last executing test programs:

8.955887845s ago: executing program 3 (id=1342):
r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r0]}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0xffffff7f, @loopback, 0x6}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000740)={0x24, &(0x7f0000000280)={0x40, 0xe, 0x91, {0x91, 0x1, "759fd93cfc50a76c653785d5daf972058fbc2941508a6381433402bf8d3e9f0b57a07df5d154aa20fde528aded04ca57a99098709eba44c7c03044eef30c23ce9c3b9e93d341054810cf34228d2be2dc321071607b5ac12252e02d1e849638760d8158753b0dc9cc7f00a10e989cfea690fc10db7606f2edec4e563f75af309dc6c56db4b33c3f8c9fb678bfdaac15"}}, &(0x7f0000000540)={0x0, 0x3, 0xe9, @string={0xe9, 0x3, "bed03b1b5f94f7ec48372b567633bb312c7d596c8f241e3bce57fd97174ed51f868f5c4145a7cce2a0ae55aed02e29d1780da56046f6550d368bce3772b80df724f387f8667f49f85f90e298452734384e5f78c3410776970c857e9885de972961d1fd83935246071b3824938909ac471ff0cb17cb26f0cc23e41b05d34a64ff3c857ef4adb51dea0792e0a0452c8a60af5680f79d6ece4d65127fe217e0bbe58b3e76a1614e5e1494a7149ccad48fdfddfa234db9a6eb78b43517f06d69a37a2ffbd229af1a3914ad6d5d67d3467d4899a1d69e13fd2ed419419fa992e1b49761ac537818f170"}}, &(0x7f00000006c0)={0x0, 0x22, 0x11, {[@main=@item_012={0x2, 0x0, 0xb, "2cf9"}, @local=@item_012={0x2, 0x2, 0x9, "92e8"}, @global=@item_4={0x3, 0x1, 0x5, "559a42e8"}, @main=@item_4={0x3, 0x0, 0x9, "139fbc40"}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0xea, 0x9, 0x1, {0x22, 0xc1e}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000780)={0x40, 0x16, 0xe3, "194d2edafcbd0769bab88f9bc47c91fa6f9eeeb4195190b734130d9438f47a201b285203668950ee33e187a5f7ce64838c03258f40ba1a03b5add4030bed3b29beb8c22a0a692eb5ccb2161d8dfabe3e315b709fe307b59b32aee2e080b2ee4fd9821bf45b186d55fada3e8d43d6a5a65395fc5bd27f38ac6f148129bccc18a2c148a69a74f75153748c8f46a69fcad768386035f0140d1f72ec23fc87cdd2fc221ad316bcbb13b84cf74a0fd685eb0bcd515e409f5e4d5785de7c3649b7aa7f76ec2ae5418d4599d3e1bbe025bce441c33aa60da7946e377675f9dc0849b76c78d9c6"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000009c0)={0x20, 0x1, 0xea, "98ff8540589959b4063637539486a66fcc22ee2eeb7ac6435691e94aef50b903a799d66a1ccf978dc4c2824dcc15ce33e6a16288bc0daa46c8c56472d38cab4d703e35e04e864a305cc57d5dc1c4d2aaf272e0696fb186dcfdd483fbe18904af173840f5fced3f6a2414b2ee453797dab9974298973477d61719cf1167121a89918b689eebed80b9d6b6a4a7a22ae7e84262eeb75d40f81d2d70dbbde4b98c6f976697dc6c5947d7f445e22549cb15ed7d20f7a6edc0b818ae5d372453f4bf88a16321ce939a63d706f562c362ad2e9fbc55340661f34fb20c1526b2cdcc3093155ef5c35c89404b5f5b"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x80}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendto$inet6(r1, &(0x7f00000003c0)="1c", 0x1, 0x200080c0, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0)
sendto$inet6(r1, &(0x7f0000000180)='9', 0xfffffffffffffd46, 0x4820, 0x0, 0xffffffffffffff3e)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000240)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$admmidi(&(0x7f0000000080), 0x20, 0x101800)
readv(r5, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000200)=""/107, 0x6b}], 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0)

5.347202986s ago: executing program 3 (id=1363):
unshare(0xa020480)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x4, {0xa, 0x4e20, 0x0, @loopback, 0x200}}}, 0x32)

5.046503939s ago: executing program 3 (id=1365):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
r4 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_ep_write(r3, 0x81, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x30}}, 0x880)

4.977691763s ago: executing program 0 (id=1366):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe592, 0x10, 0x2, 0x1db})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000080000000000000b040000005dc41bf53e002e002ca304fd3d7e25571d26b0c996ebaa92f9c843604daaa0ca91f53ec00f7b436eec42eaa26f7e6c4e7f881d217c97f33e3ddcf7d2689ed2b87db03d5aee17761f58b8000a6cd4d76639a4665ffca22cd66ad169c2d0c0c8e1fdf71ae98d27acb74a5ba5ce03ec4a89bf90e46926375e4560ee42f56637b94365cf0458160ac34e4c3d7c093155be10c285367a4a35626fba01739c6a0ce02e2bd732b5bd670614fb8f2745f9b33ce4170beb723c02e3c15745450a5f8266ca2ac2e6d47c2a22975675d4477c25e964"], &(0x7f0000000200)=""/248, 0x27, 0xf8, 0x1, 0x2, 0x10000}, 0x28)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000440)={&(0x7f00000003c0)=0x8000, 0xc, &(0x7f0000000540)=[{}, {}], &(0x7f00000006c0)})
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
write$binfmt_script(r2, 0x0, 0x0)
close(r2)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
keyctl$update(0x2, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00')
keyctl$describe(0x6, 0x0, &(0x7f0000000140)=""/64, 0x81)
read$FUSE(r3, &(0x7f0000000b40)={0x2020}, 0x2020)
ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000040))
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)

4.670186103s ago: executing program 4 (id=1369):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x1}]}}]}, 0x50}, 0x1, 0x6488, 0x0, 0x24045091}, 0x0)

4.582866041s ago: executing program 4 (id=1371):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r4=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x482, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}])
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000500)="0a00000100249eed0100000000000000cc1f14f62790590dd25bed76fe8c907eae11aa87414a9b03360fa8bf09000000ae82bf01ff90cac78e9654e6b5e0e7f0e4cb1d78001cb9b5ab73ffcf5ad07693"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

4.459043938s ago: executing program 2 (id=1373):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x26000004}, 0x8090)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="4015043d231fa3a22d0fe80a0000003b3359b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0xfffffffffffffffc, 0x0)

4.222186538s ago: executing program 4 (id=1376):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10)
write(r1, &(0x7f0000000d40)="240000001a005f0214f9f407000904ff81000000000200000000000008000400fbdb8301", 0x24) (async)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x1a0, 0x10, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x1000}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28, 0xeaa}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) (async)
r2 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201)
write(r2, &(0x7f0000000540)="19718f3d240000005043b5c7ed4a46be89d283b62d1fee60d46ec7c45b9f1f6affc0fac97ffcedaa797e1bff1ff0b3a0", 0x30) (async)
pwrite64(r0, &(0x7f0000000040)="0ace9c6dd3b8a68a32e7338ff94c14eb640c96dad96d5282a308c7707c25b7160e4b15d220e712882455051da3662a31000947a0c7347d971be5d7d8dde3e53837e9808178d6788d31c534025d", 0x4d, 0x5) (async)
ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000300))

4.035278846s ago: executing program 1 (id=1377):
r0 = socket(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x9, 0x7e, 0x2, 0x10001, 0xc, 0x7, 0x200, 0x99, 0x8, 0x7, 0x9, 0x7, 0x8, 0x3, 0x1, 0x1a00, 0x8, 0xeeea, 0x401, 0x10000, 0x8}})
r1 = socket$inet6(0xa, 0x80002, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r2 = syz_io_uring_setup(0x315e, &(0x7f0000000340)={0x0, 0x5919, 0x1042, 0x3, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000))
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x2c91, 0x4)
sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x107}}], 0x18}, 0x404c840)

3.966664584s ago: executing program 0 (id=1378):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x31c8) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async)
socket$kcm(0x2, 0x922000000001, 0x106) (async, rerun: 64)
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) (async, rerun: 64)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r5 = eventfd2(0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x1, 0x0, 0x2, r5}]) (async, rerun: 32)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async, rerun: 32)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', <r7=>0x0}) (async, rerun: 64)
r8 = socket(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
sendto$inet6(r8, &(0x7f0000000000)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160005000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d36a80, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x80, r7})

3.84076179s ago: executing program 4 (id=1379):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3)
shutdown(r0, 0x1)

3.787582394s ago: executing program 0 (id=1380):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x0, 0x44, 0x48, 0xcf, 0x7}}]}}]}}, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket(0xa, 0x3, 0x8000)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0xfffffffd}, 0xc)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x40, r4, 0x8, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fddbdf250300000008000300baff6420681c7e44f27b876f54fdd21f3e15763ba065401f1caf331edc1a3018d3fdc4be9c8743934fab6089d85607699b34c3badbdc145849eb41508f15223c75c02843f5a6d7bda49226a2d2ad5ffdacf80ae7dc8f254c5b6abd73fc795cd73e73fa1840ff9bd5875eb8b4cd6fde103e9f5842ef024a492a5c3bcb866fddc0b3c5e91c17b96e897cb1", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8085}, 0x24000840)
socket$key(0xf, 0x3, 0x2)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0x1f8}}, 0x41)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x800000, @vifc_lcl_addr=@local, @dev}, 0x10)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', <r10=>0x0})
r11 = socket$kcm(0xa, 0x5, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$kcm(r11, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r11, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)
r13 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd1)
ioctl$KDGKBSENT(r13, 0x4b48, &(0x7f00000004c0)={0x8, "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"})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[], 0x50}}, 0x4004850)

3.787230671s ago: executing program 1 (id=1381):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x40000000, 0x0, 0x2004d808}, 0x0)

3.727054194s ago: executing program 2 (id=1382):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90000019})
epoll_pwait(r1, &(0x7f0000001100)=[{}], 0x1, 0x1, 0x0, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x425c}], 0x1)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x216})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r12=>0x0})
sendto$packet(r11, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r12, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000cfba000000000000080000009111b9000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)

3.535704906s ago: executing program 1 (id=1383):
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140), 0x10, 0x80000)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={'vlan0\x00', {0x2, 0x4e20, @multicast2}})
r1 = socket$unix(0x1, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = io_uring_setup(0xbbc, &(0x7f00000000c0)={0x0, 0xdf62, 0x2, 0x3, 0x210})
io_uring_enter(r2, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18)
r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v2={0x2000000, [{0x4, 0x7}, {0x5, 0x2}]}, 0x14, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$USBDEVFS_REAPURB(r3, 0x4004550d, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10)
accept4$unix(r1, 0x0, &(0x7f0000000000), 0x100800)
r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10)
getsockname$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10)

3.42780928s ago: executing program 4 (id=1384):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000002080)=0x66, 0x218)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
write$tcp_mem(r3, &(0x7f0000000100)={0xf, 0x20, 0x1cd, 0x20, 0x2}, 0x48)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
prctl$PR_SCHED_CORE(0x3e, 0x5, r4, 0x1, &(0x7f0000000100))
r5 = socket(0xa, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x4, 0x4)
readv(r5, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r7, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0)

3.403767823s ago: executing program 1 (id=1385):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x4400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8054}]}}]}, 0x60}}, 0x44080) (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="f400000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) (async)
syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f0000000040)="80")
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r4)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010100000054f2a454d04af4e863723e824583140877c986d737949427bd700002db902c66c42852db3d5e64cc4809000000000000009469e4038048e2fc92a2d00cf4035f5b0008000058ff82ce95c5"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) (async)
close_range(r2, 0xffffffffffffffff, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x800) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000014) (async)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$fou(&(0x7f0000000600), 0xffffffffffffffff) (async)
write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f0000000100)={0x1, 0x6}, 0x2)

3.400478342s ago: executing program 2 (id=1386):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100)={r3}, &(0x7f0000000180)=0x8)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r7, 0x400, 0x1)
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000240)="1c0000001a009b8a140000003b9b301f00000000000000000000000095a89ec7665df34500c7f34e08546f16019d9db1143e683687b3461fc1689f9f91a2f895ac77a26fb9130c14c416", 0x4a)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x814)
recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$SG_IO(r10, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00003f00000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000ffff20000a00800000000000", @ANYRES32=0x0, @ANYRES16=r4], 0x23c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="d3070000005be8f135b360ff0000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000018a0000140003006970766c616e31000000000000000000240012800b0001006970766c616e00001400028006000100000000000600020002000000"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x20000000)
socket$nl_route(0x10, 0x3, 0x0)

2.141998148s ago: executing program 2 (id=1387):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc, &(0x7f0000006680))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="1c0000001e0001d9ddff822000000000010000000800038004"], 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x4004000)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x5b, 0xa, 0x3, "3258c5c0008faa001b0000f4ff4000000000000000e926ba2800", 0x3147504d})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000002900)="d51d40f460423186244cfb9601c907d4606f2e4024675a59b84f9f356627e2c60564712c552dccb39d41ce104cfd844078d1a888da865a94ec672176a31c72cc221df1c48059af87048c50665689771fcf03000000040000007cf30abea243e168b7319e29777418932d5dc95489995a9af8be6ba2d6a377079c0a6cb4da7e2b85c8306b0c4a8dd8e789e18904f7fc6958d31a175bc23e1c8c59c156f98da2eda6dc2bfd832737704b060a8f498e79cb5d67a5cfc8d2452dc1dffa5bd7674c902ca80044acecf4e25400000000", 0xcd, 0xfffffffffffffffe)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r3, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002240)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r2], 0x58}, 0x1, 0x0, 0x0, 0x10000811}, 0xc801)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="02003100040000000000000010000000009900002000000000000000"], 0x24, 0x0)
r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
r6 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000002400)={0x24, &(0x7f00000027c0)=ANY=[@ANYRES64=r4], &(0x7f00000022c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f0000002380)=ANY=[], &(0x7f00000023c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0xabd}}}}, &(0x7f00000026c0)={0x2c, &(0x7f0000002700)=ANY=[@ANYBLOB="40063c080000588839df5c11616b81093ef629f2928bab29de56065b37013a55ed18b2131de84af9cf5829c7dcb7bc194285b65ba0c5b698a0b535018637a04d6265", @ANYRESOCT=r4], &(0x7f0000002540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000025c0)=ANY=[@ANYBLOB="200188000000beb4177f0bf97df8e26723dc51415cbf7cb2488b0819c06f3c0a2de17dfb0982999cc8035177abdcc309f25a67405b120bb10e88efce1067550edd22f07cf25b2ab9ac41f4104dfa55de890d19842d982aa5dff268cee53fbbe13a1d5d906450ad368dbf74794831ca641ff3754bbf4408fe30d4def792e9d147f4c95a16a883e80754faf8530000"], &(0x7f0000002680)={0x20, 0x3, 0x1, 0x7}})
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r8 = syz_mount_image$fuse(&(0x7f0000002300), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002340)=ANY=[@ANYRES64=r5, @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r5, @ANYRES8=r2, @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r7, &(0x7f0000006340)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000002180)={0x50, 0x0, r9, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, <r10=>0x0, 0x0, <r11=>0x0}, 0x2020)
write$FUSE_IOCTL(r7, &(0x7f0000002140)={0x20, 0x0, r10, {0x403, 0x0, 0x8, 0xfff}}, 0x20)
syz_fuse_handle_req(r7, &(0x7f0000004340)="265ed300624cee917954148609d0f2ac52561da46fe5c8ce8b3d649d8b59dfb0c633a2151990de893de399d507986121aa114fd87163065d2988807d3e0953e6b084d8b607280f9207193bb76a79bb6d4f638d070435bddb76667d5dee6329e71b2c9befbb22bbde0c1b6da63b845f2c28d2c5f4deb07b4ae015fc576702112f75a755e76b6dc450719f63cd1939961e4c895f9054760c61f933bf74d185520f9aebaf3ab397a2089640ec41ab5cfe6c828b53c4cc544f9812034c719e712532763eff6e69ad7cc4d2f29f97ccce18f298ce417251430929d422e21cac05093609d97896d0beb7d4cce9f1975f01e7dd29ea061a868bb6607b7cf88a2e33dd5c5db31cbead98e06c2c7add9012b0483fe662532c81ab1a1ca8f20f1cd9020e06c2bdade3f311d08b47503b5b63b279a9be019006e6929670f53d5688c194e9f046d2322d71bc26245e698cd44d655c59b2e0ff43771a386abc38cd6e493e0a475ef525fa78671fd9954e7df71a3b7c7ed90379dffa4fd76f0367eca11c1d8de813979951eccc8c93b4f9fdb4785c0a9d207e65742bdd358e9dfbf29203c36b91fdd78db55b53ad1e713e32fc1f47bf3390f3db8dfbd514b4b31095c818e18b63ebad5cc3b406557f3a9380c5065ab11c64522b1752b2296bb00b7750ab82704ba197f26ab76e35da02ae87d25669d54d212aa680b579773c889902782d1c8067b16ff957bfa70cd8af4c366c1629e871cfb033d46c0d308c3ff5072fd8e23ee02986a128051b8e6dbaa2bc46bdc8772d923f2906eef68015bdb4cd66a2525269a91cbd7336c930c08190a8606d762c768d164d05eea38d63e99e1fab83ce2683b885e1619065acb1bed0bfd63e3cea5c9d7c9994df4036aa17f9eb0850f9eb42b17b19926fd9d814529c3cf4397e3f38f9626f0bb4f229b51c35773cbecc42ba22f8346c9c3a6f3ca7d8b25d0bbf30baf48bde92ea192e2484ef9b2160492edb5f2ce296b0b6b420d020b7d14d780db436b1a23b733051369536eae7c7148927c3ba3a968516039b0b14d9918a41a1bdd5002847e1c3d02f0dc2235857a9797038d164591757820e7d74dbadd42b8903f20434c6ac0f401fdbfcbed5dd3c5b5fb0ce1f9c81e8d1037fde8dd3fef1d5d7af6af8f36c0f4462909dbf694cc6fe80070bd5fac5a5ca4dffae4b2c67892f7c53af3644ffec29ab3d791bd7934ad38929a9d5fb9ecf10b9dec62e315ccb0e0de60bb1620daa8154a4cdec98d94d42ac1a4b5f8da6afcb7dfb53544fbbcaa3aa444182ff25064ace51a825fe89236e850a2c90e1c7db17871ea809c4a11a26f49b213cab87d4a42b747546fb9b15068faf1a8556f909f2c47202e7b65cddc708ded90bdde68725b787bdc2d4eeda60204bd0028f07ffc3052f93eb6343d1b2a9a5292e6574baa4a096fda6dd54f6d39e9462b6839b8ee2426e3fbf42a016dc0963145e602f2b0c351f123df48f608f74b04fc7e9cd018e7ab25bc1c12f8f58c0b2dce5714faa54820ef72f38566e3d776ea2d5b061a2e94710176f15d2221420abad8b8b733de253e602277848e7f1e0eb4d07f5eb0cc4d9f874e632007cbca23a5d7e4109cf5c4fafe5f607149bac37938734b77d9b183cf76014aa61507bd4eb44524e8326c58932c8b9f6a10e334cc602b5b8c956c7cb5ffa099274b599fc9c58327f85553e00263e548c93c89edf7a7c83cc10348662fc344c85378572a40b49ae65972fb40abd5e0a38af48207983f86c7bb6bf9b7853c4b1fb522d135a83bbdbb78130b4df3aa7cfa930868cd5a2d995ca9fe4f64c79485ab19d85b0c82a72f4a09ccab267320a61208ccef13c3546ab0f16e34cdc56d6e48a6d9c14c626528a3b191e3723b19d4388d5b9b61c7aec726b8752455f96e888ba7af82c127796e9b67432d1f60a3470c7bf4b924cf10f06a3e3f64c60c7c2b0fba4d1ebe4e52014b4052c2ba0d5b649c46e5cdc6c7159faff2adad2db2d3db9f4f9e9735ba28b7aa1c6c2fea9dab6c9617160d182dfc13e18f44e73c4377df42080d08a87fcfd46b4a4f30205457ad19ddd473fc3a67153d04e960f1dc7556fb158a1d584eb2bde917792892a30e9cd25d37a318cf06bd6541463adaf5d12adc50252f364ba05f89182018ded2179c23a1fc0b31d87139da39298b8d387446c70c4577a27f6df841d9f43106bc1bf44f5c7a41460e2afc9eea98f8e256919c0befd53d7d015412391963c9ad39a19aad265cdbd609628e1913adc2467b69c00865a88635c46a851e7252cf3dc5c3cc5dcb04e97c0742d1a844556744036c97710dd9b55f661506f36cfef2c6b7305b63f5c33469b33ad09e1b593a7ddfc97777954c71c8e4857ca49aa7e5de0d25d760f633660e1fd783cdc43b00a0ec149cc9c8385807c2f6b4cb255d6a15ac75ef63d0871b176d503f332c069ccfa7a2bacd11999ea792024b35c9faae5bf02bd5c844d04d9680c1fe35c2d90ce808b45932e754e4e1dd142ba5a7bd9ecdf7717094ed4359eba666fbdc1e849ccede72b0b37f0b8bc4f76b99222f8d199de11dbd0ff396236f4a37aab955126a60c9f0d457c7a394920aa9014611e5d994c8373516f061dcc5ac881bdda5132b5ee984b15fd007828401c72df63c2efbc5f0e8545310ce65d0635dc73f0cb1c796c24b7ee62616116c13369ceb74ff8bda64a98e903dfcfd88b3c0c5f86191bcc8342578f23dc70fa6ceebde822ffedb7587a3f204d330be4977bbbc2529cf0ddf4c85b17f1088f48d878e72fb00e15a6144231108be816d2718c360e2fa8a236691c775a9a0ef3559696f5b8f85eec0aa2b1c4f01a2df6065bd31b23dd37718613fcbbb1566dc0607bf487c1a91f2b39a83755a6048e46d02ede0f5aaea8ee9e245d6c37891f5ebc9bb7ad2462b4ea4f1167b8c8e97e2f7b62c1c98ae0b808ee6033818d28a00ee72120820b2227da50d7f66d3318f6acc6398c81e529c5cb0df75e303954c2fa828760c1133fdbdf1fd7675b8634bdb496b054b91672fc7ac344a37bf60988870d54e5baf91334db883b2c69acb50676c2f871fd577747dd1d26c00a56e757b6a0edcd609ef5c3b3ef669ced2af5f19ad19194d04f23ff23546df47bc67ad596672a40cca2e87f8fcc3a318e37c73f9f50bd06926c74078356ddddba42ee273e0c33c2fc6cdd1fd50daa6ed3b7b6ce558f89449fca6d8b05c90639283d44e14a854eb29d65ce5b9552597072cb148ccea15ef430630559293afaf204f22a890fc3009a2bc1b0844a49668354a940fbd0d5919faadfe5cb80e4c93d138ae28269a99c877426298b9ec7f01e9005da2d7977f34103de38b2f65bdc1c899ba96745ca977c46db6003b1ab840e677f0d8960b4e9f71e82fb89a8cc0702739276ec7a040c69e6dc0e439658d420737a2f6cbe7cb1ce904f4a39dbe8284971e527ef50976c89855f75d5e129a09a117a5c042411696f8a3bf02879a287b2b1ea2a6e1adaed0374341113bb8363f33aacd361339c9c06b4bd6e04f8fbf1f120f1992856608426d44abb6cc429a075c7bd22bdffc9493f218286f8eb585001fdf79327c8c17d462cc2ca5b435d444659767150c6e1000a74f001be398a1bb48863d3a4d4a71a4623e1721b003d7d2c038fdb405b814f37a95a6a53bbb365dddeefb83451676c7b57a23dd1d523958e2e2eb8d889c47cb7aa515e9b11b2c3accfe6739a8ef56b7a02adfd63ec9f9232c38e2aef3773a9a7d6f4844ea1d609f146f19e6c46fb6b961b8037e5d9ba34c0ca5c10a668ddc5d6f4c7951732f68c56ad9c1b3e53e09d33d9b377258ab2de957c8adcd4b68923ed6eaf2441e2d888d1d4653c5686ab712a82ca16cf475009e238e5a8df04ca2fa719e6308bd60026deea44355a6e878157ffc7f14a8d34275a9ed5f810ea4ed1827e4c91998aebe9aacbae14d95eed96a9de17463ae852f53d2bf3e92df959564e9550c1eeb0b052c00cd44c07b7f021cdad5c70908a74bca9ec4fa372f491aeadb297e8f571de1b376ef1b7194d8e434ba3867940606521399595be0ec4daab0b45c42e439adc5cbecc7310025ed8761a1d78adf3ee6b223577e473423cece99cde0807269de6929624ed1739b2380ed4688779ce9808595e9b87ed6f42d89b1676014cb8c9a3f7484aacdf794f056439fd1e5233de23141d5b87ca95b54721a01212666e8067cf683025f1219f4d0569c8cfb2d6ed67e7f051e2ef9d0b70a390ac7d53bf9c4e537c74afd223e311341583282ac6e4ab209a591ab0f4d7205512a74a01cd33b57d993fc5c548a757d757e1f32272c22b86fb2428b338eac75c21e4ce3fbfdc6f04a62856610308e65dca82a7637d7113a48c6ce0357fa454f6d58a1b61698c7b65dc9b8678f9d279b883f76e04ad1f1154e2f490afb7e397ce65ce297f6599b0671f3129bc87cf4221d8ce101f71a1df23b6343dc3d6e35ee2eb0a1e37e67e091fab994b8948e956320d7e512308641a129526ff2e73ba026fb72fd3da3482fde5374d54bc3ed6ae53f2b9b4d222db5f3126760285683ecbbd0f8b5bb964e5a1cfe404ce21588a21c2244e0f76520e139992f65a15299548f4dc5e4d1e54acf7592ee1f04e36987606bf10e4632c79d00e1ed985553b00a8e828dd193f5cbd7101cd36745804d474532fc51e708c7f124bf9231b9a7bd1ca4446060535054b4bfd5a61607f3ae45cf1deebfb9d8710e5523c8cd03565cd378e77b1b3323a7d97f28fd1a13aa40626abf69d7b66ee9db3d604b293966347a4fb36d089078f9808bc209109690ea47941ad7c141767b78eee93131a57b5e12690b7288ffecf22f39f308a80457ac6052b8f477bafc15a3ab30cfa3cbd7dda9803e5a5664694e77f528087de197c02fd4d133ea9133b9aa4377bcc0b62801982b999b6e7f76dff371dfd998704e340b4e5da88384fa8cf08d747c977105e4574bda02c56361338a0a9bd800e94c861a31d5d64d71cb65c0655f5b5cf5f900e348d7cc05d9c2dcf711859cbb8ffa54065e2e5462f4c1d80d28e5d5400090d4bf61565422b8df0f34f7a7c1e153d39c9d7340d15b8db226d323b4e3c50fd8aaa87ec9e5c3fbb3ad66462c6ec5ff31877024d119fdb7a16e69d324ca9819512c45c3852409f4899a41a4d16ca77dc3dba1ffbdc2af2fccaba1f04e048444154d5019a267bbcd440d7bb3516e9741e5f9c3ef1135e8c0d70e3c7800c10c000e9cfbddbb5aba9e43b3dc0164f92733590f6921bfb53aa1466a53b6146113795fc13d1621b3cbe0eadec02c469a4899232c23a5a88a9d659984c22ee523b5c5de84223a0f0f9bf1fcdb1efb4709252c0fab477823bf2505f9a2e4a36d0bdae824ecad15a4c313f0c9eb4423ea249710e353e61264630927f778c01978f5b50213d71fd746e40009432bf50b7932b7659942f0d1b6375b87d9b038ce271d7333ed282beb3925a330d881ac7611d3e8b869601b146fd82c06b340ae4823c4c429af4c15f2a2a2bdf383788e86b68c001866a86188cfd71b02bc8abef13703264f3ad08ff6602e15ff84715b7796541c87e26b0c6e086211943e52629f8c1e71fdaec972ab5a2c690c78b08d65651ae4b64070f7bb37931119881ef14c4c8e228d67d34f1c9eb855b39ad6e615bf24f7b453a76547edf2fa025c53bda95d783fb3f735852f28318a8a67c8ceb5279d380d724ee6eb2e76ba8807a0865fcafac50d09a92b85d27a238e4461a80cbbeaed62a844c17e498f6457aa642ebbd0aaeabf127b8f8fbdc2e28ff7fafaafe3016603461f256d7fca690a8643b9697800b3cd59e09ecae48baabccb63cad4a627f6bfba0759f1c186977e9698e6fbc16ec9d1c95ca8e2e075a1eed3ba6223e4df44be7da59a444715a78fdb90a1645c069ca0fd1609b7dce29ffa11f17266c32856f9ebc853c0c7cbbbd82667a5106b5b63f5328ae9d653dc5dd53194988f0e421db3851eee53c557e40a7ad293a22ffd3445d296347cef4187aab3c9c3c2a8e40be66919c30cef3de8125f3cc7342a43791cf1b3b117af99b04e0fd8170f17f4ba25bdcb24965501025188a430df86239d369a6e2c9245e914fe4be3a1eb48e22e2e1c72caeb4b0d1b69e8a817cc7ddf644d33e56ae32215604f267a80754619440ddb3621280a4b388c14ca19dfd398d744977849247d0bbc55d5a54ef062ad3cb3689168b28a0981946fa01737e081101b9c571d0ec4e5775159daccc110588fbd35bf6f0d55f99da967a3d3db1999e158958d7ce128571efaabc09c1aa7137c35f3edf7cfff386a79ba5acfa974366c442207a39ce67afc8469c2ddc6f45413dd654d9f59ae7fd31115dfeccc43c27bbcffab119106735b7782f9694a3e30159aee341f04540a54443562cafad5cf3336c6e900332b053d7c93bab45d8846cb5b880e11b979c13dfea06267932d89e258ef30768ec2ce1d7b020609a5ea6ad9eda78219542567029d1d4d2ffe797b7f95f16b8f599390b0b630decdc6e17593b7e4992d48e62c27cca2e423eded85cd4b436065496984d59044d38f317d0ba649837e5377ab3793c3f66c0509eb37ba365c94273b3cad97c5f607bcd312cdf3c8605dd5569e293d21c588969d7bfb17a228b53f2cd0387995945253c6ec8fad3777cafafcbb9151a54e653a142b5ad0c62682b8ec4b99f525dd853f75c17ae6264b7bf975138de9932d40be9f35ce25dd2a1e307fcf506eb6db8803c19b9880f96299ef58a6bdf32708346db540dae112b0f7ebfbe6f3f46635b7d98e232cc91eff2aa9c7fed6dd53d448db2fb8fc4c0dd661d47585c7966f9338f165e53b3d7777dd844be6a6c8885d95b839a32ea0bc83ec0ef8a5bd11b666d11fd8e27561d8afc4686e978ba31ff2f812f81a6a82956b95a0cce2966a37a4b9e33bd297ab8b1667f6ca5a6be65e4485a305651a4230b7a010a960b035dfb7a8474dec1965c6a9177f62484817807e0dc43ab2770b27adcb40f76c0e78639c55fdecb6c008f2e859ed496818b48e5fbe32376fb3c434afc0ff780867e7374a8d659cc1580e49678f4542e5cd3e54d5f4bd1ff6d186827d588ace5a8adf437dea11def7b57b6b8c992b86695d09c65aaf532d6b8cf12686df8b07bfb5a8aef7944f04c8bd00d500b8b7eb24516dbec0f5514dc48f70eb26a2b78042fb6b4726a20fcf73ccc9a14b75bb82e558e8bc4f7ff5453850f83d12896e9abf322e5b81b6efe679c8c98ee092e06302f9f1472931dbe5a815ac38b1bff79363c4f846caa755ab3ed5b60a938d5f1a9e10950aaa0c5d10c5c4f09abb8ce6b98867e6f8644e3b9d603f07f9c2d1044600635d432ce796b0b96baf572238711302f8fe486f3bd4b5a0463eefb0cb04271393cb1b47b033db62840b4c535da356de3db90961deefbf43060d57b303489aaf9c3bed935f8750d47b8e6aed8eba71f08d93246c92c7cfddea99f6e052bf18e787aca4cc04779dda1f67a420cbb5fbcee2f2ae28be664fad18b478e171dc3699116ae71421b86a5fa9732767c994f38519874b33f07b12b8baa5bc672017cb1e2c8e8897e541358da9a9e3bf8bf57ad3541fb434534190ddb95a5ad701e20548b269268fef7c20c15adb8a86dc8ed756f760370ef2bfff1261349b535b77f67a4118dc8f95c70e977ae39c7c77f2d4e2248028439b72325c033c68684fc8dd6050f0449e2c87debc00fb8bd5d1d9b9f31219b4243cb089362b345f2b9aa7089eb618e1407223ef1022dbaa856197f6cd8dcb7fc53afc16731e0f21b45a17fdc2c49bfd9f14e454c98536c507c3aca95ad57be395ea9d737a4a3237825cf102ca080e013230cd7a46e91237b2214a2b175ffb390ac9f12e5dd3124ffe1e152e148371425c6ae5c603715d5439e0f9e49e8048b56489ce79c26df2dab6ad0c8ac0b37e5d4fe10061f44f3d2314e1ee6245ed600c62a9c448faf905267cdb125ed7dd2a7a539770bd1ddeefd13a521991cae16160cadef434edc23fec333ec7b328c4a6213c5040848e835c6b3e0aebcae1d5884f7e8f654adb512c2f0227fae83ddae0dfa848e0ba9344404ef1d6da880f8eac71fb7e02f197859fdc1ec634dca3f46932e5f022689ed253e60f232e1acd96fce398961d62c4d63d7f37d48c26175298658c224bc1db73b8baaeab139065a9bd004bcaa24493c17f09961c09bd0cb828a8cb3cab56df2991646ff370040bc8507d3d16e66dc075c8d302c6586dbee27b32f93ea563a2692f65ada174e35bcd8cd3214c1a38cc00c90067828b9980da7dec04fbeaa2e550c8d06358ab446853e7daf007b0de5c9e361d75c40ad5f9f2923c10ea479e5852ad35f232d6d141ca7b4328c9d72dc5c247d1431688b2a325d88582733953ee50f997a5d8324cdcb01fda11a773093f344fb38b55c5f9e7706e1024cfb4f2e47544ebbaf792de3c4d8f1522e9d9ce73fdaf1740d3dc134a78b53c6167aec45c730016b8ad9d9bc4042b6835a5ff34c9d36da7418719a86be6637c896fa4a4eda862a9e73ab97e5a977aebf0fe64a7d507dc210a677873e155fe4b2cc3a96e558f4d54db6fc5fcdf166c4cd58bb5d1721378ccff170c0eba14b990ef610606909c205e34aabd15eb7a60406df5451871b18ae3cfb5af37b7f7bb2be80590d3be02c5d0c4143be66efcbe13c6927f54ed27884b3d6a73e90516552a0bbd81f7c76ed5f84ecfef2225e52b9cf6021895716aa29b540750eb64b31cd7be1e9fdaaf132681b23cfb2742fbeb4d1f40fd0bb1d13ba044b252f2f04b0d5fcb121977486c5754a569b81be7577cc0c9e918affbf9abc1b6dd567aab66b7e2aca396e79d53ced9695a65a704bbd9700b55ac8c968c5f43557060c6507a3557c8762a7dc8263eaba22d51fb7df435e20beeaa700609d774d1e212e7493b672324e1a907fc1546cdf7d4ff88029dd7e9c92fc530e3f55b6c1b103c69f14859524d07e454a3c5f987e01d21d9a5a6f842370cc3dadcde1b5822b0d0c47883dfee62b9b7209c3a7c399ed34604e164f806e68a5a24a53d0c5beccdc1389e87a5894061f95e7e8e8bf84ead6e7fb155938230f22b426d9041e8bea72dae14911824db9b65bb0ea0d0404cc8fabcb8f1863e13c8475beb68138e043dd67bf1b0d7e038f9f3d25c8ab1a52173af6b46d8260d677bf066058e89dd18b03fa20e79938dab01876102992f9df49dbe983526b9e0bc83c15cb9d52511eff20d18dcdd316bf334b98aed9024051b87bd3d767054470f4b7f59a207e9b9f17827497bec146aa1b0d18ef54ae5927c64b05f34c8508a0cfea02cf59b3c97a1d3e83a00b7ca495167f411b3f41c1409a8ac007e1cb08ef83c4cbe38117d4b1ef9b58dc0092371b1dbb1a1834f780282dc2f3b6bf36fd0dcc7619c28785b76910757376adfb014ca9ff8bfa3e291e7cba2caa05efad48b1506337b61f74b7b0f4abc18846af682f34708bbee9dee76837bcd192876d1861a20b3e77c9984aff5ebf0a2a4741d6e43b4ac056ea138e79230144578bfd4ae82b84ed109e4d5ff0f955ca481ac0231cae963b7d4db76d89d07e265973a16899fb3a6f8dba53473954589134b520e680f4c5e707fd056e75edb194004b81a40bce0407b6c294078b77e8abd8873c01f6918b2c7c6095c9f23b9841e90e8acde53ba60cd78911cac6fc2ef6bb5fcbb0d3da3e63d70b47495f2177afce5da37c59efde49aae133761847a6f0c8aa374790522ba04d466bd1f7860f53371f5eb2f506c5bc7bb6ab449e4a5c37866c31684b285cf5da17f36434b809f69c542c989449fd0eca50f5eacf8080cbbe8b84d1183095ae7416b8f2b98311451cf7cad2d8fb721e589f9e611376430359cf855444fd1415011e8c313834bf0e217ac7b03f8add941427b0d15b56378b2cd1e3925008c16cd5f95dd149c7e050e0a153e4333e63bd14816b4357fbaa5f706af6ee225057eb599bbe5714c9ff23204d1902230569839d8836e6b2525570b00eca8534aa0c29cf62dce61ec66d9c195be81279b698ec8565fd6754f636b9288247657efdb2b6356a82f014a1e6b24926fdd67810ef0a01295c664980f2057ca17362b0a5888c23ac21842f931a7d57cdeea73c4848c6c1cce20be979faa611f86509ce031fb4102a0fd30bea4f4f840c75d238362a2c4f8de16e81733ca90119f8c1ae148b184d0b113685594088ad8a947455dcfb782f8beb69e255dbed46ae2ee6f094168a52501fc68ed669fac390cd9320ba16d69c86d6f642aea836bb1d7c14593f15d8d33d452d8c87003d7ada1995e2b43f788b4ab00ec6f58869968f098218a3ca21a6f369d47a14cd3de7de8357902e8ecfb5f2e6beb5d3d32a6a6224fe3d6dc5c06eb117af0ab396acfcae58b2b1b9981cc71cc1cde07491b6b6d97e04c10ff216393dd28737d31c8f2cc9ebe161b96d407088b2bc456c331b676a0d7dca3df7f7080697d154fa14f351fd467e30b4ac3f4eb7b4adfb173ff20594cfe539c775c4275795d54782bae4b59cc64a45740ff73d21f5d6cf39e10bae4fbc48ac7799023796d7408ff9220a07a49552b18c5e35f98082297d2b4a0932e4d224c6807d49bf9b5de2eff1a8130da56124ecb5509241fe95be11eb0df066f5f819bc7db0f1ee90ea0aaf4ca4458ae7b5105d574de028c82714ad0d53bfc8ffab31c57762b38e433d6991d83ba5616162e27e8ac122c145547c4abe18260c6d32c755a44390ed41241ef375e1f5a4311263881a02dae71f837206413fc37ddf40a9bb72256d1625ee0b94c1c5715809bdb24224cd0698a5802a83e2328dfa22b80e31b9a5c7dc2fe0c68545905368806c308334c194803eed4a24a96bc5021b837a293dde7ba22b9ed27369b3584deda6489bd1b3fa2925beeacb7d3be367fd014547f82b4561c0120978b6ec2b32ac2634589b819a2c94fd20c081fe9eac7b0745f73a1981e21b05b1bd97a9a1d7218c0e6d0e473e15a1a7465cea98ba0c72af2f270b6a61bc51d1a0a9603b91fcdcc7314fe7aa007ecffe6c7eebf5a65e82a96325e86f9aec39feac6eee9501495c74000ec1f0923e79ad1fbf6dc581539047537794151473e00be353b3b8dbb6da0053826c7bdf16c43867cc9cab9d1220466ca29ef2d6172c4c0ff9067eba9d9775225efaeab1b8c634b4001d2a5c01628bd5550c4573fa017afa3f501f1a6b7d7a483dc0885ab9c2ee959a596ffbb68c7ea99e48f4304697edf7fdba5567735ace3433c15aa59863f87e4605206a31ccf268588de7ed37fcacf6bde80c68ad53de63feb4399cce137c5776abd15395402af07250938aa1c466511bd5754f9cf2f938faa37a683996c801c8fc8aae36a706c5d6e2d36e96ab77eec817ce4d56d2bcf5a43702a883b127a1da8b6ceae1b82573a9e9e9e297560f8d65a1f5fd4bf3d45af0841e691b6e637bd8b9f7c8e51b813b818b0baf2d9c5c9d116781d327b4b43309c7265612089f1dce60a41fd0aff4bcd1335d696f01cee7b371e13584c731a3c3ef7e1b9f3f41f91c4dc647b948c93a99c1ae79f5f530c68c3cc28bbd", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x8, 0x3, 0x8, 0x2, 0x0, 0x200800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r11}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r8, 0x0, 0x20000)
getdents64(r8, 0x0, 0x0)
syz_fuse_handle_req(r7, &(0x7f000000a380)="0a3d78dc319597536872a6b45da672985913e63676754b42bbf7c05af89995c627cb92ac8a972d6b8c88f5f3ecd5ff5e42e034edb4b2c5bc893b50d09668ed515f62d42b3c88e1c86994d40a09a8e5b00e86b59bedfc545ef1e2e796467b3e20dfae7baffb516448de81c3ae2ce3c6a63e742ccb2f689873d5736302c01b6ee851c498ff28b03aedf0953ecf9393f0f86334951368ff352feab0675cd5e613ce9fed81787966e0299243e7396f36fb2a79d8eec5fa28d6c10c785932fcf5f70722d0bbc60b8c4005a6cc80ab33462f115ac7da57ce7ff72b2c1a1a610b2a6a7cd2e1d0b7c924122de787695bb64cafa3b2307d9237338ad67010e87d87040764a2a86ae2a9c623ee4b56ea3f29a7537ecfbdce313c45cf5147bbea4afc4a28b0f62e81c178f50e23a0406c1151c5757b648ef0b2c0fb74012b309ca940551e5e9cd5d0c8d4b758691f5212eb728aaed6f17fe54752931774b3df82f3f3b534596c317432b562f6a3f31738843223e1b80d171c24f1687838d1354bd12baea5c0260eb58a34ad07926ecdae584a32b025d45f16ae7320fb939631db28693d58af97a9412a36549ac6fa310d785020e300243626350bcc39fa21c0391800f3f51b804897df57c814d6d81b6ae535eeb6b95a5a491d5217fbd945016238a3126414dbf93e97d1ed4267e002cab9b2bf9475255b12b89c6820b7239a130a495b181c6cb45e666467d2ddb74728e1bf3fb85dc44a188b79db5b314bc3bdd39449c88126e37b3d96d81271f3e757eb5a26f7f7a4779564dcbaa375eea800efe8cbc19cd7c07049733c030a580f8d94ac62d000f221f4c25410e23e33db765b490c33b813695c17ddeae67fe65993e09a664d8e6c5268eba700a4b29ab371301ec8e909849fc4a6bb1ed305c0c72838a62a0de8a15bfc6a3dfa6a90cdbe9e45c137840f88a98a533754e865286a3ce5d04fed67364c452f268ab28ba8e1c753f38e40c3aea0e622877014187ce56f65fbc69a3390ac13c648ef3bea4a3b1e2a01a4d6087df25972ce8c04eb6f83d0f5cc930bc848700ca796061d2c18475ea0a0c58d3463a7d38c1e7c91b2fb0bd48241458591f55b79598f3b28de56107925d7b747db2e80102317bae001fdcb6ff019c45a2348003a49bc8d033e8c0e496215c4a2cad8742f5f89eee78bfc5804b63c976e73cc5553a87cfd12741b408c1498b3c672a95d049e8878fe2e941e1a9f039d8b0276e29b985cad3b2e3bd1a4902bc21643bded14e0e1b52345f206c4c3f593434e98745284a12f1ffe355d71698dc588aabd7124d02195638ae3dfa910cf6f0d758f6ef1dde64ec89c44ab5e2f9a05a85999aa7ffa911d2da5a3e165fa77d5474ddbcac4d78affa9e64dc7b79a14a187c142453647744f82a9b7f894685db1c9ab6794a1cc92c9209a1d4bac39332542a271899a43fb31cd175d25bfaec083c6b26b89dcdf585877b3733423d475366105d98c3bd021a31201fac1f6af138d70a135779e623a13942603600412037ed8361c87970b36fff5e44056c7fb22aa39c825eb2dcbc7a9a50b260f634e1155b3db282bbcb70f4fdbc9bb44214c5451118bbcc1e87d7ae3a94af152f1afe9cc1eb2e6f11f31706f1e2e1692bcfeb623babbba5352f09a842b12edf3f6ac8fb72f1b0f08bdc5c0a53a770dc2f21dcb5dc67bcbb23379e104d39665593af31d022820dfec85cec7cdcdaff6d88bf895e79414ac019526fb36d0c859151184c261decbed9f717ff55d046aae76ff5dc42289281c3eaf7342dfe04f68563d569fe1c15254f2e7d9217b2f480559307d88208c78efb7b9c1cdadbd76f82579b33d0146745251ab63506c70f399e29a1f9b106af1b2ec5383c05d8d5c3c18ebf753e995ee948fea6cef3fff03a9d355d1a50f4620a6292e2e12532b0d2c9ff767c1b0de9c6ff9774b48585ca116fa91a49397e6a937a1844bf2372d32da3569f8049c2d400bcde500375ae5a71660430b7344ef67b2203adcbf74adab3d5ff5d1c259ed9330e9b2dbde810f286bf2aa3344fe2afc7062b13ac3d31955b89ad78bd192cf6fd8cf51bcf1df3267b580f93d90a8059e027a84e27b02fb08809a68b7bbac2b5202c0e277dc1f7bc3ce1dd9071706b0773f402312ae155c39c71fe08c234dcc4799410fd109a569c32f12660dc5ac5651c146d0cd27ea1773f36389ca82317a26236eb14bdffb5361575e20f189854e213f17283563f952beba507dafc022d1ac37e934c8d342074554d18048a91d95fd83365c7c360fda1c4e560d88f6e8b2b8aa416c2960df6b8933eb4eb7eb876349254cd9cfa3c00bcfd639ce07dbf49dc0357271a6ee043928f3d0e57c86753d62b8aa302013cc80e8071b7346894b7a0bee4a2c71dbb458ee02045b177cfc22137e5db57985848d3537ce41bc88f8d952282c19c0899e9dd499dae72bdce31d8c31c04dcba09b2a24b9a62fe209af5aeb9022acf5519a31119b3c991eda7568e6a554b17dfb083269b6c5ca68be4721bf80fd05e4b7e88d6afcb93cace9eac998facdbaf0d5dc3cce1d6905830feecd353d4714989af5990e4b7f5c1fb217452728b995ad81afc3ac7669e2e35268513cc0b0961e9367630135b9ae41d24a4aeeebe75d76a7b3926f9b922720296b70eaf06a0f7df86557df767fd396a98361a26f63033ad71d5664aead9f8cb831fcb69bd1b0293c14b3a5b27059691846e64fad89f532047c607541dec839661b63d2f2a2161f5f12cf2abc5dec1956d06b20351c793fc506c1848ef96c1dc85b99910df6a8fed2e125a32fc973d5536fa110f4ac770cf8b7d1770a02d3ebc70923295a17c1852685424085fcb1a326f8160d0ccbfe6b6aff456f71900e5c78c80898d0573090ff0b309d5c60f90f66e94391213137c9b7d13e4505d3440d3eb959a1674b89acd00843f14e16a7962c158dd0b0c129909b96fe19a8b33617ccdd6948e70a3072cdfc7392ca4f70fae902df917ce4c34433f0a12a201546d28f9e91e42ffab8661c1177c182029fedcc80bc3130c03836680fd84b42ff4956c724a9841021aee2352a7eadc2ce9e291107533bcdc40613228fd36df52f20198be9f31e38e251c9740bc2b546c2277257fb18e7084e1f4c2e3a2f1e80cae6e30108891562a246d91f308ff470dcb057a52ba5bfdde6c64cbedeb1fbddfed14fcaf030d7826653661031dfc448ef7f5960056cdbd38a37d451a76e4a5cf8433befa0040458393cd91fc2ed4774cda88a589adc87f586d1b5148c41686c9d1c81083f3c6bbe3bf2c06854a6d81fecfe21f15b468b62b4172947fa2cfd987ef8b14587001df25cb77b2acca89a5541d2118d34c30f9c99872c7bff66295895b72e410bc15f8e81c87a2dc05a9de45dc12fbc58368bb2eaeb8e4258df942b8785afdb9ab6f9784558d32c011d24ca9f1ffc6d0d4bd13ea6cf2f92f9d6f416a5b2f091624314ec63e29a7a85900927a371f263d6d8de059659f97c067b5e476ee250ddc7e6095117cc17b28619a59d5360906663aaf97965dc1df675943ea110686989a1e140908d0f02617283636c3668ea95b040dd60789858e371a720a21128e574c4d75f7eeaa997e720d22ba84811990b5bc13a21d27801e0e0477b41e0ea70e5f22bea7e9e84a3973a2f7132df7270f1a95030183647eb7739ccb0daf2d8c62b1485a0a2233a3daf8a3bb1f949221faa5b950de9f0c7217b703c1a2a649e4ada96cc9367cc298637ab9dc28a51a41e18859ce391c54b804c6b066070286b00e916f99ed73b96bb9686492eabd31db1c4696a67bba2d5f36a2b1ac6d700b6ebd9d75533dc6e199c2c068ba04487a09bf370f4bff8afa8168a1bb0b01f6d750091f5bb07d9befc750af4c8fd60e75bafd199f916c98a4e34278bd15ca5e7a927b40fe8bb1a284812487523570d40397a70dcddae0497a1329235df78928d4ff4d388cf79bfb2420c64a627eee2ca837fe18dace0ad9d36d8d1163f53f58e2b13a2957124dc68ab97326fd5b858f1388f9c8bb109d044eb438148360c6f032e3d602181d3966c9d581d56fd159f5a4c39cc97f0582adaf78be51ed498a93d8511c0af60ed4625cae6e469b8b0e7d3eff6e4b61dc21938823e127913095fa7d3ac5e54f15b1f8386b3d5f243254d6f4a5c5c30a15c53ee65deb6c383e1ada3846238c5865cc3731effc012c57008aa12441f9de7f1cc639b949b922fe435fcb5e1a6b4d08241c12ad5d6e5b8940ee19d3158c8806df2c44d3fcdea89f485e59637498893715b225e7a3644af9cfbc4e3173400e12662e957db0b1e6a39fdbf30cbddb4f0c911e7311bb8223e071b0480b3caac66d50f18acbf13df046f5cc41a6047c796fef77ab5e95eeabbdda7551f92764d8eea8ab886a20dc6ad77c9c15ac1317dcb4197e0464cb504aca343d7edc3eea1fee14c2fc480cac477a026c840c0fea4f66e42d471deacb8497ce1bbd7916d81e982c0be27aac72ce4f991d244d5e810a09b609edc1a7942ea45e8d217c456ae850a92666efdeca2a21e1825367570e1d0447f8d2c1568f2747d2bd0c22ebecdd26f4d8b949970fd2df0d5a6f5ecdaec314ebef6ead33f3855ba35da1acd67439861488d417641dc4529bd79e18647526657a9897fe3c5161834c7a3975aa0b3ef4e143016c8a6510b879cb2afbdef8a33bd957b8684e197bfaec19d5a233cd174e879bafdbc3769d35d74900411a886b440930c8eb6b3dcdd6456b873ecfa40de608846afdc74304761c4517dd3a25f09a812d2cbce17301ebbb7033bcb9d0e2bd0d93813d982957d3f3092cbc14cbd1abe948e3b2926f2b35a6aa947214eaa84a40c79ac43f5ec0b3f0b0dce7926dea6c5ea6b5659199de43debc962e0609a1a71df4ce25e62af4f5a49171078e6d7821c772fbf8b54eab74179645f020d613afb1e771911333c8a1ebab0e183dd1fbb18951772790228ad14c3c49ddaa3f7af4b874134fc4c5342b46209877822589fb7e5ce4017688402929808d53db7e9aeb9450f6736a649f8c6d84c05d0202710b3c13230d7db6bc21331aff6cf5ad67b0021300f2217117bf5ab767e01d80c53b5aaa38fd3a2f0fee13f12c25dd929f3a604e04b5ba13cd0634aecf0bd748db13a83e6c0e62123cc4325a768b2d483866b926aadd6ec816a1b7ae8ce197f8ed83db70b54cbfbc19c9843b046966db39229d7404d4f082b61101e850a8ee9e5a87c1fc2630b2eb1c9b2952a9f45c7b4c8307e700e6420c714aefe468a945d2bdcb252269997630f53923237dafe19e5b9ce4b3cb08950cc8add0ab9255da604cf7ccf8f55c5c97db96bd991414e04c7a17bd7bcc13aa5e7223ee7089985ea449310e9635bad3f36992a877acedd27a763311e54cb2cb90aa31bb8ce7d461f872d2d477224cf281bc623969b7ac49ef2975d3e56cca1d4085b97ba269cd1bc8b253af60b044f5a6ccbb1cfc644e645716e9c43eb1ad0b0e819bc5a20990aaf40809c2f84c41172ba709706e247907063dcc66b9aaf66372daa69f6d565583c07411be619ef8e6eac302bb8d50b0aeaf37751f7b4c88b35cf1f112947c2ef1c21f3263665f7012be68fb7c8927104cfc84631c2cf9fd73b75128d0312fe41a4d05ddb02493e26943e83ccb13a1128a389fbb5ea65ff1b2de04e8325fef827bb34a34d5d8665d67c0326f48752db74082ba8dcf67bd24bb1d5bcc578a80b682dab8d8ce72e16dbd78a240d074ae8f92005b6735ccbc2be5d8e91e24197f2b4b4aac3da60dde02016704c1c7f17d08aa759834ca46084580bb23980d4781e58e35a0b2d75b1cfcfc9811c1f5c57003fc86cd6ad7b2b0850a39c212ebb563f673ee428546a83028255b37bb1c4305e50f45efac6ab96ba6b5a6a8049e30cb267b881179ef89c718ad2f940dc19eda5bf2fb808624cf63b06a0e9a1dca236d6e4173ea921f587886a7b33b05e23eca59c1810c8f70781c1983efc4adaa4b850e6928002c91883b5c0fa08b838356cc5d3c52a3bf046b0202ba8ff59fdb47f5391b67bc7b3c13f31fbdcca7892346b9466da4d5e7b8eabd66e02dd13457a91e0c559b1a7c89e598700fc7a8751f017eed21df6db0cfcf69236a3ec38235392de4625fcb7089af56325cdb020c31a1c950c996e780e16106730eca14e57d5a575778e77d652dcfa264ed6c51e131216c7222085d6e2e937eb74b6ecc00427f5ddeb845c7cc011d7d947873cc7a9a88934660ea21546a835b0bc8df8ce348041767dd7228c4138d065e386208e17e45ed0515a4fde55f5c53d46922d91fa02b5be614b54f3fe6d504696736c9b71a2e71c1b5585daec0c0f58385395ef0b7ebdf654dc98acf77ccc933352af9451bceb49c04a6e476e63c7eaeceea572ae0d9ac401da06462209353f8ed8d92a11d2c08a3e852dcdbf6789ca66cafcdca2daf75ab188cd7494e086ac02559294dcd8ec95af8d9fe269973e31c2760f088b64ef5993a27ad1de553b1c267426b8e95d65ba81d021b2a26d9a1191051c3445c1134351403dbcd6957be7e3341296d6a9b1197ea23753ccceaf46d823928b96bc1d7ef4cdad11bd100012c2fedbf9c84e10effdf13acfd98cd39536d5181f09409b3de810d27c75248856c62cda154d4c51cb1ed65b6e31a1bc287196c0a1628f02b7b4ab657c5406c49407c8af4ded5103f487cd22016e2a76a0e933949a56c7e14e5b007ed945700f92adebcf47b33cdd0deab3d75f588e3737ed9ed3f8785d6f520242610d3f0ad551bce62e818b9cb25af4bae3699218443cdf7879b5cd48a9a4a17d2f4ec347eff446997b5a008e7f9372c150c57b16a21eeafe9f6c399528d227309069faec4dff2bcb2f473df729c21ebedd6b178e7667c425ce246c69b1f771fd97d473e19e95ee5b7eae69b156791e9f9eb84b816be9e9c1485710678976722f4a00f22655b04253aae47baeaaef9beaa9b90eb3a237b6ae37fe4d5a2d5615f9a8426acff0f863e7f5dc3a25d6a7d75789e093868cb942687b31ebf2c1c95a95acad4a2bc80afe37b4d4b4795724d7398148668bf1394bf388b374e32fef79e34ae3124603bd2826fa3e42dffb485dfd15c4827a20cb20a6b903c8f4b25ae50c3f189828f41abe0e2deadcd62ec1ad5120b70205471ce3ea782984405a14a548ade2d7e35fdaaf4b14eb57b465c5fa27581c5bd39f2847dc8887d9bd84d4700b6e484147a9d6719992f02924dfe91d9677fecdc1d63aedd13dde54d8bc2b9d250400754dce04409d50dff72df4ef7c9fca573cfcac0560ea372089600b0702eb133399d12e6e3e7b56252ffcfd39041211b39730571826515b35496a083d9116bc870f49d0c9acdd66205cb215af2637ac4bb004e081fd801c3b9d4d6928e8141360760e6e6fee54fe51da9c0b3f6b91e9797cfa72a02e91c24b90d1f74cf2854a3f58679db43826ed510284d32ce0b3b3236fe6db3a924146037fde1de459307a8be90bd1e7f8fabc074f19c0d030407a70ba545165b17fb0907ade8ee26c12ce75bdc7994ee49237667b8835e1e2c84a1c0c4d84490d44e66ab33803c1c578019d8c6b654d1417233cc3b6ca6f87476bc7d6797f967444910a4e9977e12b7ea3b708a31293211c53c87a0732b0e5808e9719b989ae7dba521d28a0d2956cacee8e9e2cf1f39edb4437af08f47ec953b08f493bf0196cdee88fba57cf256a947b0ca0e53083e45698992d732c26fb6f82d41685b195ef7a01d38a0da987acbe0c1f2d4f99cfdc7c2f85ecf3c787c787cc5ee1e2f8573037ac0eb964137e6fb691db9fd2aab4f3d9763df93ac093379c3e58f3fb9e54626f253aac30dbe92689f61df25fde3f22881d80295585f43ce2100d1275c4134f742ba7fa11e21a66ddedc59c825f509d65536409d103661cee5a3500af00e4416d45ab4aaa77aec42dab5d620f0aac6f0883294aaf8060bedb3d8318ac3786f3ce1aeb317610af7bc76003efcb943ea5a22f6ee17c5a24334c35a6bd50bff67d9945d708d41cd7f89362657a789439fa91a5aad28d66ccbdc4c84a613d5539d027631ef434dc648a389bf2d6f21161b2ffcf12b39a41ecbbe29349ce771f1d542134ed71e99eca4c006ff721e48af1334059f8017efd26267716481cd954fab9149cb8e5f8fbc973dbbb6630105037d3875cdc0ab79e1790816a290cf7ebd1064e0fbfa8017852aaf3234ea2c3c54a31c99081edc1df0120d2d5a621d3e0dcbf3ec3bacd937e6e085043871c80e5b3684dc5064406514eac4f566abf0e238ee15fb1e435011ef6eb662eb39c9e63390b2fbe48301dd7586177501a433e4a9cedb60c02076794d9903966268ee9943080b0d66905f14741eff6371b58413145bd5532a94c705fc73601c1f36d569ea388b400c1603db5ffa043af6eb2fec1a27ee0fc58e2d54e2c45be6155b6c78b6a50f36326d4bfa364acf5ff726c568986a6440a1dab2b7b6c6a5f9a9cece10a4039a8e9aef5a399844ada9788b1aa9207ab855d8299d31469d21505b4750dcdf2d5fe4c4cc0d977c51c246a04a12029bd16bc161734d9dc09ac0c8d0a0e3c7acf279fe73c32d52874c22cc739d35459b4c4329d1a8f97498bc02cf202f5bba2bd58eec3afae941b45f6d5ae256914d816ea145b7f6a5785c0043d2af63d6ac31667589dab1ff69455922abf21af3bf2c6a830696a780b06fde15895437a227d6c250a3636588d5cd0bca146799c53fce3a4ac57d07ae80cad1eddbcd39eb791ceab11ba3b7b4fd77bb69137c1a36e3be010ce604a6cd8eb7a2c4ba1117ebdab31ab0109460763360d0782427902ed4d7e386adf959de56e1f2b0df8ef3d00942e28d5b3ec9a064fafb8a00657ecabd788da7f80f283127b9217ad40120145e48d995130300fffa0d12e9b5f67f2ca469d1a381c41809d3e01fdb81741f7b381dcbde5cec9b175c598eb3f565c822e5acff05b8d5925d19f74743123e91e5e468cf51e2b9e988cbe7003d7750edc49b55cd1f5a6a9a7a95e8f20b13bde35ba4cab9d47f16636096e16416f6737ee283bc965761846ad97493e49b57862e57485238f39b2572c570d27d0b6feb6175bfe3caae8c504c9d6fb6420ff2962f9810664306ab29cd7cc36b8fc75477ce2c146732e5cf5ef3c9945c3e2e444d45f06a8460fce16906743304df27c66e44fc85999e7b70311ae9b3dc7466ea9d063961dce2f0fd4e586e4265d16632850306e4652845a7eff5df9cd86b0799474ae8b4e5f3dda40e03038111bd5c71bf211c2e8626d95a913065d2ce69090f0152e7d3496917e5ff1002302ebf7fc2a8397803a2721c8027af52de130f886dc423d8d6e9378da0a83fcbe55ea4f0cbad494b165f21253a0c472adf69085088ceb1ba93c8a5b1d4267831e6e7ab38bb5ddff5e786268b35e253f13121a22cf79757469f763694db24b1bd50b0b6a11ef4cb63e294a562d5441ef75e3cd53c2b9f471ba18572b6e987398e51bf23acf259377d197f1798be91df35c8c3bf6276c84e7a5d8adcbcb0714e6d1efd7eda106f40f52cc517779388f9b6e4112a587c0e106cd347fa41eee5b9e0a6cfa698de746245f79c17a86df4fcd9392453bd237c608c13df1633e96fa4f34758318e83a37e3e96c5f2e9d24adb81cb23d6776d89aafbcf4946377dbb0763c6b3368d20af2037cfc6d017113fdd66e432df9f0eb68832caf62fcd4b49c8044dc99d1feddc9ed14154813f8cd8d9578516d978f1fbb1a783eff434283b0c4137e242be5707eb5614756c3785ec205c2206b32cbccad91803b3548367d109a05abfe5a782bfca4ce39e8bff6a6d81cbb4a803d8dfa0daafcca1e6981cbedceade5e7a4c9d0953d2617ea4dd117401df6743ca476ae5a4ec47d35386af120266272cdaa5d5f5aad236f3e23e312b5ac2f0f388d6604eb6994755c8a29d164e7a89511c9a43dd83c0509df676922b8319a6f8cfa93f0e1c72ac4a92b2d23b61b034c8fba824f19884e346b4e592ed39494f757685dbc9a3d8b2f7c2d442e8cf0e86aa5bacd5b28620955db4c6788894cb404b2a212a36d88204a2c7cd5569ae1fccc599021411bd7c97e33bd7bd311964ecb8d1265738c553c74532353d8fdc6a6932634b382307e03daac94ec55890ef0f90eb51bfa9ffceaf8d8d423695fe607ae18685d4e642dcba85cfd4ab1723e7b36a38437bb68891262b1c3c979a39772a5998df7628ebf10efdc7209463e9ac43d6bef30b4eb3e79b172088f399b5f8b7128c75a53adb9c627e5e8978f3133397c949c24d3d3c3a586d88cd62e2d8ab83a7a4a7db3ba2a92dfcc89de6bc0daca76e9d38298af92555d344d00ddba9d4d8ca95b1f2668b25f1c3e35154b1612a73f42b6260736bf60fcff37566e15a4836ce5f96e51cbec0adca6f566d3c9fb31fb102c7aaf62f59788f9f93ac22794b8af6e3f8958c7cc01e2c5b35c24232d7441072cc8e84adc14bbe172537623460cd1e3754d9c5675c19ca2f04701911a79e4fb9d0d4d32ed73973e236f9dccc6792462e0bf0dfe1bf958f949e8203fcd2935a70854c5d290dc2ea530b2e731b71b1407a26200a97d9f5b75a991570f1be8df3d28acb37c07fd0f321ff5b90b5118e9695060af6a4d86d075ea67513e5d7ff7a4f39407e52df4fc6f1c66a82a37de37d70dc82077a2fc8e45ce33af4be8d5397808448b5eb7f5b1484e55cb396dc0b11bb3a317d6d6a93fab066540fab11289301f0a79742c309455a8273572788575eaa01681b5592e9e20e3490b1a44b4bcfa4cfe5aba60626667d0c7cbba729142c4b46a52eb68ff76f0631bf2f4c10345a901306a20f291aa0ef3d61340277903fc8a7be17098117f093aa1270ab73d633a4032e8dae1a53dcae71fd4f27a841e9ec8f935b03b434ee3a5acf9ea80cb2bc674842c961e6625d4ce9f82023c9a82c6c949709c9c0e10eb2104c47e7f82a8276c15ee56e5f1f27ec9828f1db6af0f14f1abdd327fe1a9a41f747fc7fb4a279e854bffac55455ea59954c637450b985f0142f834b0d650fabaced8e6a56d82bb0ec930aa8a04ae510f48d646bd8e6fc66f6ad34a6fa6d22351949365feab2ba14c688f564f881c473a3f019f85233b518a73b7323b54167dec385969abf51a120e74e9455adf062af6127696d37f2e0677ffb8844d3f2ff0463b87a585e97b164600a980a8c534c4f040d690414eada1c928981d7f0ecfe0243eec26e766bcba2392b2a0d19510b660a9b6cb8d24225da891fdd5e4be4c3330bbe8cf2375944a19785b2b47c43d481d68d38ea32f396b50cd4bf997012bd831f3c3af767ea1ae8eb1934cb058f0833f97270a8a51661e75096b64178294e3c6ca14a9969aaaad213eddcaa51720cd13bc40464120ac085e93491aa6ad3ea88dba9394617ab3a0b4c7158811de7b81aca1ff8f02ba74241d0f72ad4ae57958e36757f22f9dcc987323e7da477ed9f1190b9fe47ee7157c02fcd2dcdc20fe06af8c7d5e1f7dc72fe69158e52737c332e395629047e2cc27da2fec8c41e825d55ea55d5f6b0cf7364b025d7079", 0x2000, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=ANY=[@ANYBLOB='P\x00\x00\x00\x00#\x00\x00\b\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0})

2.111184617s ago: executing program 0 (id=1388):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, 0x0, &(0x7f0000000100))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}]}, 0x44}}, 0x8000)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010328bd"], 0x28}}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x23, 0x2)
r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r3, 0x80089203, 0x2000000069b6a)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000000)={0x0, 0x1012, 0x0, @discrete={0x0, 0x8}})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800439bc253f8e5ea27"], 0x0)
r5 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x104, 0x35}, 0x18)
ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000180))
syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)

1.887151882s ago: executing program 3 (id=1389):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000005000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})

1.754126884s ago: executing program 3 (id=1390):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32])
syz_usb_connect(0x0, 0x43, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406000005240200000d240f"], 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)

1.580721523s ago: executing program 1 (id=1391):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x8, &(0x7f0000000200), 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
io_setup(0x6, &(0x7f0000001380)=<r5=>0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x82000, 0x0)
io_submit(r5, 0x2, &(0x7f0000000380)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x8, r4, &(0x7f0000000140)="b0b6fd2d9fecd6f75c9dde797cb564552497a6846488a981ab815d876d4267798ecd2065a07069ebaa1e0ad94ea1bf56b953fea85b4c061631990292e5416644c82f71d13e3937aefa8e94831a50aff9dda58f1735da30fc9d7e8c350a924e8cfc4c865a68df8223fb0ea8a2460d4f05bffeedfdf9ec16bd8838d208f54bbdbcaa28cbe4", 0x84, 0x4, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x3, r6, &(0x7f0000000300)="94a781e46294705a437b9a31", 0xc, 0x3, 0x0, 0x2}])
io_submit(r5, 0x3, &(0x7f0000000640)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfff, r4, &(0x7f0000000080)='B', 0x1, 0x4}, 0x0, 0x0])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000c40)={0x1, 0x0, [{0x8f}]})

1.085276661s ago: executing program 2 (id=1392):
fsopen(&(0x7f0000000340)='overlay\x00', 0x1)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00')
ftruncate(r0, 0x7fffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x1, 0x4)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00)
io_submit(0x0, 0x0, &(0x7f0000000800))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6)
close(r2)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x40000008})
poll(&(0x7f0000000000)=[{r4, 0x9000}], 0x1, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffa9, r6, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x0, 0xa, 0xac, {0xac, 0x6, "abc22720873de8afd3877f7656aa7df34f2d98afcb1785e3bb4ebacd9cca45b1edaa8bffdf75e425b38a4305e80823b4027d748d12e4b73ce49e50aba093f5d1084addcbbe3593d93556ce569cb431588ed20a415f659964a28614e135b6c81051ecdc32fff6eddff997cb67049000610e25b3345a2d2e1424a755aeba10f830de7edf308318fd11b7a782ab63e2172a2ad680918fd92cbbf07d536863a0fce89a94bba770447065c0ed"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f0000000640)={0x40, 0x13, 0xa6, "5ece12141aa1bb1d2d677eb7101f8f443737a01f51e39d18fc92f4fd27436238bd365af83529c0d5b5c29ea0ee2fb3df2ccea8a3ae9e7417d8497071fbe39a523c732033b4cff0403e480e27b010e2528da09c5fec8cb28f61072cbeed7e1f9b3840d7e1f3361aa842cf543c542225bc45af1bc69f8447e61d52fa3dd4d0a030b835fc88e3c8614fe81a75aa3530eb20e80b4dc9ca326236f8ad105010930b3d0431b28a015d"}, 0x0, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x6, 0x1000, 0x6, 0x74, 0xe, 0x4, 0x3b8, 0x76c, 0x5, 0x3, 0x2, 0x6}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000880)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000900)={0x20, 0x89, 0x2, 0x1}})
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r7, 0xc0105b08, &(0x7f0000000040))

783.624014ms ago: executing program 0 (id=1393):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x12000000, 0x0, 0x2004d808}, 0x0)

777.960522ms ago: executing program 0 (id=1394):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x8e, 0x0, 0x1, 0x3, 0x6, 0x0, 0x0, 0x63, 0xfd, 0x8, 0x1, 0xfd, 0x3}, 0xe)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffb, @mcast2, 0x7}, 0x1c)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @remote}}}, 0x32)
sendmsg$unix(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)}], 0x1, &(0x7f0000000e00), 0x0, 0x10}, 0xa8d1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x100000000)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3)
shutdown(r0, 0x1)

521.664186ms ago: executing program 1 (id=1395):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a00118031f9e05e2f606cfc31269b62afde307855d0cf94ce05dc7224e5479795b50d90"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0xe703000000000000)

427.094656ms ago: executing program 3 (id=1396):
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@random="2c2a160f3a88718e4e64bf56f99939c456744aa59c0ac4", 0x17, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "2130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000000), 0x80000001, 0x180)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000100)=0x4, 0x4)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="130000001a0001000600000003dcdf2502"], 0x28}, 0x1, 0x0, 0x0, 0x8004095}, 0x4044940)

371.370218ms ago: executing program 2 (id=1397):
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x3, 0x3cf281)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r2)
r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
io_setup(0x8, &(0x7f0000004200)=<r4=>0x0)
io_submit(r4, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r3, 0x0}])
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}, 0x1, 0x0, 0x0, 0x4075}, 0xc800)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x68}}, 0x0)
timer_create(0xfe44b783c3560b5e, 0x0, &(0x7f0000001800))
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x20003214, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000"], 0x0)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000040)={&(0x7f00000019c0)=[{0x3, 0x0, 0x0, 0x0}, {0xc, 0x201, 0x0, 0x0}, {0xc, 0x2401, 0x50, &(0x7f0000000900)="30dc48cb46e4208a59b26684ac5005119c2e6dfd62832df910de4fc14cee9811bf98ce9ae05613e5a5075d9f488f08a382186f070406023c5e7ba0f4a501cc464894ce9a53acd85de44063553342a2b2"}], 0x3})
ioctl$EVIOCRMFF(r5, 0x40085507, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)

0s ago: executing program 4 (id=1398):
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x3, 0x3cf281)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r2)
r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
io_setup(0x8, &(0x7f0000004200)=<r4=>0x0)
io_submit(r4, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r3, 0x0}])
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}, 0x1, 0x0, 0x0, 0x4075}, 0xc800)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x68}}, 0x0)
timer_create(0xfe44b783c3560b5e, 0x0, &(0x7f0000001800))
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x20003214, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000"], 0x0)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000040)={&(0x7f00000019c0)=[{0x3, 0x0, 0x0, 0x0}, {0xc, 0x201, 0x0, 0x0}, {0xc, 0x2401, 0x50, &(0x7f0000000900)="30dc48cb46e4208a59b26684ac5005119c2e6dfd62832df910de4fc14cee9811bf98ce9ae05613e5a5075d9f488f08a382186f070406023c5e7ba0f4a501cc464894ce9a53acd85de44063553342a2b2"}], 0x3})
ioctl$EVIOCRMFF(r5, 0x40085507, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)

kernel console output (not intermixed with test programs):

3][ T8613] IPVS: using max 50 ests per chain, 120000 per kthread
[  528.957996][ T5757] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  529.147998][ T5757] usb 4-1: Using ep0 maxpacket: 32
[  529.160102][ T5757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  529.171817][ T5757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  529.195318][ T5757] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  529.216398][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.251651][ T5757] usb 4-1: config 0 descriptor??
[  529.270291][ T5757] hub 4-1:0.0: USB hub found
[  529.460275][ T8622] IPv6: addrconf: prefix option has invalid lifetime
[  529.469619][ T5757] hub 4-1:0.0: 26 ports detected
[  529.484023][ T5757] hub 4-1:0.0: insufficient power available to use all downstream ports
[  529.671210][ T8611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  529.688593][ T8611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.720639][ T8611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  529.746094][ T8611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.776692][ T5757] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  529.805524][ T5757] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  529.845019][ T5757] usbhid 4-1:0.0: can't add hid device: -71
[  529.861657][ T5757] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  529.934750][ T5757] usb 4-1: USB disconnect, device number 40
[  529.987688][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.816'.
[  530.534884][ T8637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.818'.
[  530.570324][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.818'.
[  530.635874][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.818'.
[  530.660190][ T8641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  530.699716][ T8641] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  530.771528][ T8643] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  530.871665][ T8647] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  531.088403][ T5743] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  531.253068][ T5743] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  531.281400][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.304266][ T5743] usb 4-1: Product: syz
[  531.322629][ T5743] usb 4-1: Manufacturer: syz
[  531.355779][ T5743] usb 4-1: SerialNumber: syz
[  531.376656][ T8651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.403481][ T8651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  531.858530][ T8654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.824'.
[  532.061632][ T5743] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  532.111663][ T5743] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  532.165294][ T5743] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  532.233400][ T8667] usb usb7: usbfs: process 8667 (syz.3.821) did not claim interface 0 before use
[  532.274673][ T5743] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  532.432756][ T8665] could not allocate digest TFM handle crct10dif
[  532.812917][ T8680] program syz.2.828 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  532.935687][ T5743] usb 4-1: USB disconnect, device number 41
[  533.695511][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'.
[  534.418050][   T29] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  534.598076][   T29] usb 1-1: Using ep0 maxpacket: 32
[  534.613565][   T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  534.643418][   T29] usb 1-1: config 0 has no interfaces?
[  534.655711][   T29] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d
[  534.665083][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.689761][   T29] usb 1-1: config 0 descriptor??
[  534.708172][ T5743] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  534.768030][ T5674] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  534.868957][ T5743] usb 4-1: Using ep0 maxpacket: 32
[  534.880704][ T5743] usb 4-1: config 4 has an invalid interface number: 228 but max is 0
[  534.901427][ T5743] usb 4-1: config 4 has no interface number 0
[  534.918423][ T5743] usb 4-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30
[  534.948679][ T5743] usb 4-1: config 4 interface 228 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0
[  534.961864][ T5674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  534.978060][ T5743] usb 4-1: config 4 interface 228 altsetting 12 bulk endpoint 0x7 has invalid maxpacket 0
[  534.997932][ T5674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  535.008372][ T5743] usb 4-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  535.028147][ T5674] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  535.052559][ T5674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.061157][ T5743] usb 4-1: config 4 interface 228 has no altsetting 0
[  535.065157][ T5735] usb 1-1: USB disconnect, device number 48
[  535.088311][ T5743] usb 4-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  535.099553][ T5674] usb 2-1: config 0 descriptor??
[  535.115292][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.146042][ T5743] usb 4-1: Product: syz
[  535.156185][ T5743] usb 4-1: Manufacturer: syz
[  535.176461][ T5743] usb 4-1: SerialNumber: syz
[  535.542536][ T5674] hid_parser_main: 26 callbacks suppressed
[  535.542560][ T5674] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  535.557516][ T5674] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  535.572972][ T5674] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  535.638347][ T8709] IPv6: addrconf: prefix option has invalid lifetime
[  535.669623][ T5674] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  535.700640][ T5674] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  535.720828][ T5674] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  535.749631][ T5674] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  535.836593][ T5674] isku 0003:1E7D:319C.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0
[  535.869912][ T5674] isku 0003:1E7D:319C.0010: couldn't init struct isku_device
[  535.902002][ T5674] isku 0003:1E7D:319C.0010: couldn't install keyboard
[  535.947382][ T5674] isku 0003:1E7D:319C.0010: probe with driver isku failed with error -71
[  536.000689][ T5674] usb 2-1: USB disconnect, device number 50
[  536.111899][ T8712] fido_id[8712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  536.159848][ T5743] usb 4-1: USB disconnect, device number 42
[  536.231211][ T5669] udevd[5669]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  536.625366][ T8730] netlink: 388 bytes leftover after parsing attributes in process `syz.0.841'.
[  536.818055][ T5735] usb 2-1: new full-speed USB device number 51 using dummy_hcd
[  536.980993][ T5735] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  537.012236][ T5735] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  537.051657][ T5735] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  537.076966][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.129573][ T5735] usbtmc 2-1:16.0: bulk endpoints not found
[  537.400108][ T8737] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  537.600363][ T8743] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  537.686564][ T8743] netlink: 'syz.2.846': attribute type 10 has an invalid length.
[  539.116867][ T8770] fuse: fd is not a fuse device
[  539.430743][ T8788] random: crng reseeded on system resumption
[  539.492111][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.861'.
[  539.591275][   T29] usb 2-1: USB disconnect, device number 51
[  540.081692][ T8808] binder: 8806:8808 unknown command 0
[  540.106522][ T8808] binder: 8806:8808 ioctl c0306201 200000004a40 returned -22
[  540.193766][ T8817] kvm: pic: non byte read
[  540.209246][ T8817] kvm: pic: non byte read
[  540.226570][ T8817] kvm: pic: non byte write
[  540.252422][ T8817] kvm: pic: non byte write
[  540.495457][ T8833] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  540.562813][ T8833] xt_NFQUEUE: number of total queues is 0
[  540.573146][   T30] kauditd_printk_skb: 220 callbacks suppressed
[  540.573165][   T30] audit: type=1326 audit(1782972448.339:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.2.872" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c3c99de59 code=0x0
[  541.260910][ T8858] netlink: 388 bytes leftover after parsing attributes in process `syz.1.878'.
[  541.351718][ T5674] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  541.508651][ T5674] usb 4-1: Using ep0 maxpacket: 32
[  541.529856][ T5674] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  541.558574][ T5674] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  541.597946][ T5674] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  541.620605][ T5674] usb 4-1: config 1 has no interface number 0
[  541.654867][ T5674] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  541.702010][ T5674] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  541.757327][ T5674] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  541.799792][ T8864] netlink: 388 bytes leftover after parsing attributes in process `syz.0.884'.
[  541.812678][ T5674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.825770][ T8865] IPv6: addrconf: prefix option has invalid lifetime
[  541.878616][ T5674] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  542.071467][ T5674] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  542.150624][ T8867] ������: renamed from vlan0 (while UP)
[  542.181398][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'.
[  542.269768][ T8854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.313766][ T8854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.364766][ T8854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.403998][ T8854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.715137][ T5674] usb 4-1: USB disconnect, device number 43
[  542.726378][ T8878] tipc: Failed to remove unknown binding: 66,1,1/1:751536423/751536425
[  542.751392][ T5674] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  542.875193][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.888'.
[  543.175159][ T8887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.890'.
[  543.454593][ T8892] binder: 8891:8892 unknown command 1077961494
[  543.473778][ T8892] binder: 8891:8892 ioctl c0306201 200000004a40 returned -22
[  543.764002][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.897'.
[  543.820472][ T8909] bond1: option updelay: invalid value (18446744073709551615)
[  543.829881][ T8909] bond1: option updelay: allowed values 0 - 2147483647
[  543.848082][ T8909] bond1 (unregistering): Released all slaves
[  544.016876][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'.
[  544.245298][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'.
[  544.262915][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'.
[  544.582511][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  544.605464][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.818408][ T8941] __nla_validate_parse: 2 callbacks suppressed
[  544.818430][ T8941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.910'.
[  544.870710][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.917'.
[  544.919328][ T5674] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  545.090165][ T5674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  545.101859][ T5674] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  545.111732][ T5674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.126529][ T5674] usb 2-1: config 0 descriptor??
[  545.345554][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  545.368465][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  546.161841][   T29] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  546.327956][   T29] usb 1-1: Using ep0 maxpacket: 16
[  546.338600][   T29] usb 1-1: unable to get BOS descriptor or descriptor too short
[  546.355153][   T29] usb 1-1: config 9 has no interfaces?
[  546.361682][   T29] usb 1-1: language id specifier not provided by device, defaulting to English
[  546.373375][   T29] usb 1-1: New USB device found, idVendor=0b05, idProduct=1932, bcdDevice=13.5b
[  546.388991][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.397226][   T29] usb 1-1: Product: syz
[  546.401630][   T29] usb 1-1: Manufacturer: 疤ᨒ﫩ዷ夏⧽ꉺ咲엄쯳쌅酹⮎㖿륋푣陪螭䰩涻l
[  546.411884][   T29] usb 1-1: SerialNumber: syz
[  546.612831][ T8980] IPv6: addrconf: prefix option has invalid lifetime
[  546.645668][ T8983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  546.663957][ T8983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  547.310313][   T29] usb 1-1: USB disconnect, device number 49
[  547.476855][ T8995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  547.514715][ T8995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  547.653609][ T5674] usbhid 2-1:0.0: can't add hid device: -71
[  547.666229][ T5674] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  547.686860][ T5674] usb 2-1: USB disconnect, device number 52
[  547.769420][ T5757] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  547.939961][ T5757] usb 4-1: config 0 has an invalid interface number: 255 but max is 8
[  547.961342][ T5757] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  547.985868][ T5757] usb 4-1: config 0 has no interface number 0
[  547.998071][ T5757] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  548.027427][ T5757] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  548.058068][ T5757] usb 4-1: config 0 interface 255 has no altsetting 0
[  548.078371][ T9011] netlink: 44 bytes leftover after parsing attributes in process `syz.0.935'.
[  548.091515][ T5757] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  548.113721][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  548.121911][ T5757] usb 4-1: Product: syz
[  548.127954][ T5757] usb 4-1: Manufacturer: syz
[  548.132596][ T5757] usb 4-1: SerialNumber: syz
[  548.145406][ T5757] usb 4-1: config 0 descriptor??
[  548.333225][ T9015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.352673][ T9015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.372741][ T5757] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  548.386599][ T9015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.395927][ T5757] pctv452e: pctv452e_power_ctrl: 1
[  548.395927][ T5757] 
[  548.407045][ T5757] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  548.407045][ T5757] 
[  548.418310][ T9015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.433088][ T5757] dvb-usb: bulk message failed: -22 (5/0)
[  548.449750][ T9015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.467286][ T5757] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  548.479528][ T9015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.504538][ T5757] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  548.513441][ T5735] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  548.521779][ T9015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.542570][ T5757] usb 4-1: USB disconnect, device number 44
[  548.570334][ T9015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.703592][ T5735] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  548.722689][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.744676][ T5735] usb 1-1: Product: syz
[  548.754107][ T5735] usb 1-1: Manufacturer: syz
[  548.764829][ T5735] usb 1-1: SerialNumber: syz
[  548.801620][ T5735] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  548.982417][ T5757] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  549.009123][   T29] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  549.172761][   T29] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9
[  549.191933][   T29] usb 2-1: config 1 interface 0 has no altsetting 0
[  549.232883][   T29] usb 2-1: string descriptor 0 read error: -22
[  549.250534][   T29] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  549.276364][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.465541][ T5674] usb 1-1: USB disconnect, device number 50
[  549.492424][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'.
[  549.553322][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'.
[  549.568695][ T9031] 8021q: adding VLAN 0 to HW filter on device bond1
[  549.596373][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'.
[  549.644934][ T9033] 8021q: adding VLAN 0 to HW filter on device bond0
[  549.668406][ T9033] bond1: (slave bond0): Enslaving as an active interface with a down link
[  549.732117][   T29] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor
[  549.786357][   T29] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0926:3333.0011/input/input13
[  549.951670][   T29] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  550.015116][   T29] usb 2-1: USB disconnect, device number 53
[  550.072101][ T5757] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  550.113976][ T5757] ath9k_htc: Failed to initialize the device
[  550.120636][ T9037] fido_id[9037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  550.151834][ T5674] usb 1-1: ath9k_htc: USB layer deinitialized
[  550.706717][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'.
[  550.761519][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'.
[  551.256238][ T9064] loop5: detected capacity change from 0 to 7
[  551.293358][ T9064] Dev loop5: unable to read RDB block 7
[  551.322499][ T9064]  loop5: unable to read partition table
[  551.330702][ T9064] loop5: partition table beyond EOD, truncated
[  551.348764][ T9064] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  551.551926][ T9068] IPv6: addrconf: prefix option has invalid lifetime
[  551.638035][ T5757] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  551.798044][ T5757] usb 4-1: Using ep0 maxpacket: 16
[  551.825360][ T5757] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.886306][ T5757] usb 4-1: config 0 interface 0 has no altsetting 0
[  551.920034][ T5757] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  551.953216][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.009710][ T5757] usb 4-1: config 0 descriptor??
[  552.277532][ T9078] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  552.467962][ T5757] mcp2221 0003:04D8:00DD.0012: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  552.903301][ T5757] usb 4-1: USB disconnect, device number 45
[  552.958744][ T9082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.994964][ T9082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  553.124067][ T9082] bridge0: port 3(netdevsim0) entered blocking state
[  553.152282][ T9082] bridge0: port 3(netdevsim0) entered disabled state
[  553.165272][ T9082] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  553.196939][ T9082] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  553.216980][ T9082] bridge0: port 3(netdevsim0) entered blocking state
[  553.223788][ T9082] bridge0: port 3(netdevsim0) entered forwarding state
[  553.419013][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'.
[  553.546146][ T9096] netlink: 68 bytes leftover after parsing attributes in process `syz.0.961'.
[  553.598713][ T9100] loop8: detected capacity change from 0 to 7
[  553.623128][ T9100] Dev loop8: unable to read RDB block 7
[  553.645445][ T9100]  loop8: unable to read partition table
[  553.667697][ T9100] loop8: partition table beyond EOD, truncated
[  553.685031][ T9100] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  553.912537][ T9103] IPv6: addrconf: prefix option has invalid lifetime
[  554.868698][ T5735] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  555.051682][ T5735] usb 4-1: Using ep0 maxpacket: 16
[  555.070293][ T5735] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  555.096199][ T5735] usb 4-1: config 0 has no interface number 0
[  555.123424][ T5735] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  555.146082][ T5735] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  555.171781][ T9116] loop5: detected capacity change from 0 to 7
[  555.191696][ T5735] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  555.213019][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.231378][ T9116] Dev loop5: unable to read RDB block 7
[  555.261434][ T5735] usb 4-1: config 0 descriptor??
[  555.271444][ T9116]  loop5: unable to read partition table
[  555.297639][ T9116] loop5: partition table beyond EOD, truncated
[  555.325822][ T9116] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  555.692814][ T5735] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input2
[  555.898281][   T29] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  556.061194][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  556.072983][   T29] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  556.082766][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.101900][   T29] usb 1-1: config 0 descriptor??
[  556.177980][ T5735] usb 2-1: new full-speed USB device number 54 using dummy_hcd
[  556.322039][ T9121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.336388][ T9121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.352334][ T5735] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  556.372862][ T5735] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  556.394218][ T5735] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  556.413783][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.642246][ T5735] usb 2-1: usb_control_msg returned -32
[  556.653105][ T5735] usbtmc 2-1:16.0: can't read capabilities
[  556.959040][ T5735] usb 4-1: reset high-speed USB device number 46 using dummy_hcd
[  557.200788][ T5736] usb 2-1: USB disconnect, device number 54
[  557.207902][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  557.662326][ T5735] usb 4-1: device descriptor read/64, error -71
[  557.833278][ T9133] netlink: 44 bytes leftover after parsing attributes in process `syz.1.974'.
[  557.938394][ T5735] usb 4-1: reset high-speed USB device number 46 using dummy_hcd
[  557.959011][ T5735] usb 4-1: device reset changed ep0 maxpacket size!
[  558.016392][  T808] usb 4-1: USB disconnect, device number 46
[  558.228761][  T808] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  558.243134][ T9139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.252273][ T9139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.391149][  T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  558.412823][ T9139] openvswitch: netlink: Actions may not be safe on all matching packets
[  558.422033][  T808] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  558.438760][  T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.475918][  T808] usb 4-1: config 0 descriptor??
[  558.646777][   T29] usbhid 1-1:0.0: can't add hid device: -71
[  558.672314][   T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  558.714136][   T29] usb 1-1: USB disconnect, device number 51
[  558.718579][  T808] usbhid 4-1:0.0: can't add hid device: -71
[  558.745807][  T808] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  558.795211][  T808] usb 4-1: USB disconnect, device number 47
[  558.825067][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'.
[  559.044929][ T9150] FAULT_INJECTION: forcing a failure.
[  559.044929][ T9150] name failslab, interval 1, probability 0, space 0, times 0
[  559.068059][ T9150] CPU: 0 UID: 0 PID: 9150 Comm: syz.0.979 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  559.068094][ T9150] Tainted: [L]=SOFTLOCKUP
[  559.068101][ T9150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  559.068113][ T9150] Call Trace:
[  559.068122][ T9150]  <TASK>
[  559.068131][ T9150]  dump_stack_lvl+0xe8/0x150
[  559.068164][ T9150]  should_fail_ex+0x40c/0x560
[  559.068206][ T9150]  should_failslab+0xa8/0x100
[  559.068234][ T9150]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  559.068265][ T9150]  ? ep_insert+0x2b8/0x1ac0
[  559.068315][ T9150]  ? ep_insert+0x2b8/0x1ac0
[  559.068346][ T9150]  ep_insert+0x2b8/0x1ac0
[  559.068387][ T9150]  ? __pfx_ep_insert+0x10/0x10
[  559.068411][ T9150]  ? __pfx___mutex_lock+0x10/0x10
[  559.068441][ T9150]  ? rcu_is_watching+0x15/0xb0
[  559.068475][ T9150]  ? security_capable+0xb9/0x2c0
[  559.068514][ T9150]  do_epoll_ctl_file+0x8c2/0xee0
[  559.068550][ T9150]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  559.068578][ T9150]  ? __fget_files+0x3a2/0x420
[  559.068599][ T9150]  ? __fget_files+0x2a/0x420
[  559.068630][ T9150]  __se_sys_epoll_ctl+0x162/0x230
[  559.068659][ T9150]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  559.068689][ T9150]  ? __secure_computing+0xe7/0x2b0
[  559.068715][ T9150]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.068738][ T9150]  do_syscall_64+0x174/0x580
[  559.068768][ T9150]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.068791][ T9150]  ? clear_bhb_loop+0x40/0x90
[  559.068816][ T9150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.068837][ T9150] RIP: 0033:0x7f345bd9de59
[  559.068857][ T9150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  559.068875][ T9150] RSP: 002b:00007f345cc07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  559.068897][ T9150] RAX: ffffffffffffffda RBX: 00007f345c025fa0 RCX: 00007f345bd9de59
[  559.068912][ T9150] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004
[  559.068925][ T9150] RBP: 00007f345cc07090 R08: 0000000000000000 R09: 0000000000000000
[  559.068938][ T9150] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001
[  559.068952][ T9150] R13: 00007f345c026038 R14: 00007f345c025fa0 R15: 00007f345c14fa48
[  559.068986][ T9150]  </TASK>
[  559.570047][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'.
[  559.600116][ T9157] bond2: option mode: unable to set because the bond device is up
[  559.632594][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'.
[  559.641746][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'.
[  559.697444][ T9157] 8021q: adding VLAN 0 to HW filter on device bond0
[  559.707839][ T9157] bond2: (slave bond0): Enslaving as an active interface with a down link
[  559.708109][  T808] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  559.885637][  T808] usb 4-1: Using ep0 maxpacket: 16
[  559.901863][  T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  559.914512][  T808] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  559.926128][  T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.941281][  T808] usb 4-1: config 0 descriptor??
[  560.354260][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  560.371504][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.390474][ T9131] fuse: fd is not a fuse device
[  560.433664][  T808] usbhid 4-1:0.0: can't add hid device: -71
[  560.456571][  T808] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  560.487428][  T808] usb 4-1: USB disconnect, device number 48
[  560.788154][    T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  560.949607][    T9] usb 2-1: Using ep0 maxpacket: 16
[  560.965427][    T9] usb 2-1: config 1 has an invalid descriptor of length 227, skipping remainder of the config
[  560.991765][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  561.014658][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  561.036256][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.053969][    T9] usb 2-1: Product: syz
[  561.062608][    T9] usb 2-1: Manufacturer: syz
[  561.072967][    T9] usb 2-1: SerialNumber: syz
[  561.115212][    T9] usb 2-1: 0:2 : does not exist
[  561.148031][  T808] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  561.311393][  T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  561.334514][  T808] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  561.354745][  T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.379227][  T808] usb 1-1: config 0 descriptor??
[  561.468084][ T5743] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  561.563544][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  561.601271][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  561.623400][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  561.657980][ T5743] usb 4-1: Using ep0 maxpacket: 16
[  561.678983][ T5743] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  561.706660][ T5743] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  561.737626][ T5743] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  561.738988][    T9] usb 2-1: USB disconnect, device number 55
[  561.779723][ T5743] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  561.816137][ T5743] usb 4-1: config 7 interface 0 has no altsetting 0
[  561.835072][ T5743] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  561.863337][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.901964][ T5673] udevd[5673]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  562.330209][ T9179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.372439][ T9179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  562.401324][ T5743] hid (null): unknown global tag 0xd
[  562.484242][ T5743] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0014/input/input14
[  562.724869][ T5743] kye 0003:0458:5010.0014: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0
[  563.033881][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  563.040497][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  563.118222][    T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  563.317608][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  563.320696][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'.
[  563.365205][    T9] usb 2-1: config 0 has no interface number 0
[  563.383160][    T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  563.395762][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.404447][    T9] usb 2-1: Product: syz
[  563.410088][    T9] usb 2-1: Manufacturer: syz
[  563.415383][    T9] usb 2-1: SerialNumber: syz
[  563.431936][    T9] usb 2-1: config 0 descriptor??
[  563.898584][  T808] usbhid 1-1:0.0: can't add hid device: -71
[  563.942853][  T808] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  564.065929][  T808] usb 1-1: USB disconnect, device number 52
[  564.385993][  T808] usb 4-1: USB disconnect, device number 49
[  564.445380][ T9204] gre0: entered promiscuous mode
[  564.493061][ T9204] gre0: entered allmulticast mode
[  564.556763][    T9] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[  564.990356][ T9210] tipc: Started in network mode
[  565.012302][ T9210] tipc: Node identity 080211000001, cluster identity 4711
[  565.038946][    T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  565.060929][ T9210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  565.105052][ T9210] tipc: Resetting bearer <eth:syzkaller0>
[  565.177988][  T808] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[  565.200454][    T9] usb 1-1: device descriptor read/64, error -71
[  565.352396][  T808] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  565.393999][  T808] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  565.441047][  T808] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  565.479559][  T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.488416][    T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  565.567375][ T9215] loop8: detected capacity change from 0 to 7
[  565.600402][ T9215] Dev loop8: unable to read RDB block 7
[  565.624470][ T9215]  loop8: unable to read partition table
[  565.638374][ T9215] loop8: partition table beyond EOD, truncated
[  565.644812][    T9] usb 1-1: device descriptor read/64, error -71
[  565.665624][ T9215] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  565.735440][  T808] usb 4-1: usb_control_msg returned -32
[  565.760832][  T808] usbtmc 4-1:16.0: can't read capabilities
[  565.779706][    T9] usb usb1-port1: attempt power cycle
[  566.019092][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'.
[  566.098019][ T5674] tipc: Node number set to 134418688
[  566.138091][    T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  566.190314][    T9] usb 1-1: device descriptor read/8, error -71
[  566.288684][ T9222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.315889][ T9222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.458013][    T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  566.489500][    T9] usb 1-1: device descriptor read/8, error -71
[  566.610303][    T9] usb usb1-port1: unable to enumerate USB device
[  566.711439][ T9234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1005'.
[  566.782736][ T5743] usb 2-1: USB disconnect, device number 56
[  566.814095][ T9234] bond5: option updelay: invalid value (18446744073709551615)
[  566.823525][ T9234] bond5: option updelay: allowed values 0 - 2147483647
[  566.838115][ T9234] bond5 (unregistering): Released all slaves
[  566.946471][ T9237] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  567.419889][ T9252] netlink: 'syz.1.1009': attribute type 4 has an invalid length.
[  567.659978][ T9258] loop5: detected capacity change from 0 to 7
[  567.689513][ T9258] Dev loop5: unable to read RDB block 7
[  567.710365][ T9258]  loop5: unable to read partition table
[  567.730887][ T9258] loop5: partition table beyond EOD, truncated
[  567.757819][ T9258] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  567.815335][ T5674] usb 4-1: USB disconnect, device number 50
[  568.080951][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'.
[  568.108374][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1014'.
[  568.644768][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'.
[  568.663253][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1017'.
[  569.126394][ T9281] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  569.183603][ T9289] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[  569.302601][ T9281] netlink: 'syz.3.1020': attribute type 10 has an invalid length.
[  569.338409][    T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  569.419849][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1020'.
[  569.540843][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  569.587708][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  569.645764][    T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  569.684165][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  569.706455][    T9] usb 1-1: SerialNumber: syz
[  570.061465][    T9] usb 1-1: 0:2 : does not exist
[  570.302148][    T9] usb 1-1: USB disconnect, device number 57
[  570.433954][ T9302] netlink: 'syz.3.1025': attribute type 29 has an invalid length.
[  570.481547][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'.
[  570.520601][ T5673] udevd[5673]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  571.578077][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1030'.
[  571.658014][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'.
[  572.091085][ T9323] FAULT_INJECTION: forcing a failure.
[  572.091085][ T9323] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  572.107479][ T9323] CPU: 1 UID: 0 PID: 9323 Comm: syz.1.1033 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  572.107514][ T9323] Tainted: [L]=SOFTLOCKUP
[  572.107521][ T9323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  572.107532][ T9323] Call Trace:
[  572.107540][ T9323]  <TASK>
[  572.107548][ T9323]  dump_stack_lvl+0xe8/0x150
[  572.107581][ T9323]  should_fail_ex+0x40c/0x560
[  572.107619][ T9323]  _copy_to_user+0x31/0xb0
[  572.107646][ T9323]  simple_read_from_buffer+0xe1/0x170
[  572.107672][ T9323]  proc_fail_nth_read+0x1bb/0x230
[  572.107697][ T9323]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  572.107720][ T9323]  ? rw_verify_area+0x24a/0x4c0
[  572.107745][ T9323]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  572.107764][ T9323]  vfs_read+0x213/0xa80
[  572.107792][ T9323]  ? __pfx___mutex_lock+0x10/0x10
[  572.107816][ T9323]  ? __pfx_vfs_read+0x10/0x10
[  572.107854][ T9323]  ? __fget_files+0x2a/0x420
[  572.107880][ T9323]  ? __fget_files+0x3a2/0x420
[  572.107897][ T9323]  ? __fget_files+0x2a/0x420
[  572.107926][ T9323]  ksys_read+0x150/0x270
[  572.107952][ T9323]  ? __pfx_ksys_read+0x10/0x10
[  572.107982][ T9323]  ? __secure_computing+0xe7/0x2b0
[  572.108006][ T9323]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.108029][ T9323]  do_syscall_64+0x174/0x580
[  572.108052][ T9323]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.108074][ T9323]  ? clear_bhb_loop+0x40/0x90
[  572.108098][ T9323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.108118][ T9323] RIP: 0033:0x7f169d15e68e
[  572.108138][ T9323] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  572.108156][ T9323] RSP: 002b:00007f169df86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  572.108178][ T9323] RAX: ffffffffffffffda RBX: 00007f169df876c0 RCX: 00007f169d15e68e
[  572.108192][ T9323] RDX: 000000000000000f RSI: 00007f169df870a0 RDI: 0000000000000005
[  572.108205][ T9323] RBP: 00007f169df87090 R08: 0000000000000000 R09: 0000000000000000
[  572.108217][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  572.108228][ T9323] R13: 00007f169d426038 R14: 00007f169d425fa0 R15: 00007f169d54fa48
[  572.108261][ T9323]  </TASK>
[  572.847399][ T9341] fuse: Bad value for 'fd'
[  572.883995][ T9341] fuse: fd is not a fuse device
[  574.050059][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'.
[  574.091723][ T9365] bond1: option mode: unable to set because the bond device is up
[  574.150943][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'.
[  574.183888][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1047'.
[  574.393547][ T9366] 8021q: adding VLAN 0 to HW filter on device bond0
[  574.464250][ T9366] bond1: (slave bond0): making interface the new active one
[  574.507793][ T9366] bond1: (slave bond0): Enslaving as an active interface with an up link
[  574.812170][ T9374] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1051'.
[  575.211042][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1055'.
[  575.307510][ T9385] bridge1: port 1(dummy0) entered blocking state
[  575.347809][ T9385] bridge1: port 1(dummy0) entered disabled state
[  575.375900][ T9385] dummy0: entered allmulticast mode
[  575.411346][ T9385] dummy0: entered promiscuous mode
[  575.681467][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'.
[  575.702381][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1057'.
[  575.993696][ T9397] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1058'.
[  576.357973][  T808] usb 2-1: new full-speed USB device number 57 using dummy_hcd
[  576.520972][  T808] usb 2-1: config 3 has an invalid interface number: 153 but max is 0
[  576.531983][  T808] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  576.554386][  T808] usb 2-1: config 3 has no interface number 0
[  576.565528][  T808] usb 2-1: config 3 interface 153 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  576.579910][  T808] usb 2-1: config 3 interface 153 has no altsetting 0
[  576.591699][  T808] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=90.80
[  576.601542][  T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.609887][  T808] usb 2-1: Product: syz
[  576.614463][  T808] usb 2-1: Manufacturer: syz
[  576.619412][  T808] usb 2-1: SerialNumber: syz
[  576.865143][  T808] qmi_wwan 2-1:3.153: probe with driver qmi_wwan failed with error -22
[  576.944800][  T808] usb 2-1: USB disconnect, device number 57
[  577.006702][ T9421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1067'.
[  577.066960][ T9421] bond5: option updelay: invalid value (18446744073709551615)
[  577.082546][ T9421] bond5: option updelay: allowed values 0 - 2147483647
[  577.099970][ T9421] bond5 (unregistering): Released all slaves
[  577.365210][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'.
[  577.406197][ T9429] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  577.535765][   T30] audit: type=1326 audit(1782972485.299:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.1.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d19de59 code=0x7ffc0000
[  577.612564][   T30] audit: type=1326 audit(1782972485.329:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.1.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f169d19de59 code=0x7ffc0000
[  577.729617][   T30] audit: type=1326 audit(1782972485.329:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.1.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d19de59 code=0x7ffc0000
[  577.822597][   T30] audit: type=1326 audit(1782972485.329:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.1.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f169d19de59 code=0x7ffc0000
[  577.878193][  T808] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  577.918801][   T30] audit: type=1326 audit(1782972485.329:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.1.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d19de59 code=0x7ffc0000
[  577.927900][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  578.010587][   T30] audit: type=1326 audit(1782972485.329:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.1.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f169d19de59 code=0x7ffc0000
[  578.102695][   T30] audit: type=1326 audit(1782972485.329:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.1.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d19de59 code=0x7ffc0000
[  578.130822][  T808] usb 1-1: Using ep0 maxpacket: 16
[  578.160568][  T808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  578.183470][  T808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  578.210196][   T30] audit: type=1326 audit(1782972485.329:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.1.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f169d19de59 code=0x7ffc0000
[  578.326068][   T30] audit: type=1326 audit(1782972485.329:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.1.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d19de59 code=0x7ffc0000
[  578.390821][  T808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  578.412104][  T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.444460][  T808] usb 1-1: Product: syz
[  578.461771][  T808] usb 1-1: Manufacturer: syz
[  578.467297][   T30] audit: type=1326 audit(1782972485.329:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.1.1070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d19de59 code=0x7ffc0000
[  578.548242][  T808] usb 1-1: SerialNumber: syz
[  578.626989][  T808] usb 1-1: 0:2 : does not exist
[  578.650652][  T808] usb 1-1: unit 9 not found!
[  578.924749][ T5669] udevd[5669]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  578.950014][ T5757] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[  579.122228][ T5757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  579.148262][  T808] usb 2-1: new full-speed USB device number 58 using dummy_hcd
[  579.160475][ T5757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  579.193740][ T5757] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  579.256462][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.313502][ T5757] usb 4-1: config 0 descriptor??
[  579.327049][  T808] usb 2-1: not running at top speed; connect to a high speed hub
[  579.362271][  T808] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  579.389298][  T808] usb 2-1: New USB device found, idVendor=0499, idProduct=103a, bcdDevice= 0.40
[  579.431381][  T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.460414][  T808] usb 2-1: Product: syz
[  579.476051][  T808] usb 2-1: Manufacturer: syz
[  579.513811][  T808] usb 2-1: SerialNumber: syz
[  579.741592][ T9460] xt_NFQUEUE: number of total queues is 0
[  579.832958][  T808] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  579.876849][  T808] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[  579.920525][  T808] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  579.940317][  T808] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[  579.997373][  T808] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  580.192810][  T808] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2
[  580.220781][  T808] usb 2-1: USB disconnect, device number 58
[  580.364440][ T5673] udevd[5673]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  580.622364][ T9473] __nla_validate_parse: 1 callbacks suppressed
[  580.622384][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'.
[  580.741750][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1081'.
[  581.758869][ T5735] usb 1-1: USB disconnect, device number 58
[  581.789826][ T5757] usbhid 4-1:0.0: can't add hid device: -71
[  581.815700][ T5757] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  581.867175][ T5757] usb 4-1: USB disconnect, device number 51
[  582.854118][ T9497] netlink: 'syz.2.1089': attribute type 1 has an invalid length.
[  583.019025][ T9497] bond5: entered promiscuous mode
[  583.044308][ T9497] 8021q: adding VLAN 0 to HW filter on device bond5
[  583.356284][ T9503] xt_NFQUEUE: number of total queues is 0
[  583.381654][ T9501] 8021q: adding VLAN 0 to HW filter on device bond5
[  583.389174][ T9501] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  583.400728][ T9501] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  583.433554][ T9501] bond5: (slave ip6gre1): making interface the new active one
[  583.442299][ T9501] ip6gre1: entered promiscuous mode
[  583.464623][ T9501] bond5: (slave ip6gre1): Enslaving as an active interface with an up link
[  583.734737][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1092'.
[  583.750670][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1092'.
[  584.087103][ T9517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1096'.
[  584.196000][ T9520] netlink: 'syz.0.1098': attribute type 3 has an invalid length.
[  584.205441][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1098'.
[  584.449371][ T9527] debugfs: '1��^!`l�1&�b��0xU�ϔ��r$�G����' already exists in 'ieee80211'
[  584.622164][ T9530] netlink: 'syz.2.1102': attribute type 8 has an invalid length.
[  584.660639][ T9530] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1102'.
[  584.824945][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1104'.
[  584.845560][ T9539] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1104'.
[  585.014352][ T9542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  585.043984][ T9542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  585.083712][ T9542] netlink: 'syz.2.1106': attribute type 3 has an invalid length.
[  585.151178][ T9542] tc_dump_action: action bad kind
[  585.879458][ T9571] bond1: option xmit_hash_policy: invalid value (46)
[  586.494000][ T9586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1120'.
[  586.868134][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  586.913061][ T9598] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1126'.
[  587.137967][  T808] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  587.288014][ T5743] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  587.288075][  T808] usb 4-1: Using ep0 maxpacket: 8
[  587.303293][  T808] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  587.311283][ T5757] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  587.319278][  T808] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  587.330867][  T808] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  587.343700][  T808] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  587.355982][  T808] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  587.367382][  T808] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  587.379358][  T808] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  587.393095][  T808] usb 4-1: config 168 interface 0 has no altsetting 0
[  587.401062][  T808] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  587.409157][  T808] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  587.420418][  T808] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  587.432496][  T808] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  587.444835][  T808] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  587.456241][  T808] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  587.468009][ T5743] usb 2-1: Using ep0 maxpacket: 8
[  587.468204][  T808] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  587.475874][ T5743] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  587.486905][  T808] usb 4-1: config 168 interface 0 has no altsetting 0
[  587.501672][ T5743] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  587.504504][ T5757] usb 1-1: Using ep0 maxpacket: 32
[  587.514089][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.521520][ T5757] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  587.528423][ T5743] usb 2-1: Product: syz
[  587.536473][ T5757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.536615][  T808] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  587.556663][ T5743] usb 2-1: Manufacturer: syz
[  587.558357][  T808] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  587.564318][ T5743] usb 2-1: SerialNumber: syz
[  587.573589][ T5757] usb 1-1: config 0 descriptor??
[  587.588917][ T5757] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  587.597113][  T808] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  587.613002][  T808] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  587.624995][  T808] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  587.636789][  T808] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  587.648479][  T808] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  587.663703][  T808] usb 4-1: config 168 interface 0 has no altsetting 0
[  587.674303][  T808] usb 4-1: string descriptor 0 read error: -22
[  587.681300][  T808] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  587.690447][  T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.711555][  T808] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  587.841900][ T5757] gspca_vc032x: reg_w err -71
[  587.848541][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  587.867658][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  587.876710][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  587.877015][ T9604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  587.886881][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  587.896280][ T9604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  587.916913][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  587.927342][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  587.932821][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  587.938889][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  587.944240][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  587.951120][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  587.957725][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  587.964044][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  587.975525][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  587.984596][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  588.009783][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  588.024011][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  588.035018][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  588.051327][ T5757] gspca_vc032x: I2c Bus Busy Wait 00
[  588.065333][ T5757] gspca_vc032x: Unknown sensor...
[  588.080194][  T808] usb 4-1: USB disconnect, device number 52
[  588.098083][ T5757] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  588.136769][ T5757] usb 1-1: USB disconnect, device number 59
[  588.176749][ T5743] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  588.189578][ T5743] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  588.259602][ T5743] usb 2-1: USB disconnect, device number 59
[  588.320647][ T5673] udevd[5673]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  588.470830][ T5757] usb 1-1: new low-speed USB device number 60 using dummy_hcd
[  588.538148][  T808] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  588.635358][ T5757] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  588.649460][ T5757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  588.667353][ T5757] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  588.688132][ T5757] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[  588.698177][ T5757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.708556][  T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64
[  588.722802][  T808] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  588.733649][ T5757] usb 1-1: config 0 descriptor??
[  588.742748][ T9615] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  588.757447][  T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.791253][  T808] usb 4-1: config 0 descriptor??
[  588.801720][ T9600] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  588.988001][ T9627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  589.023435][  T808] ath6kl: Failed to submit usb control message: -71
[  589.025305][ T9622] rdma_op ffff888011d8a9f0 conn xmit_rdma 0000000000000000
[  589.031529][  T808] ath6kl: unable to send the bmi data to the device: -71
[  589.045398][  T808] ath6kl: Unable to send get target info: -71
[  589.067606][ T9627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  589.107125][  T808] ath6kl: Failed to init ath6kl core: -71
[  589.126592][ T5757] corsair 0003:1B1C:1B3E.0015: unknown main item tag 0x2
[  589.140945][  T808] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  589.152367][ T5757] corsair 0003:1B1C:1B3E.0015: unexpected long global item
[  589.171361][ T5757] corsair 0003:1B1C:1B3E.0015: parse failed
[  589.177831][  T808] usb 4-1: USB disconnect, device number 53
[  589.189651][ T5757] corsair 0003:1B1C:1B3E.0015: probe with driver corsair failed with error -22
[  589.977991][ T5736] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  590.170622][ T5736] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  590.203069][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.240322][ T5736] usb 4-1: config 0 descriptor??
[  590.256447][ T5736] gspca_main: sunplus-2.14.0 probing 055f:c420
[  590.383536][ T9653] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1139'.
[  590.863835][ T9641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  590.884225][ T9641] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  590.922099][ T5736] gspca_sunplus: reg_w_riv err -71
[  590.936817][ T5736] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  591.016545][ T5736] usb 4-1: USB disconnect, device number 54
[  591.186329][ T5743] usb 1-1: USB disconnect, device number 60
[  591.444149][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'.
[  592.218706][ T5736] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  592.298210][ T5743] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  592.392227][ T5736] usb 1-1: Using ep0 maxpacket: 16
[  592.403664][ T5736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  592.416484][ T5736] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  592.429424][ T5736] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  592.439124][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.447751][ T5736] usb 1-1: Product: syz
[  592.452346][ T5736] usb 1-1: Manufacturer: syz
[  592.457015][ T5736] usb 1-1: SerialNumber: syz
[  592.465917][ T5743] usb 4-1: unable to get BOS descriptor or descriptor too short
[  592.476926][ T5743] usb 4-1: not running at top speed; connect to a high speed hub
[  592.488894][ T5743] usb 4-1: config 64 has an invalid interface number: 83 but max is 0
[  592.502460][ T5736] usb 1-1: 0:2 : does not exist
[  592.507521][ T5743] usb 4-1: config 64 has no interface number 0
[  592.514410][ T5743] usb 4-1: config 64 interface 83 altsetting 8 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  592.525491][ T5743] usb 4-1: config 64 interface 83 has no altsetting 0
[  592.535847][ T5743] usb 4-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=98.be
[  592.573983][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.620443][ T5743] usb 4-1: Product: syz
[  592.634852][ T5743] usb 4-1: Manufacturer: syz
[  592.655007][ T5743] usb 4-1: SerialNumber: syz
[  592.761992][ T9681] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  593.019778][ T5736] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  593.056079][ T9681] binder: 9678:9681 ioctl 5101 0 returned -22
[  593.093433][ T5743] usb 4-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[  593.125963][ T5743] usb 4-1: can only deal with bulk endpoints; endpoint 12 is not bulk.
[  593.154924][ T5743] usb 4-1: couldn't find two input bulk endpoints. Bailing out.
[  593.179191][ T5736] usb 1-1: USB disconnect, device number 61
[  593.257683][ T5743] usb 4-1: USB disconnect, device number 55
[  593.365096][ T5673] udevd[5673]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  594.082412][ T9714] FAULT_INJECTION: forcing a failure.
[  594.082412][ T9714] name failslab, interval 1, probability 0, space 0, times 0
[  594.096677][ T9714] CPU: 0 UID: 0 PID: 9714 Comm: syz.0.1160 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  594.096711][ T9714] Tainted: [L]=SOFTLOCKUP
[  594.096719][ T9714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  594.096730][ T9714] Call Trace:
[  594.096739][ T9714]  <TASK>
[  594.096747][ T9714]  dump_stack_lvl+0xe8/0x150
[  594.096778][ T9714]  should_fail_ex+0x40c/0x560
[  594.096814][ T9714]  should_failslab+0xa8/0x100
[  594.096839][ T9714]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  594.096868][ T9714]  ? alloc_empty_file+0x5b/0x1d0
[  594.096895][ T9714]  ? alloc_empty_file+0x5b/0x1d0
[  594.096943][ T9714]  ? stack_trace_save+0xa9/0x100
[  594.096977][ T9714]  alloc_empty_file+0x5b/0x1d0
[  594.097009][ T9714]  path_openat+0x8f/0x3830
[  594.097039][ T9714]  ? kasan_save_track+0x4f/0x80
[  594.097057][ T9714]  ? kasan_save_track+0x3e/0x80
[  594.097074][ T9714]  ? __kasan_slab_alloc+0x6c/0x80
[  594.097092][ T9714]  ? kmem_cache_alloc_noprof+0x2a0/0x5f0
[  594.097118][ T9714]  ? do_getname+0x2e/0x250
[  594.097144][ T9714]  ? do_sys_openat2+0xcc/0x200
[  594.097160][ T9714]  ? __se_sys_openat2+0x223/0x2d0
[  594.097178][ T9714]  ? do_syscall_64+0x174/0x580
[  594.097200][ T9714]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.097231][ T9714]  ? __lock_acquire+0x683/0x2cf0
[  594.097263][ T9714]  do_file_open+0x23e/0x4a0
[  594.097301][ T9714]  ? __pfx_do_file_open+0x10/0x10
[  594.097346][ T9714]  ? _raw_spin_unlock+0x28/0x50
[  594.097364][ T9714]  ? alloc_fd+0x651/0x6c0
[  594.097402][ T9714]  do_sys_openat2+0x115/0x200
[  594.097424][ T9714]  ? __pfx_do_sys_openat2+0x10/0x10
[  594.097446][ T9714]  __se_sys_openat2+0x223/0x2d0
[  594.097459][ T9714]  ? __pfx___se_sys_openat2+0x10/0x10
[  594.097478][ T9714]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.097490][ T9714]  do_syscall_64+0x174/0x580
[  594.097503][ T9714]  ? trace_irq_disable+0x3b/0x140
[  594.097522][ T9714]  ? clear_bhb_loop+0x40/0x90
[  594.097536][ T9714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.097549][ T9714] RIP: 0033:0x7f345bd9de59
[  594.097561][ T9714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  594.097571][ T9714] RSP: 002b:00007f345cc07028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5
[  594.097586][ T9714] RAX: ffffffffffffffda RBX: 00007f345c025fa0 RCX: 00007f345bd9de59
[  594.097595][ T9714] RDX: 0000200000000300 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  594.097603][ T9714] RBP: 00007f345cc07090 R08: 0000000000000000 R09: 0000000000000000
[  594.097611][ T9714] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001
[  594.097618][ T9714] R13: 00007f345c026038 R14: 00007f345c025fa0 R15: 00007f345c14fa48
[  594.097636][ T9714]  </TASK>
[  594.427989][ T5735] usb 4-1: new full-speed USB device number 56 using dummy_hcd
[  594.591533][ T5735] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  594.602897][ T5735] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  594.616120][ T5735] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  594.625187][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.849932][ T5735] usb 4-1: usb_control_msg returned -32
[  594.861093][ T5735] usbtmc 4-1:16.0: can't read capabilities
[  594.982094][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  594.998357][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  595.406006][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'.
[  595.415242][ T9724] bond2: option mode: unable to set because the bond device has slaves
[  595.432950][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'.
[  595.442121][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1163'.
[  595.576275][ T9728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  595.589682][ T9728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  595.738042][ T5736] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  595.888715][ T5736] usb 1-1: Using ep0 maxpacket: 16
[  595.905913][ T5736] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  595.914779][ T5736] usb 1-1: config 0 has no interface number 0
[  595.921566][ T5736] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  595.932729][ T5736] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  595.942593][ T5736] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  595.954012][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.968436][ T5736] usb 1-1: config 0 descriptor??
[  596.394092][ T9726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.427571][ T9726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.430711][ T9737] loop6: detected capacity change from 0 to 2640
[  596.481484][ T5673] Buffer I/O error on dev loop6, logical block 0, async page read
[  596.504057][ T5673] Buffer I/O error on dev loop6, logical block 0, async page read
[  596.530096][ T5673] Buffer I/O error on dev loop6, logical block 0, async page read
[  596.564030][ T5673] Buffer I/O error on dev loop6, logical block 0, async page read
[  596.603437][ T5673] Buffer I/O error on dev loop6, logical block 0, async page read
[  597.037736][ T5743] usb 4-1: USB disconnect, device number 56
[  597.050747][ T5736] usbhid 1-1:0.1: can't add hid device: -71
[  597.082395][ T5736] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[  597.148806][ T5736] usb 1-1: USB disconnect, device number 62
[  597.357686][ T9757] netlink: 'syz.1.1173': attribute type 3 has an invalid length.
[  597.414120][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1173'.
[  597.458478][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1174'.
[  597.741165][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.771656][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1178'.
[  597.784113][ T9774] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1171'.
[  597.795580][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  598.060400][ T5735] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  598.185170][ T9775] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1179'.
[  598.203761][ T9775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  598.237990][ T5735] usb 2-1: Using ep0 maxpacket: 16
[  598.254882][ T5735] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  598.292891][ T5735] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  598.356067][ T5735] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  598.386899][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.420912][ T5735] usb 2-1: Product: syz
[  598.432296][ T5735] usb 2-1: Manufacturer: syz
[  598.462925][ T5735] usb 2-1: SerialNumber: syz
[  598.521204][ T5735] usb 2-1: 0:2 : does not exist
[  598.823900][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'.
[  598.856425][ T5735] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  598.957590][ T5735] usb 2-1: USB disconnect, device number 60
[  599.051608][ T5673] udevd[5673]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  599.315443][ T9794] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1183'.
[  599.356225][ T9791] bond3: option ad_user_port_key: invalid value (57549)
[  599.363839][ T9791] bond3: option ad_user_port_key: allowed values 0 - 1023
[  599.437752][ T9791] bond3 (unregistering): Released all slaves
[  599.514978][ T9799] netlink: 'syz.1.1186': attribute type 3 has an invalid length.
[  599.577967][ T5735] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  599.589461][ T9801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.620119][ T9801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.787603][ T5735] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  599.810346][ T5735] usb 4-1: config 0 has no interface number 0
[  599.842805][ T5735] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  599.870961][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.889659][ T5735] usb 4-1: Product: syz
[  599.899190][ T5735] usb 4-1: Manufacturer: syz
[  599.907380][ T5735] usb 4-1: SerialNumber: syz
[  599.941224][ T5735] usb 4-1: config 0 descriptor??
[  600.230767][ T9809] dummy0: left promiscuous mode
[  600.398657][ T9814] loop5: detected capacity change from 0 to 7
[  600.414310][ T9814] Dev loop5: unable to read RDB block 7
[  600.427442][ T9814]  loop5: unable to read partition table
[  600.438026][ T9814] loop5: partition table beyond EOD, truncated
[  600.446759][ T9814] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  600.541706][ T9809] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  600.631619][ T9809] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  601.005920][ T9819] __nla_validate_parse: 1 callbacks suppressed
[  601.005941][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1191'.
[  601.038684][ T5735] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[  601.067777][ T9819] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1191'.
[  601.248623][   T14] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  601.361936][   T14] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  601.405935][   T14] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  601.421228][   T14] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  601.722961][ T9830] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1195'.
[  601.803711][ T9833] netlink: 'syz.1.1197': attribute type 3 has an invalid length.
[  601.826239][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1197'.
[  601.906033][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1198'.
[  602.036298][ T9836] dummy0: left promiscuous mode
[  602.079699][ T9836] bridge7: port 1(dummy0) entered blocking state
[  602.106567][ T9836] bridge7: port 1(dummy0) entered disabled state
[  602.119329][ T9842] netlink: 'syz.1.1199': attribute type 1 has an invalid length.
[  602.137104][ T9836] dummy0: entered allmulticast mode
[  602.151525][ T9836] dummy0: entered promiscuous mode
[  602.185598][ T9841] syzkaller1: entered promiscuous mode
[  602.202570][ T9841] syzkaller1: entered allmulticast mode
[  602.520761][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1204'.
[  602.529104][ T5736] usb 4-1: USB disconnect, device number 57
[  602.638650][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'.
[  602.798038][    T9] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[  602.816891][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1209'.
[  602.960565][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  602.974093][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  603.002837][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  603.036512][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.261661][    T9] usb 2-1: usb_control_msg returned -32
[  603.272215][    T9] usbtmc 2-1:16.0: can't read capabilities
[  603.414994][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.426291][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.626120][ T9883] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -32
[  603.665092][ T9852] syzkaller0: entered promiscuous mode
[  603.678037][ T9852] syzkaller0: entered allmulticast mode
[  603.695496][    T9] usb 2-1: USB disconnect, device number 61
[  604.598301][ T9901] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1219'.
[  604.751509][    T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  604.920622][    T9] usb 4-1: device descriptor read/64, error -71
[  605.188059][    T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  605.348770][    T9] usb 4-1: device descriptor read/64, error -71
[  605.373335][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1226'.
[  605.468550][    T9] usb usb4-port1: attempt power cycle
[  605.651970][ T9920] xt_NFQUEUE: number of total queues is 0
[  605.819313][    T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  605.858747][    T9] usb 4-1: device descriptor read/8, error -71
[  606.107971][    T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  606.158869][    T9] usb 4-1: device descriptor read/8, error -71
[  606.288432][    T9] usb usb4-port1: unable to enumerate USB device
[  606.530488][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.548366][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.668078][ T5736] usb 1-1: new full-speed USB device number 63 using dummy_hcd
[  606.754487][ T9936] loop8: detected capacity change from 0 to 7
[  606.769085][ T9936] Dev loop8: unable to read RDB block 7
[  606.774760][ T9936]  loop8: unable to read partition table
[  606.781296][ T9936] loop8: partition table beyond EOD, truncated
[  606.787495][ T9936] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  606.835907][ T5736] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  606.849607][ T5736] usb 1-1: config 0 has no interface number 0
[  606.867797][ T5736] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  606.872855][ T9938] __nla_validate_parse: 1 callbacks suppressed
[  606.872872][ T9938] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1232'.
[  606.881776][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.902587][ T5736] usb 1-1: Product: syz
[  606.906826][ T5736] usb 1-1: Manufacturer: syz
[  606.911814][ T5736] usb 1-1: SerialNumber: syz
[  606.919939][ T5736] usb 1-1: config 0 descriptor??
[  606.932205][ T5736] usb 1-1: selecting invalid altsetting 1
[  606.939865][ T5736] dvb_ttusb_budget: ttusb_init_controller: error
[  606.947475][ T5736] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  607.046369][ T5736] DVB: Unable to find symbol stv0299_attach()
[  607.105772][ T5736] DVB: Unable to find symbol tda8083_attach()
[  607.117778][ T5736] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  607.266658][ T9948] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!`l�1&�b��0xU�ϔ��r$�G����'
[  607.279196][ T9948] CPU: 0 UID: 0 PID: 9948 Comm: syz.1.1236 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  607.279230][ T9948] Tainted: [L]=SOFTLOCKUP
[  607.279237][ T9948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  607.279250][ T9948] Call Trace:
[  607.279258][ T9948]  <TASK>
[  607.279268][ T9948]  dump_stack_lvl+0xe8/0x150
[  607.279300][ T9948]  sysfs_warn_dup+0x8e/0xa0
[  607.279333][ T9948]  sysfs_do_create_link_sd+0xc0/0x110
[  607.279356][ T9948]  device_add_class_symlinks+0x1cf/0x240
[  607.279394][ T9948]  device_add+0x467/0xb80
[  607.279424][ T9948]  wiphy_register+0x1fc8/0x2ff0
[  607.279469][ T9948]  ? __pfx_wiphy_register+0x10/0x10
[  607.279490][ T9948]  ? __pfx_netdev_run_todo+0x10/0x10
[  607.279523][ T9948]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  607.279563][ T9948]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  607.279593][ T9948]  ieee80211_register_hw+0x3d3d/0x4a50
[  607.279635][ T9948]  ? ieee80211_register_hw+0x1971/0x4a50
[  607.279689][ T9948]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  607.279718][ T9948]  ? __asan_memset+0x22/0x50
[  607.279747][ T9948]  ? __hrtimer_setup+0x1b7/0x260
[  607.279773][ T9948]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  607.279805][ T9948]  mac80211_hwsim_new_radio+0x3238/0x5680
[  607.279866][ T9948]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  607.279892][ T9948]  ? kstrndup+0xbd/0x160
[  607.279923][ T9948]  ? kstrndup+0xbd/0x160
[  607.279946][ T9948]  hwsim_new_radio_nl+0xd8b/0xf90
[  607.279989][ T9948]  genl_family_rcv_msg_doit+0x233/0x340
[  607.280020][ T9948]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  607.280058][ T9948]  ? bpf_lsm_capable+0x9/0x20
[  607.280077][ T9948]  ? security_capable+0x7e/0x2c0
[  607.280112][ T9948]  genl_rcv_msg+0x614/0x7a0
[  607.280140][ T9948]  ? __pfx_genl_rcv_msg+0x10/0x10
[  607.280160][ T9948]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  607.280210][ T9948]  netlink_rcv_skb+0x226/0x4a0
[  607.280239][ T9948]  ? __pfx_genl_rcv_msg+0x10/0x10
[  607.280262][ T9948]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  607.280306][ T9948]  ? down_read+0x2be/0x330
[  607.280338][ T9948]  genl_rcv+0x28/0x40
[  607.280356][ T9948]  netlink_unicast+0x7bb/0x940
[  607.280394][ T9948]  netlink_sendmsg+0x813/0xb40
[  607.280432][ T9948]  ? __pfx_netlink_sendmsg+0x10/0x10
[  607.280464][ T9948]  ? aa_sock_msg_perm+0xf1/0x1b0
[  607.280500][ T9948]  ? __pfx_netlink_sendmsg+0x10/0x10
[  607.280525][ T9948]  sock_sendmsg_nosec+0x13a/0x180
[  607.280560][ T9948]  ____sys_sendmsg+0x54e/0x850
[  607.280593][ T9948]  ? __pfx_____sys_sendmsg+0x10/0x10
[  607.280630][ T9948]  ? import_iovec+0x73/0xa0
[  607.280661][ T9948]  ___sys_sendmsg+0x2a5/0x360
[  607.280684][ T9948]  ? __lock_acquire+0x683/0x2cf0
[  607.280712][ T9948]  ? __pfx____sys_sendmsg+0x10/0x10
[  607.280742][ T9948]  ? futex_wait+0x2a2/0x390
[  607.280804][ T9948]  ? __fget_files+0x2a/0x420
[  607.280823][ T9948]  ? __fget_files+0x3a2/0x420
[  607.280855][ T9948]  __x64_sys_sendmsg+0x1b1/0x290
[  607.280885][ T9948]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  607.280931][ T9948]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.280953][ T9948]  do_syscall_64+0x174/0x580
[  607.280975][ T9948]  ? trace_irq_disable+0x3b/0x140
[  607.281004][ T9948]  ? clear_bhb_loop+0x40/0x90
[  607.281029][ T9948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.281050][ T9948] RIP: 0033:0x7f169d19de59
[  607.281070][ T9948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  607.281087][ T9948] RSP: 002b:00007f169df87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  607.281109][ T9948] RAX: ffffffffffffffda RBX: 00007f169d425fa0 RCX: 00007f169d19de59
[  607.281124][ T9948] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  607.281136][ T9948] RBP: 00007f169d233e6f R08: 0000000000000000 R09: 0000000000000000
[  607.281149][ T9948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  607.281161][ T9948] R13: 00007f169d426038 R14: 00007f169d425fa0 R15: 00007f169d54fa48
[  607.281203][ T9948]  </TASK>
[  607.804805][ T9955] xt_NFQUEUE: number of total queues is 0
[  609.117082][ T9980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  609.137160][ T9980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  609.332514][  T808] usb 1-1: USB disconnect, device number 63
[  609.484553][ T9988] input: syz1 as /devices/virtual/input/input15
[  609.779722][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  609.779744][   T30] audit: type=1326 audit(1782972517.549:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9994 comm="syz.0.1249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f345bd9de59 code=0x0
[  610.189818][  T808] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  610.348896][  T808] usb 1-1: no configurations
[  610.362026][  T808] usb 1-1: can't read configurations, error -22
[  610.371971][T10015] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1255'.
[  610.493830][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1256'.
[  610.518071][  T808] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  610.518071][   T29] usb 4-1: new full-speed USB device number 62 using dummy_hcd
[  610.634392][T10021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1257'.
[  610.668427][T10021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  610.675685][T10021] IPv6: NLM_F_CREATE should be set when creating new route
[  610.698057][  T808] usb 1-1: no configurations
[  610.704328][  T808] usb 1-1: can't read configurations, error -22
[  610.723100][  T808] usb usb1-port1: attempt power cycle
[  610.726255][   T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  610.752724][   T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  610.770887][   T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  610.780712][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.099811][  T808] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  611.139292][  T808] usb 1-1: no configurations
[  611.148653][   T29] usb 4-1: usb_control_msg returned -32
[  611.151295][  T808] usb 1-1: can't read configurations, error -22
[  611.181687][   T29] usbtmc 4-1:16.0: can't read capabilities
[  611.310854][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1260'.
[  611.359444][  T808] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  611.409491][  T808] usb 1-1: no configurations
[  611.421589][  T808] usb 1-1: can't read configurations, error -22
[  611.439861][  T808] usb usb1-port1: unable to enumerate USB device
[  612.124576][T10051] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!`l�1&�b��0xU�ϔ��r$�G����'
[  612.142016][T10051] CPU: 0 UID: 0 PID: 10051 Comm: syz.2.1264 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  612.142050][T10051] Tainted: [L]=SOFTLOCKUP
[  612.142055][T10051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  612.142063][T10051] Call Trace:
[  612.142069][T10051]  <TASK>
[  612.142075][T10051]  dump_stack_lvl+0xe8/0x150
[  612.142101][T10051]  sysfs_warn_dup+0x8e/0xa0
[  612.142121][T10051]  sysfs_do_create_link_sd+0xc0/0x110
[  612.142136][T10051]  device_add_class_symlinks+0x1cf/0x240
[  612.142166][T10051]  device_add+0x467/0xb80
[  612.142199][T10051]  wiphy_register+0x1fc8/0x2ff0
[  612.142239][T10051]  ? __pfx_wiphy_register+0x10/0x10
[  612.142258][T10051]  ? __pfx_netdev_run_todo+0x10/0x10
[  612.142279][T10051]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  612.142301][T10051]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  612.142317][T10051]  ieee80211_register_hw+0x3d3d/0x4a50
[  612.142340][T10051]  ? ieee80211_register_hw+0x1971/0x4a50
[  612.142371][T10051]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  612.142387][T10051]  ? __asan_memset+0x22/0x50
[  612.142406][T10051]  ? __hrtimer_setup+0x1b7/0x260
[  612.142422][T10051]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  612.142439][T10051]  mac80211_hwsim_new_radio+0x3238/0x5680
[  612.142473][T10051]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  612.142486][T10051]  ? kstrndup+0xbd/0x160
[  612.142502][T10051]  ? kstrndup+0xbd/0x160
[  612.142515][T10051]  hwsim_new_radio_nl+0xd8b/0xf90
[  612.142541][T10051]  genl_family_rcv_msg_doit+0x233/0x340
[  612.142560][T10051]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  612.142580][T10051]  ? bpf_lsm_capable+0x9/0x20
[  612.142591][T10051]  ? security_capable+0x7e/0x2c0
[  612.142611][T10051]  genl_rcv_msg+0x614/0x7a0
[  612.142628][T10051]  ? __pfx_genl_rcv_msg+0x10/0x10
[  612.142640][T10051]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  612.142654][T10051]  ? __pfx_ref_tracker_free+0x10/0x10
[  612.142675][T10051]  netlink_rcv_skb+0x226/0x4a0
[  612.142692][T10051]  ? __pfx_genl_rcv_msg+0x10/0x10
[  612.142714][T10051]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  612.142740][T10051]  ? down_read+0x2be/0x330
[  612.142758][T10051]  genl_rcv+0x28/0x40
[  612.142769][T10051]  netlink_unicast+0x7bb/0x940
[  612.142791][T10051]  netlink_sendmsg+0x813/0xb40
[  612.142813][T10051]  ? __pfx_netlink_sendmsg+0x10/0x10
[  612.142833][T10051]  ? aa_sock_msg_perm+0xf1/0x1b0
[  612.142854][T10051]  ? __pfx_netlink_sendmsg+0x10/0x10
[  612.142870][T10051]  sock_sendmsg_nosec+0x13a/0x180
[  612.142892][T10051]  ____sys_sendmsg+0x54e/0x850
[  612.142912][T10051]  ? __pfx_____sys_sendmsg+0x10/0x10
[  612.142934][T10051]  ? import_iovec+0x73/0xa0
[  612.142956][T10051]  ___sys_sendmsg+0x2a5/0x360
[  612.142971][T10051]  ? __lock_acquire+0x683/0x2cf0
[  612.142986][T10051]  ? __pfx____sys_sendmsg+0x10/0x10
[  612.143004][T10051]  ? futex_wait+0x2a2/0x390
[  612.143046][T10051]  ? __fget_files+0x2a/0x420
[  612.143057][T10051]  ? __fget_files+0x3a2/0x420
[  612.143076][T10051]  __x64_sys_sendmsg+0x1b1/0x290
[  612.143094][T10051]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  612.143122][T10051]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.143136][T10051]  do_syscall_64+0x174/0x580
[  612.143150][T10051]  ? trace_irq_disable+0x3b/0x140
[  612.143169][T10051]  ? clear_bhb_loop+0x40/0x90
[  612.143185][T10051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.143197][T10051] RIP: 0033:0x7f4c3c99de59
[  612.143211][T10051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  612.143221][T10051] RSP: 002b:00007f4c3d830028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  612.143235][T10051] RAX: ffffffffffffffda RBX: 00007f4c3cc25fa0 RCX: 00007f4c3c99de59
[  612.143244][T10051] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  612.143251][T10051] RBP: 00007f4c3ca33e6f R08: 0000000000000000 R09: 0000000000000000
[  612.143259][T10051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  612.143266][T10051] R13: 00007f4c3cc26038 R14: 00007f4c3cc25fa0 R15: 00007f4c3cd4fa48
[  612.143286][T10051]  </TASK>
[  612.615013][T10055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  612.627098][T10055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  612.665797][T10058] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1262'.
[  613.107306][  T808] usb 4-1: USB disconnect, device number 62
[  624.479175][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  624.486114][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  685.909793][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  685.916313][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  747.349493][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  747.355840][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  754.301287][T10075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1269'.
[  754.649988][ T5736] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  754.819829][ T5736] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  754.836759][ T5736] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  754.857550][ T5736] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  754.895979][ T5736] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  754.921966][ T5736] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  754.951904][ T5736] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  754.972996][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  754.992596][ T5736] usb 2-1: Product: syz
[  754.997959][   T30] audit: type=1326 audit(1782972662.759:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.2.1276" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c3c99de59 code=0x0
[  755.027996][ T5736] usb 2-1: Manufacturer: syz
[  755.049215][  T808] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  755.060828][ T5736] cdc_wdm 2-1:1.0: skipping garbage
[  755.066100][ T5736] cdc_wdm 2-1:1.0: skipping garbage
[  755.083795][ T5736] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  755.089835][ T5736] cdc_wdm 2-1:1.0: Unknown control protocol
[  755.152578][T10118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.175215][T10118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  755.189993][T10118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.201566][T10118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  755.218696][  T808] usb 4-1: Using ep0 maxpacket: 32
[  755.231523][  T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  755.254924][  T808] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  755.281913][    T9] usb 2-1: USB disconnect, device number 62
[  755.289962][  T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 110, changing to 10
[  755.319852][  T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 58582, setting to 1024
[  755.335858][  T808] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  755.345643][  T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.355756][  T808] usb 4-1: Product: syz
[  755.361586][  T808] usb 4-1: Manufacturer: syz
[  755.366730][  T808] usb 4-1: SerialNumber: syz
[  755.376442][  T808] usb 4-1: config 0 descriptor??
[  755.383820][T10108] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  755.402802][  T808] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16
[  755.653246][T10124] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1277'.
[  755.925753][  T808] usb 4-1: USB disconnect, device number 63
[  755.925787][    C1] xpad 4-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19
[  756.052353][T10136] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1279'.
[  756.087248][T10139] trusted_key: syz.0.1281 sent an empty control message without MSG_MORE.
[  756.704713][T10153] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  757.113005][T10157] program syz.1.1286 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  757.375152][T10165] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  758.180949][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'.
[  758.247120][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'.
[  758.287923][   T29] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  758.351404][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'.
[  758.387032][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'.
[  758.430453][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'.
[  758.468438][   T29] usb 2-1: Using ep0 maxpacket: 32
[  758.478501][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'.
[  758.511041][   T29] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  758.544685][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.550664][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'.
[  758.604154][   T29] usb 2-1: config 0 descriptor??
[  758.654714][   T29] as10x_usb: device has been detected
[  758.677509][   T29] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  758.769145][   T29] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  758.959729][T10199] kvm: emulating exchange as write
[  759.069125][   T29] as10x_usb: error during firmware upload part1
[  759.087233][   T29] Registered device nBox DVB-T Dongle
[  759.759598][T10220] __nla_validate_parse: 4 callbacks suppressed
[  759.759619][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1299'.
[  759.791766][T10220] batadv0: entered promiscuous mode
[  759.801555][T10220] macsec2: entered promiscuous mode
[  759.807228][T10220] macsec2: entered allmulticast mode
[  759.814190][T10220] batadv0: entered allmulticast mode
[  759.820985][T10220] 8021q: adding VLAN 0 to HW filter on device macsec2
[  759.829845][T10220] batadv0: left allmulticast mode
[  759.835343][T10220] batadv0: left promiscuous mode
[  759.851629][T10222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  759.861656][T10222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  759.879880][ T5674] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  759.942165][   T30] audit: type=1326 audit(1782972667.709:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10223 comm="syz.3.1301" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f611f79de59 code=0x0
[  760.071699][ T5674] usb 1-1: Using ep0 maxpacket: 16
[  760.079135][ T5674] usb 1-1: config 0 has an invalid interface number: 107 but max is 0
[  760.087421][ T5674] usb 1-1: config 0 has no interface number 0
[  760.094578][ T5674] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9
[  760.112373][ T5674] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024
[  760.125508][ T5674] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  760.134787][ T5674] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  760.143515][ T5674] usb 1-1: Product: syz
[  760.147692][ T5674] usb 1-1: Manufacturer: syz
[  760.152492][ T5674] usb 1-1: SerialNumber: syz
[  760.159945][ T5674] usb 1-1: config 0 descriptor??
[  760.169784][ T5674] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected
[  760.177627][ T5674] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81
[  760.187297][ T5674] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1
[  760.197263][ T5674] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  760.208859][ T5674] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2
[  760.220073][ T5674] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  760.231057][ T5674] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4
[  760.240981][ T5674] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  760.251286][ T5674] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6
[  760.260977][ T5674] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  760.337945][  T808] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  760.406046][    T9] usb 2-1: USB disconnect, device number 63
[  760.478032][  T808] usb 4-1: device descriptor read/64, error -71
[  760.484482][T10213] program syz.0.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  760.518181][ T5757] usb 1-1: USB disconnect, device number 68
[  760.527319][    T9] Unregistered device nBox DVB-T Dongle
[  760.546173][    T9] as10x_usb: device has been disconnected
[  760.568529][ T5757] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  760.624192][ T5757] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  760.653433][ T5757] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  760.698684][ T5757] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  760.716301][ T5757] keyspan 1-1:0.107: device disconnected
[  760.738738][  T808] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  760.806389][T10235] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  760.821585][T10237] kAFS: unable to lookup cell ''
[  760.888758][  T808] usb 4-1: device descriptor read/64, error -71
[  761.008829][  T808] usb usb4-port1: attempt power cycle
[  761.347927][  T808] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  761.388966][  T808] usb 4-1: device descriptor read/8, error -71
[  761.637905][  T808] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  761.669132][  T808] usb 4-1: device descriptor read/8, error -71
[  761.789255][  T808] usb usb4-port1: unable to enumerate USB device
[  762.057955][ T5674] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  762.114910][T10257] loop4: detected capacity change from 0 to 7
[  762.129822][T10257] Dev loop4: unable to read RDB block 7
[  762.138498][T10257]  loop4: unable to read partition table
[  762.144550][T10257] loop4: partition table beyond EOD, truncated
[  762.150945][T10257] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  762.197893][  T808] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  762.230661][ T5674] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  762.245005][ T5674] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  762.268036][ T5674] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  762.278761][ T5674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.280893][T10261] loop8: detected capacity change from 0 to 7
[  762.296601][ T5674] usb 1-1: config 0 descriptor??
[  762.303952][T10261] Dev loop8: unable to read RDB block 7
[  762.315172][T10261]  loop8: unable to read partition table
[  762.324344][T10261] loop8: partition table beyond EOD, truncated
[  762.331159][T10261] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  762.347876][  T808] usb 2-1: Using ep0 maxpacket: 32
[  762.362380][  T808] usb 2-1: unable to get BOS descriptor or descriptor too short
[  762.384415][  T808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  762.407909][  T808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  762.430164][  T808] usb 2-1: New USB device found, idVendor=1235, idProduct=8206, bcdDevice= 0.40
[  762.446327][  T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.463479][  T808] usb 2-1: Product: syz
[  762.467965][  T808] usb 2-1: Manufacturer: syz
[  762.472645][  T808] usb 2-1: SerialNumber: syz
[  762.705369][  T808] usb 2-1: cannot find UAC_HEADER
[  762.734094][ T5674] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0
[  762.758278][ T5674] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0
[  762.770160][ T5674] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0
[  762.795587][ T5674] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0
[  762.806679][ T5674] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0
[  762.822266][  T808] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  762.837890][ T5674] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0
[  762.848374][ T5674] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0
[  762.855205][  T808] usb 2-1: USB disconnect, device number 64
[  762.878676][ T5674] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0
[  762.890484][T10269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1314'.
[  762.905161][T10227] udevd[10227]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  762.926301][ T5674] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device
[  762.940711][ T5674] pyra 0003:1E7D:2CF6.0016: couldn't install mouse
[  762.996161][ T5674] pyra 0003:1E7D:2CF6.0016: probe with driver pyra failed with error -32
[  763.082640][T10269] bond2: option updelay: invalid value (18446744073709551615)
[  763.126721][T10269] bond2: option updelay: allowed values 0 - 2147483647
[  763.165184][T10269] bond2 (unregistering): Released all slaves
[  763.487936][   T29] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[  763.565310][T10285] input: syz0 as /devices/virtual/input/input17
[  763.637957][   T29] usb 4-1: device descriptor read/64, error -71
[  763.877891][   T29] usb 4-1: new full-speed USB device number 69 using dummy_hcd
[  764.031391][   T29] usb 4-1: device descriptor read/64, error -71
[  764.158463][   T29] usb usb4-port1: attempt power cycle
[  764.453906][T10297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  764.479198][T10297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  764.492398][   T30] audit: type=1800 audit(1782972672.259:504): pid=10300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1322" name="SYSV00000000" dev="tmpfs" ino=10 res=0 errno=0
[  764.524823][   T29] usb 4-1: new full-speed USB device number 70 using dummy_hcd
[  764.558822][   T29] usb 4-1: device descriptor read/8, error -71
[  764.808062][   T29] usb 4-1: new full-speed USB device number 71 using dummy_hcd
[  764.848603][   T29] usb 4-1: device descriptor read/8, error -71
[  764.969280][   T29] usb usb4-port1: unable to enumerate USB device
[  765.421168][T10312] loop5: detected capacity change from 0 to 7
[  765.429335][T10312] Dev loop5: unable to read RDB block 7
[  765.435217][T10312]  loop5: unable to read partition table
[  765.441819][T10312] loop5: partition table beyond EOD, truncated
[  765.448670][T10312] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  765.548417][   T30] audit: type=1326 audit(1782972673.309:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.2.1326" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c3c99de59 code=0x0
[  765.656244][ T5757] usb 1-1: USB disconnect, device number 69
[  765.725274][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  765.743369][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  765.894519][T10320] IPv6: addrconf: prefix option has invalid lifetime
[  766.472533][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'.
[  766.825144][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1340'.
[  766.866769][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1341'.
[  766.880055][T10351] bridge3: port 1(dummy0) entered blocking state
[  766.886485][T10351] bridge3: port 1(dummy0) entered disabled state
[  766.893557][T10351] dummy0: entered allmulticast mode
[  766.905501][T10351] dummy0: entered promiscuous mode
[  766.923799][T10355] netlink: 'syz.4.1340': attribute type 10 has an invalid length.
[  766.935113][T10355] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1340'.
[  766.959064][T10354] dummy0: left allmulticast mode
[  766.964309][T10354] dummy0: left promiscuous mode
[  766.974539][T10354] bridge7: port 1(dummy0) entered disabled state
[  766.983687][T10353] netlink: 'syz.0.1341': attribute type 10 has an invalid length.
[  766.993256][T10353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1341'.
[  766.995828][T10354] bridge8: port 1(dummy0) entered blocking state
[  767.009552][T10354] bridge8: port 1(dummy0) entered disabled state
[  767.016097][T10354] dummy0: entered allmulticast mode
[  767.023589][T10354] dummy0: entered promiscuous mode
[  767.036096][T10355] bridge3: port 1(dummy0) entered blocking state
[  767.042669][T10355] bridge3: port 1(dummy0) entered forwarding state
[  767.052681][T10355] dummy0: left allmulticast mode
[  767.059121][T10355] bridge3: port 1(dummy0) entered disabled state
[  767.074160][T10353] bridge8: port 1(dummy0) entered blocking state
[  767.080657][T10353] bridge8: port 1(dummy0) entered forwarding state
[  767.092807][T10353] dummy0: left allmulticast mode
[  767.098725][T10353] bridge8: port 1(dummy0) entered disabled state
[  767.198560][ T5736] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  767.357934][ T5736] usb 4-1: Using ep0 maxpacket: 8
[  767.366447][ T5736] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  767.375689][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.384405][ T5736] usb 4-1: Product: syz
[  767.392201][ T5736] usb 4-1: Manufacturer: syz
[  767.396877][ T5736] usb 4-1: SerialNumber: syz
[  767.616647][T10357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.628916][T10357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.977974][ T5743] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  768.161950][ T5743] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  768.170830][ T5743] usb 1-1: config 1 has no interface number 0
[  768.183212][ T5743] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  768.208545][ T5743] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  768.222818][ T5743] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  768.239799][ T5743] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  768.250294][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.258513][ T5743] usb 1-1: Product: syz
[  768.262955][ T5743] usb 1-1: Manufacturer: syz
[  768.267587][ T5743] usb 1-1: SerialNumber: syz
[  768.277220][T10378] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22
[  768.477900][ T5735] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  768.486818][T10378] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22
[  768.500207][ T5743] usb 1-1: No status endpoint found
[  768.608034][ T5735] usb 2-1: device descriptor read/64, error -71
[  768.696288][T10378] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1350'.
[  768.714495][T10378] CIFS: VFS: UNC: path must begin with // or \\
[  768.738224][T10378] CIFS: VFS: Malformed UNC in devname
[  768.743781][T10379] CIFS: VFS: UNC: path must begin with // or \\
[  768.750850][T10379] CIFS: VFS: Malformed UNC in devname
[  768.857903][ T5735] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  768.895681][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'.
[  768.905973][T10401] netlink: 'syz.2.1356': attribute type 10 has an invalid length.
[  768.914431][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1356'.
[  768.961163][ T5757] usb 1-1: USB disconnect, device number 70
[  768.987975][ T5735] usb 2-1: device descriptor read/64, error -71
[  769.122084][ T5735] usb usb2-port1: attempt power cycle
[  769.194528][T10405] geneve2: entered allmulticast mode
[  769.467990][ T5735] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  769.500546][ T5735] usb 2-1: device descriptor read/8, error -71
[  769.748493][ T5735] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  769.780078][ T5735] usb 2-1: device descriptor read/8, error -71
[  769.898317][ T5735] usb usb2-port1: unable to enumerate USB device
[  770.104534][ T5736] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  770.127018][ T5736] usb 4-1: clock source 0 is not valid, cannot use
[  770.142241][ T5736] usb 4-1: 1:1: cannot get freq (v2/v3): err -71
[  770.156376][ T5736] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  770.202371][ T5736] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  770.240198][ T5736] usb 4-1: clock source 0 is not valid, cannot use
[  770.255450][ T5736] usb 4-1: 2:1: cannot get freq (v2/v3): err -71
[  770.302845][ T5736] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  770.609478][ T5736] usb 4-1: USB disconnect, device number 72
[  770.804182][T10433] udevd[10433]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  770.885432][   T30] audit: type=1326 audit(1782972678.649:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10436 comm="syz.3.1365" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f611f79de59 code=0x0
[  771.357878][ T5736] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  771.403373][T10455] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1372'.
[  771.473024][T10459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  771.489077][T10459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  771.528323][ T5736] usb 4-1: device descriptor read/64, error -71
[  771.790933][ T5736] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  771.908073][T10476] qrtr: Invalid version 0
[  771.915779][T10478] netlink: 'syz.0.1378': attribute type 2 has an invalid length.
[  771.938093][ T5736] usb 4-1: device descriptor read/64, error -71
[  771.952510][T10478] : entered promiscuous mode
[  772.060738][ T5736] usb usb4-port1: attempt power cycle
[  772.120790][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1381'.
[  772.144140][T10487] macsec2: entered promiscuous mode
[  772.149604][T10487] batadv0: entered promiscuous mode
[  772.155563][T10487] macsec2: entered allmulticast mode
[  772.173387][T10487] batadv0: entered allmulticast mode
[  772.191869][T10487] 8021q: adding VLAN 0 to HW filter on device macsec2
[  772.203238][T10487] batadv0: left allmulticast mode
[  772.211964][T10487] batadv0: left promiscuous mode
[  772.351212][T10494] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  772.360155][T10494] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  772.368495][ T5757] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  772.440060][ T5736] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  772.502193][ T5736] usb 4-1: device descriptor read/8, error -71
[  772.539487][ T5757] usb 1-1: config 253 has an invalid interface number: 130 but max is 0
[  772.549568][ T5757] usb 1-1: config 253 has no interface number 0
[  772.559979][ T5757] usb 1-1: config 253 interface 130 has no altsetting 0
[  772.573936][ T5757] usb 1-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed
[  772.593492][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.603394][ T5757] usb 1-1: Product: syz
[  772.612610][ T5757] usb 1-1: Manufacturer: syz
[  772.620394][ T5757] usb 1-1: SerialNumber: syz
[  772.731517][T10507] bond6: option ad_user_port_key: invalid value (46900)
[  772.738602][ T5735] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  772.746738][T10507] bond6: option ad_user_port_key: allowed values 0 - 1023
[  772.754390][ T5736] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  772.762525][T10508] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1386'.
[  772.775449][T10507] bond6 (unregistering): Released all slaves
[  772.790590][ T5736] usb 4-1: device descriptor read/8, error -71
[  772.890265][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1380'.
[  772.909373][ T5736] usb usb4-port1: unable to enumerate USB device
[  772.918316][ T5735] usb 2-1: Using ep0 maxpacket: 16
[  772.941551][ T5735] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  772.954657][T10486] bridge0: port 2(bridge_slave_1) entered disabled state
[  772.974400][ T5735] usb 2-1: config 0 interface 0 has no altsetting 0
[  772.988827][ T5735] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  773.003393][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.014428][T10486] bridge_slave_1 (unregistering): left allmulticast mode
[  773.024100][ T5735] usb 2-1: config 0 descriptor??
[  773.031442][T10486] bridge_slave_1 (unregistering): left promiscuous mode
[  773.042749][T10486] bridge0: port 2(bridge_slave_1) entered disabled state
[  773.147083][ T5757] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware
[  773.259707][ T5735] nzxt-smart2 0003:1E71:2009.0017: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  773.272357][ T5757] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  773.281013][ T5757] dib0700: firmware download failed at 7 with -22
[  773.299816][ T5757] usb 1-1: USB disconnect, device number 71
[  773.653526][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  773.674941][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  773.696850][ T5674] usb 2-1: USB disconnect, device number 69
[  773.977362][T10519] loop5: detected capacity change from 0 to 7
[  773.989992][T10519] Dev loop5: unable to read RDB block 7
[  773.995620][T10519]  loop5: unable to read partition table
[  774.002420][T10519] loop5: partition table beyond EOD, truncated
[  774.009175][T10519] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  774.047913][ T5757] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  774.164326][T10516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  774.173241][T10516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  774.186258][T10516] fuse: Unknown parameter '��������0x0000000000000008'
[  774.207913][ T5757] usb 1-1: Using ep0 maxpacket: 32
[  774.215622][ T5757] usb 1-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  774.227326][ T5757] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  774.241546][ T5757] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  774.251956][ T5757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.270315][ T5757] usb 1-1: config 0 descriptor??
[  774.287733][ T5757] hub 1-1:0.0: bad descriptor, ignoring hub
[  774.305344][ T5757] hub 1-1:0.0: probe with driver hub failed with error -5
[  774.331591][ T5757] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  774.368536][ T5735] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  774.518794][ T5735] usb 4-1: Using ep0 maxpacket: 8
[  774.525493][ T5735] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  774.536277][ T5735] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  774.545403][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.556455][ T5735] usb 4-1: config 0 descriptor??
[  774.564994][ T5735] rndis_host 4-1:0.0: missing cdc header descriptor
[  774.572247][ T5735] cdc_acm 4-1:0.0: Control and data interfaces are not separated!
[  774.580186][ T5735] cdc_acm 4-1:0.0: This needs exactly 3 endpoints
[  774.586769][ T5735] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22
[  774.598168][ T5736] usb 1-1: USB disconnect, device number 72
[  774.769582][T10522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  774.781527][T10527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  774.781949][T10522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  774.792655][T10527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  774.803118][ T5735] usb 4-1: USB disconnect, device number 77
[  775.026268][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'.
[  775.393194][T10534] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!`l�1&�b��0xU�ϔ��r$�G����'
[  775.408334][T10534] CPU: 1 UID: 0 PID: 10534 Comm: syz.1.1395 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  775.408367][T10534] Tainted: [L]=SOFTLOCKUP
[  775.408375][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  775.408387][T10534] Call Trace:
[  775.408396][T10534]  <TASK>
[  775.408404][T10534]  dump_stack_lvl+0xe8/0x150
[  775.408442][T10534]  sysfs_warn_dup+0x8e/0xa0
[  775.408479][T10534]  sysfs_do_create_link_sd+0xc0/0x110
[  775.408503][T10534]  device_add_class_symlinks+0x1cf/0x240
[  775.408543][T10534]  device_add+0x467/0xb80
[  775.408576][T10534]  wiphy_register+0x1fc8/0x2ff0
[  775.408621][T10534]  ? __pfx_wiphy_register+0x10/0x10
[  775.408644][T10534]  ? __pfx_netdev_run_todo+0x10/0x10
[  775.408678][T10534]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  775.408715][T10534]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  775.408756][T10534]  ieee80211_register_hw+0x3d3d/0x4a50
[  775.408795][T10534]  ? ieee80211_register_hw+0x1971/0x4a50
[  775.408850][T10534]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  775.408879][T10534]  ? __asan_memset+0x22/0x50
[  775.408911][T10534]  ? __hrtimer_setup+0x1b7/0x260
[  775.408939][T10534]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  775.408972][T10534]  mac80211_hwsim_new_radio+0x3238/0x5680
[  775.409032][T10534]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  775.409055][T10534]  ? kstrndup+0xbd/0x160
[  775.409083][T10534]  ? kstrndup+0xbd/0x160
[  775.409105][T10534]  hwsim_new_radio_nl+0xd8b/0xf90
[  775.409146][T10534]  genl_family_rcv_msg_doit+0x233/0x340
[  775.409177][T10534]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  775.409215][T10534]  ? bpf_lsm_capable+0x9/0x20
[  775.409235][T10534]  ? security_capable+0x7e/0x2c0
[  775.409272][T10534]  genl_rcv_msg+0x614/0x7a0
[  775.409301][T10534]  ? __pfx_genl_rcv_msg+0x10/0x10
[  775.409322][T10534]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  775.409365][T10534]  netlink_rcv_skb+0x226/0x4a0
[  775.409393][T10534]  ? __pfx_genl_rcv_msg+0x10/0x10
[  775.409415][T10534]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  775.409459][T10534]  ? down_read+0x2be/0x330
[  775.409489][T10534]  genl_rcv+0x28/0x40
[  775.409508][T10534]  netlink_unicast+0x7bb/0x940
[  775.409545][T10534]  netlink_sendmsg+0x813/0xb40
[  775.409588][T10534]  ? __pfx_netlink_sendmsg+0x10/0x10
[  775.409623][T10534]  ? aa_sock_msg_perm+0xf1/0x1b0
[  775.409662][T10534]  ? __pfx_netlink_sendmsg+0x10/0x10
[  775.409690][T10534]  sock_sendmsg_nosec+0x13a/0x180
[  775.409739][T10534]  ____sys_sendmsg+0x54e/0x850
[  775.409775][T10534]  ? __pfx_____sys_sendmsg+0x10/0x10
[  775.409814][T10534]  ? import_iovec+0x73/0xa0
[  775.409849][T10534]  ___sys_sendmsg+0x2a5/0x360
[  775.409877][T10534]  ? __lock_acquire+0x683/0x2cf0
[  775.409906][T10534]  ? __pfx____sys_sendmsg+0x10/0x10
[  775.409941][T10534]  ? futex_wait+0x2a2/0x390
[  775.410009][T10534]  ? __fget_files+0x2a/0x420
[  775.410030][T10534]  ? __fget_files+0x3a2/0x420
[  775.410064][T10534]  __x64_sys_sendmsg+0x1b1/0x290
[  775.410096][T10534]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  775.410148][T10534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.410173][T10534]  do_syscall_64+0x174/0x580
[  775.410197][T10534]  ? trace_irq_disable+0x3b/0x140
[  775.410229][T10534]  ? clear_bhb_loop+0x40/0x90
[  775.410256][T10534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.410277][T10534] RIP: 0033:0x7f169d19de59
[  775.410299][T10534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  775.410317][T10534] RSP: 002b:00007f169df87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  775.410341][T10534] RAX: ffffffffffffffda RBX: 00007f169d425fa0 RCX: 00007f169d19de59
[  775.410356][T10534] RDX: e703000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  775.410370][T10534] RBP: 00007f169d233e6f R08: 0000000000000000 R09: 0000000000000000
[  775.410384][T10534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  775.410397][T10534] R13: 00007f169d426038 R14: 00007f169d425fa0 R15: 00007f169d54fa48
[  775.410433][T10534]  </TASK>
[  775.870138][ T7439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  775.880959][ T7439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  775.919144][ T5735] ------------[ cut here ]------------
[  775.926489][ T5735] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  775.936413][ T5735] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#0: kworker/0:4/5735
[  775.947148][ T5735] Modules linked in:
[  775.952410][ T5735] CPU: 0 UID: 0 PID: 5735 Comm: kworker/0:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  775.963486][ T5735] Tainted: [L]=SOFTLOCKUP
[  775.967876][ T5735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  775.978006][ T5735] Workqueue: mld mld_ifc_work
[  775.982775][ T5735] RIP: 0010:__rate_control_send_low+0x638/0x8a0
[  775.989052][ T5735] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f
[  776.008691][ T5735] RSP: 0018:ffffc9000449e738 EFLAGS: 00010246
[  776.014755][ T5735] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  776.022845][ T5735] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9044f640
[  776.030854][ T5735] RBP: ffff8880571e0f40 R08: 0000000000000000 R09: 0000000000000000
[  776.038843][ T5735] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888035f8f8e8
[  776.047070][ T5735] R13: dffffc0000000000 R14: ffffffff9044f640 R15: ffff8880571e3258
[  776.055059][ T5735] FS:  0000000000000000(0000) GS:ffff888125220000(0000) knlGS:0000000000000000
[  776.064006][ T5735] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  776.070611][ T5735] CR2: 00007f169df556b8 CR3: 0000000064f70000 CR4: 00000000003526f0
[  776.078601][ T5735] Call Trace:
[  776.081888][ T5735]  <TASK>
[  776.084824][ T5735]  rate_control_send_low+0x1a7/0x7b0
[  776.090134][ T5735]  ? __lock_acquire+0x683/0x2cf0
[  776.095070][ T5735]  rate_control_get_rate+0x20b/0x5d0
[  776.100465][ T5735]  ieee80211_tx_h_rate_ctrl+0xafa/0x1760
[  776.106152][ T5735]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  776.112241][ T5735]  ? __asan_memcpy+0x40/0x70
[  776.116833][ T5735]  invoke_tx_handlers_late+0xb5/0x1830
[  776.122316][ T5735]  ? ieee80211_tx_h_select_key+0xd1c/0x1a90
[  776.128241][ T5735]  ieee80211_tx_dequeue+0x3fb6/0x55a0
[  776.133656][ T5735]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  776.139400][ T5735]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  776.144797][ T5735]  ? do_raw_spin_lock+0x12b/0x2f0
[  776.149840][ T5735]  ? ieee80211_queue_skb+0x16e0/0x22c0
[  776.155293][ T5735]  ieee80211_hwsim_wake_tx_queue+0xbb/0x150
[  776.161220][ T5735]  ieee80211_queue_skb+0x1923/0x22c0
[  776.166521][ T5735]  ieee80211_tx+0x2c2/0x4b0
[  776.171080][ T5735]  ? __pfx_ieee80211_tx+0x10/0x10
[  776.176126][ T5735]  ? ieee80211_xmit+0x2e5/0x3c0
[  776.181073][ T5735]  __ieee80211_subif_start_xmit+0xf06/0x1690
[  776.187061][ T5735]  ? __ieee80211_subif_start_xmit+0x2ca/0x1690
[  776.193266][ T5735]  ? worker_thread+0xa47/0xfb0
[  776.198053][ T5735]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  776.204496][ T5735]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  776.210798][ T5735]  ieee80211_subif_start_xmit+0xf1/0x570
[  776.216440][ T5735]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  776.222754][ T5735]  ? __pfx_netif_skb_features+0x10/0x10
[  776.228557][ T5735]  dev_hard_start_xmit+0x2cd/0x830
[  776.233734][ T5735]  __dev_queue_xmit+0x1435/0x37f0
[  776.238844][ T5735]  ? __lock_acquire+0x683/0x2cf0
[  776.243822][ T5735]  ? __dev_queue_xmit+0x29b/0x37f0
[  776.248986][ T5735]  ? ___neigh_create+0x1cd2/0x22b0
[  776.254146][ T5735]  ? __pfx___dev_queue_xmit+0x10/0x10
[  776.259540][ T5735]  ? neigh_resolve_output+0x428/0x720
[  776.264909][ T5735]  ? eth_header+0x11b/0x200
[  776.269477][ T5735]  ? __asan_memcpy+0x40/0x70
[  776.274092][ T5735]  ? ip6_output+0x11e/0x540
[  776.278669][ T5735]  ip6_output+0x337/0x540
[  776.283002][ T5735]  ? __pfx_ip6_output+0x10/0x10
[  776.287981][ T5735]  NF_HOOK+0x177/0x4f0
[  776.292055][ T5735]  ? __pfx_NF_HOOK+0x10/0x10
[  776.296639][ T5735]  ? icmp6_dst_alloc+0x39b/0x430
[  776.301683][ T5735]  ? __pfx_dst_output+0x10/0x10
[  776.306575][ T5735]  ? __local_bh_enable_ip+0xd0/0x130
[  776.311909][ T5735]  ? icmp6_dst_alloc+0x39b/0x430
[  776.316863][ T5735]  ? icmp6_dst_alloc+0x39b/0x430
[  776.321833][ T5735]  mld_sendpack+0x890/0xe10
[  776.326350][ T5735]  ? mld_sendpack+0x206/0xe10
[  776.331056][ T5735]  ? __pfx_mld_sendpack+0x10/0x10
[  776.336107][ T5735]  mld_ifc_work+0x839/0xe70
[  776.340653][ T5735]  ? rcu_is_watching+0x15/0xb0
[  776.345417][ T5735]  ? process_scheduled_works+0xa20/0x14e0
[  776.351169][ T5735]  process_scheduled_works+0xa8e/0x14e0
[  776.356734][ T5735]  ? __pfx_process_scheduled_works+0x10/0x10
[  776.362745][ T5735]  ? assign_work+0x3cf/0x5d0
[  776.367339][ T5735]  worker_thread+0xa47/0xfb0
[  776.371958][ T5735]  ? __kthread_parkme+0x71/0x1f0
[  776.376905][ T5735]  kthread+0x388/0x470
[  776.380998][ T5735]  ? __pfx_worker_thread+0x10/0x10
[  776.386113][ T5735]  ? __pfx_kthread+0x10/0x10
[  776.390724][ T5735]  ret_from_fork+0x514/0xb70
[  776.395347][ T5735]  ? __pfx_ret_from_fork+0x10/0x10
[  776.400478][ T5735]  ? __switch_to+0xc89/0x1420
[  776.405159][ T5735]  ? __pfx_kthread+0x10/0x10
[  776.409765][ T5735]  ret_from_fork_asm+0x1a/0x30
[  776.414540][ T5735]  </TASK>
[  776.417554][ T5735] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  776.424835][ T5735] CPU: 0 UID: 0 PID: 5735 Comm: kworker/0:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  776.435758][ T5735] Tainted: [L]=SOFTLOCKUP
[  776.440158][ T5735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  776.450203][ T5735] Workqueue: mld mld_ifc_work
[  776.454881][ T5735] Call Trace:
[  776.458169][ T5735]  <TASK>
[  776.461092][ T5735]  vpanic+0x56c/0xa60
[  776.465101][ T5735]  ? __pfx__printk+0x10/0x10
[  776.469688][ T5735]  ? __pfx_vpanic+0x10/0x10
[  776.474182][ T5735]  ? is_bpf_text_address+0x292/0x2b0
[  776.479546][ T5735]  ? is_bpf_text_address+0x26/0x2b0
[  776.484761][ T5735]  panic+0xc5/0xd0
[  776.488495][ T5735]  ? __pfx_panic+0x10/0x10
[  776.492915][ T5735]  ? ret_from_fork_asm+0x1a/0x30
[  776.497849][ T5735]  __warn+0x315/0x4c0
[  776.501825][ T5735]  ? __rate_control_send_low+0x60c/0x8a0
[  776.507466][ T5735]  ? __rate_control_send_low+0x60c/0x8a0
[  776.513090][ T5735]  __report_bug+0x331/0x530
[  776.517644][ T5735]  ? __rate_control_send_low+0x60c/0x8a0
[  776.523272][ T5735]  ? __pfx___report_bug+0x10/0x10
[  776.528289][ T5735]  ? desc_read+0x194/0x3f0
[  776.532716][ T5735]  ? __lock_acquire+0x683/0x2cf0
[  776.537663][ T5735]  report_bug_entry+0x19a/0x290
[  776.542522][ T5735]  ? __rate_control_send_low+0x638/0x8a0
[  776.548144][ T5735]  ? __rate_control_send_low+0x63d/0x8a0
[  776.553770][ T5735]  handle_bug+0xce/0x200
[  776.558011][ T5735]  exc_invalid_op+0x1a/0x50
[  776.562507][ T5735]  asm_exc_invalid_op+0x1a/0x20
[  776.567348][ T5735] RIP: 0010:__rate_control_send_low+0x638/0x8a0
[  776.573579][ T5735] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f
[  776.593185][ T5735] RSP: 0018:ffffc9000449e738 EFLAGS: 00010246
[  776.599250][ T5735] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  776.607210][ T5735] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9044f640
[  776.615191][ T5735] RBP: ffff8880571e0f40 R08: 0000000000000000 R09: 0000000000000000
[  776.623152][ T5735] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888035f8f8e8
[  776.631114][ T5735] R13: dffffc0000000000 R14: ffffffff9044f640 R15: ffff8880571e3258
[  776.639264][ T5735]  ? __rate_control_send_low+0x600/0x8a0
[  776.644912][ T5735]  rate_control_send_low+0x1a7/0x7b0
[  776.650187][ T5735]  ? __lock_acquire+0x683/0x2cf0
[  776.655117][ T5735]  rate_control_get_rate+0x20b/0x5d0
[  776.660395][ T5735]  ieee80211_tx_h_rate_ctrl+0xafa/0x1760
[  776.666031][ T5735]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  776.672094][ T5735]  ? __asan_memcpy+0x40/0x70
[  776.676697][ T5735]  invoke_tx_handlers_late+0xb5/0x1830
[  776.682152][ T5735]  ? ieee80211_tx_h_select_key+0xd1c/0x1a90
[  776.688132][ T5735]  ieee80211_tx_dequeue+0x3fb6/0x55a0
[  776.693528][ T5735]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  776.699245][ T5735]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  776.704614][ T5735]  ? do_raw_spin_lock+0x12b/0x2f0
[  776.709636][ T5735]  ? ieee80211_queue_skb+0x16e0/0x22c0
[  776.715089][ T5735]  ieee80211_hwsim_wake_tx_queue+0xbb/0x150
[  776.720976][ T5735]  ieee80211_queue_skb+0x1923/0x22c0
[  776.726282][ T5735]  ieee80211_tx+0x2c2/0x4b0
[  776.730777][ T5735]  ? __pfx_ieee80211_tx+0x10/0x10
[  776.735808][ T5735]  ? ieee80211_xmit+0x2e5/0x3c0
[  776.740661][ T5735]  __ieee80211_subif_start_xmit+0xf06/0x1690
[  776.746645][ T5735]  ? __ieee80211_subif_start_xmit+0x2ca/0x1690
[  776.752793][ T5735]  ? worker_thread+0xa47/0xfb0
[  776.757565][ T5735]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  776.763979][ T5735]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  776.770213][ T5735]  ieee80211_subif_start_xmit+0xf1/0x570
[  776.775837][ T5735]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  776.782084][ T5735]  ? __pfx_netif_skb_features+0x10/0x10
[  776.787658][ T5735]  dev_hard_start_xmit+0x2cd/0x830
[  776.792778][ T5735]  __dev_queue_xmit+0x1435/0x37f0
[  776.797806][ T5735]  ? __lock_acquire+0x683/0x2cf0
[  776.802748][ T5735]  ? __dev_queue_xmit+0x29b/0x37f0
[  776.807853][ T5735]  ? ___neigh_create+0x1cd2/0x22b0
[  776.812962][ T5735]  ? __pfx___dev_queue_xmit+0x10/0x10
[  776.818330][ T5735]  ? neigh_resolve_output+0x428/0x720
[  776.823699][ T5735]  ? eth_header+0x11b/0x200
[  776.828201][ T5735]  ? __asan_memcpy+0x40/0x70
[  776.832802][ T5735]  ? ip6_output+0x11e/0x540
[  776.837298][ T5735]  ip6_output+0x337/0x540
[  776.841624][ T5735]  ? __pfx_ip6_output+0x10/0x10
[  776.846487][ T5735]  NF_HOOK+0x177/0x4f0
[  776.850569][ T5735]  ? __pfx_NF_HOOK+0x10/0x10
[  776.855175][ T5735]  ? icmp6_dst_alloc+0x39b/0x430
[  776.860112][ T5735]  ? __pfx_dst_output+0x10/0x10
[  776.864973][ T5735]  ? __local_bh_enable_ip+0xd0/0x130
[  776.870254][ T5735]  ? icmp6_dst_alloc+0x39b/0x430
[  776.875190][ T5735]  ? icmp6_dst_alloc+0x39b/0x430
[  776.880124][ T5735]  mld_sendpack+0x890/0xe10
[  776.884653][ T5735]  ? mld_sendpack+0x206/0xe10
[  776.889344][ T5735]  ? __pfx_mld_sendpack+0x10/0x10
[  776.894482][ T5735]  mld_ifc_work+0x839/0xe70
[  776.898994][ T5735]  ? rcu_is_watching+0x15/0xb0
[  776.903766][ T5735]  ? process_scheduled_works+0xa20/0x14e0
[  776.909501][ T5735]  process_scheduled_works+0xa8e/0x14e0
[  776.915066][ T5735]  ? __pfx_process_scheduled_works+0x10/0x10
[  776.921061][ T5735]  ? assign_work+0x3cf/0x5d0
[  776.925783][ T5735]  worker_thread+0xa47/0xfb0
[  776.930409][ T5735]  ? __kthread_parkme+0x71/0x1f0
[  776.935363][ T5735]  kthread+0x388/0x470
[  776.939432][ T5735]  ? __pfx_worker_thread+0x10/0x10
[  776.944541][ T5735]  ? __pfx_kthread+0x10/0x10
[  776.949127][ T5735]  ret_from_fork+0x514/0xb70
[  776.953802][ T5735]  ? __pfx_ret_from_fork+0x10/0x10
[  776.958907][ T5735]  ? __switch_to+0xc89/0x1420
[  776.963596][ T5735]  ? __pfx_kthread+0x10/0x10
[  776.968180][ T5735]  ret_from_fork_asm+0x1a/0x30
[  776.972950][ T5735]  </TASK>
[  776.976225][ T5735] Kernel Offset: disabled
[  776.980545][ T5735] Rebooting in 86400 seconds..