][  T980] usb 1-1: config 0 descriptor??
[  272.451841][  T980] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state.
[  272.461099][  T980] dvb-usb: bulk message failed: -22 (2/0)
[  272.471019][  T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  272.481862][  T980] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2)
[  272.491133][  T980] usb 1-1: media controller created
[  272.515545][  T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  272.652817][  T980] cxusb: set interface failed
[  272.657755][  T980] dvb-usb: bulk message failed: -22 (1/0)
[  272.695847][  T980] DVB: Unable to find symbol mt352_attach()
[  272.704590][  T980] dvb-usb: bulk message failed: -22 (5/0)
[  272.710704][  T980] zl10353_read_register: readreg error (reg=127, ret==-121)
[  272.720619][  T980] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2'
[  272.790974][  T980] rc_core: IR keymap rc-dvico-mce not found
[  272.797060][  T980] Registered IR keymap rc-empty
[  272.806680][  T980] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  272.831650][  T980] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input41
[  272.847186][  T980] dvb-usb: schedule remote query interval to 100 msecs.
[  272.854483][  T980] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected.
[  272.873012][  T980] usb 1-1: USB disconnect, device number 104
[  272.910541][ T9285] loop2: detected capacity change from 0 to 7
[  272.938580][ T9285] Dev loop2: unable to read RDB block 7
[  272.954519][ T9285]  loop2: unable to read partition table
[  272.974177][ T9285] loop2: partition table beyond EOD, truncated
[  272.989271][ T9285] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  273.026473][  T980] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected.
[  273.335927][ T9318] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.345334][ T9322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.392319][ T9322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.859076][ T5916] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[  274.038674][ T5916] usb 1-1: Using ep0 maxpacket: 8
[  274.042903][ T9346] loop2: detected capacity change from 0 to 7
[  274.056309][ T5916] usb 1-1: unable to read config index 0 descriptor/start: -61
[  274.064970][ T5963] Dev loop2: unable to read RDB block 7
[  274.070930][ T5963]  loop2: unable to read partition table
[  274.076839][ T5963] loop2: partition table beyond EOD, truncated
[  274.083440][ T5916] usb 1-1: can't read configurations, error -61
[  274.092597][ T9346] Dev loop2: unable to read RDB block 7
[  274.103128][ T9346]  loop2: unable to read partition table
[  274.109108][ T9346] loop2: partition table beyond EOD, truncated
[  274.118623][ T9346] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  274.209050][ T9357] loop2: detected capacity change from 0 to 7
[  274.217586][ T5963] Dev loop2: unable to read RDB block 7
[  274.226653][ T5963]  loop2: unable to read partition table
[  274.228712][ T5916] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  274.241316][ T5963] loop2: partition table beyond EOD, truncated
[  274.253762][ T9357] Dev loop2: unable to read RDB block 7
[  274.259833][ T9357]  loop2: unable to read partition table
[  274.265840][ T9357] loop2: partition table beyond EOD, truncated
[  274.273979][ T9357] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  274.408350][ T5916] usb 1-1: Using ep0 maxpacket: 8
[  274.420145][ T5916] usb 1-1: unable to read config index 0 descriptor/start: -61
[  274.424879][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.432578][ T5916] usb 1-1: can't read configurations, error -61
[  274.441807][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.453044][ T5916] usb usb1-port1: attempt power cycle
[  274.798431][ T5916] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  274.819047][ T5916] usb 1-1: Using ep0 maxpacket: 8
[  274.826235][ T5916] usb 1-1: unable to read config index 0 descriptor/start: -61
[  274.834180][ T5916] usb 1-1: can't read configurations, error -61
[  274.968506][ T5916] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  274.990453][ T5916] usb 1-1: Using ep0 maxpacket: 8
[  274.997277][ T5916] usb 1-1: unable to read config index 0 descriptor/start: -61
[  275.005068][ T5916] usb 1-1: can't read configurations, error -61
[  275.011777][ T5916] usb usb1-port1: unable to enumerate USB device
[  275.169033][  T983] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  275.307969][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.937'.
[  275.355058][  T983] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  275.363409][  T983] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  275.387267][  T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  275.412712][  T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  275.436326][  T983] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  275.454940][  T983] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  275.464392][  T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.484300][  T983] usb 5-1: config 0 descriptor??
[  275.490369][ T9371] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22
[  275.905529][  T983] plantronics 0003:047F:FFFF.001A: reserved main item tag 0xd
[  275.929359][  T983] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  276.160551][ T9371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.935'.
[  276.169727][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.935'.
[  276.185530][ T5972] usb 5-1: USB disconnect, device number 52
[  276.968372][  T983] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  277.028370][ T5854] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[  277.120278][  T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.131550][  T983] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  277.140823][  T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.155496][  T983] usb 5-1: config 0 descriptor??
[  277.188677][ T5854] usb 1-1: Using ep0 maxpacket: 32
[  277.196454][ T5854] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  277.205461][ T5854] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  277.214170][ T5854] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  277.225194][ T5854] usb 1-1: config 1 has no interface number 0
[  277.231410][ T5854] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  277.242478][ T5854] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  277.255449][ T5854] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  277.264670][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.293481][ T5854] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  277.418109][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.430676][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.442678][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'.
[  277.487432][ T5854] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  277.573722][  T983] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor
[  277.588444][  T983] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001B/input/input43
[  277.702733][  T983] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  278.011429][ T9459] loop2: detected capacity change from 0 to 7
[  278.022283][ T9459] Dev loop2: unable to read RDB block 7
[  278.029757][ T9459]  loop2: unable to read partition table
[  278.035762][ T9459] loop2: partition table beyond EOD, truncated
[  278.043523][ T9459] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  278.050026][ T5870] Bluetooth: hci0: unexpected event for opcode 0x0c25
[  278.131250][    C1] keyboard: can't emulate rawmode for keycode 240
[  278.138717][    C1] keyboard: can't emulate rawmode for keycode 240
[  278.145925][    C1] keyboard: can't emulate rawmode for keycode 240
[  278.154227][    C1] keyboard: can't emulate rawmode for keycode 240
[  278.160708][    C1] keyboard: can't emulate rawmode for keycode 240
[  278.167210][    C1] keyboard: can't emulate rawmode for keycode 240
[  278.173658][    C1] keyboard: can't emulate rawmode for keycode 240
[  278.180257][    C1] vkms_vblank_simulate: vblank timer overrun
[  278.186962][    C1] keyboard: can't emulate rawmode for keycode 240
[  278.193492][    C1] keyboard: can't emulate rawmode for keycode 240
[  278.200835][    C1] keyboard: can't emulate rawmode for keycode 240
[  278.236888][ T9466] loop2: detected capacity change from 0 to 7
[  278.246747][ T9466] Dev loop2: unable to read RDB block 7
[  278.252977][ T9466]  loop2: unable to read partition table
[  278.259803][ T9466] loop2: partition table beyond EOD, truncated
[  278.266242][ T9466] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  278.508385][ T5854] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  278.731953][ T9494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.743352][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.325587][ T9498] fuse: Bad value for 'rootmode'
[  279.412737][ T9500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.422482][ T9500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.684539][ T5916] usb 1-1: USB disconnect, device number 109
[  279.697537][ T5916] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  279.754857][ T5854] usb 5-1: USB disconnect, device number 53
[  279.819879][ T9519] loop2: detected capacity change from 0 to 7
[  279.829792][ T9519] Dev loop2: unable to read RDB block 7
[  279.837784][ T9519]  loop2: unable to read partition table
[  279.854170][ T9519] loop2: partition table beyond EOD, truncated
[  279.865984][ T9519] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  280.024156][ T9541] loop2: detected capacity change from 0 to 7
[  280.038126][ T9541] Dev loop2: unable to read RDB block 7
[  280.046286][ T9541]  loop2: unable to read partition table
[  280.055875][ T9541] loop2: partition table beyond EOD, truncated
[  280.064460][ T9541] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  280.382282][ T9571] support for cryptoloop has been removed.  Use dm-crypt instead.
[  280.435251][ T9573] netlink: 48 bytes leftover after parsing attributes in process `syz.3.959'.
[  280.468984][ T5972] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  280.618363][ T5972] usb 5-1: Using ep0 maxpacket: 8
[  280.635494][ T5972] usb 5-1: unable to read config index 0 descriptor/start: -61
[  280.658570][ T5972] usb 5-1: can't read configurations, error -61
[  280.698952][ T9589] loop2: detected capacity change from 0 to 7
[  280.708328][ T9589] Dev loop2: unable to read RDB block 7
[  280.714339][ T9589]  loop2: unable to read partition table
[  280.720654][ T9589] loop2: partition table beyond EOD, truncated
[  280.726886][ T9589] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  280.796603][ T9576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.815586][ T5972] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  280.832000][ T9576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.978643][ T5972] usb 5-1: Using ep0 maxpacket: 8
[  280.994358][ T5972] usb 5-1: unable to read config index 0 descriptor/start: -61
[  281.003191][ T5972] usb 5-1: can't read configurations, error -61
[  281.010809][ T5972] usb usb5-port1: attempt power cycle
[  281.030651][ T9606] loop2: detected capacity change from 0 to 7
[  281.041231][ T9606] Dev loop2: unable to read RDB block 7
[  281.046873][ T9606]  loop2: unable to read partition table
[  281.053039][ T9606] loop2: partition table beyond EOD, truncated
[  281.059483][ T9606] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  281.348430][ T5972] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  281.369724][ T5972] usb 5-1: Using ep0 maxpacket: 8
[  281.380651][ T5972] usb 5-1: unable to read config index 0 descriptor/start: -61
[  281.389068][ T5972] usb 5-1: can't read configurations, error -61
[  281.519697][ T5972] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  281.542278][ T5972] usb 5-1: Using ep0 maxpacket: 8
[  281.552876][ T5972] usb 5-1: unable to read config index 0 descriptor/start: -61
[  281.561041][ T5972] usb 5-1: can't read configurations, error -61
[  281.564764][ T9632] FAULT_INJECTION: forcing a failure.
[  281.564764][ T9632] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  281.571152][ T5972] usb usb5-port1: unable to enumerate USB device
[  281.585307][ T9632] CPU: 0 UID: 0 PID: 9632 Comm: syz.3.968 Not tainted syzkaller #0 PREEMPT(full) 
[  281.585342][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  281.585362][ T9632] Call Trace:
[  281.585371][ T9632]  <TASK>
[  281.585381][ T9632]  dump_stack_lvl+0x189/0x250
[  281.585426][ T9632]  ? __pfx____ratelimit+0x10/0x10
[  281.585458][ T9632]  ? __pfx_dump_stack_lvl+0x10/0x10
[  281.585492][ T9632]  ? __pfx__printk+0x10/0x10
[  281.585525][ T9632]  ? __might_fault+0xb0/0x130
[  281.585563][ T9632]  should_fail_ex+0x414/0x560
[  281.585601][ T9632]  _copy_from_iter+0x1de/0x1790
[  281.585636][ T9632]  ? __lock_acquire+0xab9/0xd20
[  281.585672][ T9632]  ? __pfx__copy_from_iter+0x10/0x10
[  281.585722][ T9632]  tun_get_user+0x219/0x3e20
[  281.585772][ T9632]  ? aa_file_perm+0x44d/0x1550
[  281.585793][ T9632]  ? __pfx_tun_get_user+0x10/0x10
[  281.585820][ T9632]  ? _parse_integer_limit+0x1ae/0x1f0
[  281.585857][ T9632]  ? __lock_acquire+0xab9/0xd20
[  281.585888][ T9632]  ? ref_tracker_alloc+0x318/0x460
[  281.585912][ T9632]  ? __lock_acquire+0xab9/0xd20
[  281.585938][ T9632]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  281.585970][ T9632]  ? tun_get+0x1c/0x2f0
[  281.586004][ T9632]  ? tun_get+0x1c/0x2f0
[  281.586030][ T9632]  ? tun_get+0x1c/0x2f0
[  281.586063][ T9632]  tun_chr_write_iter+0x113/0x200
[  281.586093][ T9632]  vfs_write+0x5c6/0xb30
[  281.586126][ T9632]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  281.586155][ T9632]  ? __pfx_vfs_write+0x10/0x10
[  281.586193][ T9632]  ? __fget_files+0x2a/0x420
[  281.586233][ T9632]  ksys_write+0x145/0x250
[  281.586263][ T9632]  ? __pfx_ksys_write+0x10/0x10
[  281.586293][ T9632]  ? do_syscall_64+0xbe/0xfa0
[  281.586330][ T9632]  do_syscall_64+0xfa/0xfa0
[  281.586363][ T9632]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.586395][ T9632]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.586416][ T9632]  ? clear_bhb_loop+0x60/0xb0
[  281.586454][ T9632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.586475][ T9632] RIP: 0033:0x7fc5fcd8ebe9
[  281.586507][ T9632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.586526][ T9632] RSP: 002b:00007fc5fdce9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  281.586549][ T9632] RAX: ffffffffffffffda RBX: 00007fc5fcfc5fa0 RCX: 00007fc5fcd8ebe9
[  281.586566][ T9632] RDX: 0000000000000072 RSI: 0000200000000100 RDI: 0000000000000003
[  281.586586][ T9632] RBP: 00007fc5fdce9090 R08: 0000000000000000 R09: 0000000000000000
[  281.586601][ T9632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  281.586615][ T9632] R13: 00007fc5fcfc6038 R14: 00007fc5fcfc5fa0 R15: 00007ffe99eebb08
[  281.586652][ T9632]  </TASK>
[  281.932110][ T9649] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  281.982466][ T9649] 8021q: VLANs not supported on ip6_vti0
[  281.992832][ T9649] netlink: 56 bytes leftover after parsing attributes in process `syz.0.970'.
[  282.004572][ T9662] loop2: detected capacity change from 0 to 7
[  282.012798][ T5963] Dev loop2: unable to read RDB block 7
[  282.018684][ T5963]  loop2: unable to read partition table
[  282.024750][ T5963] loop2: partition table beyond EOD, truncated
[  282.042045][ T9662] Dev loop2: unable to read RDB block 7
[  282.047957][ T9662]  loop2: unable to read partition table
[  282.056437][ T9662] loop2: partition table beyond EOD, truncated
[  282.063208][ T9662] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  282.194616][ T9672] loop2: detected capacity change from 0 to 7
[  282.209815][ T5963] Dev loop2: unable to read RDB block 7
[  282.216766][ T5963]  loop2: unable to read partition table
[  282.226955][ T5963] loop2: partition table beyond EOD, truncated
[  282.239535][ T9672] Dev loop2: unable to read RDB block 7
[  282.245312][ T9672]  loop2: unable to read partition table
[  282.251763][ T9672] loop2: partition table beyond EOD, truncated
[  282.258729][ T9672] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  282.519558][ T9697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.528456][ T9697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.608343][ T5972] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  282.768362][ T5972] usb 1-1: Using ep0 maxpacket: 32
[  282.775840][ T5972] usb 1-1: unable to get BOS descriptor or descriptor too short
[  282.785325][ T5972] usb 1-1: config 8 has an invalid interface number: 59 but max is 0
[  282.793795][ T5972] usb 1-1: config 8 has no interface number 0
[  282.800246][ T5972] usb 1-1: config 8 interface 59 has no altsetting 0
[  282.809669][ T5972] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  282.818899][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.826919][ T5972] usb 1-1: Product: syz
[  282.831305][ T5972] usb 1-1: Manufacturer: syz
[  282.835934][ T5972] usb 1-1: SerialNumber: syz
[  283.085840][ T9682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.141451][ T9682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.214329][ T5972] usb 1-1: USB disconnect, device number 110
[  283.287025][ T9731] loop2: detected capacity change from 0 to 7
[  283.298043][ T9731] Dev loop2: unable to read RDB block 7
[  283.323246][ T9731]  loop2: unable to read partition table
[  283.329571][ T9731] loop2: partition table beyond EOD, truncated
[  283.359995][ T9731] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  283.535220][ T9755] netlink: 60 bytes leftover after parsing attributes in process `syz.0.983'.
[  283.549966][ T9746] netlink: 60 bytes leftover after parsing attributes in process `syz.0.983'.
[  283.664869][ T9759] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  283.678675][ T9761] loop2: detected capacity change from 0 to 7
[  283.680580][   T44] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  283.688929][ T5963] Dev loop2: unable to read RDB block 7
[  283.702571][ T5963]  loop2: unable to read partition table
[  283.709752][ T5963] loop2: partition table beyond EOD, truncated
[  283.717267][ T9761] Dev loop2: unable to read RDB block 7
[  283.726355][ T9761]  loop2: unable to read partition table
[  283.732617][ T9761] loop2: partition table beyond EOD, truncated
[  283.739674][ T9761] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  283.874557][   T44] usb 5-1: Using ep0 maxpacket: 32
[  283.897069][   T44] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  283.916136][   T44] usb 5-1: config 0 has no interface number 0
[  283.926993][   T44] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  283.936501][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.945716][   T44] usb 5-1: Product: syz
[  283.950133][   T44] usb 5-1: Manufacturer: syz
[  283.954834][   T44] usb 5-1: SerialNumber: syz
[  283.964491][   T44] usb 5-1: config 0 descriptor??
[  283.982387][   T44] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  284.188730][   T44] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  284.210512][   T44] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  284.223431][ T5929] usb 1-1: new full-speed USB device number 111 using dummy_hcd
[  284.376080][ T9798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.388408][ T9798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.401372][ T5929] usb 1-1: unable to get BOS descriptor or descriptor too short
[  284.402655][ T9735] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  284.414655][ T5929] usb 1-1: not running at top speed; connect to a high speed hub
[  284.431757][ T5929] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  284.445718][ T5929] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=74.1b
[  284.455391][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.463613][ T5929] usb 1-1: Product: syz
[  284.467811][ T5929] usb 1-1: Manufacturer: syz
[  284.472521][ T5929] usb 1-1: SerialNumber: syz
[  284.621749][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  284.624847][ T5916] usb 5-1: USB disconnect, device number 58
[  284.644575][ T5916] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  284.667688][ T5916] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  284.680370][ T5916] quatech2 5-1:0.51: device disconnected
[  284.720202][ T5929] usb 1-1: USB disconnect, device number 111
[  284.915786][ T9830] FAULT_INJECTION: forcing a failure.
[  284.915786][ T9830] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  284.930104][ T9830] CPU: 0 UID: 0 PID: 9830 Comm: syz.5.990 Not tainted syzkaller #0 PREEMPT(full) 
[  284.930133][ T9830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  284.930145][ T9830] Call Trace:
[  284.930154][ T9830]  <TASK>
[  284.930166][ T9830]  dump_stack_lvl+0x189/0x250
[  284.930203][ T9830]  ? __pfx____ratelimit+0x10/0x10
[  284.930239][ T9830]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.930271][ T9830]  ? __pfx__printk+0x10/0x10
[  284.930302][ T9830]  ? __might_fault+0xb0/0x130
[  284.930336][ T9830]  should_fail_ex+0x414/0x560
[  284.930363][ T9830]  _copy_from_iter+0x1de/0x1790
[  284.930398][ T9830]  ? rcu_is_watching+0x15/0xb0
[  284.930428][ T9830]  ? kmalloc_reserve+0xbd/0x290
[  284.930458][ T9830]  ? __pfx__copy_from_iter+0x10/0x10
[  284.930494][ T9830]  ? __local_bh_enable_ip+0x12d/0x1c0
[  284.930519][ T9830]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.930552][ T9830]  skb_copy_datagram_from_iter+0xf5/0x720
[  284.930582][ T9830]  ? iov_iter_single_seg_count+0xc9/0x2f0
[  284.930615][ T9830]  tun_get_user+0x1691/0x3e20
[  284.930663][ T9830]  ? aa_file_perm+0x44d/0x1550
[  284.930681][ T9830]  ? __pfx_tun_get_user+0x10/0x10
[  284.930705][ T9830]  ? _parse_integer_limit+0x1ae/0x1f0
[  284.930740][ T9830]  ? __lock_acquire+0xab9/0xd20
[  284.930769][ T9830]  ? ref_tracker_alloc+0x318/0x460
[  284.930790][ T9830]  ? __lock_acquire+0xab9/0xd20
[  284.930814][ T9830]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  284.930844][ T9830]  ? tun_get+0x1c/0x2f0
[  284.930875][ T9830]  ? tun_get+0x1c/0x2f0
[  284.930899][ T9830]  ? tun_get+0x1c/0x2f0
[  284.930928][ T9830]  tun_chr_write_iter+0x113/0x200
[  284.930955][ T9830]  vfs_write+0x5c6/0xb30
[  284.930985][ T9830]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  284.931011][ T9830]  ? __pfx_vfs_write+0x10/0x10
[  284.931046][ T9830]  ? __fget_files+0x2a/0x420
[  284.931083][ T9830]  ksys_write+0x145/0x250
[  284.931110][ T9830]  ? __pfx_ksys_write+0x10/0x10
[  284.931137][ T9830]  ? do_syscall_64+0xbe/0xfa0
[  284.931169][ T9830]  do_syscall_64+0xfa/0xfa0
[  284.931195][ T9830]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.931230][ T9830]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.931247][ T9830]  ? clear_bhb_loop+0x60/0xb0
[  284.931271][ T9830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.931289][ T9830] RIP: 0033:0x7f1f98d8ebe9
[  284.931307][ T9830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.931326][ T9830] RSP: 002b:00007f1f99bd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  284.931348][ T9830] RAX: ffffffffffffffda RBX: 00007f1f98fc5fa0 RCX: 00007f1f98d8ebe9
[  284.931362][ T9830] RDX: 0000000000000072 RSI: 0000200000000100 RDI: 0000000000000003
[  284.931375][ T9830] RBP: 00007f1f99bd3090 R08: 0000000000000000 R09: 0000000000000000
[  284.931387][ T9830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.931398][ T9830] R13: 00007f1f98fc6038 R14: 00007f1f98fc5fa0 R15: 00007fff2edd73f8
[  284.931433][ T9830]  </TASK>
[  285.357225][ T9843] loop2: detected capacity change from 0 to 7
[  285.370058][ T5963] Dev loop2: unable to read RDB block 7
[  285.375742][ T5963]  loop2: unable to read partition table
[  285.386131][ T5963] loop2: partition table beyond EOD, truncated
[  285.415618][ T9843] Dev loop2: unable to read RDB block 7
[  285.462669][ T9843]  loop2: unable to read partition table
[  285.480951][ T9843] loop2: partition table beyond EOD, truncated
[  285.487243][ T9843] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  285.501115][ T5231] Dev loop2: unable to read RDB block 7
[  285.506870][ T5231]  loop2: unable to read partition table
[  285.514983][ T5231] loop2: partition table beyond EOD, truncated
[  285.523386][ T9836] 
[  285.525767][ T9836] ======================================================
[  285.532809][ T9836] WARNING: possible circular locking dependency detected
[  285.539843][ T9836] syzkaller #0 Not tainted
[  285.544269][ T9836] ------------------------------------------------------
[  285.551306][ T9836] syz.3.991/9836 is trying to acquire lock:
[  285.557208][ T9836] ffffffff8e642880 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x48/0x710
[  285.567071][ T9836] 
[  285.567071][ T9836] but task is already holding lock:
[  285.574461][ T9836] ffffffff8fcbb548 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  285.585015][ T9836] 
[  285.585015][ T9836] which lock already depends on the new lock.
[  285.585015][ T9836] 
[  285.595421][ T9836] 
[  285.595421][ T9836] the existing dependency chain (in reverse order) is:
[  285.604433][ T9836] 
[  285.604433][ T9836] -> #9 (uevent_sock_mutex){+.+.}-{4:4}:
[  285.612262][ T9836]        lock_acquire+0x120/0x360
[  285.617298][ T9836]        __mutex_lock+0x187/0x1350
[  285.622428][ T9836]        kobject_uevent_net_broadcast+0x27e/0x560
[  285.628862][ T9836]        kobject_uevent_env+0x55b/0x8c0
[  285.634432][ T9836]        device_add+0x557/0xb50
[  285.639300][ T9836]        device_create+0x25b/0x2f0
[  285.644424][ T9836]        msr_device_create+0x33/0x50
[  285.649719][ T9836]        cpuhp_invoke_callback+0x445/0x860
[  285.655536][ T9836]        cpuhp_thread_fun+0x3f4/0x850
[  285.660919][ T9836]        smpboot_thread_fn+0x542/0xa60
[  285.666391][ T9836]        kthread+0x70e/0x8a0
[  285.670990][ T9836]        ret_from_fork+0x47c/0x820
[  285.676110][ T9836]        ret_from_fork_asm+0x1a/0x30
[  285.681398][ T9836] 
[  285.681398][ T9836] -> #8 (cpuhp_state-up){+.+.}-{0:0}:
[  285.688966][ T9836]        lock_acquire+0x120/0x360
[  285.693994][ T9836]        cpuhp_thread_fun+0x182/0x850
[  285.699378][ T9836]        smpboot_thread_fn+0x542/0xa60
[  285.704840][ T9836]        kthread+0x70e/0x8a0
[  285.709442][ T9836]        ret_from_fork+0x47c/0x820
[  285.714569][ T9836]        ret_from_fork_asm+0x1a/0x30
[  285.719877][ T9836] 
[  285.719877][ T9836] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  285.727636][ T9836]        lock_acquire+0x120/0x360
[  285.732675][ T9836]        cpus_read_lock+0x42/0x160
[  285.737808][ T9836]        static_key_enable+0x12/0x20
[  285.743100][ T9836]        tcp_enable_tx_delay+0x54/0x80
[  285.748579][ T9836]        do_tcp_setsockopt+0xfbc/0x1f20
[  285.754139][ T9836]        do_sock_setsockopt+0x17c/0x1b0
[  285.759698][ T9836]        __x64_sys_setsockopt+0x13f/0x1b0
[  285.765425][ T9836]        do_syscall_64+0xfa/0xfa0
[  285.770460][ T9836]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.776885][ T9836] 
[  285.776885][ T9836] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}:
[  285.784554][ T9836]        lock_acquire+0x120/0x360
[  285.789640][ T9836]        lock_sock_nested+0x48/0x100
[  285.794945][ T9836]        tcp_sendmsg+0x21/0x50
[  285.799723][ T9836]        __sock_sendmsg+0x19c/0x270
[  285.804938][ T9836]        sock_sendmsg+0x158/0x230
[  285.809972][ T9836]        __sock_xmit+0x1c1/0x470
[  285.814920][ T9836]        nbd_send_cmd+0x863/0x1ba0
[  285.820051][ T9836]        nbd_queue_rq+0xcdb/0xf10
[  285.825109][ T9836]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  285.831199][ T9836]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  285.838066][ T9836]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  285.844591][ T9836]        blk_mq_run_hw_queue+0x348/0x4f0
[  285.850232][ T9836]        blk_mq_dispatch_list+0xd0c/0xe00
[  285.855960][ T9836]        blk_mq_flush_plug_list+0x469/0x550
[  285.861865][ T9836]        __blk_flush_plug+0x3d3/0x4b0
[  285.867251][ T9836]        __submit_bio+0x2d3/0x5a0
[  285.872275][ T9836]        submit_bio_noacct_nocheck+0x4ab/0xb50
[  285.878446][ T9836]        __bread_gfp+0x216/0x3c0
[  285.883392][ T9836]        udf_read_tagged+0xad/0xe00
[  285.888599][ T9836]        udf_check_anchor_block+0x99/0x550
[  285.894421][ T9836]        udf_load_vrs+0xa83/0xf20
[  285.899452][ T9836]        udf_fill_super+0x5ad/0x17a0
[  285.904743][ T9836]        get_tree_bdev_flags+0x40b/0x4d0
[  285.910381][ T9836]        vfs_get_tree+0x8f/0x2b0
[  285.915323][ T9836]        do_new_mount+0x2ee/0xa90
[  285.920352][ T9836]        __se_sys_mount+0x317/0x410
[  285.925560][ T9836]        do_syscall_64+0xfa/0xfa0
[  285.930603][ T9836]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.937026][ T9836] 
[  285.937026][ T9836] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  285.944681][ T9836]        lock_acquire+0x120/0x360
[  285.949714][ T9836]        __mutex_lock+0x187/0x1350
[  285.954836][ T9836]        nbd_queue_rq+0x257/0xf10
[  285.959891][ T9836]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  285.965967][ T9836]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  285.972849][ T9836]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  285.979372][ T9836]        blk_mq_run_hw_queue+0x348/0x4f0
[  285.985020][ T9836]        blk_mq_dispatch_list+0xd0c/0xe00
[  285.990757][ T9836]        blk_mq_flush_plug_list+0x469/0x550
[  285.996665][ T9836]        __blk_flush_plug+0x3d3/0x4b0
[  286.002135][ T9836]        __submit_bio+0x2d3/0x5a0
[  286.007163][ T9836]        submit_bio_noacct_nocheck+0x4ab/0xb50
[  286.013336][ T9836]        __bread_gfp+0x216/0x3c0
[  286.018303][ T9836]        udf_read_tagged+0xad/0xe00
[  286.023545][ T9836]        udf_check_anchor_block+0x99/0x550
[  286.029387][ T9836]        udf_load_vrs+0xa83/0xf20
[  286.034437][ T9836]        udf_fill_super+0x5ad/0x17a0
[  286.039765][ T9836]        get_tree_bdev_flags+0x40b/0x4d0
[  286.045407][ T9836]        vfs_get_tree+0x8f/0x2b0
[  286.050349][ T9836]        do_new_mount+0x2ee/0xa90
[  286.055378][ T9836]        __se_sys_mount+0x317/0x410
[  286.060584][ T9836]        do_syscall_64+0xfa/0xfa0
[  286.065621][ T9836]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.072059][ T9836] 
[  286.072059][ T9836] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  286.079287][ T9836]        lock_acquire+0x120/0x360
[  286.084315][ T9836]        __mutex_lock+0x187/0x1350
[  286.089440][ T9836]        nbd_queue_rq+0xc8/0xf10
[  286.094387][ T9836]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  286.100461][ T9836]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  286.107324][ T9836]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  286.113838][ T9836]        blk_mq_run_hw_queue+0x348/0x4f0
[  286.119486][ T9836]        blk_mq_dispatch_list+0xd0c/0xe00
[  286.125217][ T9836]        blk_mq_flush_plug_list+0x469/0x550
[  286.131127][ T9836]        __blk_flush_plug+0x3d3/0x4b0
[  286.136518][ T9836]        __submit_bio+0x2d3/0x5a0
[  286.141545][ T9836]        submit_bio_noacct_nocheck+0x4ab/0xb50
[  286.147716][ T9836]        __bread_gfp+0x216/0x3c0
[  286.152766][ T9836]        udf_load_vrs+0x365/0xf20
[  286.157809][ T9836]        udf_fill_super+0x5ad/0x17a0
[  286.163116][ T9836]        get_tree_bdev_flags+0x40b/0x4d0
[  286.168769][ T9836]        vfs_get_tree+0x8f/0x2b0
[  286.173718][ T9836]        do_new_mount+0x2ee/0xa90
[  286.178772][ T9836]        __se_sys_mount+0x317/0x410
[  286.184011][ T9836]        do_syscall_64+0xfa/0xfa0
[  286.189046][ T9836]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.195468][ T9836] 
[  286.195468][ T9836] -> #3 (set->srcu){.+.+}-{0:0}:
[  286.202605][ T9836]        lock_sync+0xba/0x160
[  286.207285][ T9836]        __synchronize_srcu+0x96/0x3a0
[  286.212752][ T9836]        elevator_switch+0x12b/0x640
[  286.218045][ T9836]        elevator_change+0x2d4/0x450
[  286.223342][ T9836]        elevator_set_default+0x186/0x260
[  286.229069][ T9836]        blk_register_queue+0x34e/0x3f0
[  286.234632][ T9836]        __add_disk+0x677/0xd50
[  286.239491][ T9836]        add_disk_fwnode+0xfc/0x480
[  286.244696][ T9836]        nbd_dev_add+0x717/0xae0
[  286.249646][ T9836]        nbd_init+0x168/0x1f0
[  286.254324][ T9836]        do_one_initcall+0x233/0x820
[  286.259610][ T9836]        do_initcall_level+0x104/0x190
[  286.265078][ T9836]        do_initcalls+0x59/0xa0
[  286.269953][ T9836]        kernel_init_freeable+0x334/0x4b0
[  286.275687][ T9836]        kernel_init+0x1d/0x1d0
[  286.280543][ T9836]        ret_from_fork+0x47c/0x820
[  286.285685][ T9836]        ret_from_fork_asm+0x1a/0x30
[  286.290975][ T9836] 
[  286.290975][ T9836] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  286.298803][ T9836]        lock_acquire+0x120/0x360
[  286.303833][ T9836]        __mutex_lock+0x187/0x1350
[  286.308954][ T9836]        elevator_change+0x19b/0x450
[  286.314247][ T9836]        elevator_set_none+0x42/0xb0
[  286.319545][ T9836]        blk_mq_update_nr_hw_queues+0x598/0x1aa0
[  286.325878][ T9836]        nbd_start_device+0x17f/0xb10
[  286.331261][ T9836]        nbd_genl_connect+0x135b/0x18f0
[  286.336826][ T9836]        genl_family_rcv_msg_doit+0x212/0x300
[  286.342904][ T9836]        genl_rcv_msg+0x60e/0x790
[  286.347942][ T9836]        netlink_rcv_skb+0x205/0x470
[  286.353240][ T9836]        genl_rcv+0x28/0x40
[  286.357755][ T9836]        netlink_unicast+0x82c/0x9e0
[  286.363046][ T9836]        netlink_sendmsg+0x805/0xb30
[  286.368344][ T9836]        __sock_sendmsg+0x21c/0x270
[  286.373548][ T9836]        ____sys_sendmsg+0x505/0x830
[  286.378838][ T9836]        ___sys_sendmsg+0x21f/0x2a0
[  286.384037][ T9836]        __x64_sys_sendmsg+0x19b/0x260
[  286.389500][ T9836]        do_syscall_64+0xfa/0xfa0
[  286.394540][ T9836]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.400963][ T9836] 
[  286.400963][ T9836] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  286.409582][ T9836]        lock_acquire+0x120/0x360
[  286.414614][ T9836]        blk_alloc_queue+0x538/0x620
[  286.419912][ T9836]        __blk_mq_alloc_disk+0x15c/0x340
[  286.425546][ T9836]        nbd_dev_add+0x46c/0xae0
[  286.430497][ T9836]        nbd_init+0x168/0x1f0
[  286.435176][ T9836]        do_one_initcall+0x233/0x820
[  286.440469][ T9836]        do_initcall_level+0x104/0x190
[  286.445943][ T9836]        do_initcalls+0x59/0xa0
[  286.450804][ T9836]        kernel_init_freeable+0x334/0x4b0
[  286.456527][ T9836]        kernel_init+0x1d/0x1d0
[  286.461381][ T9836]        ret_from_fork+0x47c/0x820
[  286.466498][ T9836]        ret_from_fork_asm+0x1a/0x30
[  286.471791][ T9836] 
[  286.471791][ T9836] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  286.479018][ T9836]        validate_chain+0xb9b/0x2140
[  286.484321][ T9836]        __lock_acquire+0xab9/0xd20
[  286.489519][ T9836]        lock_acquire+0x120/0x360
[  286.494548][ T9836]        fs_reclaim_acquire+0x72/0x100
[  286.500010][ T9836]        kmem_cache_alloc_node_noprof+0x48/0x710
[  286.506341][ T9836]        __alloc_skb+0x112/0x2d0
[  286.511299][ T9836]        alloc_uevent_skb+0x7d/0x230
[  286.516589][ T9836]        kobject_uevent_net_broadcast+0x2fa/0x560
[  286.523006][ T9836]        kobject_uevent_env+0x55b/0x8c0
[  286.528568][ T9836]        set_disk_ro+0x19e/0x1f0
[  286.533531][ T9836]        nbd_start_device+0x272/0xb10
[  286.538932][ T9836]        nbd_genl_connect+0x135b/0x18f0
[  286.544497][ T9836]        genl_family_rcv_msg_doit+0x212/0x300
[  286.550575][ T9836]        genl_rcv_msg+0x60e/0x790
[  286.555605][ T9836]        netlink_rcv_skb+0x205/0x470
[  286.560898][ T9836]        genl_rcv+0x28/0x40
[  286.565407][ T9836]        netlink_unicast+0x82c/0x9e0
[  286.570699][ T9836]        netlink_sendmsg+0x805/0xb30
[  286.575999][ T9836]        __sock_sendmsg+0x21c/0x270
[  286.581227][ T9836]        ____sys_sendmsg+0x505/0x830
[  286.586515][ T9836]        ___sys_sendmsg+0x21f/0x2a0
[  286.591723][ T9836]        __x64_sys_sendmsg+0x19b/0x260
[  286.597249][ T9836]        do_syscall_64+0xfa/0xfa0
[  286.602290][ T9836]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.608710][ T9836] 
[  286.608710][ T9836] other info that might help us debug this:
[  286.608710][ T9836] 
[  286.618940][ T9836] Chain exists of:
[  286.618940][ T9836]   fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex
[  286.618940][ T9836] 
[  286.631659][ T9836]  Possible unsafe locking scenario:
[  286.631659][ T9836] 
[  286.639110][ T9836]        CPU0                    CPU1
[  286.644482][ T9836]        ----                    ----
[  286.649851][ T9836]   lock(uevent_sock_mutex);
[  286.654455][ T9836]                                lock(cpuhp_state-up);
[  286.661309][ T9836]                                lock(uevent_sock_mutex);
[  286.668430][ T9836]   lock(fs_reclaim);
[  286.672427][ T9836] 
[  286.672427][ T9836]  *** DEADLOCK ***
[  286.672427][ T9836] 
[  286.680571][ T9836] 4 locks held by syz.3.991/9836:
[  286.685613][ T9836]  #0: ffffffff8f9b8dd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  286.693826][ T9836]  #1: ffffffff8f9b8be8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  286.702932][ T9836]  #2: ffff888143378a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_start_device+0x189/0xb10
[  286.712877][ T9836]  #3: ffffffff8fcbb548 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  286.723937][ T9836] 
[  286.723937][ T9836] stack backtrace:
[  286.729828][ T9836] CPU: 1 UID: 0 PID: 9836 Comm: syz.3.991 Not tainted syzkaller #0 PREEMPT(full) 
[  286.729847][ T9836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  286.729859][ T9836] Call Trace:
[  286.729867][ T9836]  <TASK>
[  286.729874][ T9836]  dump_stack_lvl+0x189/0x250
[  286.729902][ T9836]  ? __pfx_dump_stack_lvl+0x10/0x10
[  286.729928][ T9836]  ? __pfx__printk+0x10/0x10
[  286.729952][ T9836]  ? print_lock_name+0xde/0x100
[  286.729976][ T9836]  print_circular_bug+0x2ee/0x310
[  286.730000][ T9836]  check_noncircular+0x134/0x160
[  286.730029][ T9836]  validate_chain+0xb9b/0x2140
[  286.730050][ T9836]  ? lockdep_hardirqs_on+0x9c/0x150
[  286.730075][ T9836]  ? preempt_schedule+0xae/0xc0
[  286.730097][ T9836]  ? preempt_schedule_common+0x83/0xd0
[  286.730119][ T9836]  ? preempt_schedule+0xae/0xc0
[  286.730139][ T9836]  ? __pfx_preempt_schedule+0x10/0x10
[  286.730160][ T9836]  ? __mutex_trylock_common+0x153/0x260
[  286.730183][ T9836]  __lock_acquire+0xab9/0xd20
[  286.730202][ T9836]  ? kmem_cache_alloc_node_noprof+0x48/0x710
[  286.730219][ T9836]  lock_acquire+0x120/0x360
[  286.730235][ T9836]  ? kmem_cache_alloc_node_noprof+0x48/0x710
[  286.730253][ T9836]  ? __lock_acquire+0xab9/0xd20
[  286.730271][ T9836]  fs_reclaim_acquire+0x72/0x100
[  286.730290][ T9836]  ? kmem_cache_alloc_node_noprof+0x48/0x710
[  286.730306][ T9836]  kmem_cache_alloc_node_noprof+0x48/0x710
[  286.730322][ T9836]  ? __alloc_skb+0x112/0x2d0
[  286.730348][ T9836]  __alloc_skb+0x112/0x2d0
[  286.730372][ T9836]  alloc_uevent_skb+0x7d/0x230
[  286.730390][ T9836]  kobject_uevent_net_broadcast+0x2fa/0x560
[  286.730409][ T9836]  kobject_uevent_env+0x55b/0x8c0
[  286.730428][ T9836]  set_disk_ro+0x19e/0x1f0
[  286.730446][ T9836]  ? __pfx_set_disk_ro+0x10/0x10
[  286.730469][ T9836]  nbd_start_device+0x272/0xb10
[  286.730495][ T9836]  ? device_create_file+0xf4/0x1c0
[  286.730522][ T9836]  nbd_genl_connect+0x135b/0x18f0
[  286.730548][ T9836]  ? __pfx_nbd_genl_connect+0x10/0x10
[  286.730573][ T9836]  ? rcu_is_watching+0x15/0xb0
[  286.730595][ T9836]  ? __nla_parse+0x40/0x60
[  286.730616][ T9836]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  286.730639][ T9836]  genl_family_rcv_msg_doit+0x212/0x300
[  286.730660][ T9836]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  286.730684][ T9836]  ? stack_trace_save+0x9c/0xe0
[  286.730710][ T9836]  genl_rcv_msg+0x60e/0x790
[  286.730730][ T9836]  ? __pfx_genl_rcv_msg+0x10/0x10
[  286.730747][ T9836]  ? __pfx_nbd_genl_connect+0x10/0x10
[  286.730775][ T9836]  netlink_rcv_skb+0x205/0x470
[  286.730797][ T9836]  ? __lock_acquire+0xab9/0xd20
[  286.730814][ T9836]  ? __pfx_genl_rcv_msg+0x10/0x10
[  286.730831][ T9836]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  286.730861][ T9836]  ? down_read+0x1ad/0x2e0
[  286.730877][ T9836]  genl_rcv+0x28/0x40
[  286.730892][ T9836]  netlink_unicast+0x82c/0x9e0
[  286.730916][ T9836]  ? __pfx_netlink_unicast+0x10/0x10
[  286.730937][ T9836]  ? netlink_sendmsg+0x642/0xb30
[  286.730959][ T9836]  ? skb_put+0x11b/0x210
[  286.730984][ T9836]  netlink_sendmsg+0x805/0xb30
[  286.731012][ T9836]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.731047][ T9836]  ? aa_sock_msg_perm+0xf1/0x1d0
[  286.731071][ T9836]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  286.731094][ T9836]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.731118][ T9836]  __sock_sendmsg+0x21c/0x270
[  286.731139][ T9836]  ____sys_sendmsg+0x505/0x830
[  286.731156][ T9836]  ? __pfx_____sys_sendmsg+0x10/0x10
[  286.731175][ T9836]  ? import_iovec+0x74/0xa0
[  286.731200][ T9836]  ___sys_sendmsg+0x21f/0x2a0
[  286.731215][ T9836]  ? __pfx____sys_sendmsg+0x10/0x10
[  286.731244][ T9836]  ? __fget_files+0x2a/0x420
[  286.731266][ T9836]  ? __fget_files+0x3a0/0x420
[  286.731290][ T9836]  __x64_sys_sendmsg+0x19b/0x260
[  286.731307][ T9836]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  286.731328][ T9836]  ? do_syscall_64+0xbe/0xfa0
[  286.731352][ T9836]  do_syscall_64+0xfa/0xfa0
[  286.731375][ T9836]  ? lockdep_hardirqs_on+0x9c/0x150
[  286.731397][ T9836]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.731413][ T9836]  ? clear_bhb_loop+0x60/0xb0
[  286.731430][ T9836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.731446][ T9836] RIP: 0033:0x7fc5fcd8ebe9
[  286.731461][ T9836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.731476][ T9836] RSP: 002b:00007fc5fdce9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  286.731492][ T9836] RAX: ffffffffffffffda RBX: 00007fc5fcfc5fa0 RCX: 00007fc5fcd8ebe9
[  286.731505][ T9836] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  286.731516][ T9836] RBP: 00007fc5fce11e19 R08: 0000000000000000 R09: 0000000000000000
[  286.731526][ T9836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  286.731536][ T9836] R13: 00007fc5fcfc6038 R14: 00007fc5fcfc5fa0 R15: 00007ffe99eebb08
[  286.731555][ T9836]  </TASK>
[  287.039121][ T5916] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  287.258942][ T5870] block nbd0: Receive control failed (result -32)
[  287.265572][ T5870] block nbd0: Receive control failed (result -32)
[  287.343417][ T9836] nbd0: detected capacity change from 0 to 127
[  287.357542][ T5983] block nbd0: Dead connection, failed to find a fallback
[  287.392808][ T5929] usb 4-1: USB disconnect, device number 76
[  287.399298][ T5983] block nbd0: shutting down sockets
[  287.404531][ T5983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.441210][ T5983] buffer_io_error: 16 callbacks suppressed
[  287.441229][ T5983] Buffer I/O error on dev nbd0, logical block 0, async page read
[  287.508409][ T5983] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.517517][ T5983] Buffer I/O error on dev nbd0, logical block 1, async page read
[  287.562275][ T5983] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.571945][ T5983] Buffer I/O error on dev nbd0, logical block 2, async page read
[  287.580103][ T5983] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.590638][ T5983] Buffer I/O error on dev nbd0, logical block 3, async page read
[  287.599877][ T5983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.609284][ T5983] Buffer I/O error on dev nbd0, logical block 0, async page read
[  287.617252][ T5983] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.626918][ T5983] Buffer I/O error on dev nbd0, logical block 1, async page read
[  287.659064][ T5983] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.689804][ T5983] Buffer I/O error on dev nbd0, logical block 2, async page read
[  287.697808][ T5983] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.728578][ T5983] Buffer I/O error on dev nbd0, logical block 3, async page read
[  287.736583][ T5983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.767255][ T5983] Buffer I/O error on dev nbd0, logical block 0, async page read
[  287.778066][ T5983] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.795919][ T5983] Buffer I/O error on dev nbd0, logical block 1, async page read
[  287.826778][ T5983] ldm_validate_partition_table(): Disk read failed.
[  287.835314][ T5983] Dev nbd0: unable to read RDB block 0
[  287.863330][ T5983]  nbd0: unable to read partition table
[  287.886836][ T5983] ldm_validate_partition_table(): Disk read failed.
[  287.905304][ T5983] Dev nbd0: unable to read RDB block 0
[  287.912660][ T5983]  nbd0: unable to read partition table
[  288.044619][ T1341] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.093972][ T1341] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.154709][ T1341] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.215156][ T1341] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.302709][ T1341] bridge_slave_1: left allmulticast mode
[  288.310179][ T1341] bridge_slave_1: left promiscuous mode
[  288.315943][ T1341] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.326983][ T1341] bridge_slave_0: left allmulticast mode
[  288.333220][ T1341] bridge_slave_0: left promiscuous mode
[  288.339248][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.433554][ T1341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  288.443732][ T1341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  288.453510][ T1341] bond0 (unregistering): Released all slaves
[  288.705371][ T1341] hsr_slave_0: left promiscuous mode
[  288.715929][ T1341] hsr_slave_1: left promiscuous mode
[  288.723661][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  288.731208][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_0
[  288.740669][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  288.748093][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_1
[  288.757809][ T1341] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  288.765130][ T1341] batman_adv: batadv0: Removing interface: virt_wifi0
[  288.775914][ T1341] veth1_macvtap: left promiscuous mode
[  288.781694][ T1341] veth0_macvtap: left promiscuous mode
[  288.787300][ T1341] veth1_vlan: left promiscuous mode
[  288.793186][ T1341] veth0_vlan: left promiscuous mode
[  288.975886][ T1341] team0 (unregistering): Port device team_slave_1 removed
[  289.005204][ T1341] team0 (unregistering): Port device team_slave_0 removed
[  289.405310][ T1341] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.454066][ T1341] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.494901][ T1341] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.547318][ T1341] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.670651][ T1341] bridge_slave_1: left allmulticast mode
[  289.676372][ T1341] bridge_slave_1: left promiscuous mode
[  289.683047][ T1341] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.694467][ T1341] bridge_slave_0: left allmulticast mode
[  289.700244][ T1341] bridge_slave_0: left promiscuous mode
[  289.705981][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.807207][ T1341] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  289.843724][ T1341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.853702][ T1341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  289.866023][ T1341] bond0 (unregistering): Released all slaves
[  290.055085][ T1341] hsr_slave_0: left promiscuous mode
[  290.065072][ T1341] hsr_slave_1: left promiscuous mode
[  290.073195][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.082105][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_0
[  290.093327][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.101433][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.113378][ T1341] veth1_macvtap: left promiscuous mode
[  290.120244][ T1341] veth0_macvtap: left promiscuous mode
[  290.126618][ T1341] veth1_vlan: left promiscuous mode
[  290.135125][ T1341] veth0_vlan: left promiscuous mode
[  290.331809][ T1341] team0 (unregistering): Port device team_slave_1 removed
[  290.356281][ T1341] team0 (unregistering): Port device team_slave_0 removed