last executing test programs:

6m37.437029506s ago: executing program 3 (id=449):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)
mmap$IORING_OFF_CQ_RING(&(0x7f0000345000/0x4000)=nil, 0x4000, 0x0, 0x2010, r1, 0x8000000)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xc3a51000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xc3a51000)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x5, 0x0, 0x14, 0x12, 0x61, 0x0}) (async)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x5, 0x0, 0x14, 0x12, 0x61, 0x0})

6m37.240976074s ago: executing program 3 (id=450):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r2=>0x0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private=0x802}}}})
socket(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000000440)={0x7c, "694565b33768e4f3204964d9725d871337dcba91f1f699acb4d21acbc0077c24e0aab1e5d537ca302f81d14d2618d4a5dbcb25da54c9b9462797f054db955f5b704ea22ddbbaf31b6670950b3f833f9faea9e0e51653d20c18507999db50e557172d4edc239b821005b82f205d1238fce3e8d3c084d73c3462ff7ccaa433d73c"})
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100182509ec000000000000dae2d9f8c87a000a38000000160a01080000000000000000020000010900020073797a31000000000900010073797a30000000000900010073797a5000000000140000001100010000000000000000000000000a3f7745a96116ab6c3964246351828258357e1887303e2bc291997bbdd2ae4c4d23ff542192844a0bc9b79b16f7397ca0554827837cf557241934cbfcb3424c26f103d70e6c745a34f5e84cab64471c8025819c79cfb83605db65c9859b55d332"], 0x60}}, 0x4000000)
r7 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f00000000c0)={0x0, 0x3ff, 0xe0, 0x0, 0x3})
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r5)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x30, r8, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40040)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r9 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
pwritev(r9, &(0x7f0000000140), 0x0, 0x2, 0x101)
r10 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r10, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x300a})

6m37.026418946s ago: executing program 3 (id=452):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, r1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000022c0)={{0x0, 0x0, 0x80, {0x0, 0x80af000}}, "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", "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"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="260f01c32e36260f212366b9090b000066b87a0a000066ba000000000f30b823018ee8ba610066ed0f01c2660f38810f2e0f656c7ff2e3090fa5800500", 0xffffffffffffff96}], 0x1, 0xf, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m36.830344891s ago: executing program 3 (id=454):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000b08000240000000f60c00048005000200090000000c00038005000200d30000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = syz_open_procfs(0x0, &(0x7f0000001380)='map_files\x00')
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x1a, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r4, 0x2, 0x1ffe, 0x2, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf4e)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
process_madvise(r8, 0x0, 0x0, 0x4, 0x0)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='stats=global'])
getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000380)=<r9=>0x0)
mount$binderfs(&(0x7f0000000040), &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000700)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030343030302c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303031352c706f73697861636c2c7375626a5f726f6c653d6e65742f7074797065002c6f626a5f726f6c653dffff2c6673636f6e746578743d757365725f752c7375626a5f757365723d5d2c7375626a5f726f6c653d62696e646572002c736d61636b66736465663d6e65742f7074797065002c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="96cd9b9ff0362d30bc3e322ae32c66736e616d653d62696e646572f4572cc3034d6fde4d7cdf000000000000eb14a645fbe56708a7fc35178e3c7cecaa"])
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}}, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r10, &(0x7f0000001e40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff"], 0x28}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0x850, @loopback, 0xcbdb}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000840)="ae18d48de44ab9094eb5af369248cc453562c552c0bd682fab984c15dd3f800bd97aae255f3efe71d786a047486d2e25d1fc7fbecf19211371c63fdeaf20764c64e3fda60cec99d5ba4609d5caf22f57a12f042ae3b29e8a60d3fc554261e1f5ec418b04bc83ff5571c520214ffe699da80959c1090b0df9f0b5baa6237cba43908c17d26ac4d390f07f73057b07d7d9a0208219badfe9f2127da12d27740eacdcd4a6ad46188d72010d8f552ec766db6a0cf1dd945f897c7369ef6382db8e469934e18f7bf9fefece1f65da32d6ce5296d59ac22cb5d0b64998bf3df821ab5fa59dfa93eb20e7577dc28ea564756e19fbaf28e682", 0xf5}, {&(0x7f0000000940)="19a6e6f202e9c6f8dc305595b1f88e203847de9232e9c88ffab7755f2cefb23749f5efdeb92d8139ef789e3b6e8a0e686315235e5eacfa09edb95f9c24860f8271ef4ee0440461d4b7dca422402cbc3787478b9b409047621c53beb36d2e58c46e810ade21c513502d105a5b2339874218d2e635022e014593c2e73899a44faa2eeb355bc8a96ed9f76c733184ca242efa7922b317a2961bdc5f953427b29692f70c3299a6d00304be4214da4601f2c93acc09643175e4ecf95f04225ee46f4eafec22369a2aadcee4120827f4229b05691eaf2a9f02715be2392417bdabb53d31f902885d82b6abdfdf525c8f", 0xed}, {&(0x7f0000000640)="ae1195", 0x3}, {&(0x7f0000000a40)="73ccff1bf9f54b543d35f34f7df9e6864b18d905c08ccd5f598df41afb3eeb3df2f7e073d5231b77b83c839a30fea649ede849a802f4e0d3ea75cf41c53a3be086ace025ea34cb0faecae9d237157f113654d977855d8ea2e0ec0cc44ef961032f9f5b6f637250bebdda9485e8c20ef385f67bf1e1a3fe2638a77a1eb79c27ee0a48b2f363", 0x85}, {&(0x7f0000000b00)="6933db65e7c3758239dac041e7467797162731cf337dc9f7ce40d5762b434ba6dd95f43a58d1d38eeefaffd905a220c18750d800e2fd8cd528a433c26df88de48c529d37214bc6126ad02e8563c0a65e39e013cf0e723404c856d83dd31232021c8cbb24c5d2a6594602e8fa0b8fdc903ca5bca4fe7d90355b56cc61f80c3c78b10b804f3fbcd21a314fa1", 0x8b}], 0x5, &(0x7f0000003540)=[@hopopts={{0x28, 0x29, 0x36, {0x33, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x40}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x4, 0x14, 0x1, 0x40, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @private2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}]}}}, @dstopts={{0x108, 0x29, 0x37, {0x70, 0x1d, '\x00', [@generic={0x81, 0x7f, "b078822acc861c7a996b7007dd65dc80d598611bf00b4ebd8d73d17986f6d1e2df03c39f2655b58d1d90311427a525836d247ac858fe9315bdfd65f60868cc482bd71ba3ddbfc24b6f58dc57301706ddd7dc753c7522617e2e3341722233b2ef3ea44e94391a99e03c3f0d2e42ecd78ab37032b6072baea5c827247d27752c"}, @jumbo={0xc2, 0x4, 0xf15}, @calipso={0x7, 0x48, {0x3, 0x10, 0x6, 0x4a, [0x3, 0x1000, 0x9, 0x0, 0xe719, 0xffffffffffff8b60, 0x81, 0x7c]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x6c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0x238}}, {{&(0x7f0000000e00)={0xa, 0x4e20, 0x8000, @mcast1, 0xd2b}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000e40)="669f197d6caead73274c6579117bb1ca27f580ede9292de272eac543e48ce6116bfc30608b9909200014887f07f1cde8d84818a8361b9b48020a0d47e2a6b4a3183f7a5c35947b1d393700c6f4cfe9e3b336ee8ebafeb9ec24515eaeab6b633775fb67214ff5c9c3fa3494edca7a76396ddc06d8c9239a81e023f9d67a839c8736b012666e855e5d3b453ad6ee449ec5f2839b3f25d99314176ab179b477c68dbe60d2e0b4523878144b7edc030841e2ecdd5c1b7d749fad3487845fc0a6741e54e41084de", 0xc5}, {&(0x7f0000000f40)="2ade20b533aa838b2ad01a197b81442f7668920c4a1c11624b9c84f5f13902ab784b06b54733001e7cb193df8ee16cb133bd431f001f917ba0e2d882d9ac47807d55171b9f3282d8c968fc22855e3ea8061a02b55c3977be9ad9fa9558c9082203e502dfefbb1066bf5c4d3ef33cf78bbd6a11fa49b119c8a92977ea4e5e10689101cf54b75233db37391e862abcaf0334b9e778481e9b70002dd059ffc2dc1fc9a526f710c65b6f853289daf2c87bbf94dd1497b06aa0cbeefafa960add4a3fa764911d5042db9a1a4c6e0fcc648ec62a", 0xd1}, {&(0x7f0000001040)="f192215e873ef2f31b7c09aa1af4428eeef1", 0x12}, {&(0x7f0000001080)="3d8f052127746b2a0389232a97415b7bcd199b29abb78c85bf3bf59177ae9fccfaac38a85b0567fd8f98608ca2c4c95358c2f18f03dd8a1b1c76b08cd6f278289c7545f1c391aa2bd6bed89bd3547c818bf28fcd3195a4f6d6abcf62cfd2d0c3e4b2ddad6c94a2fb87c6743e7538870f8ef7278ae7ddc2bd954ba5433159523e3fae19227ce56ab35657c044897add8e70427e207063254f1f0e4a4b990722e855af72cba14fee08111513ab5d18997a51b68b35d82fd64f9932f9f4fae8c365801aba832ca44e0a8ee80b84f7d8c76cb6931574fce97cd41d5c1b897d52791407a331b2a6264d49b5ac73c404e5f4", 0xef}, {&(0x7f0000001180)="a3a44782c8fe2a4a64e1db76d59576cdadf1d5692efb79a3edf9522962e4565edefbebea6f9fbef0549da1d0ae3881a6e2bec32d98b07f95b6792efee550df601bbe06b940ac386687a42b67b74dee97e8cb2217f5f4cc962b285264b1d9fa7c2a97293ca5f5aab3c1e0dcb54159dda76f036ddfca2c7b366b75d7ed27b5d46891ba9e3dbe801c3df91ec101635729a772a9ce16542a50a195c15594a5efc335a05325285db6b90c9e", 0xa9}, {&(0x7f0000001240)="f78f224fd05f8d2196e3923f0e69dd14a805c0d8891e1321cd431f2db5462d36e20277733ce9738036f1524f8e336bb8839c601573838b4fa7330c6ed7c7945d9824baf586526b88a6e6e617a5cda346fca38cf2f18fc20fb74e190964c6f7e01c2df91cd360534bb681e5a393837c4c760266cfcc6fcdf432d42271b4b455c1af956d3151a776aa7f4db356a0bf3e6dbea93218b0c00902d4fc419ce5f854c91931beee2c7f4c", 0xa7}], 0x6, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x150}}, {{&(0x7f0000001500)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001540)="3815f7b591d7c6f430633fd4c52e5152febd93dfb117c8642db4c2df915b6de48452ab902a9a50b4df978e6c3fb2f71d2053f8131cfec0bc2df5ab8d1d2e652883a54e91f37f9daacfe01e12b881c64d64ca56e6564c89a9b561eadd49a3afda6292740215cb", 0x66}, {&(0x7f00000015c0)}, {&(0x7f0000001680)="9b2065c3ecd488cd04c8ab8d2454d746781faa4d47fb893c7c34259ad46b7f28d170b2b45637934853aae31e1eeaf6e109c798827dcb17a600b272b3a021f5039bd8435301e65a8d7c4dfe07cc2881d065a7b7be8fa051a08ac4fde6367384278a1a0629f1b589e1bf5e94a4f9d87aca6363acf5495823327136399304b32d2de20c6f186c49cc3a1b608d6dd1b9e854", 0x90}, {&(0x7f0000002540)="f8ebcd5d18c5acbc0a29c2f70839020e583797a2194c756a06029a40537dcaee29db1dd1b5acf437f61973e2f8c194d3e1206dc52bc61bec9f43120347efdc120d90a3de47bb500b2e94f48a092641e85aaed511d637d965b4509c83650e5b0db83ef48d669ea466930d7c58cbfa779cccaec2e6bfb897b1b1a205a880069e86358f5ca17dffd8ea1c42d8aa99f50d8ddb9fef7234bcc9e87b3b93a9ece77ba3ca651640961d50ec8004173fc0fb3b8687aefc17e58ac5cfbd0bbae880f29118260766bc27be66835a8be93ebc235410b75ce1ace5063344cbc48f95bd57988e7ffa0d70834548c7056cdcfcf28485c5b8063619296dbf50b65da097b8829e268b4fe2d0256c8c018e9c3d6eb5117312c3204fb22d6bf9214eb29b0bb831bc84c075398dd431b903cca9e0d6ef2b0a828cafd1cf87d201ffcc6145f2973d318e73df4435fb699257e432039fc13eb2278c45800bd54ab9dbd9e0f636fdf52fa82070a68aa3aefecd96188f71489360ae0c75d1d33e7d66099348cf5bea26685c201e5a52115a094b90493071e832febca688886fbe7cc0951811ee66c7c75a351080ee8065b35973b75c5aa5616dadc80795bcfd97e2a7faa2e1eef48963ab16e81923fe2db099d450e93f4a84a0575505fa9033c0f06af4a7af622fb6dccda257b2e61d291a2bcd183643b8672d0a4de4b68e56c42e2966e5ef63be06ba1d0742831edc19dbe072f0d853a33291c5f22772a96f4c726b93ceb61d0ed35dc831a16371ef3cf269e058c236c295d337e57575ff1b4c33c55efda424aa3a52d8ffcbe5d20341be0c95037f8e72d4a4ad49fabcac7f505cf6ff299e1a58d06ef9ab135aa399d18206c3049bd8fe70ff0487e0b813bfd6181805d03059e2ef13828a8a2947878033b55c23062ac71c7efa4a7c8ee486182d47a98ea24c7760c4440b4d4967d02a0e88ee2a0d9bf78c08b0b5e4e591c4b83e190dc354dfbfb4bd7b6507fc23229b3c493a071e3abaef000077c4ab00e3b7c4614a775591bf5023268ce5619c0e3398db86368059fb25c36aa84247241ad9f202a708abdf2f9fe2d0d5b3faf72474151baa6bfc2e23ba4140a4b63f9b0367dfaa9d7eaac1d395c4a9ecf98e2ed12eb3f5c51fb7f4da31286d7f8e821057f6703634a5e758f31a2e61b7e083e6836094facbcad9a1162fc017900601fefc71000ec3f2a31646f472ca3899dd8dd1ecdc5e859c670cd06a4481bdcc620cd004caa35576a0a690302c83c4fd1946e8f0901be5afb107480ef9950f395bf9cf59823281be68f9c2054e0c6d29c1c3e0efab852bdb92420db613ecd150ce553c1be3e961cf204499edbbb1d1258a703472b70caf2652c62852146b88dbd9cf62a00145dc82d77a25e0575c21961efd113dc010f194a8c67af24edfcd156dd05a8af32ef39724e720c380f87b2930c78ace3266ba036351419d4dabd86a70f78f071b0fbd8b5af1b787655729beda3dc9b300b3fb86bef44574ed19afe689c1eec198a89d7482e7abb7ffcbc53274a03a71213d4e6ae89fbf21247c466d6ed9abb28afbe0ba2e98a7d04cc7591424de18d85173fe9b454648d8ba64f1ab424dda4357702c3bb975e02e327622213d5249c26eaafc17ad623b636812f93afc34921bb6ee188ad35b429ae6f861f40c5f3a8d661735004cdbcd66b3970729d541143ce6abaec9f6eb127cb0bfff2bf46726be21a7eefca71fb498f14391893949464c8bbcdddf7f35b53bd49ef5b123605095555e68e3ad9f96a4daa1d9af7aa4163f846a9f94e020273e365a2d167c3efb6913e25801331c73297335dd61baf580c8e740290fe32205fe19b3b2d48e9393cb505616dcc614e0b887dd1bd4bebdf58d154b2b51187e45689a7afe118297f5869c1ede1ece7e0c6e22a80d0c578f7a2c74c946fa4a183fa2f2f9304065934dc0cd3467dde95252e811f07e98b02845f782eff2a95c19dc0d82a65e7fd9147b8d391d90e43094a7089bb204a5319448b9f9a24fe46fa17c6ac51ff27c208095271582b9f22be98a02b277ff62f308d03a9b290ad91693cf4030ec30e4b6a72df09b6b4716d5c75657fd6d8b6137c46cf062771e8fa2374fe01bb540abcf213ad668716c8ee7c744aed1e3d751aaf2b9d2c7d61cd1dc70a5e4b047cb9b735b94c1c4b04532d6eed73b2a08abfc6cb859df5374b17845cc092fda445b67d1ef6737d596667cd50b74196aa18e8ba4f03395102dd9ee56ebf53815a9743ad1d0fab69d07dfd31893709448678f6ce1dd22e8b490b60305ee428c679dd13dd4e15dad922fcda94c8bb68c4dca64a038f49a69cf8ac0c1cea1d9b83f3aae58d679dc45ab7e76b09da28dca26318de741c7d51435d69212cbdc4ba6d361e479456b066af7470d38832fc2a1e60b8d6056cb322023f53ce78bd3bad6ca0b8c23410ce022ae9ac5501f5f6b8aa52297733291ea8561c8a7008cb5f589cd208ec9b38187da9b5e8ecbf1de9bb7f214ef3de0623cf1c581fb3fea29612aa732d8e4b0e57f20eafdd769aca9d7587cb871a1dc87987a6c73793c1ee96a87fb29339f6392767a8641705997f965fb736bce94b1173cf3f4b376e5b28a4749b85f52b1ebf58589f37910868dec8fcfdaef58eedfe80f7f203d9cc0f440d1a7ee767e0caadd4635ca0d91ea1f7917b5c244fe8b3354a944edbc3eb0cc518ad03fff9ff234cbbfebbfe56686d5af5a61965b0f6d15cc07f191d6cf8f2fe30b28442442107f364e723314f56091d74a6d4ee16e3b08c0987b333e425751c2d1b49b164cf2f3a38bff558ad2263addbccbc748a43d4c86046311a0432269fc6ded3003a27087ad1e23a2f1acd79434be903bd1c5c05efb3a807dea42fe6c6e4860d6e49110bd768952737e732728752b13a2a695cced81201b4af4d6eefc7cea0745ad9d28480a7833e5b48a4f03744068f5868b6b63d083d8f2a5d11391e7d980b0b4169eb5ebeea46460415dadf639192d90b1fda4a5c84d60104becf732d14017a58acc4973a9d42f666f72aecb7bfcaf9972eac403bc99a97c85d6b729a8f1fa1dacd07a9a8c7fda543913bc406bf471ce8b44e36860d01899d4bd72cae86f0a0a96e13e1083a5f871aae822a0775390d49024eda11f0302ea17fa4fd364b20b201f421c656d2baa01e78ee3084f1e7fffb784e68e0d5b8a164ba1c81396fc0576a07bb628ccafe28751e1c5f7c6931fbdebe4385dc254fa350477b3e0db92f2204a0b2c656631c88a23c62d2f0f2f6b6345e7dcef96ac48b066fefae34cf51f2ecad6d8cda4ceb60f44f64e6806902adc20cfb9328fdafb8cb41604f8fd0e8883503feceaaa1e368070c2f22c9ecc95a0f1f701f2ddb325609f2c860e20e14b057462e323c5b24b387af896ce8b4ef889466754e1ed1647a9a28d5c19527626e238d57d3a7e43db1ad51dd01c241c5dc9b25de7b78e8032503aeb9e048a2454c480763968f1544a282061aa019ac25e63f875c94e90a3e294319e28f44766c90ee03b0134d7ea1094d43774668926f709ab5297c6a95be8e9b1b4e06ed88f1e1ff2eb50a67acd41f09c215122742c5715e4b648be195e86b21680c4d01f0bb861ce6b1b86cff568f096954ffe4e2a73605c52cbc5e0996f0ae27489fee4aa45b856398b68efec371bd7a0dcb6ae133ec46b165ddc31b56ffa32aef3bb563794cd4da87dd85632cba764494bc38939df4d44ae3a266a2809797edd303b8d75b026b1af6d8a4450329987c8a1b222c288e1d161e3033f0fa72226777481d6d0fb96b28f72cd15d3cad1f8a5019d8147fdb14e9ca5011370e8ac2e6705a99dd5d074686749d65bf3e074ade7e1d81db7b405c2241c01b65265961517937b41b267e92f42e87222bf0a5107e069a3f0f7ff3bf9a53ebdcd8166966b8c601d588444a3d926ed234684b022fd6ef44c62495daa63d653b177926615ae0eec39927f36eef622c7cb6312cf319a39203c23afe04986bb0d3a8ad2df80ebe569b4b0594a93a379b838f08b9a5799c67dd81d64aafd3c3dc798c3790282bc9fb472b2b48adf3f223f298c143dc0dbf7a5ba4f75f47fb186053f2c5168cf1f182a26557b5a2a587013a15832b32d3fab0c406af9d9f60d8d9f03378c01999882abeda842f152b7aa2f87d2f51feb1975df7a1100ad1b656cc201a710607fe8fd9effab09cb4df03a8750204af1586f2093a3753275c26b6959268a81547fa034f602b969bc2968a548e1b3018adf8eace61fc93a3bae518424d6886968adde64f9bc1a17da381177e0bd00a99b3cb43ba88439b54df600c1dd7ca378d5ea0d9b727f71b70ede209c3e4505c2bb8676581087fbf1e22f63bf71576f45a700d0c22d68a2edbec08487f0e4249a67b4b75f4bf2daa763f6e53b406193d9744c0b7a3455673c839de88de44266046a9fa40dc2299f0ac96e9588e0598713c65441a0c7c5c507d7c3ebcc0cd5359441fe656e177850c9dbb77d2336f43bc83d95a1c8aaf0eab0b12f2f98f58eef6ea7d83975395901e6065d691486613d41ef519a0c3036b1a5cdfbc4e344183472b8c4c933c027388b570ffc2b61f2782ac36f359f5b211926582771d8f49e77bc1adb4841e619c5414a8e8b4ba987f15a24b156022dbcf0c4d0ee3dc4513aa9533b6152e0017a0417c828d4b778f32de955caa3b9e546590a2ab55e4a98396f84ec83d2ef748f3626bdd0033c9ef5976b58d19e0ad3523963db12724c3193177997aee03a661d5fa129b766c345bd658a31d240177ca4761f4b3d1cd35e86e644fb71ba00c7979fc5e6e6733b3e5bd4cc1918ae914754a8d5f8bf905d53446b5745608d61dceb74a5505d7ef80697a815142ce3ce23c8d29b5c7f30355c277fd620d75c1ea1c75495adee6df731b907f2f16477eee8ec0d8bc5467fa83e13757a02cb493fc77faba6257f81ca23716a9c42d7ddf35915a293b5b0800fccba252b57021b42e0c61af31d65b511dc2b2b7856b35ef32f8e5bb6940138bbd37b7d10463d26367d3ebd9ee0365a00c5f84a0ad2235ef1e0ad84cf65b9635b08983d1e42c5ea375d5b78cfcc951fb87022bac3038db7c9f12ef8f34f25764b1e52f6224ae67d84299d8c75122c969623bafd80267613d9f680343ada3b2e4680466701c7e60ee99cb65ac4154cfefa4f02ffbb2e090d2c80384fada40683b280441d90538f70be1842458b055c7e02b4c28a13571523baca7ed83266d4e56edc2b310fc9cc8c2fc1fe70359141ba7197f000f4222c5191740903d832957b513997bd719196723a1787f6d7f95bce6001c6273ccf436b10048c878369104b8ea05806ac9aa846f46caadf7e4a33d3b604078262c1f9cbc533ca76cc234cfeab9fcc9ad3508f28974d30756114fe16bf1c11bd6c62e04a566c2fe48b9aa51a9f19fa6b03ce9b561e181838dcdf61e5c44e81c3008e776446587782d0f73e6e1356e7dfd59f4bcf9ee2b7704281db711fd30fad1ad3a1e9aa401a625d6450f0e8d1cc0d39e179561454fb98fd62aef2a739ad2fbdcb6a9ff32ff6c0847a73969733be86ec3e01f881bcb65e0c7ea74321a718af7661f19a431052a6209d77a8b095cb3c21c1384f89d82a2001eacc972b2c42b663e20ae408d3371dbb72ae1518f87d34fb65dd2d182913cee9bea6d1baad0e64d6894027b98ec05def968ab821a56d1d6c9d5ca548fb7932d7e1e8095225486d1bd97e7669bd3e453bfd7b6830dd84dda33a1e186c8d886023ba90443064a6be8c37c87e10845bbc3ba794a6", 0x1000}, {&(0x7f0000001740)="8cbf38ab2011d618d60a0a1b6f3d108397aedaac8eb034bbacee8c6071b27e73ad1a03a9ba450c736a9f36ac4f4a3f81603588fe3ffe2d3d6e0544ba96459b5020f358f9d767e9fdb84293be50b6e11bd6df5c3f6a36c2d9cafdb7c60afb4076cc7182b6a1fd4ea7c68c1a992b07b9ee828a79f5caeab0b5aaae31f5f362739e3afa5ddf76c4e19dc8b84d340ecb6b934b63", 0x92}, {&(0x7f0000001600)="46090d64fa3c1912187193447d49f0f480", 0x11}, {&(0x7f0000001800)="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", 0xfb}, {&(0x7f0000001900)="a10bc7a92fc04cc6a0500fe7e9e423777eb275a69e08dc23a2e37664fdf5c663b084401b3464ff6aae4101a9003d0f93a2f4e8d9f5c62238205142add149ef9ae7", 0x41}, {&(0x7f0000001a00)="44f2842833bb3b41cb6e826f84e9e68492d0e57d54dadeddfca4d99f447a1f388af18e8c2cf8a1904a649155f56ac9404f979a1538666cb7a8ebb79ed0357d2924a8cf58033109b0cc8a5e39a04f37728b90f5f998a4108d2b3afc7570a6fa1d3064bc95d4", 0x65}], 0x9, &(0x7f0000001b40)=[@dstopts={{0xd0, 0x29, 0x37, {0x3c, 0x16, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x63}, @generic={0x7, 0x93, "3ffce9420ad04f09cc291d7a05a32c096cde70ae6a1ad2eb034fce4c201647c1ea10253ce61fe7b0189214110773ae73b497868eea58f4fefb6f58296c4725ac400c9ec28db42b00c29212d2c689e633cb3d0bcc0fd1a5c2caa52c5d6c2fe8a57b0d5eb6350f96d89da5a89ee01fc41ead5b5a411de7c131b68483e817be1852fcffe112af785c63176db1042c354c2cb06bb7"}, @pad1, @enc_lim={0x4, 0x1, 0x7f}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0xae}]}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x5e, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @dstopts={{0x68, 0x29, 0x37, {0x67, 0x9, '\x00', [@padn, @calipso={0x7, 0x20, {0x3, 0x6, 0x51, 0x7, [0xff, 0x1, 0x20012]}}, @calipso={0x7, 0x28, {0x2, 0x8, 0xd, 0x7, [0x5e, 0x1ff, 0x6, 0x9]}}]}}}], 0x188}}], 0x4, 0x0)
r11 = socket(0xa, 0x5, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
listen(r0, 0x9)
sendmsg$inet_sctp(r11, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="18006245000000000100000007000000ac1414aa00000000200000000000000084000000020000000300020066cb000008000000", @ANYRES32=0x0], 0x38, 0x8000}, 0x20000000)
socket$nl_netfilter(0x10, 0x3, 0xc)

6m36.657976513s ago: executing program 3 (id=455):
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700)={[0x5]}, 0x8)

6m35.73781982s ago: executing program 3 (id=460):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r2=>0x0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private=0x802}}}})
socket(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000000440)={0x7c, "694565b33768e4f3204964d9725d871337dcba91f1f699acb4d21acbc0077c24e0aab1e5d537ca302f81d14d2618d4a5dbcb25da54c9b9462797f054db955f5b704ea22ddbbaf31b6670950b3f833f9faea9e0e51653d20c18507999db50e557172d4edc239b821005b82f205d1238fce3e8d3c084d73c3462ff7ccaa433d73c"})
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100182509ec000000000000dae2d9f8c87a000a38000000160a01080000000000000000020000010900020073797a31000000000900010073797a30000000000900010073797a5000000000140000001100010000000000000000000000000a3f7745a96116ab6c3964246351828258357e1887303e2bc291997bbdd2ae4c4d23ff542192844a0bc9b79b16f7397ca0554827837cf557241934cbfcb3424c26f103d70e6c745a34f5e84cab64471c8025819c79cfb83605db65c9859b55d332"], 0x60}}, 0x4000000)
r7 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f00000000c0)={0x0, 0x3ff, 0xe0, 0x0, 0x3})
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r5)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x30, r8, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40040)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r9 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
pwritev(r9, &(0x7f0000000140), 0x0, 0x2, 0x101)
r10 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r10, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x300a})

6m35.353257946s ago: executing program 32 (id=460):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r2=>0x0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private=0x802}}}})
socket(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000000440)={0x7c, "694565b33768e4f3204964d9725d871337dcba91f1f699acb4d21acbc0077c24e0aab1e5d537ca302f81d14d2618d4a5dbcb25da54c9b9462797f054db955f5b704ea22ddbbaf31b6670950b3f833f9faea9e0e51653d20c18507999db50e557172d4edc239b821005b82f205d1238fce3e8d3c084d73c3462ff7ccaa433d73c"})
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100182509ec000000000000dae2d9f8c87a000a38000000160a01080000000000000000020000010900020073797a31000000000900010073797a30000000000900010073797a5000000000140000001100010000000000000000000000000a3f7745a96116ab6c3964246351828258357e1887303e2bc291997bbdd2ae4c4d23ff542192844a0bc9b79b16f7397ca0554827837cf557241934cbfcb3424c26f103d70e6c745a34f5e84cab64471c8025819c79cfb83605db65c9859b55d332"], 0x60}}, 0x4000000)
r7 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f00000000c0)={0x0, 0x3ff, 0xe0, 0x0, 0x3})
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r5)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x30, r8, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40040)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r9 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
pwritev(r9, &(0x7f0000000140), 0x0, 0x2, 0x101)
r10 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r10, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x300a})

2m49.091122507s ago: executing program 0 (id=1733):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x0, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
migrate_pages(r0, 0xa94b, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
r4 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000100)=0x9)

2m46.674833672s ago: executing program 0 (id=1743):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022bbd7000ffdbdf2507000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)

2m46.542104765s ago: executing program 0 (id=1738):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4, 0x9, 0x3, 0x2, 0x0, 0x0, 0xffffffff}, 0x10}}, 0x20001080)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0500"])

2m46.517748999s ago: executing program 0 (id=1740):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})

2m46.465787425s ago: executing program 0 (id=1741):
creat(&(0x7f0000000080)='./file0\x00', 0x16d)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
truncate(&(0x7f0000000240)='./file0\x00', 0x648)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f1f, 0x22)

2m46.318017746s ago: executing program 0 (id=1742):
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1d1981c9fc"], 0x20)
socket(0x10, 0x800000000080002, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x109, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)

2m30.937562578s ago: executing program 33 (id=1742):
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1d1981c9fc"], 0x20)
socket(0x10, 0x800000000080002, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x109, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)

17.169215524s ago: executing program 2 (id=2636):
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000000cc000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200013800e000100636f6e6e6c6e6d69740000000c000280080001400000e41f08000340000001"], 0xd0}}, 0x20050800)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = userfaultfd(0x801)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
fsopen(&(0x7f0000000000)='ext2\x00', 0x0)
r4 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000080)=0x6e, 0x4)
sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40814}, 0x20000000)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x40)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto(r4, &(0x7f00000004c0)="051b29133c5c359ea0a0f61343fe0d5a68471a7c504915d38a0f791c4d4981d331a9a141d8b525b8f0f24a93ab9fa758c24c411df3266732c798d5c11018c9053fac0210f9861d7e39dd10aae906f784089a0055bb887448355e6497ac2a2b06361b30f1b96d9ef3525ca6d8cb995950a571f552a35819ed71773b7783c66f02820f6baea3a388505ff2ab9f28eeb3aec85df6ab078c625e55e91b3f7cdf32f1d530d0afca607a517860f8525e172e08e4369b52bf91d49e93865157e1d50fa92a680b32b8ab898d3c6024ab1186df72df10a38dad0e6f604e973674ecda", 0xde, 0x4, &(0x7f00000003c0)=@generic={0x11, "52e289f2924b9551fecca314d20c3cf2963603a845db23f9a8daee9c4a4a142d01dcd40075c763a40daabe21929fbee161068e698265d7f7b38fd31c7b3e2073a777a29df275b1067fc345fd9047889c54823ffffce4d3e7f782df22519af7e45d6b9435dd6a80cd09ce1b98304c30bb2cd3a8e9ddf6bc6402b6fb1aeeb8"}, 0x80)
getsockopt$inet6_int(r8, 0x29, 0x10, 0x0, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000966000/0x1000)=nil, 0x1000}})
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80030ac177f27d9e920b8fb7b6b464de94394ffd1952ee4920fd78c35a28e68283ef1bf3568c08ad5b97806c3dfb207b4227e"], 0x34)

17.168938326s ago: executing program 4 (id=2637):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
socket$packet(0x11, 0x2, 0x300)
sendmmsg$inet(r0, &(0x7f0000007fc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="47f0464f9f81225c2c8482ad", 0xc}, {&(0x7f0000000180)="0faf2cd2ffd1d7867d7292d0779845c1bc5e6ad972f38be86ba00e7666113b8f49a9a24a572a6b8132566f1d04b014f86a1e99bb519d1aa51be2314d8beb4f9eec2eab29208adf4879b3d5c69110daead26f7d74c069db9ebb9711cf8ac1cb51e2dca884f8e474ac8a3bde6e5e84643e194c3ba935639fa23b4a448d0877940e9ffa6cb1568d94024514a9f8ed0e40bbfa4db0c2e9b074f7a5f02a040e4425f34e80bb727675b698a58337d97746652cb07a618f17bceddd669ebb60a3381c", 0xbf}], 0x2}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)="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", 0x6af}], 0x1}}], 0x2, 0x4000040)

14.004716025s ago: executing program 2 (id=2660):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200})

13.972976636s ago: executing program 4 (id=2662):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0, 0xa0})
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000280)={{0x1, 0x0, 0xffffffffffffff36, {0xdddd1000, 0x5000}}, "62f555e0f9c836012c959487e9bafeb15cd459417d251d183362d146a5da275fa7c56e36b8c00cef93e8c26aa3746b883077791cbe55f78b96385e58790dd65124a4dcba480eb9743ad8475f0b30f5b9416ca2edc503e89e3945b9d5d584c4df4c96ea383d0b551dfc6b747010953240f12f85a79fe0e371a9ab0b2ab1ba3e8f37a3385dc9068a628ce6a05183bfd67d45bed9bc3ef1f275746b8709c5c239c2cb101ddbe79b4d3fbba5e6d12c03df76c97488a62d484e587dbc864c37c59eec5adf0ad0e353e39c5d44e5f47e68de2add4a385cc934ed1fa08515f94481fac14eb4de2f788e9a5b66c5db80c6d4c0e4618f96f1d39fced38274c741fb07503cae134c348be7c8860eb3f8eeab8caad6fa9f13f4c7319f0870ef5688d9ed7681871592c434a3e7e5e635314bfe433a70f580a63e670107ef600f0f4825b9fca1b3d182248f0fef5d1c1ed9dbc73ec60bf12ce7af6c1e7d45204601cbfa843b993fcad8644955b7ca9e2b5ca81f49a7b8eb9ff5ecb069ec4c69ae21fa57c464d10a3b2473809563b8dcc22644a0c09b2f4872707fd8bd4d56c2a31f6cb187089e9da60a5c1945337ab749213ff681e940e8d9388ea943d0c29b2c48e281b6aed6fe5f7276390321b330442616da11a79adcee0d31bdf1381fc0d23e4a5cb84329df1957abecf66840f9464cdfb2f46e36ef2c6db74a429cbb70590cf9b9e16a7b11d5f254b41567a29b3f77b28cdb3ed5a4073b143c7c3b2b060e13f7035c029a19162d72b1a5e7ea04bfca6150bd8baf9b8e41cfe9bad45b8596649a0b878c19092dba346bb9e9e069d5bbacf3d3b0e66977b14dffd0a82a233a6371545b672800470de178a220a9dbb4cdeb86f936986e980c5589676dea2d7071018347a94e7e5ad6aeadbd597f352b18c46fc34c94498357e3c97721f9f03b1ba0527712bfd3242cb98d9232882e09022b9da6404a0a3f94cf6002e36cbf701ef7c4bb6135d7d3127699fe61cc2d0f9c5877b3f7a005830711571d74ca5e3c6fd8d118a0df3e154bd6374754c5066124c209323589e7b9d6969ddf6bdcab805012a1ebb639460d08555398815761562a38fd995734ef997b1f9c036de55f228baf772ac899b4aed71e681f189870eb03915fe187e0e55272f6a69ec5876f1ab90fe34b7eda6379bdb95e83153a2160162a6fcb6beda89f1f8dd33a8c6c543117b6b4440f5ffab5ab3c34c756b7dd1c280efdfe3261c7133cd41217ab9198313da6d8fc7bbdae005c40f9704d531f5ebb7045bdb79ecf25983dafb4acb98e44743d7e6b64ff65cba7e7f2b8d53d18ca16e2de188204ecbbd499d70ad852ce30d4fdb0d8408014e3a3de2517cd82971b193e406b744cd5ccc0c2df864bca7a4e0af41ddb8501db2af788a6bad5518d848010986d48e952af942494859d166825cdd54912d0d32ff115efdbd1592325cdc047938a2c9f137f9bb198235a1d83a938acefac6f56946110b522bdb69e2a853965c11fc5a487c1df9510a03ed86baf365f49a30a67f93cfd5eed0fdebfcebcf96b0351826e06d13108fbfa3f85932d5ad00cda467dc39af4d3a33bdc28abcce3a392f219b46736c9e8b870f35dc5f1132c6b00994b78f586ed7af901b05063938e6464ab164befd046facdccd2e984f9c7f7d2d7c0cc8a5904f79895168f4af168102f52ce771719a6b89ae2f8787c3b6a3e4641824cf99c4c3cf7b4b3079b1b5bf7e671ae1920382d459202faf2091d9d85e9baf2a6ab7a6d7f380580f5931379b76a70ce84330dc000c8b4c58ca825d287ab2c1c0d7f6821b6c60dcc206a516a7c8a5cdb12c3c176f2bf3e199444c48503f4c0037225f535b0f9f0882c2001b05fe64c74d99b7267d3978814da995d0a7e61ff03b9d39817dd656544398f713f917f2cf220cfd29b3e59eb8a401fce9b57ba8bc87b0e2685a07d51a0dcbe655769630e36173fb991d710213b4b367c5bce5a8ccd633f553107d1096449c883730df2e07e9deaec2d8c3f8171ca097276dae33e0f9009a82ec90f07ed3200af689263c07f60eb182d3e8305e947a700a5ac208e4c8323534e6e0f51c015a18a396971a8089688cdaf64e7884de54542f35772a41fae7661319e92e62259ae79635b3d888a173fe92a222cf294c569d092e41c6ad59a2c1bff78d506cc8fa28b03eb0aaf19d7e218402c8e19dbfcf5680143bc0a71bfb6a1e68ebf42d634ad8205f0774195d032e8d5bcfbc36bd737141f8be4e7279ed1231921a8e916995aaaf577c64b51b34ef72c9c7b7ccd6a0765ba5162525ce436bfae6d977c11570066622584599f4817bfbea9fb9ad549146a5403d8b9a29827f5dc4f8dae4cc0849c3d7a93fe148f43d465d246a974137f28cc17185adabb9b49d93c6bfe502dc47576c85c5145e0c211a42809959b1a8dd0bb42d9e1831a55bfbb681aacb0b62b4a9298c5d5f5834d0b0cbe626c17b128cdf53a03bc21fe1c7648a96697d8b078d3a6570289ef0e7ebc5bff6a64cfa65276713532fd54147043e0c3b74282dfb6d1e1c137eae1ecb3d3d39a5ace7e48cb0dc94a2c8cfb12742f5538e141207717505fe8b46a2492f7e3e77990b935df524b07efab69e8404ba0670dc27cb9feebb1cc89fbb36c5bab9123e1d56e75bebe2d31a1a4e259d01b70aef3a9479c38bc72e245ae3e6520a6acb16eabb011551c856957e687cbc53e4d6fb89a83c7f54bc5ca3a4f4d933e0b8ec873d7a288e51d8e1a9f7a96b8e7275ab2ca388be30485bfba4c430b7ba98d37873327f53e6ffc5fcc315325cd530747b1217aa9715a80e4391e510ff8c2d4e696cb8a56f7e7328618ec24933834d87e12ddc8c6b5e0349cdbe81a815a0bea4903872bd762e223eeae89961219f8b7ac866b075797d055ba08d5f5b25e402c9d8164c8a18a29df5c7e0250836e04400142e2eb1ae31fd305773bf3352384e023933cc12e2665b90ba7d28cd4199af329817a5fb212e458b5a645773581272a75c294ff564122cf7d96e8f3d14d9876ab09f9e7a2fe184ac2183b50bdba3be95c9d3c0c854492a1beb59e5020fd1bc28c3b70b081e5bfd82176e0987b58fead13096b7b055afe0a6a50af2277eb646224b0705ced3ce3901306e1eacb4906df54f72d4706f6ea6a3f111d9fa0efb2693ca41fb0394d3fd65e85508af36de513c6f1acbb50f386c5d5e712d8f4a720b8b035247ad6167b837000abeb38237c093e5159873dda350801b3f343f53df555c4856e857b0426579ab60adbdbf3db0a5bd58f01a27224a010fde1b679ccb4ffe7069c117958b57372f444d84507bb0f4dbfa44e03cc0cecc93f7af7143340fa28ccf9d49ade9f396063aa5b7ce397574f28ecde2f58655acaead943cc49f26a0a387ad68136f8f4b13fcdd3d5be006b494564c766ebc926140d45c84bd02e6a3e947e7e2dfc5ce301a66a0974b2f5ffa906cb2ae660370ae010224a81bca39e1521cbe7340445b0d6f44c628ed297f5860685ded2acfa10c1b4aac4439c65768d48a175e43fb25c4c85c05b04c0955f1aaa4fd0c18f6ac540b66bd856b8ac32837e8b3082453e4b8f10375f6b32b2af80240dc602bc340a9e107b42a4204bd6bb0889e46a415ff5c24df7ffbe9eca2dddf7ad64c4eb018624cb0a2fa92ffa23bc7c503972fdf208da2f4ff1af3ba19a96b390f209608a3b8c5f19d7117adf3a222b886b04e300a8c8b25afc52201d8afdb0f8d1377c028de8eafabd75759a44ddbb2f4376ffae20629fe08ba10c768fec6f011c61ab155573b48f5141d9ff02ad2c317eaa86becf9d4f007aebd0b152fe7b55aca593b6678bd4333f220fa61e8124657d3dcab9ecb1258857cba8e61861a921222957d4c346bfe81eb0274843ff7fee27dcebf6bd29fd05687e7e85c213c95426b976e07012ebd5e0592082229a8a5bd1b580678b3c204fe6305465c03ceffa908b8150a99c3e32ae4bd095d75ff180fa02e64c471180fa468caaff9fcee94f8fdb55ab9f06dfed97ee710807d1fca7e6b103c1600b7455fd9d8e42c1146938a02cf8c2c8f0ed074398cff451d0ba2d660885e4fb3c384a52fb8d841d8b7bb2c5463aeb015cbbf54f394875e20f6b3574d65ed39c44f2c6d5b0507ff6196dbcd2b69ba0be1d44565958560c5e9688807a74161f8749b78cd558fde84dc2527b344ab773870e184615ad2ccada1ef750ef8b44cd16cb362faf22ba66f6476d0294d6a22483d78a6855a1bd13f151dc80a358224c86021393bdddb093928863475512a6110acb6ec55039ace9c45792478222155ae2177df549934e202c2865b54132ec8a489c5e6bd0a2d3f27ae107d62f95d131279ee8a0c180e3c61bdee4cf53a7fdf60dfcbb443ee3f2218de76f5e33cf8db2f824c63bf15784d022b121cc69761cc80116774dabb549c1c63f9f99bbe66b4351d8274c73754b7e7475dd8030223c8f830bb77bee7346643f2614601d06a52fae4f53bab4ee047552d9bdd0fa5fd7e4f7674f226f04ab733b7369a62ecfa9a47aed6c350594f9f0a211277a89dbff52abe7638f9d4f37370b784abd7f174b5f3b3a68149935cbb6c88a17c9876c8dd1b501c5f3a424bdfe44b177b1799384c28723b7150a61184d006052f8e14e6e77bf3a9164d596ddb341bebae2f2dbd175af59cce8b121ebfee73fad3eed15d87de5b64abc1758396da2508ee3f20bebd93b6d25b6377989ec5424022a0086699478e6860750e9c926c59bcd0cac3e9dbb1f0b0124c2bd69b535573c9617aab0fec4e3faa69512d9a76aad0df282e9dea80422655d7d001b09fdb53930243d3615df8f0bd598430a23de65f6d882166e84a00306fe079973e5322976a43c72b245358e3ceaa926f60b474f81a482fe2137f06cbd4dbffd476c88a4ab0ad32692719467f5afced5894bc15c3f8d830ebffa8ee431b58a2ad355c2872a0f03ba034dbbf730b74de1aaadc634c08b9fe5402a16a7c79ba3f5a4b318b26d4968143343dfcc79106e606d76e488e0cc6cf76df6c076c766bdd27f2a759339ee2da94e5983c7a0e196deebc51ddf909dca31e2ef491be6f9ded1bf2fb50f5322ba94306fb0c6d67a57f58d7a3d30a4a58322d3f0968b7a44e4017c5caf29e2221f5250a8868ed1525e6fa62d0cc79fbfb92d05921542d84339e33305cfd0624e246f742644638e360051f396eb058c68c5f66f5db3c830cc567b0a2601c2354a7f800d7c815c4744e2fabb00cda287aa74c924ab6afcc92e422ef618bd681bea1a9ec7234e67b9690309be0eab273e67f03e6ae349bcb468251954fdc19edd6fb0c09e4306465f2029d08e137bd7e84716a9e9b29c0fb2e5a55256fd878304baea76c9379265ca36a04e69df2782589c1911b8ae314c017ea5685110880b036aa76c4a19dd240664b6f4098aa2bf51b90678098993ebdb39166194b44f35a81709570398f00f0f8a1e9cd004e02cc1ccb63f56b79268dce0dc70438dda8f2885f4f199922a28f04fdac1b4be1a690cd4fdf0c7ff0252768373496e8e6db9068cd492aaea485ffef09c7351d5555eb3545a1048af936a19c5b08a3d47baed2f8cef2f8ae7443acf81b61fa2d0c1cecfe1881d3b2d8882810a014baff0570a389f5424c8e98f64a35e411bd560c5cb5b9ed3f846cc46b4c537691e13bcc3e55762a427534a7354914dac303c3263b8765f861f453e470c4567ba9cb6c13cf17c24bac9ef1f40d9fa5b0b9b5e9d4c082886b80caebaa44fb38934e7bbf184d28c2bc3ac824d1626fccf542eb3", "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"})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usbip_server_init(0x4)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

10.85324702s ago: executing program 2 (id=2690):
r0 = inotify_init()
socket$unix(0x1, 0x1, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000100)=0x32)
mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1)
close(r0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0xb)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x3}})
read$FUSE(r0, &(0x7f0000001fc0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/pid_for_children\x00')
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="4003060071516a54"], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2400000064006bcd9e3fe3dc6e48aa31086b8703130000001f0000000000000004001400", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r5, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
syz_usb_control_io$uac1(r3, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x0, 0x21, 0x2e, {0x2e, 0xd, "ce4416e02f76e73ce398aa8783b1b2e7d5205efb5c7d57b99c5234fbd07b2f0935ef0c2113abc5613bfc59d7"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x40, 0x12, 0x54, "7fb652238b01a39aff55e125ecaac70a4c07f0ab3863a06f7e4875f07448694d6679564d5cfb3fbacfa5c682568c547cb693807baa8ea00d8fd5ed49bc72c8f605d5323ec3cddd0464f6df4466fec030787d855b"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000380)={0x20, 0x81, 0x3, "274c1b"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "b8"}, &(0x7f0000000400)={0x20, 0x83, 0x1, "f0"}, &(0x7f0000000440)={0x20, 0x84, 0x4, "18824510"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "b7c60a"}})
mkdirat$cgroup(r5, &(0x7f0000000040)='syz1\x00', 0x1ff)

10.806006925s ago: executing program 4 (id=2691):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
socket$packet(0x11, 0x2, 0x300)
sendmmsg$inet(r0, &(0x7f0000007fc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="47f0464f9f81225c2c8482ad", 0xc}, {&(0x7f0000000180)="0faf2cd2ffd1d7867d7292d0779845c1bc5e6ad972f38be86ba00e7666113b8f49a9a24a572a6b8132566f1d04b014f86a1e99bb519d1aa51be2314d8beb4f9eec2eab29208adf4879b3d5c69110daead26f7d74c069db9ebb9711cf8ac1cb51e2dca884f8e474ac8a3bde6e5e84643e194c3ba935639fa23b4a448d0877940e9ffa6cb1568d94024514a9f8ed0e40bbfa4db0c2e9b074f7a5f02a040e4425f34e80bb727675b698a58337d97746652cb07a618f17bceddd669ebb60a3381c", 0xbf}], 0x2}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)="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", 0x6e8}], 0x1}}], 0x2, 0x4000040)

7.673958018s ago: executing program 4 (id=2720):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="ff", 0x1}], 0x1)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x800, 0x89, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {&(0x7f00000000c0)=[{0x92e, 0x8000, {0x0}, 0xa}, {0x9fb, 0xd4, {0x0}, 0xfff}]}, 0x5}) (fail_nth: 5)

7.673666534s ago: executing program 2 (id=2721):
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10012, r0, 0x2c2ff000)
syz_io_uring_setup(0x626a, &(0x7f0000000200)={0x0, 0xde4b, 0x4, 0x2, 0x3cf}, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00')
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
setuid(0xffffffffffffffff)
shmctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x36a, 0x8, 0x0, 0x0, 0x4, 0x6, 0x9})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0xff07, 0x0)
preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), &(0x7f0000000140)={'L+', 0x80}, 0x16, 0x3)

4.606098613s ago: executing program 2 (id=2737):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xc3a51000)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2100b066eeb9e00a00000f32646467660f01000000000000007124c4a179d64a0067362e0f"], 0x56})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000})
ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000200)={{{0xe}}, 0x9b, 0x3, &(0x7f0000000140)="29cee2fc94d34dfd063c400f84e27e732dad85fcd3959f2e3ccbec721910e7a6e8b2c85e2f313586933714d41b8920448e46189eeb4856bf3261f225c82444ce44118c493039db0a83317ad8dc3e83a4959d0abb0eb9876791c6884255d44dbf1013f1682dc3add6b2af2260b726389704f6526191f1b355da8cb04b26fe79dc2addb803f6dddc0c573bd3b9454b5a6256471397e50a4e39f03b28"})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4)

4.549990067s ago: executing program 4 (id=2738):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000151401"], 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x24040800)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c)
r4 = eventfd(0x3)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000021c0)={r4, 0x13, 0x1})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x9, 0x5f, 0x3}]})

1.510724039s ago: executing program 2 (id=2748):
r0 = socket$l2tp(0x2, 0x2, 0x73)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new defcult '], 0x2f, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x32, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000440)="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", 0x183, r1)
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x22003, 0x0)
close(r2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"})
r4 = syz_open_pts(r3, 0x20800)
dup3(r4, r3, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x44)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r5, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14)
bind$l2tp(r0, &(0x7f00000000c0), 0x10)
sendto$l2tp(r0, &(0x7f0000000080)="7b092d161b003b0f7222f934b72bde7cddfca29227d1f998fbe13190e3d75ab5a576", 0x22, 0x40000, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000001c0)=""/178, 0xb2}], 0x1}, 0x9}], 0x1, 0x2002, 0x0)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fadvise64(r6, 0x92, 0x5, 0x2)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x3265a)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
ioctl$I2C_PEC(r7, 0x708, 0x6)
mmap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0xf, 0x10010, r6, 0xa4717000)

1.492122763s ago: executing program 4 (id=2749):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000004c0)={0xf0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000)

728.703973ms ago: executing program 1 (id=2757):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x72}, {0x3}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xb00, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0)

668.442125ms ago: executing program 1 (id=2758):
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='sockfs\x00', 0x200002, 0x0)

570.120634ms ago: executing program 1 (id=2759):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x221}], 0x1}}], 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmmsg$inet(r0, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)="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", 0x643}], 0x1, &(0x7f0000000640)}}], 0x1, 0x8000)

553.953178ms ago: executing program 1 (id=2760):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
shutdown(r0, 0x1)

474.394171ms ago: executing program 5 (id=2761):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000d060608000000000001800000000001120003006269746d61703a69702c6d616300000005000500050000000500010007000000c34bf60a8318b2fc2486cf381089ad1fe1419d4703fad675e5725eaf35704d539c4ac1a69563a26143ea098706d0d2c881a4dd541b0275c49dcf1104f32a7a37decdeb9e3bde6b09b76c32a20e9541b70fcccb1edfe3397ecff7dfc980e9bc8e976a744ef96bbd9cd2a03d717d2047c9a9a90ecaf31697735fae97e7481754b1138a6ed1249048c206774445af91bfb1df3bbb08651725ec67b7e879e8f29016349f03e1c4181f200ff6e8b064da23e1890b5af604e504971df1eb7a85ecbef147aab4d1d7a3da851aa0a89b404dda6e8aa5b1dbeae5baf825db047d637e9ec69e"], 0x38}, 0x1, 0x0, 0x0, 0x140c0}, 0x80)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

473.716027ms ago: executing program 1 (id=2762):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0)
read(r1, &(0x7f0000000100)=""/4, 0x4)
sendto$unix(r1, &(0x7f0000000880)="922280ffb8266e5f55c16310fa19d1eb3c7a7903fa3e6d6dd8a20e981e9479baf6b2468aea649c8eab77c207fb7f8e78ecaca9460006857e16552519bf3d8af0d6e816c35d8d31fe603481f83f5a5674cb4cdf53", 0x54, 0xc080, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e)
recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000980)=""/233, 0xe9}, {&(0x7f0000000580)=""/165, 0xa5}, {&(0x7f0000000300)=""/114, 0x72}, {&(0x7f0000000380)=""/5, 0x5}, {&(0x7f0000000b40)=""/158, 0x9e}, {&(0x7f0000000a80)=""/133, 0x85}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f0000000640)=""/96, 0x60}], 0x8, &(0x7f0000000740)=""/160, 0xa0}, 0x10100)
r2 = accept$alg(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000)

354.058476ms ago: executing program 1 (id=2763):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="2d72645f61707572665f6576656e6d4213cdda3674200000f7ff000000a49be4dbceac90d1b3272c60f347ffbf58afdfa6d92522c4000000000000000000000000004f20ce8f4c55915bf8b502fa53a8d9eeca7c86641962d276807ae2aae864a3c45ed84c78916f457647628f6c6eeafaae715307c0c35f347bbabf0c0ab576111c36973529a657ec83a57a"], 0x17)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac02d000200070002000600020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002cb70000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYBLOB="e0daa02a52aed1dd7ce65cef4402a5e039efcf976b035ada54a5d722fbfe03d909e191edbaf888aca15f9f3317ea09eac6bbcffee2998909c759e2d47a8ac0e599247665a5c7d14ba3c3f5f82ab970e104c21b", @ANYRES64=r0, @ANYRESHEX=r2, @ANYRES16], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
fadvise64(r0, 0x94, 0x6e, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

353.911949ms ago: executing program 5 (id=2764):
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10012, r0, 0x2c2ff000)
syz_io_uring_setup(0x626a, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00')
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
setuid(0xffffffffffffffff)
shmctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x36a, 0x8, 0x0, 0x0, 0x4, 0x6, 0x9})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0xff07, 0x0)
preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), &(0x7f0000000140)={'L+', 0x80}, 0x16, 0x3)

275.858424ms ago: executing program 5 (id=2765):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {0x8}, @broadcast, @device_a, @from_mac=@broadcast}, 0x2000000, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

187.843956ms ago: executing program 5 (id=2766):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001980)=ANY=[@ANYBLOB="bc010000130001002abd700000000000e0000002000000000000000000000000ac1414bb0000000000000000000000000000000000000000020020"], 0x1bc}}, 0x4000)

41.893692ms ago: executing program 5 (id=2767):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3d, 0x0, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf6486000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x4004)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
keyctl$setperm(0x5, 0x0, 0x4010)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0xb001, 0x4, 0x3a8, 0xe8, 0xe8, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x9}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@AUDIT={0x28}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, 0xff000000, 0xffffff00, 0xf, 0x9, {@empty, {[0x0, 0xff, 0x20ebd73230e7e6c7, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff]}}, 0x8, 0x9, 0x7, 0x81, 0x3, 0x3, 'bond0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

0s ago: executing program 5 (id=2768):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x222}], 0x1}}], 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)="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", 0x643}], 0x1, &(0x7f0000000640)}}], 0x1, 0x8000)

kernel console output (not intermixed with test programs):

d
[  279.781845][   T43] usb 2-1: Using ep0 maxpacket: 16
[  279.791035][   T43] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  279.820073][   T43] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  279.831240][   T43] usb 2-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[  279.843233][   T43] usb 2-1: Product: syz
[  279.848249][   T43] usb 2-1: Manufacturer: syz
[  279.854513][   T43] usb 2-1: SerialNumber: syz
[  279.887963][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'.
[  279.897972][   T43] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  279.909300][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1108'.
[  280.089981][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1105'.
[  280.099926][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'.
[  280.119248][   T43] usb 2-1: USB disconnect, device number 45
[  280.121768][ T1085] usb 2-1: Failed to submit usb control message: -71
[  280.143148][ T1085] usb 2-1: unable to send the bmi data to the device: -71
[  280.153188][ T1085] usb 2-1: unable to get target info from device
[  280.160064][ T1085] usb 2-1: could not get target info (-71)
[  280.166810][ T1085] usb 2-1: could not probe fw (-71)
[  280.722052][ T5838] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  280.825130][ T9237] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1115'.
[  280.891743][ T5838] usb 1-1: Using ep0 maxpacket: 8
[  280.909457][ T5838] usb 1-1: unable to get BOS descriptor or descriptor too short
[  280.931098][ T5838] usb 1-1: config 11 has an invalid interface number: 244 but max is 0
[  280.957381][ T5838] usb 1-1: config 11 has no interface number 0
[  280.976740][ T5838] usb 1-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0
[  281.004848][ T5838] usb 1-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0
[  281.030799][ T5838] usb 1-1: config 11 interface 244 has no altsetting 0
[  281.090825][ T5838] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a
[  281.135932][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.173327][ T5838] usb 1-1: Product: syz
[  281.177583][ T5838] usb 1-1: Manufacturer: syz
[  281.205265][ T5838] usb 1-1: SerialNumber: syz
[  281.431776][   T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  281.483589][ T9247] binder: 9231:9247 ioctl c0306201 2000000003c0 returned -14
[  281.527193][ T9249] MTD: Couldn't look up '/dev/sg0': -15
[  281.533308][ T9249] /dev/sg0: Can't lookup blockdev
[  281.596498][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.609555][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  281.625145][   T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  281.634914][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  281.644828][   T10] usb 2-1: SerialNumber: syz
[  281.870817][   T10] usb 2-1: 0:2 : does not exist
[  281.877419][   T10] usb 2-1: unit 5 not found!
[  281.908775][   T10] usb 2-1: USB disconnect, device number 46
[  281.948447][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  283.447313][ T9232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  283.580190][ T5838] peak_usb 1-1:11.244 can0: unable to request usb[type=0 value=1] err=-71
[  283.608830][ T5838] peak_usb 1-1:11.244: unable to read PCAN-USB X6 firmware info (err -71)
[  283.659206][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.695219][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.777817][ T5838] peak_usb 1-1:11.244: probe with driver peak_usb failed with error -71
[  283.817442][ T5838] usb 1-1: USB disconnect, device number 47
[  283.858094][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'.
[  283.868835][ T9290] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1135'.
[  283.896164][ T9290] netlink: 'syz.1.1135': attribute type 3 has an invalid length.
[  283.914245][ T9290] netlink: 'syz.1.1135': attribute type 2 has an invalid length.
[  283.924027][ T9290] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1135'.
[  284.251737][ T5838] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  284.341839][   T43] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  284.390833][ T9301] input: syz0 as /devices/virtual/input/input16
[  284.401806][ T5838] usb 1-1: Using ep0 maxpacket: 32
[  284.414356][ T5838] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  284.425046][ T5838] usb 1-1: config 0 has no interface number 0
[  284.431792][ T5838] usb 1-1: too many endpoints for config 0 interface 51 altsetting 17: 253, using maximum allowed: 30
[  284.445319][ T5838] usb 1-1: config 0 interface 51 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  284.462074][ T5838] usb 1-1: config 0 interface 51 has no altsetting 0
[  284.473617][ T5838] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  284.484205][   T43] usb 2-1: device descriptor read/64, error -71
[  284.494444][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.506731][ T5838] usb 1-1: Product: syz
[  284.511344][ T5838] usb 1-1: Manufacturer: syz
[  284.516586][ T5838] usb 1-1: SerialNumber: syz
[  284.533476][ T5838] usb 1-1: config 0 descriptor??
[  284.545634][ T5838] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  284.573245][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.580522][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.588837][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.597243][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.604298][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.612068][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.619102][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.627752][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.635250][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.643337][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.650910][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.659136][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.667007][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.674186][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.681396][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.688847][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.696472][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.703913][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.711004][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.719199][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.726331][   T43] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  284.726877][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.745766][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.753179][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.755865][ T5838] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  284.761257][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.778165][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.784157][ T5838] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  284.786232][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.802042][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.809396][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.816594][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.823944][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.831813][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.839222][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.846572][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.853852][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.861338][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.868800][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.876084][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.882336][   T43] usb 2-1: device descriptor read/64, error -71
[  284.883699][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.898306][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.905490][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.912755][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.919899][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.927575][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.934606][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.941781][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.948948][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.956369][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.963771][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.971176][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.978847][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.986541][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  284.994151][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  285.001744][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  285.008791][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  285.016079][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  285.023416][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  285.030445][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  285.032448][   T43] usb usb2-port1: attempt power cycle
[  285.037791][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  285.051746][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  285.059538][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  285.067172][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  285.075059][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  285.084052][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  285.091753][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  285.100597][ T5867] Bluetooth: hci2: unexpected event for opcode 0x080f
[  285.299409][ T9308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.310100][ T9308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.322415][ T9308] fuse: Unknown parameter 'ÿ0x0000000000000003'
[  285.391900][   T43] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  285.422718][   T43] usb 2-1: device descriptor read/8, error -71
[  285.691934][   T43] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  285.725232][   T43] usb 2-1: device descriptor read/8, error -71
[  285.844184][   T43] usb usb2-port1: unable to enumerate USB device
[  286.009794][ T9312] input: syz1 as /devices/virtual/input/input17
[  286.027869][ T9312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.051422][ T9312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.962814][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  286.965149][   T10] usb 1-1: USB disconnect, device number 48
[  286.990536][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  287.031334][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  287.064682][   T10] quatech2 1-1:0.51: device disconnected
[  287.143791][ T9323] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1149'.
[  287.399734][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.410923][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.451985][   T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  287.551769][ T5944] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  287.591743][   T10] usb 1-1: device descriptor read/64, error -71
[  287.705042][ T5944] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.716645][ T5944] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.728545][ T5944] usb 2-1: config 0 interface 0 has no altsetting 0
[  287.735916][ T5944] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  287.745484][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.759649][ T5944] usb 2-1: config 0 descriptor??
[  287.861750][   T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  288.012064][   T10] usb 1-1: device descriptor read/64, error -71
[  288.064961][ T9335] overlay: ./bus is not a directory
[  288.122517][   T10] usb usb1-port1: attempt power cycle
[  288.187430][ T5944] hid-led 0003:04D8:F372.0008: unknown main item tag 0x0
[  288.198383][ T5944] hid-led 0003:04D8:F372.0008: item fetching failed at offset 5/7
[  288.209264][ T5944] hid-led 0003:04D8:F372.0008: probe with driver hid-led failed with error -22
[  288.383964][   T43] usb 2-1: USB disconnect, device number 51
[  288.461830][   T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  288.484713][   T10] usb 1-1: device descriptor read/8, error -71
[  288.741740][   T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  288.762487][   T10] usb 1-1: device descriptor read/8, error -71
[  288.872047][   T10] usb usb1-port1: unable to enumerate USB device
[  289.095061][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'.
[  289.364862][ T9357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.375618][ T9357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.986302][ T9361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.996013][ T9361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.008408][ T9361] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  290.493484][   T43] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  290.651450][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1171'.
[  290.665985][   T43] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.698512][   T43] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.712740][   T43] usb 2-1: config 0 interface 0 has no altsetting 0
[  290.721333][   T43] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  290.734976][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.762629][   T43] usb 2-1: config 0 descriptor??
[  291.071730][ T5940] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  291.195666][   T43] hid-led 0003:04D8:F372.0009: unknown main item tag 0x0
[  291.195720][   T43] hid-led 0003:04D8:F372.0009: item fetching failed at offset 5/7
[  291.200369][   T43] hid-led 0003:04D8:F372.0009: probe with driver hid-led failed with error -22
[  291.217664][ T5940] usb 1-1: device descriptor read/64, error -71
[  291.385010][ T5944] usb 2-1: USB disconnect, device number 52
[  291.451734][ T5940] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  291.591861][ T5940] usb 1-1: device descriptor read/64, error -71
[  291.704150][ T5940] usb usb1-port1: attempt power cycle
[  292.042174][ T5940] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  292.065952][ T5940] usb 1-1: device descriptor read/8, error -71
[  292.332785][ T5940] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  292.385991][ T5940] usb 1-1: device descriptor read/8, error -71
[  292.502195][ T5940] usb usb1-port1: unable to enumerate USB device
[  292.575621][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'.
[  292.801827][   T43] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  292.932521][   T43] usb 2-1: device descriptor read/64, error -71
[  293.173052][   T43] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  293.305466][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1193'.
[  293.314671][   T43] usb 2-1: device descriptor read/64, error -71
[  293.376099][ T9440] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  293.425327][   T43] usb usb2-port1: attempt power cycle
[  293.772138][   T43] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  293.812382][   T43] usb 2-1: device descriptor read/8, error -71
[  293.898331][ T9457] XFS (rnullb0): Invalid superblock magic number
[  294.071790][   T43] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  294.112624][   T43] usb 2-1: device descriptor read/8, error -71
[  294.184577][ T9458] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/rnullb0": -EINTR
[  294.225557][   T43] usb usb2-port1: unable to enumerate USB device
[  294.431794][ T5838] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  294.571775][ T5838] usb 1-1: device descriptor read/64, error -71
[  294.758716][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.768809][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.811842][ T5838] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  294.951885][ T5838] usb 1-1: device descriptor read/64, error -71
[  295.063850][ T5838] usb usb1-port1: attempt power cycle
[  295.401732][ T5838] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  295.423681][ T5838] usb 1-1: device descriptor read/8, error -71
[  295.668063][ T5838] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  295.703040][ T5838] usb 1-1: device descriptor read/8, error -71
[  295.822415][ T5838] usb usb1-port1: unable to enumerate USB device
[  295.995018][ T9515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.004046][ T9515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.031926][ T9517] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  296.281732][   T43] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  296.437185][   T43] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  296.447252][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.455422][   T43] usb 2-1: Product: syz
[  296.459678][   T43] usb 2-1: Manufacturer: syz
[  296.464596][   T43] usb 2-1: SerialNumber: syz
[  296.476562][   T43] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  296.505830][ T5943] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  296.691392][ T9522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.707935][ T9522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.121219][ T9517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.132033][ T9517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.172410][ T5916] usb 2-1: USB disconnect, device number 57
[  297.574964][ T9534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.585160][ T9534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.621860][ T5940] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  297.768582][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'.
[  297.791910][ T5940] usb 1-1: Using ep0 maxpacket: 8
[  297.799292][ T5940] usb 1-1: config 0 has no interfaces?
[  297.805874][ T5940] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  297.816484][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.834219][ T5940] usb 1-1: config 0 descriptor??
[  297.983983][ T5943] usb 2-1: Service connection timeout for: 257
[  297.997483][ T5943] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  298.009373][ T5943] ath9k_htc: Failed to initialize the device
[  298.017519][ T5916] usb 2-1: ath9k_htc: USB layer deinitialized
[  298.052946][ T5940] usb 1-1: USB disconnect, device number 61
[  298.191965][ T9546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.201217][ T9546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.321770][ T5916] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  298.464182][ T5916] usb 2-1: device descriptor read/64, error -71
[  298.701821][ T5916] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  298.841813][ T5916] usb 2-1: device descriptor read/64, error -71
[  298.899890][ T9559] netlink: 18128 bytes leftover after parsing attributes in process `syz.4.1237'.
[  298.908183][ T9560] sctp: [Deprecated]: syz.0.1238 (pid 9560) Use of struct sctp_assoc_value in delayed_ack socket option.
[  298.908183][ T9560] Use struct sctp_sack_info instead
[  298.965476][ T5916] usb usb2-port1: attempt power cycle
[  299.323354][ T5916] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  299.363593][ T5916] usb 2-1: device descriptor read/8, error -71
[  299.393430][ T9578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.403638][ T9578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.621662][ T5916] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  299.645411][ T5916] usb 2-1: device descriptor read/8, error -71
[  299.762304][ T5916] usb usb2-port1: unable to enumerate USB device
[  299.975975][ T9592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.986186][ T9592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.210756][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1250'.
[  301.639991][ T9627] /dev/sg0: Can't lookup blockdev
[  301.660012][ T9627] /dev/sg0: Can't lookup blockdev
[  301.691460][ T9627] /dev/sg0: Can't lookup blockdev
[  301.703882][ T9627] /dev/sg0: Can't lookup blockdev
[  301.710406][ T9627] /dev/sg0: Can't lookup blockdev
[  301.719692][ T9627] /dev/sg0: Can't lookup blockdev
[  301.727375][ T9627] /dev/sg0: Can't lookup blockdev
[  301.737043][ T9627] /dev/sg0: Can't lookup blockdev
[  301.743412][ T9627] /dev/sg0: Can't lookup blockdev
[  301.749375][ T9627] /dev/sg0: Can't lookup blockdev
[  301.760197][ T9627] /dev/sg0: Can't lookup blockdev
[  301.768211][ T9627] /dev/sg0: Can't lookup blockdev
[  301.777979][ T9627] /dev/sg0: Can't lookup blockdev
[  301.786579][ T9627] /dev/sg0: Can't lookup blockdev
[  301.796517][ T9627] /dev/sg0: Can't lookup blockdev
[  301.804728][ T9627] /dev/sg0: Can't lookup blockdev
[  301.810765][ T9627] /dev/sg0: Can't lookup blockdev
[  301.822018][ T9627] /dev/sg0: Can't lookup blockdev
[  301.828075][ T9627] /dev/sg0: Can't lookup blockdev
[  301.838092][ T9627] /dev/sg0: Can't lookup blockdev
[  301.844574][ T9627] /dev/sg0: Can't lookup blockdev
[  301.850830][ T9627] /dev/sg0: Can't lookup blockdev
[  301.863254][ T9627] /dev/sg0: Can't lookup blockdev
[  301.881337][ T9627] /dev/sg0: Can't lookup blockdev
[  301.890427][ T9627] /dev/sg0: Can't lookup blockdev
[  301.901116][ T9627] /dev/sg0: Can't lookup blockdev
[  301.909814][ T9627] /dev/sg0: Can't lookup blockdev
[  301.919487][ T9627] /dev/sg0: Can't lookup blockdev
[  301.928299][ T9627] /dev/sg0: Can't lookup blockdev
[  301.936125][ T9627] /dev/sg0: Can't lookup blockdev
[  301.945008][ T9627] /dev/sg0: Can't lookup blockdev
[  301.950956][ T9627] /dev/sg0: Can't lookup blockdev
[  301.959919][ T9627] /dev/sg0: Can't lookup blockdev
[  302.047846][ T9633] kvm: kvm [9632]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000079)
[  302.138038][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'.
[  302.367219][ T5838] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  302.426559][ T9649] Can't find a SQUASHFS superblock on rnullb0
[  302.512740][ T5838] usb 1-1: device descriptor read/64, error -71
[  302.751799][ T5838] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  302.891817][ T5838] usb 1-1: device descriptor read/64, error -71
[  302.973921][ T5940] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  303.002020][ T5838] usb usb1-port1: attempt power cycle
[  303.136423][ T5940] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.147941][ T5940] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.161643][ T5940] usb 2-1: config 0 interface 0 has no altsetting 0
[  303.169031][ T5940] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  303.178527][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.190780][ T5940] usb 2-1: config 0 descriptor??
[  303.352371][ T5838] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  303.372661][ T5838] usb 1-1: device descriptor read/8, error -71
[  303.608579][ T5940] hid-led 0003:04D8:F372.000A: unknown main item tag 0x0
[  303.613638][ T5838] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  303.616097][ T5940] hid-led 0003:04D8:F372.000A: item fetching failed at offset 5/7
[  303.633718][ T5940] hid-led 0003:04D8:F372.000A: probe with driver hid-led failed with error -22
[  303.644358][ T5838] usb 1-1: device descriptor read/8, error -71
[  303.752523][ T5838] usb usb1-port1: unable to enumerate USB device
[  303.807277][ T5940] usb 2-1: USB disconnect, device number 62
[  305.181482][ T9669] netlink: 'syz.0.1280': attribute type 16 has an invalid length.
[  305.881736][ T5944] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  306.038576][ T5944] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  306.050603][ T5944] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0
[  306.062698][ T5916] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  306.072946][ T5944] usb 1-1: config 0 interface 0 has no altsetting 0
[  306.080103][ T5944] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  306.097072][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.108289][ T5944] usb 1-1: config 0 descriptor??
[  306.244496][ T5916] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  306.255894][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  306.267762][ T5916] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  306.277244][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  306.285654][ T5916] usb 2-1: SerialNumber: syz
[  306.515813][ T5916] usb 2-1: skipping empty audio interface (v1)
[  306.530929][ T5944] hid-led 0003:04D8:F372.000B: unknown main item tag 0x0
[  306.547000][ T5944] hid-led 0003:04D8:F372.000B: item fetching failed at offset 5/7
[  306.564543][ T5916] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  306.574460][ T5944] hid-led 0003:04D8:F372.000B: probe with driver hid-led failed with error -22
[  306.586559][ T5916] usb 2-1: USB disconnect, device number 63
[  306.619876][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  306.729058][ T5838] usb 1-1: USB disconnect, device number 66
[  307.422048][ T5838] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  307.595138][ T5838] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  307.610275][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.615121][ T9703] FAULT_INJECTION: forcing a failure.
[  307.615121][ T9703] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  307.620697][ T5838] usb 2-1: Product: syz
[  307.634710][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.0.1296 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  307.634746][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  307.634760][ T9703] Call Trace:
[  307.634770][ T9703]  <TASK>
[  307.634780][ T9703]  dump_stack_lvl+0x189/0x250
[  307.634822][ T9703]  ? __pfx____ratelimit+0x10/0x10
[  307.634858][ T9703]  ? __pfx_dump_stack_lvl+0x10/0x10
[  307.634890][ T9703]  ? __pfx__printk+0x10/0x10
[  307.634923][ T9703]  ? __might_fault+0xb0/0x130
[  307.634971][ T9703]  should_fail_ex+0x414/0x560
[  307.635008][ T9703]  _copy_from_user+0x2d/0xb0
[  307.635037][ T9703]  ___sys_sendmsg+0x158/0x2a0
[  307.635067][ T9703]  ? __pfx____sys_sendmsg+0x10/0x10
[  307.635143][ T9703]  ? __fget_files+0x2a/0x420
[  307.635177][ T9703]  ? __fget_files+0x3a0/0x420
[  307.635221][ T9703]  __x64_sys_sendmsg+0x19b/0x260
[  307.635249][ T9703]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  307.635286][ T9703]  ? __pfx_ksys_write+0x10/0x10
[  307.635314][ T9703]  ? rcu_is_watching+0x15/0xb0
[  307.635352][ T9703]  ? do_syscall_64+0xbe/0x3b0
[  307.635391][ T9703]  do_syscall_64+0xfa/0x3b0
[  307.635424][ T9703]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.635455][ T9703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.635477][ T9703]  ? clear_bhb_loop+0x60/0xb0
[  307.635512][ T9703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.635533][ T9703] RIP: 0033:0x7f2bff38e9a9
[  307.635553][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.635570][ T9703] RSP: 002b:00007f2c0012e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  307.635596][ T9703] RAX: ffffffffffffffda RBX: 00007f2bff5b5fa0 RCX: 00007f2bff38e9a9
[  307.635613][ T9703] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  307.635640][ T9703] RBP: 00007f2c0012e090 R08: 0000000000000000 R09: 0000000000000000
[  307.635655][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  307.635670][ T9703] R13: 0000000000000000 R14: 00007f2bff5b5fa0 R15: 00007ffc1350ff08
[  307.635708][ T9703]  </TASK>
[  307.872939][ T5838] usb 2-1: Manufacturer: syz
[  307.877988][ T5838] usb 2-1: SerialNumber: syz
[  307.887721][ T5838] r8152-cfgselector 2-1: Unknown version 0x0000
[  307.894907][ T5838] r8152-cfgselector 2-1: config 0 descriptor??
[  308.146919][ T5943] r8152-cfgselector 2-1: USB disconnect, device number 64
[  308.208626][ T9713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1299'.
[  308.222210][ T5944] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  308.385614][ T5944] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  308.397174][ T5944] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  308.411962][ T5944] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  308.422105][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  308.430547][ T5944] usb 1-1: SerialNumber: syz
[  308.652316][ T5944] usb 1-1: skipping empty audio interface (v1)
[  308.680486][ T5944] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  308.693983][ T5944] usb 1-1: USB disconnect, device number 67
[  308.730614][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  309.086487][ T9726] Mount JFS Failure: -22
[  309.286622][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1309'.
[  309.551768][ T5944] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  309.691735][ T5944] usb 2-1: device descriptor read/64, error -71
[  309.931808][ T5944] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  310.071752][ T5944] usb 2-1: device descriptor read/64, error -71
[  310.183543][ T5944] usb usb2-port1: attempt power cycle
[  310.361803][ T5838] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[  310.514215][ T5838] usb 1-1: config 5 has an invalid interface number: 123 but max is 0
[  310.524380][ T5838] usb 1-1: config 5 has an invalid descriptor of length 48, skipping remainder of the config
[  310.536760][ T5838] usb 1-1: config 5 has no interface number 0
[  310.539830][ T5944] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  310.544405][ T5838] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  310.565269][ T5838] usb 1-1: config 5 interface 123 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  310.579245][ T5838] usb 1-1: config 5 interface 123 has no altsetting 0
[  310.589012][ T5838] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  310.592756][ T5944] usb 2-1: device descriptor read/8, error -71
[  310.598631][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.613268][ T5838] usb 1-1: Product: syz
[  310.617623][ T5838] usb 1-1: Manufacturer: syz
[  310.622384][ T5838] usb 1-1: SerialNumber: syz
[  310.851998][ T5944] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  310.883384][ T5944] usb 2-1: device descriptor read/8, error -71
[  311.001837][ T5944] usb usb2-port1: unable to enumerate USB device
[  312.403563][ T9747] netlink: 'syz.1.1316': attribute type 10 has an invalid length.
[  312.413096][ T9747] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1316'.
[  312.439676][ T9747] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  312.454736][ T9747] team0: Failed to send options change via netlink (err -105)
[  312.467262][ T9747] team0: Port device geneve0 added
[  312.538715][ T9748] /dev/rnullb0: Can't open blockdev
[  313.200681][ T5838] comedi comedi5: Wrong number of endpoints
[  313.219193][ T5838] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device.
[  313.350362][ T5838] usb 1-1: USB disconnect, device number 68
[  313.681768][ T5838] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  313.832143][ T5838] usb 1-1: Using ep0 maxpacket: 16
[  313.848049][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  313.866117][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  313.878979][ T5838] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[  313.892832][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.908591][ T5838] usb 1-1: config 0 descriptor??
[  314.340747][ T5838] logitech-djreceiver 0003:046D:C513.000C: unknown main item tag 0x0
[  314.354797][ T5838] logitech-djreceiver 0003:046D:C513.000C: unknown main item tag 0x0
[  314.366010][ T5838] logitech-djreceiver 0003:046D:C513.000C: unknown main item tag 0x0
[  314.374734][ T5838] logitech-djreceiver 0003:046D:C513.000C: unknown main item tag 0x0
[  314.384600][ T5838] logitech-djreceiver 0003:046D:C513.000C: unknown main item tag 0x0
[  314.540680][ T5944] usb 1-1: USB disconnect, device number 69
[  315.287893][ T9804] Set syz1 is full, maxelem 65536 reached
[  315.470445][ T9812] FAULT_INJECTION: forcing a failure.
[  315.470445][ T9812] name failslab, interval 1, probability 0, space 0, times 0
[  315.487923][ T9812] CPU: 0 UID: 0 PID: 9812 Comm: syz.0.1332 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  315.487955][ T9812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  315.487969][ T9812] Call Trace:
[  315.487978][ T9812]  <TASK>
[  315.487987][ T9812]  dump_stack_lvl+0x189/0x250
[  315.488036][ T9812]  ? __pfx____ratelimit+0x10/0x10
[  315.488068][ T9812]  ? __pfx_dump_stack_lvl+0x10/0x10
[  315.488097][ T9812]  ? __pfx__printk+0x10/0x10
[  315.488135][ T9812]  ? __pfx___might_resched+0x10/0x10
[  315.488159][ T9812]  ? fs_reclaim_acquire+0x7d/0x100
[  315.488190][ T9812]  should_fail_ex+0x414/0x560
[  315.488225][ T9812]  should_failslab+0xa8/0x100
[  315.488251][ T9812]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  315.488275][ T9812]  ? __alloc_skb+0x112/0x2d0
[  315.488301][ T9812]  __alloc_skb+0x112/0x2d0
[  315.488326][ T9812]  sock_omalloc+0xd8/0x1e0
[  315.488355][ T9812]  msg_zerocopy_realloc+0x9c/0x850
[  315.488390][ T9812]  __ip_append_data+0x98d/0x40c0
[  315.488428][ T9812]  ? __lock_acquire+0xab9/0xd20
[  315.488458][ T9812]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  315.488521][ T9812]  ? __pfx___ip_append_data+0x10/0x10
[  315.488552][ T9812]  ? __local_bh_enable_ip+0x12d/0x1c0
[  315.488578][ T9812]  ? lockdep_hardirqs_on+0x9c/0x150
[  315.488611][ T9812]  ip_append_data+0x10e/0x190
[  315.488640][ T9812]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  315.488667][ T9812]  udp_sendmsg+0x541/0x2170
[  315.488701][ T9812]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  315.488740][ T9812]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  315.488768][ T9812]  ? __pfx_udp_sendmsg+0x10/0x10
[  315.488799][ T9812]  ? __lock_acquire+0xab9/0xd20
[  315.488849][ T9812]  ? __pfx_aa_sk_perm+0x10/0x10
[  315.488875][ T9812]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  315.488911][ T9812]  ? __fget_files+0x2a/0x420
[  315.488942][ T9812]  ? sock_rps_record_flow+0x19/0x410
[  315.488971][ T9812]  ? inet_sendmsg+0x29c/0x370
[  315.488995][ T9812]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  315.489038][ T9812]  __sock_sendmsg+0x19c/0x270
[  315.489070][ T9812]  __sys_sendto+0x3bd/0x520
[  315.489094][ T9812]  ? __pfx___sys_sendto+0x10/0x10
[  315.489111][ T9812]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  315.489157][ T9812]  ? __fget_files+0x3a0/0x420
[  315.489199][ T9812]  ? ksys_write+0x22a/0x250
[  315.489229][ T9812]  ? __pfx_ksys_write+0x10/0x10
[  315.489261][ T9812]  __x64_sys_sendto+0xde/0x100
[  315.489286][ T9812]  do_syscall_64+0xfa/0x3b0
[  315.489317][ T9812]  ? lockdep_hardirqs_on+0x9c/0x150
[  315.489345][ T9812]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.489366][ T9812]  ? clear_bhb_loop+0x60/0xb0
[  315.489392][ T9812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.489412][ T9812] RIP: 0033:0x7f2bff38e9a9
[  315.489431][ T9812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  315.489449][ T9812] RSP: 002b:00007f2c0012e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  315.489471][ T9812] RAX: ffffffffffffffda RBX: 00007f2bff5b5fa0 RCX: 00007f2bff38e9a9
[  315.489486][ T9812] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000004
[  315.489499][ T9812] RBP: 00007f2c0012e090 R08: 0000000000000000 R09: 0000000011000a00
[  315.489513][ T9812] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001
[  315.489526][ T9812] R13: 0000000000000000 R14: 00007f2bff5b5fa0 R15: 00007ffc1350ff08
[  315.489559][ T9812]  </TASK>
[  315.652035][ T5838] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  316.047095][ T5838] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.058639][ T5838] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.070334][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0
[  316.077606][ T5838] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  316.089796][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.104384][ T5838] usb 2-1: config 0 descriptor??
[  316.525142][ T5838] usbhid 2-1:0.0: can't add hid device: -71
[  316.535442][ T5838] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  316.548550][ T5838] usb 2-1: USB disconnect, device number 69
[  317.155301][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1341'.
[  317.223616][ T9841] tipc: Started in network mode
[  317.228574][ T9841] tipc: Node identity 6a2f1e78c215, cluster identity 4711
[  317.242447][ T9841] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  317.288928][ T9841] tipc: Resetting bearer <eth:syzkaller0>
[  317.301969][ T9840] tipc: Resetting bearer <eth:syzkaller0>
[  318.298465][ T5976] tipc: Node number set to 2822381176
[  318.662548][ T5944] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  318.834455][ T5944] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.846594][ T5944] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.858725][ T5944] usb 2-1: config 0 interface 0 has no altsetting 0
[  318.866596][ T5944] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  318.876393][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.888162][ T5944] usb 2-1: config 0 descriptor??
[  319.323779][ T5944] usbhid 2-1:0.0: can't add hid device: -71
[  319.341325][ T5944] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  319.357593][ T5944] usb 2-1: USB disconnect, device number 70
[  319.602426][ T9840] tipc: Disabling bearer <eth:syzkaller0>
[  319.816157][ T9864] netlink: 'syz.0.1350': attribute type 1 has an invalid length.
[  319.973504][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1352'.
[  320.263752][   T51] Bluetooth: Frame is too long (len 171, expected len 117)
[  320.274924][   T51] Bluetooth: hci1: link tx timeout
[  320.282929][   T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  320.382567][ T5869] Bluetooth: hci2: command 0x0406 tx timeout
[  320.612150][   T43] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  320.691753][ T5944] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  320.772256][   T43] usb 1-1: Using ep0 maxpacket: 8
[  320.781171][   T43] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  320.794779][   T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  320.806832][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.855685][ T5944] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  320.872443][ T5944] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  320.884973][ T5944] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  320.894850][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  320.903670][ T5944] usb 2-1: SerialNumber: syz
[  321.122153][ T5944] usb 2-1: 0:2 : does not exist
[  321.143167][ T5944] usb 2-1: USB disconnect, device number 71
[  321.186361][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  322.061905][ T5838] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  322.211959][ T5838] usb 2-1: Using ep0 maxpacket: 16
[  322.220401][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  322.233514][ T5838] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  322.244132][ T5838] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255
[  322.261484][ T5838] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  322.271099][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.279709][ T5838] usb 2-1: Product: syz
[  322.284560][ T5838] usb 2-1: Manufacturer: syz
[  322.289283][ T5838] usb 2-1: SerialNumber: syz
[  322.298285][ T5838] usb 2-1: config 0 descriptor??
[  322.305878][ T5867] Bluetooth: hci1: command 0x0406 tx timeout
[  322.316946][ T9887] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  322.345345][ T5838] mcba_usb 2-1:0.0 can0: failed tx_urb -90
[  322.351872][ T5838] mcba_usb 2-1:0.0 can0: Failed to send cmd (169)
[  322.360134][ T5838] mcba_usb 2-1:0.0 can0: failed tx_urb -90
[  322.366463][ T5838] mcba_usb 2-1:0.0 can0: Failed to send cmd (169)
[  322.373770][ T5838] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected
[  322.587637][   T43] usb 2-1: USB disconnect, device number 72
[  322.612354][   T43] mcba_usb 2-1:0.0 can0: device disconnected
[  323.190652][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  323.197421][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  323.406641][ T5944] usb 1-1: USB disconnect, device number 70
[  323.481917][ T5916] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  323.651831][ T5916] usb 2-1: Using ep0 maxpacket: 8
[  323.660972][ T5916] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  323.672344][ T5916] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  323.681144][ T5916] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  323.691619][ T5916] usb 2-1: config 250 has no interface number 0
[  323.698164][ T5916] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  323.710822][ T5916] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  323.722613][ T5916] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  323.734512][ T5916] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  323.746323][ T5916] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  323.762056][ T5916] usb 2-1: config 250 interface 228 has no altsetting 0
[  323.774344][ T5916] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  323.784892][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  323.794055][ T5916] usb 2-1: Product: syz
[  323.798612][ T5916] usb 2-1: SerialNumber: syz
[  323.812224][ T5916] hub 2-1:250.228: bad descriptor, ignoring hub
[  323.821070][ T5916] hub 2-1:250.228: probe with driver hub failed with error -5
[  324.020574][ T5916] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 73 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  324.383821][ T5944] usb 2-1: USB disconnect, device number 73
[  324.422272][ T5944] usblp0: removed
[  324.467878][ T9935] netlink: 'syz.0.1365': attribute type 8 has an invalid length.
[  325.084816][   T43] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  325.243642][   T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  325.263103][   T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  325.275767][   T43] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  325.285047][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  325.293815][   T43] usb 2-1: SerialNumber: syz
[  325.527246][   T43] usb 2-1: 0:2 : does not exist
[  325.579888][   T43] usb 2-1: USB disconnect, device number 74
[  325.610337][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  325.811717][ T5944] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  325.971761][ T5944] usb 1-1: Using ep0 maxpacket: 8
[  325.983873][ T5944] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  325.994531][ T5944] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  326.003776][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.589085][ T5944] usb 1-1: USB disconnect, device number 71
[  328.630223][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'.
[  328.651958][   T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  328.818220][   T10] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  328.832479][   T10] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0
[  328.844396][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  328.856112][   T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  328.866109][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.884924][   T10] usb 2-1: config 0 descriptor??
[  329.306099][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  329.314752][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  329.336835][   T10] usb 2-1: USB disconnect, device number 75
[  329.979435][ T9987] kvm: kvm [9986]: vcpu0, guest rIP: 0x8000000 Unhandled WRMSR(0x4000003a) = 0x3737373737373737
[  330.250722][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'.
[  330.743119][ T5943] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  330.911819][ T5943] usb 2-1: Using ep0 maxpacket: 8
[  330.920172][ T5943] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  330.930325][ T5943] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  330.940996][ T5943] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  330.952101][ T5943] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  330.965550][ T5943] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  330.975123][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.190310][ T5943] usb 2-1: GET_CAPABILITIES returned 0
[  331.196288][ T5943] usbtmc 2-1:16.0: can't read capabilities
[  331.393924][ T5944] usb 2-1: USB disconnect, device number 76
[  331.861787][   T10] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[  331.986158][T10020] syzkaller1: entered promiscuous mode
[  331.994015][T10020] syzkaller1: entered allmulticast mode
[  332.025403][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.037510][   T10] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  332.047772][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.065990][   T10] usb 1-1: config 0 descriptor??
[  332.143758][T10023] block device autoloading is deprecated and will be removed.
[  332.282111][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  332.288283][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  332.300605][   T10] usb 1-1: USB disconnect, device number 72
[  332.471827][ T5944] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  332.631844][ T5944] usb 2-1: Using ep0 maxpacket: 8
[  332.641059][ T5944] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  332.651380][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.660263][ T5944] usb 2-1: Product: syz
[  332.664997][ T5944] usb 2-1: Manufacturer: syz
[  332.670127][ T5944] usb 2-1: SerialNumber: syz
[  332.678124][ T5944] usb 2-1: config 0 descriptor??
[  332.890179][ T5944] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  333.704763][ T5944] usb write operation failed. (-71)
[  333.718252][ T5944] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  333.730023][ T5944] dvbdev: DVB: registering new adapter (Terratec H7)
[  333.737663][ T5944] usb 2-1: media controller created
[  333.745665][ T5944] usb read operation failed. (-71)
[  333.753882][ T5944] usb write operation failed. (-71)
[  333.768296][ T5944] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  333.787532][ T5944] usb 2-1: USB disconnect, device number 77
[  333.821948][   T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  333.984675][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  333.994381][   T10] usb 1-1: config 10 has an invalid interface number: 41 but max is 0
[  334.003406][   T10] usb 1-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  334.015047][   T10] usb 1-1: config 10 has no interface number 0
[  334.022222][   T10] usb 1-1: config 10 interface 41 has no altsetting 0
[  334.035841][   T10] usb 1-1: New USB device found, idVendor=0499, idProduct=101b, bcdDevice=56.29
[  334.045477][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.054360][   T10] usb 1-1: Product: syz
[  334.059087][   T10] usb 1-1: Manufacturer: syz
[  334.064334][   T10] usb 1-1: SerialNumber: syz
[  334.265463][T10041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1410'.
[  334.291164][   T10] uvcvideo 1-1:10.41: probe with driver uvcvideo failed with error -22
[  334.303485][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  334.339770][   T10] snd-usb-audio 1-1:10.41: probe with driver snd-usb-audio failed with error -2
[  334.359803][   T10] usb 1-1: USB disconnect, device number 73
[  334.361049][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1411'.
[  334.420170][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:10.41/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  334.725373][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  335.237383][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  336.281445][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'.
[  337.171850][   T10] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  337.333920][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.346412][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.357497][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  337.374668][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  337.384881][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.396714][   T10] usb 1-1: config 0 descriptor??
[  337.521838][ T5943] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  337.681887][ T5943] usb 2-1: Using ep0 maxpacket: 32
[  337.689980][ T5943] usb 2-1: config 0 has an invalid interface number: 180 but max is 0
[  337.700349][ T5943] usb 2-1: config 0 has no interface number 0
[  337.707014][ T5943] usb 2-1: config 0 interface 180 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  337.720495][ T5943] usb 2-1: New USB device found, idVendor=0499, idProduct=1012, bcdDevice=cf.ab
[  337.730477][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.741484][ T5943] usb 2-1: Product: syz
[  337.747518][ T5943] usb 2-1: Manufacturer: syz
[  337.756323][ T5943] usb 2-1: SerialNumber: syz
[  337.769524][ T5943] usb 2-1: config 0 descriptor??
[  337.780364][T10093] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  337.794535][ T5943] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  337.816707][   T10] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd
[  337.831743][   T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  337.841007][ T5943] snd-usb-audio 2-1:0.180: probe with driver snd-usb-audio failed with error -2
[  337.842270][   T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  337.875886][   T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  337.890510][   T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  337.908709][   T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  337.924259][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.180/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  337.941112][   T10] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  338.002179][   T10] usb 2-1: USB disconnect, device number 78
[  338.087397][ T5943] usb 1-1: USB disconnect, device number 74
[  339.424394][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  341.891919][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  342.431855][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  342.601721][ T5944] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[  342.773728][ T5944] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  342.782782][ T5944] usb 1-1: config 0 descriptor has 1 excess byte, ignoring
[  342.790759][ T5944] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  342.800838][ T5944] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  342.812769][ T5944] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.826191][ T5944] usb 1-1: config 0 interface 0 has no altsetting 0
[  342.836415][ T5944] usb 1-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00
[  342.846881][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.862464][ T5944] usb 1-1: config 0 descriptor??
[  342.891443][ T5944] usbhid 1-1:0.0: can't add hid device: -22
[  342.903663][ T5944] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  343.102100][ T5944] usb 1-1: USB disconnect, device number 75
[  345.746504][ T5867] Bluetooth: hci1: command 0x0406 tx timeout
[  346.501227][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  347.462922][   T51] Bluetooth: hci1: unexpected event for opcode 0x1003
[  348.551927][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1485'.
[  349.786441][T10237] syz.1.1491 (10237) used greatest stack depth: 16824 bytes left
[  351.521325][   T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  351.533570][   T51] Bluetooth: hci1: Injecting HCI hardware error event
[  351.555004][ T5867] Bluetooth: hci1: hardware error 0x00
[  351.600448][ T5940] IPVS: starting estimator thread 0...
[  351.735124][T10281] IPVS: using max 26 ests per chain, 62400 per kthread
[  351.969384][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'.
[  352.369060][T10314] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1529'.
[  352.384993][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1529'.
[  352.451922][T10317] netlink: 'syz.1.1530': attribute type 1 has an invalid length.
[  352.460430][T10317] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.543010][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  352.622472][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  353.591866][ T5867] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  354.898248][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  355.000667][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  359.642278][ T5940] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  359.812030][ T5940] usb 1-1: Using ep0 maxpacket: 8
[  359.821930][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  359.836592][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  359.847054][ T5940] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  359.860577][ T5940] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00
[  359.869952][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.882948][ T5940] usb 1-1: config 0 descriptor??
[  360.021878][ T5943] usb 2-1: new full-speed USB device number 79 using dummy_hcd
[  360.183657][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[  360.195701][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12592, setting to 64
[  360.211480][ T5943] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  360.220898][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.230283][ T5943] usb 2-1: Product: syz
[  360.234913][ T5943] usb 2-1: Manufacturer: syz
[  360.239831][ T5943] usb 2-1: SerialNumber: syz
[  360.248188][ T5943] usb 2-1: config 0 descriptor??
[  360.255368][T10397] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  360.320657][ T5940] sony 0003:1345:3008.000E: hiddev0,hidraw0: USB HID v80.04 Device [HID 1345:3008] on usb-dummy_hcd.0-1/input0
[  360.340868][ T5940] sony 0003:1345:3008.000E: failed to claim input
[  360.343637][ T5943] rc_core: IR keymap rc-streamzap not found
[  360.364788][ T5943] Registered IR keymap rc-empty
[  360.379081][ T5943] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  360.397267][ T5943] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18
[  360.489657][ T5940] usb 2-1: USB disconnect, device number 79
[  360.524834][   T10] usb 1-1: USB disconnect, device number 76
[  362.011915][ T5940] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  362.171754][ T5940] usb 1-1: Using ep0 maxpacket: 16
[  362.183174][ T5940] usb 1-1: unable to get BOS descriptor or descriptor too short
[  362.193503][ T5940] usb 1-1: config 9 has an invalid interface number: 48 but max is 0
[  362.202119][ T5940] usb 1-1: config 9 has no interface number 0
[  362.208531][ T5940] usb 1-1: config 9 interface 48 has no altsetting 0
[  362.217872][ T5940] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b
[  362.231461][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.240076][ T5940] usb 1-1: Product: syz
[  362.244379][ T5940] usb 1-1: Manufacturer: syz
[  362.248999][ T5940] usb 1-1: SerialNumber: syz
[  362.472422][ T5940] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  362.488763][ T5940] gspca_vc032x: reg_w err -71
[  362.494600][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.500385][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.514228][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.519846][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.527113][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.535153][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.540520][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.546081][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.551774][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.557276][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.562939][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.568258][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.574233][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.581069][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.591952][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.597311][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.619813][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.627472][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.637738][ T5940] gspca_vc032x: I2c Bus Busy Wait 00
[  362.643787][ T5940] gspca_vc032x: Unknown sensor...
[  362.648948][ T5940] vc032x 1-1:9.48: probe with driver vc032x failed with error -22
[  362.660344][ T5940] usb 1-1: USB disconnect, device number 77
[  366.004828][T10480] vxcan1: MTU too low for tipc bearer
[  366.010783][T10480] tipc: Enabling of bearer <eth:vxcan1> rejected, failed to enable media
[  369.361809][ T5943] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  369.413786][ T5940] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  369.515987][ T5943] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  369.525638][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.534862][ T5943] usb 1-1: Product: syz
[  369.539177][ T5943] usb 1-1: Manufacturer: syz
[  369.544550][ T5943] usb 1-1: SerialNumber: syz
[  369.552134][ T5943] usb 1-1: config 0 descriptor??
[  369.562715][ T5943] ch341 1-1:0.0: ch341-uart converter detected
[  369.581792][ T5940] usb 2-1: Using ep0 maxpacket: 16
[  369.589808][ T5940] usb 2-1: config 0 has no interfaces?
[  369.599318][ T5940] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  369.609764][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.619079][ T5940] usb 2-1: Product: syz
[  369.623389][ T5940] usb 2-1: Manufacturer: syz
[  369.628880][ T5940] usb 2-1: SerialNumber: syz
[  369.638400][ T5940] usb 2-1: config 0 descriptor??
[  369.854421][ T5940] usb 2-1: USB disconnect, device number 80
[  370.776766][ T5943] usb 1-1: ch341-uart converter now attached to ttyUSB0
[  370.985264][ T5940] usb 1-1: USB disconnect, device number 78
[  371.007399][ T5940] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  371.027378][ T5940] ch341 1-1:0.0: device disconnected
[  372.623521][   T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  374.561828][   T10] usb 1-1: Using ep0 maxpacket: 8
[  374.569299][   T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  374.580530][   T10] usb 1-1: config 179 has no interface number 0
[  374.587784][   T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  374.599394][   T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  374.611026][   T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  374.622715][   T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  374.635935][   T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  374.650462][   T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  374.660715][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.674493][T10563] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  374.701715][ T5943] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  374.879213][ T5943] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  374.888951][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.901895][ T5943] usb 2-1: Product: syz
[  374.906230][ T5943] usb 2-1: Manufacturer: syz
[  374.910903][ T5943] usb 2-1: SerialNumber: syz
[  374.921082][ T5943] usb 2-1: config 0 descriptor??
[  374.934814][ T5943] ch341 2-1:0.0: ch341-uart converter detected
[  375.124014][ T5838] usb 1-1: USB disconnect, device number 79
[  375.124010][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  375.124068][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  375.858297][T10579] input: syz1 as /devices/virtual/input/input19
[  376.185581][ T5943] usb 2-1: ch341-uart converter now attached to ttyUSB0
[  376.399327][ T5943] usb 2-1: USB disconnect, device number 81
[  376.426516][ T5943] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  376.436960][ T5943] ch341 2-1:0.0: device disconnected
[  378.205884][T10612] input: syz1 as /devices/virtual/input/input20
[  379.167024][T10629] netlink: 'syz.1.1665': attribute type 1 has an invalid length.
[  379.176116][T10629] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1665'.
[  384.134598][   T43] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  384.320803][   T43] usb 1-1: Using ep0 maxpacket: 8
[  384.347015][   T43] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  384.383758][   T43] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  384.413669][   T43] usb 1-1: config 0 has no interface number 0
[  384.438146][   T43] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2
[  384.486832][   T43] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x2 has an invalid bInterval 162, changing to 11
[  384.537313][   T43] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x2 has invalid maxpacket 17903, setting to 1024
[  384.627895][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  384.655769][   T43] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  384.669569][   T43] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  384.716376][   T43] usb 1-1: Product: syz
[  384.733185][   T43] usb 1-1: Manufacturer: syz
[  384.837105][   T43] usb 1-1: config 0 descriptor??
[  384.882074][T10676] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  385.533911][ T5838] usb 1-1: USB disconnect, device number 80
[  386.094363][T10691] overlayfs: failed to resolve './file0': -2
[  386.150968][T10692] overlayfs: missing 'lowerdir'
[  388.203264][ T5838] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  388.361699][ T5838] usb 1-1: Using ep0 maxpacket: 32
[  388.370037][ T5838] usb 1-1: config 4 has an invalid interface number: 128 but max is 0
[  388.381232][ T5838] usb 1-1: config 4 has no interface number 0
[  388.389114][ T5838] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.400986][ T5838] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.411282][ T5838] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  388.420877][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.438137][ T5838] hub 1-1:4.128: USB hub found
[  388.645844][ T5838] hub 1-1:4.128: 2 ports detected
[  388.656829][ T5838] hub 1-1:4.128: Using single TT (err -22)
[  389.057371][ T5838] usb 1-1: USB disconnect, device number 81
[  390.012133][ T5940] IPVS: starting estimator thread 0...
[  390.224016][T10730] IPVS: using max 23 ests per chain, 55200 per kthread
[  390.271901][ T5940] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  390.501716][ T5940] usb 1-1: Using ep0 maxpacket: 32
[  390.519312][ T5940] usb 1-1: unable to get BOS descriptor or descriptor too short
[  390.533765][ T5940] usb 1-1: config 120 has an invalid interface number: 86 but max is 0
[  390.547757][ T5940] usb 1-1: config 120 has no interface number 0
[  390.572546][ T5940] usb 1-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af
[  390.583460][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.592136][ T5940] usb 1-1: Product: syz
[  390.596445][ T5940] usb 1-1: Manufacturer: syz
[  390.601256][ T5940] usb 1-1: SerialNumber: syz
[  390.630350][T10740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.630507][ T5940] huawei_cdc_ncm 1-1:120.86: CDC Union missing and no IAD found
[  392.656813][ T5940] huawei_cdc_ncm 1-1:120.86: bind() failure
[  392.674094][ T5940] usb 1-1: USB disconnect, device number 82
[  406.278156][T10864] tipc: Started in network mode
[  406.287501][T10864] tipc: Node identity ac1414aa, cluster identity 4711
[  406.296519][T10864] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  406.308683][T10864] tipc: Enabled bearer <udp:s>, priority 10
[  406.432541][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  406.571631][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  406.711659][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  406.851642][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  406.991670][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  407.141606][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  407.281809][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  407.421658][ T5944] tipc: Node number set to 2886997162
[  407.561622][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  407.831716][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  410.272207][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  410.293341][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  410.310129][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  410.347427][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  410.362478][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  410.963464][T10458] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.005270][T10883] chnl_net:caif_netlink_parms(): no params data found
[  411.095640][T10458] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.230950][T10458] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.326763][T10458] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.360019][T10883] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.374784][T10883] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.384739][T10883] bridge_slave_0: entered allmulticast mode
[  411.396999][T10883] bridge_slave_0: entered promiscuous mode
[  411.410325][T10883] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.425280][T10883] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.434916][T10883] bridge_slave_1: entered allmulticast mode
[  411.446856][T10883] bridge_slave_1: entered promiscuous mode
[  411.501837][    C0] net_ratelimit: 3 callbacks suppressed
[  411.501865][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  411.526964][T10883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.542095][T10883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  411.725863][T10883] team0: Port device team_slave_0 added
[  411.764992][T10883] team0: Port device team_slave_1 added
[  411.849090][T10458] bridge_slave_1: left allmulticast mode
[  411.862400][T10458] bridge_slave_1: left promiscuous mode
[  411.870428][T10458] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.890689][T10458] bridge_slave_0: left allmulticast mode
[  411.910662][T10458] bridge_slave_0: left promiscuous mode
[  411.931246][T10458] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.461727][   T51] Bluetooth: hci4: command tx timeout
[  412.541713][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  412.654428][T10458] team0: Port device geneve0 removed
[  412.934852][T10458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  412.950825][T10458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  412.967491][T10458] bond0 (unregistering): Released all slaves
[  412.994190][T10883] batman_adv: batadv0: Adding interface: batadv_slave_0
[  413.001300][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  413.037887][T10883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  413.051393][T10883] batman_adv: batadv0: Adding interface: batadv_slave_1
[  413.059999][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  413.087752][T10883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  413.263629][T10883] hsr_slave_0: entered promiscuous mode
[  413.270940][T10883] hsr_slave_1: entered promiscuous mode
[  413.278382][T10883] debugfs: 'hsr0' already exists in 'hsr'
[  413.285196][T10883] Cannot create hsr debugfs directory
[  413.582196][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  414.337862][T10883] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  414.353693][T10883] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  414.367927][T10883] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  414.380187][T10883] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  414.543807][   T51] Bluetooth: hci4: command tx timeout
[  414.557616][T10883] 8021q: adding VLAN 0 to HW filter on device bond0
[  414.587051][T10883] 8021q: adding VLAN 0 to HW filter on device team0
[  414.609702][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.616989][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  414.625052][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  414.666215][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.673712][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[  414.808327][T10458] tipc: Disabling bearer <udp:s>
[  414.851416][T10458] tipc: Left network mode
[  415.456742][T10458] hsr_slave_0: left promiscuous mode
[  415.474011][T10458] hsr_slave_1: left promiscuous mode
[  415.483950][T10458] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  415.501976][T10458] batman_adv: batadv0: Removing interface: batadv_slave_0
[  415.523100][T10458] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  415.541601][T10458] batman_adv: batadv0: Removing interface: batadv_slave_1
[  415.597850][T10458] veth1_macvtap: left promiscuous mode
[  415.612179][T10458] veth0_macvtap: left promiscuous mode
[  415.629061][T10458] veth1_vlan: left promiscuous mode
[  415.639293][T10458] veth0_vlan: left promiscuous mode
[  416.640807][   T51] Bluetooth: hci4: command tx timeout
[  417.537334][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  417.560573][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  417.571425][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  417.583343][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  417.594262][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  417.685990][T10458] team0 (unregistering): Port device team_slave_1 removed
[  417.867324][T10458] team0 (unregistering): Port device team_slave_0 removed
[  418.722203][   T51] Bluetooth: hci4: command tx timeout
[  419.070144][T10883] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.374084][T10883] veth0_vlan: entered promiscuous mode
[  419.414579][T10883] veth1_vlan: entered promiscuous mode
[  419.463735][T10458] IPVS: stop unused estimator thread 0...
[  419.570454][T10883] veth0_macvtap: entered promiscuous mode
[  419.662117][   T51] Bluetooth: hci0: command tx timeout
[  419.682499][T10883] veth1_macvtap: entered promiscuous mode
[  419.729292][T10883] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.769025][T10883] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.818132][   T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.917102][T10978] chnl_net:caif_netlink_parms(): no params data found
[  419.973705][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.993243][   T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.012403][   T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.292026][T10978] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.300155][T10978] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.327127][T10978] bridge_slave_0: entered allmulticast mode
[  420.340091][T10978] bridge_slave_0: entered promiscuous mode
[  420.372167][T10978] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.384278][T10978] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.393297][T10978] bridge_slave_1: entered allmulticast mode
[  420.402914][T10978] bridge_slave_1: entered promiscuous mode
[  420.427749][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.450057][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.499042][T10978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.544673][T10978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  420.560887][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.570901][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.649677][T10978] team0: Port device team_slave_0 added
[  420.669932][T10978] team0: Port device team_slave_1 added
[  420.746981][T10978] batman_adv: batadv0: Adding interface: batadv_slave_0
[  420.761842][T10978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  420.790647][T10978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  420.807076][T10978] batman_adv: batadv0: Adding interface: batadv_slave_1
[  420.821792][T10978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  420.857210][T10978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  420.946311][T10978] hsr_slave_0: entered promiscuous mode
[  420.954679][T10978] hsr_slave_1: entered promiscuous mode
[  420.961370][T10978] debugfs: 'hsr0' already exists in 'hsr'
[  420.969478][T10978] Cannot create hsr debugfs directory
[  421.102098][ T5944] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  421.271623][ T5944] usb 2-1: Using ep0 maxpacket: 32
[  421.289595][ T5944] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  421.308413][ T5944] usb 2-1: config 0 has no interface number 0
[  421.321765][ T5944] usb 2-1: config 0 interface 12 has no altsetting 0
[  421.331313][T10978] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  421.358657][ T5944] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  421.368132][T10978] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  421.377610][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.387000][ T5944] usb 2-1: Product: syz
[  421.391302][ T5944] usb 2-1: Manufacturer: syz
[  421.396351][ T5944] usb 2-1: SerialNumber: syz
[  421.403770][T10978] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  421.415102][ T5944] usb 2-1: config 0 descriptor??
[  421.427025][T10978] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  421.436581][ T5944] f81534 2-1:0.12: required endpoints missing
[  421.631910][T10997] usb 2-1: USB disconnect, device number 82
[  421.647896][T10978] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.708834][T10978] 8021q: adding VLAN 0 to HW filter on device team0
[  421.730073][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.737618][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.752186][   T51] Bluetooth: hci0: command tx timeout
[  421.790531][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.798845][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.164291][T10978] 8021q: adding VLAN 0 to HW filter on device batadv0
[  422.695808][T10978] veth0_vlan: entered promiscuous mode
[  422.697098][T11028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1786'.
[  422.720984][T10978] veth1_vlan: entered promiscuous mode
[  422.786438][T10978] veth0_macvtap: entered promiscuous mode
[  422.808896][T10978] veth1_macvtap: entered promiscuous mode
[  422.847525][T10978] batman_adv: batadv0: Interface activated: batadv_slave_0
[  422.886542][T10978] batman_adv: batadv0: Interface activated: batadv_slave_1
[  422.921382][ T3540] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.944985][ T3540] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.957276][ T3540] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.028312][ T3540] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.203723][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.220996][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.287497][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.299656][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.686218][T11044] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1794'.
[  423.822506][   T51] Bluetooth: hci0: command tx timeout
[  424.444038][T11062] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1803'.
[  424.807052][T11070] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61)
[  424.927253][T11072] comedi comedi2: adq12b: I/O port conflict (0x9,16)
[  425.648176][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1813'.
[  425.901768][   T51] Bluetooth: hci0: command tx timeout
[  426.512701][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1822'.
[  427.181785][ T5916] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  427.361974][ T5916] usb 6-1: Using ep0 maxpacket: 32
[  427.383658][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  427.424835][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.490859][ T5916] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  427.570548][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.802739][ T5916] usb 6-1: config 0 descriptor??
[  427.834527][ T5916] hub 6-1:0.0: USB hub found
[  428.027317][ T5916] hub 6-1:0.0: 1 port detected
[  428.120140][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1832'.
[  428.232444][ T5916] hub 6-1:0.0: hub_hub_status failed (err = -71)
[  428.249881][ T5916] hub 6-1:0.0: config failed, can't get hub status (err -71)
[  428.275396][ T5916] usbhid 6-1:0.0: can't add hid device: -71
[  428.292863][ T5916] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  428.347258][ T5916] usb 6-1: USB disconnect, device number 2
[  428.850919][T11131] comedi comedi2: adq12b: I/O port conflict (0x9,16)
[  433.071876][ T5838] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  433.236515][ T5838] usb 2-1: Using ep0 maxpacket: 32
[  433.254301][ T5838] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  433.279217][ T5838] usb 2-1: config 0 has no interface number 0
[  433.299559][ T5838] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 8953, setting to 1024
[  433.324951][ T5838] usb 2-1: config 0 interface 12 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 1024
[  433.351724][ T5838] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  433.375173][ T5838] usb 2-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  433.390057][ T5838] usb 2-1: config 0 interface 12 has no altsetting 0
[  434.279022][ T5838] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  434.288488][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.296834][ T5838] usb 2-1: Product: syz
[  434.301300][ T5838] usb 2-1: Manufacturer: syz
[  434.306178][ T5838] usb 2-1: SerialNumber: syz
[  434.318384][ T5838] usb 2-1: config 0 descriptor??
[  434.337860][T11153] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  434.352198][ T5838] f81534 2-1:0.12: unsupported endpoint max packet size
[  434.586021][ T1222] usb 2-1: USB disconnect, device number 83
[  434.907894][T11172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1856'.
[  435.459104][T11184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1862'.
[  438.431771][ T5838] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  438.511714][ T5944] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  438.596059][ T5838] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  438.609685][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.618383][ T5838] usb 2-1: Product: syz
[  438.627865][ T5838] usb 2-1: Manufacturer: syz
[  438.635288][ T5838] usb 2-1: SerialNumber: syz
[  438.651812][ T5838] usb 2-1: config 0 descriptor??
[  438.678331][ T5838] ch341 2-1:0.0: ch341-uart converter detected
[  438.690986][ T5944] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  438.708269][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.716916][ T5944] usb 6-1: Product: syz
[  438.721446][ T5944] usb 6-1: Manufacturer: syz
[  438.727600][ T5944] usb 6-1: SerialNumber: syz
[  438.736618][ T5944] usb 6-1: config 0 descriptor??
[  438.762754][ T5944] ch341 6-1:0.0: ch341-uart converter detected
[  438.886016][ T5838] usb 2-1: failed to receive control message: -121
[  438.895700][ T5838] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[  439.560707][ T5944] usb 6-1: failed to send control message: -71
[  439.571412][ T5944] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71
[  439.592978][ T5944] usb 6-1: USB disconnect, device number 3
[  439.612133][ T5944] ch341 6-1:0.0: device disconnected
[  441.241211][ T5943] usb 2-1: USB disconnect, device number 84
[  441.270869][ T5943] ch341 2-1:0.0: device disconnected
[  443.045777][T11276] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[  443.053341][T11276] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  443.061284][T11276] vhci_hcd vhci_hcd.0: Device attached
[  443.105174][T11277] vhci_hcd: connection closed
[  443.182575][   T49] vhci_hcd: stop threads
[  443.268176][   T49] vhci_hcd: release socket
[  443.353072][   T49] vhci_hcd: disconnect device
[  443.436411][ T1222] vhci_hcd: vhci_device speed not set
[  443.776740][ T5916] usb 2-1: new full-speed USB device number 85 using dummy_hcd
[  444.267960][ T5916] usb 2-1: unable to get BOS descriptor or descriptor too short
[  444.282881][   T51] Bluetooth: hci4: adv larger than maximum supported
[  444.282926][   T51] Bluetooth: hci4: Malformed LE Event: 0x0d
[  444.313857][ T5916] usb 2-1: unable to read config index 0 descriptor/start: -71
[  444.342830][ T5916] usb 2-1: can't read configurations, error -71
[  446.074077][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  449.943542][T11331] sd 0:0:1:0: PR command failed: 1026
[  449.949419][T11331] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  449.956809][T11331] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  450.901782][ T5943] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  451.080709][ T5943] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  451.111243][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.130914][ T5943] usb 6-1: Product: syz
[  451.140466][ T5943] usb 6-1: Manufacturer: syz
[  451.164619][ T5943] usb 6-1: SerialNumber: syz
[  451.203250][ T5943] usb 6-1: config 0 descriptor??
[  451.217727][ T5943] ch341 6-1:0.0: ch341-uart converter detected
[  451.422106][ T5943] usb 6-1: failed to receive control message: -121
[  451.429429][ T5943] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[  453.703701][ T5943] usb 6-1: USB disconnect, device number 4
[  453.773486][ T5943] ch341 6-1:0.0: device disconnected
[  454.131959][ T5943] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  454.300911][   T51] Bluetooth: hci0: adv larger than maximum supported
[  454.301157][   T51] Bluetooth: hci0: Malformed LE Event: 0x0d
[  454.312110][ T5943] usb 6-1: unable to get BOS descriptor or descriptor too short
[  454.340903][ T5943] usb 6-1: unable to read config index 0 descriptor/start: -71
[  454.350437][ T5943] usb 6-1: can't read configurations, error -71
[  454.977970][T11384] tipc: Started in network mode
[  454.991715][T11384] tipc: Node identity ac1414aa, cluster identity 4711
[  455.002606][T11384] tipc: Enabled bearer <udp:s>, priority 10
[  455.582330][ T5943] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  455.588649][ T1222] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  455.746464][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  455.757189][ T5943] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  455.768268][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.780354][ T1222] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  455.788992][ T5943] usb 6-1: config 0 descriptor??
[  455.805710][ T1222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.821136][ T1222] usb 2-1: Product: syz
[  455.828334][ T1222] usb 2-1: Manufacturer: syz
[  455.838717][ T1222] usb 2-1: SerialNumber: syz
[  455.859338][ T1222] usb 2-1: config 0 descriptor??
[  455.877155][ T1222] ch341 2-1:0.0: ch341-uart converter detected
[  456.080298][ T1222] usb 2-1: failed to receive control message: -121
[  456.087690][ T1222] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[  456.121692][ T5838] tipc: Node number set to 2886997162
[  456.211444][ T5943] itetech 0003:258A:6A88.000F: item fetching failed at offset 10/11
[  456.225811][ T5943] itetech 0003:258A:6A88.000F: probe with driver itetech failed with error -22
[  456.415444][T11393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  456.423457][T11393] syzkaller0: entered promiscuous mode
[  456.429167][T11393] syzkaller0: entered allmulticast mode
[  456.438022][T11392] tipc: Resetting bearer <eth:syzkaller0>
[  456.465252][T11392] tipc: Disabling bearer <eth:syzkaller0>
[  456.530578][ T1222] usb 6-1: USB disconnect, device number 7
[  457.681675][ T1222] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  457.861656][   T51] Bluetooth: hci0: adv larger than maximum supported
[  457.861716][   T51] Bluetooth: hci0: Malformed LE Event: 0x0d
[  457.885098][ T1222] usb 6-1: unable to get BOS descriptor or descriptor too short
[  457.922848][ T1222] usb 6-1: unable to read config index 0 descriptor/start: -71
[  457.938818][ T1222] usb 6-1: can't read configurations, error -71
[  458.422692][ T5943] usb 2-1: USB disconnect, device number 87
[  458.439334][ T5943] ch341 2-1:0.0: device disconnected
[  458.582044][   T30] audit: type=1326 audit(1753813903.815:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.5.1959" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf04f8e9a9 code=0x0
[  459.044278][T11425] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11)
[  459.051138][T11425] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  459.059436][T11425] vhci_hcd vhci_hcd.0: Device attached
[  459.160433][T11426] vhci_hcd: connection closed
[  459.180369][   T12] vhci_hcd: stop threads
[  459.261726][ T1222] vhci_hcd: vhci_device speed not set
[  459.283711][   T12] vhci_hcd: release socket
[  459.331281][   T12] vhci_hcd: disconnect device
[  459.404140][ T1222] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  459.488456][ T1222] usb 35-1: enqueue for inactive port 0
[  459.726514][ T1222] vhci_hcd: vhci_device speed not set
[  460.891880][ T5944] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  461.209500][ T5944] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  461.261288][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.279678][ T5944] usb 2-1: Product: syz
[  461.284508][ T5944] usb 2-1: Manufacturer: syz
[  461.301590][ T5944] usb 2-1: SerialNumber: syz
[  461.319304][ T5944] usb 2-1: config 0 descriptor??
[  461.338810][ T5944] ch341 2-1:0.0: ch341-uart converter detected
[  461.541273][ T5944] usb 2-1: failed to receive control message: -121
[  461.571678][ T5944] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[  463.690356][ T5838] usb 2-1: USB disconnect, device number 88
[  463.725457][ T5838] ch341 2-1:0.0: device disconnected
[  464.818497][T11466] sd 0:0:1:0: PR command failed: 1026
[  464.824387][T11466] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  464.831791][T11466] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  465.516693][ T5944] IPVS: starting estimator thread 0...
[  465.557139][T11469] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  465.673697][T11470] IPVS: using max 26 ests per chain, 62400 per kthread
[  465.785872][T11476] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !ùƒ«‚æV_ÎÁˆ?ÝuDìÓrn2ƒÌÝ
[  466.381949][   T43] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  466.461577][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  466.597352][   T43] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  466.625294][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.655844][   T43] usb 6-1: Product: syz
[  466.671730][   T43] usb 6-1: Manufacturer: syz
[  466.676506][   T43] usb 6-1: SerialNumber: syz
[  466.703453][   T43] usb 6-1: config 0 descriptor??
[  466.726474][   T43] ch341 6-1:0.0: ch341-uart converter detected
[  467.511612][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  467.801917][ T5838] IPVS: starting estimator thread 0...
[  467.811080][T11519] tipc: Started in network mode
[  467.823079][T11519] tipc: Node identity ac1414aa, cluster identity 4711
[  467.831105][T11519] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  467.860635][T11519] tipc: Enabled bearer <udp:s>, priority 10
[  467.903549][T11521] IPVS: using max 32 ests per chain, 76800 per kthread
[  467.945250][   T43] ch341-uart ttyUSB0: break control not supported, using simulated break
[  467.961760][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  468.003998][   T43] usb 6-1: ch341-uart converter now attached to ttyUSB0
[  468.029203][   T43] usb 6-1: USB disconnect, device number 10
[  468.071897][   T43] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  468.101594][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  468.166154][   T43] ch341 6-1:0.0: device disconnected
[  468.251619][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  468.391777][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  468.541658][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  468.548994][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  468.681594][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  468.821734][ T5838] tipc: Node number set to 2886997162
[  468.841722][ T1222] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  469.011774][ T1222] usb 2-1: Using ep0 maxpacket: 32
[  469.102596][ T1222] usb 2-1: unable to get BOS descriptor or descriptor too short
[  469.129590][ T1222] usb 2-1: config 0 has an invalid interface number: 143 but max is 0
[  469.148916][ T1222] usb 2-1: config 0 has no interface number 0
[  469.165742][ T1222] usb 2-1: config 0 interface 143 has no altsetting 0
[  469.193334][ T1222] usb 2-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69
[  469.227001][ T1222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.242030][ T1222] usb 2-1: Product: syz
[  469.252252][ T1222] usb 2-1: Manufacturer: syz
[  469.261900][ T1222] usb 2-1: SerialNumber: syz
[  469.282225][ T1222] r8152-cfgselector 2-1: Unknown version 0x0000
[  469.300042][ T1222] r8152-cfgselector 2-1: config 0 descriptor??
[  469.319647][ T1222] r8152 2-1:0.143: Expected endpoints are not found
[  469.526978][   T43] r8152-cfgselector 2-1: USB disconnect, device number 89
[  469.619840][T11542] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  470.011273][T11552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  470.312421][T11555] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11)
[  470.319676][T11555] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  470.329383][T11555] vhci_hcd vhci_hcd.0: Device attached
[  470.360484][T11556] vhci_hcd: connection closed
[  470.365055][ T1169] vhci_hcd: stop threads
[  470.442497][ T1169] vhci_hcd: release socket
[  470.470611][ T1169] vhci_hcd: disconnect device
[  471.671589][    C1] net_ratelimit: 6 callbacks suppressed
[  471.671619][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  471.806772][T11566] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  471.821874][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  472.371653][   T43] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  472.531695][   T43] usb 2-1: Using ep0 maxpacket: 8
[  472.545876][   T43] usb 2-1: unable to get BOS descriptor or descriptor too short
[  472.559548][   T43] usb 2-1: config index 0 descriptor too short (expected 274, got 18)
[  472.569217][   T43] usb 2-1: config 4 interface 0 has no altsetting 0
[  472.580285][   T43] usb 2-1: string descriptor 0 read error: -22
[  472.587405][   T43] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  472.597526][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.628014][   T43] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  472.673481][   T43] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  472.696004][   T43] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  472.703960][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  472.713719][   T43] usb 2-1: media controller created
[  472.747522][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  472.861774][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  472.888280][T11582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  473.066099][T11587] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  473.751580][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  473.844469][T11576] usb 2-1: dvb_usb_au6610: wlen=132, aborting
[  473.851192][   T43] zl10353_read_register: readreg error (reg=127, ret==0)
[  473.911960][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  473.948929][   T43] usb 2-1: USB disconnect, device number 90
[  474.410976][T11603] fuse: Bad value for 'fd'
[  474.539363][T11607] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  474.781587][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  474.941795][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  475.749874][T11627] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  475.821588][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  475.981818][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  476.347817][T11640] overlayfs: failed to clone upperpath
[  476.386815][T11640] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2042'.
[  476.861626][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  477.021779][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  477.541632][ T1222] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  477.598448][T11658] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  477.716080][ T1222] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  477.731625][ T1222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.739898][ T1222] usb 2-1: Product: syz
[  477.770411][ T1222] usb 2-1: Manufacturer: syz
[  477.783455][ T1222] usb 2-1: SerialNumber: syz
[  477.812411][ T1222] usb 2-1: config 0 descriptor??
[  477.828698][ T1222] ch341 2-1:0.0: ch341-uart converter detected
[  477.901614][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  478.062984][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  478.941576][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  479.035722][ T1222] ch341-uart ttyUSB0: break control not supported, using simulated break
[  479.055225][ T1222] usb 2-1: ch341-uart converter now attached to ttyUSB0
[  479.085312][ T1222] usb 2-1: USB disconnect, device number 91
[  479.101856][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  479.112927][ T1222] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  479.140776][ T1222] ch341 2-1:0.0: device disconnected
[  479.982050][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  480.141748][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  481.021642][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  481.181734][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  482.061582][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  482.221713][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  483.111605][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  483.261724][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  483.775130][T11757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2084'.
[  484.141561][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  484.311773][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  485.181591][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  485.341697][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  486.221546][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  486.381978][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  487.261597][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  487.421703][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  487.568377][T11846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  488.302013][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  488.461627][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  489.341560][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  489.501551][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  490.381590][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  490.541578][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  491.421579][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  491.581594][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  492.461585][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  492.621581][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  493.528449][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  493.661555][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  494.541567][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  494.701663][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  495.581713][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  495.741604][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  496.622200][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  496.781573][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  497.661604][    C1] net_ratelimit: 1 callbacks suppressed
[  497.661627][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  497.821558][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  498.701637][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  498.871570][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  499.741595][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  499.901548][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  500.797735][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  500.967901][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  501.821604][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  501.900023][T11980] Set syz1 is full, maxelem 65536 reached
[  502.468439][T11998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.861600][    C1] net_ratelimit: 1 callbacks suppressed
[  502.861627][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  503.031799][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  503.911593][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  504.061590][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  504.467666][T12029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  504.941651][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  505.101592][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  505.981711][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  506.141632][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  507.009873][T12042] Set syz1 is full, maxelem 65536 reached
[  507.021565][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  507.507520][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  508.061708][    C1] net_ratelimit: 2 callbacks suppressed
[  508.061732][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  508.221577][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  508.605340][T12091] Set syz1 is full, maxelem 65536 reached
[  509.101589][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  509.261563][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  509.359297][T12117] Set syz1 is full, maxelem 65536 reached
[  510.141557][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  510.301549][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  510.309772][T12147] Set syz1 is full, maxelem 65536 reached
[  510.490101][T12153] : renamed from dummy0 (while UP)
[  511.181650][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  511.578387][T12181] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2280'.
[  511.674066][T12183] fuse: Bad value for 'fd'
[  511.769136][T12187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2284'.
[  512.497141][T12207] fuse: Bad value for 'fd'
[  512.560614][T12209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2293'.
[  512.728210][T12215] /dev/rnullb0: Can't lookup blockdev
[  513.261787][    C1] net_ratelimit: 3 callbacks suppressed
[  513.261813][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  513.421586][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  513.760497][T12246] Set syz1 is full, maxelem 65536 reached
[  514.301653][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  514.461551][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  514.691415][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2321'.
[  515.341565][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  515.501549][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  516.227664][T12321] /dev/rnullb0: Can't lookup blockdev
[  516.381671][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  516.507245][T12329] tipc: Can't bind to reserved service type 0
[  516.541601][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  517.327569][T12356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2356'.
[  517.423471][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  517.805966][T12359] udevd[12359]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  518.461684][    C1] net_ratelimit: 2 callbacks suppressed
[  518.461710][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  518.621568][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  519.033601][T12407] overlayfs: failed to clone upperpath
[  519.052298][T12407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2374'.
[  519.138051][T12409] Set syz1 is full, maxelem 65536 reached
[  519.501549][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  519.661757][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  519.917896][T12433] Set syz1 is full, maxelem 65536 reached
[  520.016488][T12437] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2387'.
[  520.044826][T12437] /dev/rnullb0: Can't lookup blockdev
[  520.491948][T12450] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2392'.
[  520.541588][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  520.702143][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  520.826484][T12359] udevd[12359]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  521.070456][T12461] Set syz1 is full, maxelem 65536 reached
[  521.531048][T12477] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2401'.
[  521.581619][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  522.235786][T12498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2410'.
[  522.382319][T12500] /dev/rnullb0: Can't lookup blockdev
[  522.390792][T12500] /dev/rnullb0: Can't lookup blockdev
[  523.661532][    C1] net_ratelimit: 3 callbacks suppressed
[  523.661554][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  523.821542][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  524.336696][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'.
[  524.701617][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  524.861537][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  524.969681][T12575] 9pnet_fd: Insufficient options for proto=fd
[  525.567022][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2447'.
[  525.741621][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  525.901668][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  526.507698][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2458'.
[  526.781788][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  526.941549][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  527.821606][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  527.982142][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  528.240180][T12630] fuse: Bad value for 'fd'
[  528.861571][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  529.021542][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  529.197963][T12662] No control pipe specified
[  529.237454][T12662] fuse: Bad value for 'fd'
[  529.901558][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  530.061601][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  530.941592][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  531.101573][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  531.614301][T12687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  531.981656][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  532.141598][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  533.021542][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  533.028719][T12726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  533.181617][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  534.061652][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  534.221582][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  534.507052][T12758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  535.101676][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  535.182227][ T5867] Bluetooth: hci4: command 0x0406 tx timeout
[  535.261603][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  535.649583][T12780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  536.141591][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  536.301658][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  536.439331][T12789] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2531'.
[  536.685068][T12796] /dev/rnullb0: Can't lookup blockdev
[  536.907421][T12801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  537.181567][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  537.341716][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  538.225653][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  538.381652][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  538.623341][T12831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  539.005056][   T51] Bluetooth: hci4: SCO packet for unknown connection handle 200
[  539.261567][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  539.421542][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  539.819553][T12853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.301602][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  540.461684][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  541.341697][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  541.501586][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  542.382411][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  542.541586][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  543.421905][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  543.581553][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  544.211988][T12943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  544.461824][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  544.621932][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  545.325478][T12968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  545.394780][   T30] audit: type=1326 audit(1753813991.631:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04f8e9a9 code=0x7ffc0000
[  545.426873][   T30] audit: type=1326 audit(1753813991.651:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04f8e9a9 code=0x7ffc0000
[  545.454186][   T30] audit: type=1326 audit(1753813991.651:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fcf04f8e9a9 code=0x7ffc0000
[  545.485575][   T30] audit: type=1326 audit(1753813991.651:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04f8e9a9 code=0x7ffc0000
[  545.511758][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  545.515588][   T30] audit: type=1326 audit(1753813991.651:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04f8e9a9 code=0x7ffc0000
[  545.547977][   T30] audit: type=1326 audit(1753813991.651:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fcf04f8e9a9 code=0x7ffc0000
[  545.577787][   T30] audit: type=1326 audit(1753813991.651:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04f8e9a9 code=0x7ffc0000
[  545.628016][   T30] audit: type=1326 audit(1753813991.651:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fcf04f8e9a9 code=0x7ffc0000
[  545.661571][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  545.683497][   T30] audit: type=1326 audit(1753813991.651:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04f8e9a9 code=0x7ffc0000
[  545.720096][   T30] audit: type=1326 audit(1753813991.651:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fcf04f8e9a9 code=0x7ffc0000
[  546.416006][T12996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  546.541568][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  546.701549][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  547.581566][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  547.732575][T13018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2630'.
[  547.741660][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  548.621566][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  548.781576][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  549.661581][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  549.821622][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  550.545360][ T5867] Bluetooth: hci0: command 0x0406 tx timeout
[  550.687457][T13037] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  550.701919][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  550.871605][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  551.035100][T13044] /dev/rnullb0: Can't lookup blockdev
[  551.167241][T13048] trusted_key: encrypted_key: insufficient parameters specified
[  551.208796][T13052] trusted_key: encrypted_key: insufficient parameters specified
[  551.724699][T13067] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  551.751825][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  551.901746][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  552.260666][T13079] netlink: 192 bytes leftover after parsing attributes in process `syz.5.2656'.
[  552.781680][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  552.941564][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  553.733731][T13089] fuse: Bad value for 'fd'
[  554.856861][T13124] netlink: 'syz.5.2674': attribute type 2 has an invalid length.
[  554.865743][    C1] net_ratelimit: 3 callbacks suppressed
[  554.865776][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  554.892841][T13124] netlink: 'syz.5.2674': attribute type 2 has an invalid length.
[  554.904287][T13124] netlink: 'syz.5.2674': attribute type 2 has an invalid length.
[  554.915373][T13124] netlink: 'syz.5.2674': attribute type 1 has an invalid length.
[  554.927545][T13124] netlink: 'syz.5.2674': attribute type 1 has an invalid length.
[  555.021759][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  555.303078][T13136] netlink: 'syz.1.2679': attribute type 10 has an invalid length.
[  555.366964][T13136] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  555.431805][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'.
[  555.911644][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  556.061731][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  556.407733][T13146] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 11
[  556.519319][T13151] fuse: Unknown parameter '0x0000000000000003000000000000000000030x0000000000000003'
[  556.547103][   T51] Bluetooth: hci0: unexpected event for opcode 0x200d
[  556.941584][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  557.101589][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  557.981641][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  558.141631][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  559.031540][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  559.158656][T13218] /dev/rnullb0: Can't lookup blockdev
[  559.940179][   T51] Bluetooth: hci4: unexpected event for opcode 0x2024
[  560.061565][    C1] net_ratelimit: 1 callbacks suppressed
[  560.061585][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  560.221533][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  561.101634][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  561.261609][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  561.622900][T13256] netlink: 'syz.1.2733': attribute type 10 has an invalid length.
[  561.641656][T13256] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2733'.
[  561.682162][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2733'.
[  562.141669][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  562.311650][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  563.191734][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  563.351593][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  564.221557][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  564.381619][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  565.261553][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  565.421612][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  566.301616][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  566.461570][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  567.319345][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'.
[  567.341558][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  567.349302][T13316] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2763'.
[  567.370880][T13316] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2763'.
[  567.501660][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  567.504076][T13323] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2766'.
[  567.675214][   T31] INFO: task syz.0.1742:10819 blocked for more than 143 seconds.
[  567.701645][   T31]       Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
[  567.715474][   T31]       Blocked by coredump.
[  567.726551][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  567.746327][   T31] task:syz.0.1742      state:D stack:26920 pid:10819 tgid:10819 ppid:5855   task_flags:0x40044c flags:0x00004004
[  567.773071][   T31] Call Trace:
[  567.786366][   T31]  <TASK>
[  567.793507][   T31]  __schedule+0x1737/0x4d30
[  567.804168][   T31]  ? __lock_acquire+0xab9/0xd20
[  567.816768][   T31]  ? schedule+0x165/0x360
[  567.831480][   T31]  ? __lock_acquire+0xab9/0xd20
[  567.841688][   T31]  ? __pfx___schedule+0x10/0x10
[  567.846743][   T31]  ? schedule+0x91/0x360
[  567.861668][   T31]  schedule+0x165/0x360
[  567.866017][   T31]  schedule_preempt_disabled+0x13/0x30
[  567.881469][   T31]  rwsem_down_read_slowpath+0x5fd/0x8f0
[  567.891537][   T31]  ? rwsem_down_read_slowpath+0x4b8/0x8f0
[  567.911496][   T31]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  567.917755][   T31]  ? exit_mm+0xcc/0x2c0
[  567.926107][   T31]  ? __pfx_mm_release+0x10/0x10
[  567.941536][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  567.957422][   T31]  down_read+0x98/0x2e0
[  567.961750][   T31]  exit_mm+0xcc/0x2c0
[  567.965856][   T31]  ? __pfx_exit_mm+0x10/0x10
[  567.980837][   T31]  ? rcu_is_watching+0x15/0xb0
[  567.990986][   T31]  do_exit+0x648/0x2300
[  568.001138][   T31]  ? do_raw_spin_lock+0x21f/0x290
[  568.009798][   T31]  ? __pfx_do_exit+0x10/0x10
[  568.037261][   T31]  do_group_exit+0x21c/0x2d0
[  568.050279][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.076258][   T31]  get_signal+0x1286/0x1340
[  568.086679][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  568.096614][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  568.106586][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  568.114772][   T31]  exit_to_user_mode_loop+0x75/0x110
[  568.120810][   T31]  do_syscall_64+0x2bd/0x3b0
[  568.128830][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.141947][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  568.150382][   T31]  ? clear_bhb_loop+0x60/0xb0
[  568.155941][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.162726][   T31] RIP: 0033:0x7f2bff38e9e3
[  568.167421][   T31] RSP: 002b:00007ffc1350fea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  568.179680][   T31] RAX: fffffffffffffffc RBX: 00007f2bfd9f76c0 RCX: 00007f2bff38e9e3
[  568.188660][   T31] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
[  568.203180][   T31] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[  568.215249][   T31] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffc13510000
[  568.225274][   T31] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[  568.240179][   T31]  </TASK>
[  568.244923][   T31] INFO: task syz.0.1742:10820 blocked for more than 143 seconds.
[  568.253358][   T31]       Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
[  568.260803][   T31]       Blocked by coredump.
[  568.266216][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  568.284835][   T31] task:syz.0.1742      state:D stack:26000 pid:10820 tgid:10819 ppid:5855   task_flags:0x40054c flags:0x00004004
[  568.297509][   T31] Call Trace:
[  568.308715][   T31]  <TASK>
[  568.312525][   T31]  __schedule+0x1737/0x4d30
[  568.317212][   T31]  ? __lock_acquire+0xab9/0xd20
[  568.322763][   T31]  ? schedule+0x165/0x360
[  568.327543][   T31]  ? __lock_acquire+0xab9/0xd20
[  568.334915][   T31]  ? __pfx___schedule+0x10/0x10
[  568.340795][   T31]  ? schedule+0x91/0x360
[  568.346106][   T31]  schedule+0x165/0x360
[  568.350911][   T31]  schedule_preempt_disabled+0x13/0x30
[  568.357402][   T31]  rwsem_down_read_slowpath+0x5fd/0x8f0
[  568.363737][   T31]  ? rwsem_down_read_slowpath+0x4b8/0x8f0
[  568.370088][   T31]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  568.377002][   T31]  ? exit_mm+0xcc/0x2c0
[  568.382052][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  568.390305][   T31]  ? __pfx_mm_release+0x10/0x10
[  568.395793][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.401293][   T31]  down_read+0x98/0x2e0
[  568.407758][   T31]  exit_mm+0xcc/0x2c0
[  568.412344][   T31]  ? __pfx_exit_mm+0x10/0x10
[  568.417238][   T31]  ? rcu_is_watching+0x15/0xb0
[  568.422966][   T31]  do_exit+0x648/0x2300
[  568.427349][   T31]  ? do_raw_spin_lock+0x121/0x290
[  568.433258][   T31]  ? __pfx_do_exit+0x10/0x10
[  568.438159][   T31]  do_group_exit+0x21c/0x2d0
[  568.444002][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.450050][   T31]  get_signal+0x1286/0x1340
[  568.455372][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  568.462218][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  568.468824][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  568.475002][   T31]  exit_to_user_mode_loop+0x75/0x110
[  568.480457][   T31]  do_syscall_64+0x2bd/0x3b0
[  568.485740][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.491110][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.498351][   T31]  ? clear_bhb_loop+0x60/0xb0
[  568.503915][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.510898][   T31] RIP: 0033:0x7f2bff38e9a9
[  568.517025][   T31] RSP: 002b:00007f2c0012e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  568.526273][   T31] RAX: fffffffffffffff2 RBX: 00007f2bff5b5fa0 RCX: 00007f2bff38e9a9
[  568.535091][   T31] RDX: 00000000000a0602 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  568.543348][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  568.551205][   T31] RBP: 00007f2bff410d69 R08: 0000000000000000 R09: 0000000000000000
[  568.560145][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  568.569786][   T31] R13: 0000000000000000 R14: 00007f2bff5b5fa0 R15: 00007ffc1350ff08
[  568.581352][   T31]  </TASK>
[  568.585986][   T31] 
[  568.585986][   T31] Showing all locks held in the system:
[  568.597796][   T31] 1 lock held by khungtaskd/31:
[  568.605039][   T31]  #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  568.617506][   T31] 3 locks held by kworker/u8:3/49:
[  568.623436][   T31] 2 locks held by getty/5609:
[  568.628286][   T31]  #0: ffff88814e0980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  568.639302][   T31]  #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  568.650104][   T31] 1 lock held by syz.0.1742/10819:
[  568.656046][   T31]  #0: ffff88802e388ca0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0
[  568.665851][   T31] 1 lock held by syz.0.1742/10820:
[  568.671348][   T31]  #0: ffff88802e388ca0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0
[  568.680883][   T31] 1 lock held by syz.0.1742/10821:
[  568.686920][   T31] 
[  568.689401][   T31] =============================================
[  568.689401][   T31] 
[  568.698658][   T31] NMI backtrace for cpu 1
[  568.698683][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  568.698708][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  568.698722][   T31] Call Trace:
[  568.698731][   T31]  <TASK>
[  568.698739][   T31]  dump_stack_lvl+0x189/0x250
[  568.698779][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  568.698808][   T31]  ? __pfx__printk+0x10/0x10
[  568.698849][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  568.698878][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  568.698905][   T31]  ? __pfx__printk+0x10/0x10
[  568.698938][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  568.698964][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  568.698992][   T31]  watchdog+0xf93/0xfe0
[  568.699021][   T31]  ? watchdog+0x1de/0xfe0
[  568.699048][   T31]  kthread+0x70e/0x8a0
[  568.699081][   T31]  ? __pfx_watchdog+0x10/0x10
[  568.699101][   T31]  ? __pfx_kthread+0x10/0x10
[  568.699132][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  568.699158][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.699185][   T31]  ? __pfx_kthread+0x10/0x10
[  568.699214][   T31]  ret_from_fork+0x3f9/0x770
[  568.699243][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  568.699279][   T31]  ? __switch_to_asm+0x39/0x70
[  568.699296][   T31]  ? __switch_to_asm+0x33/0x70
[  568.699312][   T31]  ? __pfx_kthread+0x10/0x10
[  568.699349][   T31]  ret_from_fork_asm+0x1a/0x30
[  568.699383][   T31]  </TASK>
[  568.699391][   T31] Sending NMI from CPU 1 to CPUs 0:
[  568.855190][    C0] NMI backtrace for cpu 0
[  568.855214][    C0] CPU: 0 UID: 0 PID: 10821 Comm: syz.0.1742 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  568.855236][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  568.855248][    C0] RIP: 0010:native_apic_msr_write+0x39/0x50
[  568.855285][    C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 72 ba 94 03 66
[  568.855300][    C0] RSP: 0018:ffffc90000007e50 EFLAGS: 00000046
[  568.855317][    C0] RAX: 000000000005f112 RBX: ffff8880b8623900 RCX: 0000000000000838
[  568.855330][    C0] RDX: 0000000000000000 RSI: 000000000005f112 RDI: 0000000000000838
[  568.855341][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81ae606e
[  568.855352][    C0] R10: 0000000000000003 R11: ffffffff81707490 R12: 0000000010002d4c
[  568.855364][    C0] R13: dffffc0000000000 R14: 000000000005f112 R15: 0000000000000020
[  568.855375][    C0] FS:  00007f2bfd1f66c0(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000
[  568.855391][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  568.855402][    C0] CR2: 000055e47450d168 CR3: 0000000077078000 CR4: 00000000003526f0
[  568.855417][    C0] DR0: 0000000000000005 DR1: 0000000000000006 DR2: fffffffffffffff9
[  568.855428][    C0] DR3: 000000000000036b DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  568.855440][    C0] Call Trace:
[  568.855450][    C0]  <IRQ>
[  568.855456][    C0]  lapic_next_event+0x11/0x20
[  568.855480][    C0]  clockevents_program_event+0x1cc/0x360
[  568.855504][    C0]  hrtimer_interrupt+0x620/0xaa0
[  568.855542][    C0]  __sysvec_apic_timer_interrupt+0x108/0x410
[  568.855567][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  568.855594][    C0]  </IRQ>
[  568.855600][    C0]  <TASK>
[  568.855607][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  568.855632][    C0] RIP: 0010:__up_read+0x2c5/0x680
[  568.855658][    C0] Code: fc ff df 48 8b 4c 24 18 48 c7 04 01 00 00 00 00 65 48 8b 05 1d 0c 4a 11 48 3b 44 24 60 0f 85 8c 03 00 00 48 8d 65 d8 5b 41 5c <41> 5d 41 5e 41 5f 5d e9 bf 15 e5 09 cc 48 89 df e8 36 29 00 00 48
[  568.855673][    C0] RSP: 0018:ffffc9000c567438 EFLAGS: 00000246
[  568.855687][    C0] RAX: 50c760be7f52d000 RBX: ffff88806ce6b660 RCX: 1ffff920018ace78
[  568.855700][    C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 00000000ffffffff
[  568.855711][    C0] RBP: ffffc9000c567450 R08: ffff88806ce6b66f R09: 1ffff1100d9cd6cd
[  568.855724][    C0] R10: dffffc0000000000 R11: ffffed100d9cd6ce R12: 1ffff1100d9cd6cc
[  568.855737][    C0] R13: 1ffff1100d9cd6ce R14: ffff888033b83c00 R15: ffff88806ce6b670
[  568.855761][    C0]  validate_mm+0x24e/0x4b0
[  568.855791][    C0]  ? __pfx_validate_mm+0x10/0x10
[  568.855824][    C0]  vma_link+0x366/0x450
[  568.855851][    C0]  ? __pfx_vma_link+0x10/0x10
[  568.855893][    C0]  ? anon_vma_clone+0x494/0x4f0
[  568.855919][    C0]  copy_vma+0x70c/0x940
[  568.855955][    C0]  ? __pfx_copy_vma+0x10/0x10
[  568.855978][    C0]  ? trace_sched_exit_tp+0x38/0x120
[  568.855998][    C0]  ? __pfx_move_page_tables+0x10/0x10
[  568.856023][    C0]  ? irqentry_exit+0x74/0x90
[  568.856060][    C0]  move_vma+0x81f/0x1840
[  568.856085][    C0]  ? __lock_acquire+0xab9/0xd20
[  568.856114][    C0]  ? arch_get_unmapped_area_topdown+0x251/0xbc0
[  568.856139][    C0]  ? __pfx_move_vma+0x10/0x10
[  568.856166][    C0]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  568.856196][    C0]  ? cap_mmap_addr+0xb0/0x100
[  568.856217][    C0]  ? bpf_lsm_mmap_addr+0x9/0x20
[  568.856234][    C0]  ? security_mmap_addr+0x71/0x270
[  568.856260][    C0]  mremap_to+0x6d6/0x7a0
[  568.856288][    C0]  ? __pfx_mremap_to+0x10/0x10
[  568.856315][    C0]  ? check_prep_vma+0x740/0xae0
[  568.856345][    C0]  __se_sys_mremap+0xa0b/0xef0
[  568.856382][    C0]  ? __pfx___se_sys_mremap+0x10/0x10
[  568.856413][    C0]  ? exc_page_fault+0x76/0xf0
[  568.856438][    C0]  ? do_user_addr_fault+0xc8a/0x1390
[  568.856467][    C0]  ? do_syscall_64+0xbe/0x3b0
[  568.856509][    C0]  ? __x64_sys_mremap+0x20/0xc0
[  568.856534][    C0]  do_syscall_64+0xfa/0x3b0
[  568.856558][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.856582][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.856599][    C0]  ? clear_bhb_loop+0x60/0xb0
[  568.856619][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.856642][    C0] RIP: 0033:0x7f2bff38e9a9
[  568.856657][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  568.856672][    C0] RSP: 002b:00007f2bfd1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  568.856688][    C0] RAX: ffffffffffffffda RBX: 00007f2bff5b6080 RCX: 00007f2bff38e9a9
[  568.856701][    C0] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 0000200000ffc000
[  568.856713][    C0] RBP: 00007f2bff410d69 R08: 0000200000002000 R09: 0000000000000000
[  568.856724][    C0] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[  568.856735][    C0] R13: 0000000000000001 R14: 00007f2bff5b6080 R15: 00007ffc1350ff08
[  568.856755][    C0]  </TASK>
[  568.859022][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  569.367083][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  569.378470][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  569.388650][   T31] Call Trace:
[  569.391959][   T31]  <TASK>
[  569.394906][   T31]  dump_stack_lvl+0x99/0x250
[  569.399612][   T31]  ? __asan_memcpy+0x40/0x70
[  569.404309][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  569.409527][   T31]  ? __pfx__printk+0x10/0x10
[  569.414260][   T31]  vpanic+0x281/0x750
[  569.418264][   T31]  ? __pfx_vpanic+0x10/0x10
[  569.422800][   T31]  ? preempt_schedule+0xae/0xc0
[  569.427680][   T31]  ? preempt_schedule_common+0x83/0xd0
[  569.433257][   T31]  panic+0xb9/0xc0
[  569.436999][   T31]  ? __pfx_panic+0x10/0x10
[  569.441691][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  569.447256][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  569.453786][   T31]  watchdog+0xfd2/0xfe0
[  569.458147][   T31]  ? watchdog+0x1de/0xfe0
[  569.462623][   T31]  kthread+0x70e/0x8a0
[  569.466846][   T31]  ? __pfx_watchdog+0x10/0x10
[  569.471628][   T31]  ? __pfx_kthread+0x10/0x10
[  569.477246][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  569.482581][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  569.487994][   T31]  ? __pfx_kthread+0x10/0x10
[  569.492719][   T31]  ret_from_fork+0x3f9/0x770
[  569.497690][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  569.503047][   T31]  ? __switch_to_asm+0x39/0x70
[  569.507927][   T31]  ? __switch_to_asm+0x33/0x70
[  569.512883][   T31]  ? __pfx_kthread+0x10/0x10
[  569.517505][   T31]  ret_from_fork_asm+0x1a/0x30
[  569.522468][   T31]  </TASK>
[  569.525869][   T31] Kernel Offset: disabled
[  569.530744][   T31] Rebooting in 86400 seconds..