last executing test programs:

23m47.581919182s ago: executing program 0 (id=1919):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000008400000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xcc}}, 0x0)

23m47.535417266s ago: executing program 0 (id=1921):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffff6, 0x96a, 0x1, 0xe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x80)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = dup3(r1, r0, 0x80000)
read$watch_queue(r3, &(0x7f0000001d40)=""/4095, 0xfff)

23m47.423155198s ago: executing program 0 (id=1922):
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000040bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="df000000"], 0x14c}}, 0x4810)

23m47.26748105s ago: executing program 0 (id=1926):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1d"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) (async)
r3 = dup(r1) (async)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x900, 0x0)
fcntl$lock(r4, 0xa, &(0x7f00000019c0)={0x1, 0x0, 0x2000000000000001, 0x2}) (async)
ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @empty}})
getpid() (async)
ioctl$VT_GETSTATE(r0, 0x5603, 0xfffffffffffffffe)

23m47.089624768s ago: executing program 0 (id=1936):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@e={0xff, 0x3, 0x0, 0x0, @generic})
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0", 0x25}], 0x1}], 0x1, 0x40800)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000004000000200001800d000100"], 0x34}}, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
r7 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000002280)={0x6, 0x9bc, 0x2, 0x0, 0x2, 0x400})
sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="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", 0x165}, {&(0x7f0000001600)="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", 0x5bb}], 0x2, 0x0, 0x0, 0x2c}, 0x40440c4)
r8 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001)
recvmmsg(r8, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}, 0xffff}], 0x1, 0x10041, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x2000}})
read$FUSE(r9, &(0x7f0000000200)={0x2020, 0x0, 0x0, <r10=>0x0, 0x0, <r11=>0x0}, 0x2092)
chown(&(0x7f0000004580)='./file0\x00', r10, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002240)={0x9, 0x1, {r11}, {<r12=>r10}, 0x6a8})
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002580)={0x19c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x170, 0x1, 0x0, 0x1, [@nested={0x16c, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x15a, 0x11, 0x0, 0x1, [@generic="5c59a47503202556faa3a6268cb113bd24ffcbede1a6d46fc2cd581c433facc1a9b257ea00032d2add4640dbcbb1ba0614dab8c36b373a", @typed={0x14, 0xa2, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}}, @typed={0x8, 0x146, 0x0, 0x0, @uid=r10}, @typed={0x8, 0x62, 0x0, 0x0, @uid=r10}, @typed={0xc, 0xac, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0xee, 0x0, 0x0, @pid=r11}, @typed={0x8, 0x55, 0x0, 0x0, @uid=r12}, @generic="f230aa1ed30031d0b4aa9402b70a0f294553411221ac09730426105fe138fc178edbc5a1db10d96fcfb82993e0c840e976e6903188937f6130bbdff447582faef6359d77a2a3872630531392f19cab117f56423370fcf2d07534261b360b1036a047d80c0180fe49550b82e038d00710ac3ee60092b8289cdf25f2db4da8071bc3e6aa1ac605161ffe03cafd41ece717cfc86ccdd4a21cde8575a258543a1ac2c313f8494124ec1e3b08f23a647378e7706e39df8a81684adabceb02469d7421431cd708279806811ca43691102328fafb46064b9cf77b", @typed={0x8, 0x56, 0x0, 0x0, @uid=r12}]}, @typed={0x8, 0x59, 0x0, 0x0, @u32=0x2}]}]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

23m46.030543104s ago: executing program 0 (id=1937):
pipe2(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xde<Q\x1a\x13\x15\xe4\xf8YH\xa9\x8a\xe3\x88\x12;V6\x1e\xd3\xccL>U#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v<id\x92\x02\x16\x9d\xe1rmkU\x90\x994\x06\xe5\\\x80\xfb'}}]}}) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xde<Q\x1a\x13\x15\xe4\xf8YH\xa9\x8a\xe3\x88\x12;V6\x1e\xd3\xccL>U#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v<id\x92\x02\x16\x9d\xe1rmkU\x90\x994\x06\xe5\\\x80\xfb'}}]}})
writev(r0, &(0x7f0000000240), 0x0)
connect$x25(r0, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12)

23m30.091397298s ago: executing program 32 (id=1937):
pipe2(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xde<Q\x1a\x13\x15\xe4\xf8YH\xa9\x8a\xe3\x88\x12;V6\x1e\xd3\xccL>U#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v<id\x92\x02\x16\x9d\xe1rmkU\x90\x994\x06\xe5\\\x80\xfb'}}]}}) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xde<Q\x1a\x13\x15\xe4\xf8YH\xa9\x8a\xe3\x88\x12;V6\x1e\xd3\xccL>U#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v<id\x92\x02\x16\x9d\xe1rmkU\x90\x994\x06\xe5\\\x80\xfb'}}]}})
writev(r0, &(0x7f0000000240), 0x0)
connect$x25(r0, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12)

13m8.79988795s ago: executing program 3 (id=5659):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
r4 = eventfd2(0x0, 0x0)
close(r4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, r5, 0x2000004, 0x2011, r4, 0x0)

13m8.582892652s ago: executing program 3 (id=5662):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000180)={0xda, 0x0, 0x2})

13m8.319040739s ago: executing program 3 (id=5665):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@rdmsr={0x66, 0x18, {0x40000101}}], 0x18})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13m8.050500727s ago: executing program 3 (id=5669):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f00000002c0)=[@cpuid={0x64, 0x18, {0x2, 0x81}}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x30})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000240)="fb4149dd053be3ac2cc4a22332a77b23b8898600087bb16c94a6ab80313804d92f00000000010000045a96383369d226270080ff000000000000000000a000", 0x0, 0xffa4)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x40000, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x401c5820, &(0x7f00000000c0)=@attr_other={0x0, 0x9, 0x100000000, 0x0})
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0x80086601, 0x20000000)

13m7.851571647s ago: executing program 3 (id=5672):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)

13m7.408782483s ago: executing program 3 (id=5677):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@nested_load_syzos={0x136, 0x5f, {0x1, 0x59, [@code={0xa, 0x3f, {"36450f32f3646741f466b805008ed8423c4b0f093e260fc75f0d66b8c0008ed0420f2119660fc7772666bad004ed"}}]}}], 0x5f})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x343, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bfe000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@nested_create_vm={0x12d, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x5f, 0xfffffffffffffff9, 0x0, 0x9}}], 0x50})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfe000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xc, 0xffffffffffff687d, 0xfffffffffffffffd}}, @nested_vmlaunch={0x12f, 0x18}], 0x60})
ioctl$KVM_RUN(r11, 0xae80, 0x0)

13m7.06099073s ago: executing program 33 (id=5677):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@nested_load_syzos={0x136, 0x5f, {0x1, 0x59, [@code={0xa, 0x3f, {"36450f32f3646741f466b805008ed8423c4b0f093e260fc75f0d66b8c0008ed0420f2119660fc7772666bad004ed"}}]}}], 0x5f})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x343, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bfe000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@nested_create_vm={0x12d, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x5f, 0xfffffffffffffff9, 0x0, 0x9}}], 0x50})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfe000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xc, 0xffffffffffff687d, 0xfffffffffffffffd}}, @nested_vmlaunch={0x12f, 0x18}], 0x60})
ioctl$KVM_RUN(r11, 0xae80, 0x0)

9m15.919406121s ago: executing program 4 (id=7127):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x401)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000004c0)={r2, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x40804)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x4a8002, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x3})
sched_setattr(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (fail_nth: 5)

9m15.486602816s ago: executing program 4 (id=7130):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001200"], 0x1c}], 0x1}, 0x0)
fstat(r0, &(0x7f00000029c0))
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=<r3=>0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0, <r4=>0x0})
setpgid(r3, r4)

9m15.220418937s ago: executing program 4 (id=7133):
munmap(&(0x7f0000081000/0x3000)=nil, 0x3000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r5, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0xfb7f, 0x0, &(0x7f0000000000/0x3000)=nil})

9m14.687327011s ago: executing program 4 (id=7135):
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528"], 0x200) (async)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528"], 0x200)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000100)='./file0\x00') (async)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00')
openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) (async)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0x2, 0x9, 0x1, 0xdd7, 0x88d7, 0x8f, 0x2, 0x8012, 0x1006, 0xfffffe01, 0x5, 0xfc000000, 0x10000009, 0x3, 0x800007, 0xfffffffd, 0x8, 0x6, 0x9, 0x8e, 0x4, 0x3, 0xa, 0xa, 0x4, 0x10001, 0xb0c4, 0x7, 0x20004, 0x400002, 0x22]})
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000500)={0x0, 0x4, 0x3003, 0x1}) (async)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000500)={0x0, 0x4, 0x3003, 0x1})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x128}}], 0x1, 0x810) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x128}}], 0x1, 0x810)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a30312713", 0x1a}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x9, 0x4d9e, 0x8) (async)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a30312713", 0x1a}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x9, 0x4d9e, 0x8)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

9m14.05130129s ago: executing program 4 (id=7139):
r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0) (async)
close(0x3) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) (rerun: 64)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1, 0x2}}}, &(0x7f0000000040)=0x84) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@int=0x2, 0x4) (async, rerun: 32)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async)
io_setup(0x3fb, &(0x7f0000000500)=<r6=>0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
r7 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc040564a, &(0x7f0000000200)={0x0, 0x1, 0x1012, 0xffffffffffffffff, 0x0, 0x0}) (async)
io_submit(r6, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='m', 0xffffff4c}]) (async)
io_destroy(r6) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f47a3b6e947d8444ef8a51116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32000000001400000011000100000000000000199c143c000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x42040000, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

9m13.607499417s ago: executing program 4 (id=7141):
setsockopt(0xffffffffffffffff, 0x10000107, 0x8, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1000)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x19)
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800, 0x0) (fail_nth: 7)

9m13.310464905s ago: executing program 34 (id=7141):
setsockopt(0xffffffffffffffff, 0x10000107, 0x8, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1000)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x19)
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800, 0x0) (fail_nth: 7)

10.371542258s ago: executing program 1 (id=10004):
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmsg(r0, &(0x7f0000000080)={0x0, 0xfe, 0x0}, 0x12160)
r1 = syz_usb_connect$uac1(0x5, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000106b1d01014000010203010902930003010010030904000000010100000a24010000020201020c240201050205030600060806240406077508240706020009a50b240605060205000a000609040100000102000009040101010102000009050109ff030605020725018207500a0904020000010200000904020101010200000824020105030903072401050600000905820940000002f20625"], 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0x3, 0x43, {0x43, 0x5, "49412690c931b6b7b08bf53c409e60e31e136186d783b1723662b36f02092d44c4e70223445a3ea12a1568fab61f34740f6a6df2366fde35a4404ac08acafbcb17"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x11, 0x7f, "8ba1fb964d562b5769f42b29ea46f2d621a67427d17c7d31163c5eea7da7dbc2fbb7d4c75a8401aff8e8f7607a6aa11759ae190364339f0d3595527e48d921987360c9513749ce0de4c7f85d9f3640784b33fa4efde1bfbf69e38b60c323e51c67eb3681a068da6e94c4ea7582c466470473020108a3717983b394de331103"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xe7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000300)={0x20, 0x81, 0x1, "f0"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "337bd7"}, &(0x7f0000000380)={0x20, 0x83, 0x3, "886bf9"}, &(0x7f00000003c0)={0x20, 0x84, 0x1, "10"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "2cec3d"}})

8.674689004s ago: executing program 1 (id=10013):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x40, 0x11, 0x9a, {0x9a, 0x31, "1599eeeab5d5869087b95f022d263c4df741d66d09a08ed872b018efc52a4c163846d2139a691e44c8037bdeb5da67d4cb0a1304ce4fc4a0e41201fa24e2c994d00a23c13ed8cd8e5e849fbae592217a45241b1a1584198116743328c6fdf891b647ebe178cff46f4378ddce6392b8c2784dbf25759d54199241d11cb49d623adee0dfa4a4dfcda19d0bd96aa723c93720e8940c38f91c3f"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x0, 0x9, 0xb6, "14aa98e89b12b1dd5188d4d1fb11138f76822e7e38419d0f57ec70d5069cc69a764419e35383d8842b2ec36244c4263e91b3bdfa0eba2dcaa386bf8de80f9ae969e99419cd696fdda99f7d25fd4ea04632e4dd01edbfa1234bafefa784f3b29f9ccbc3a6fd05208da6c64584af9b1e5684a4ef8fa4ac79cc8638818a4174915699d237bc605b526c8daa1606abf54e4d86466b2cc68cef53f815d8bbf25cb7c359bc149b58358af8e19516ed2db1c9b4eab0d321f08e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2e}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)={0x40, 0x13}, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x1, 0x131, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11f, 0x1, 0x1, 0x5, 0xc0, 0x10, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "add5a4ba"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x7288, 0xd}, [@mdlm_detail={0xbb, 0x24, 0x13, 0xb7, "90a4ff917f741a957ca6f27ea97673a88a23253fd20572bafd6480d7794c17f19614340a8a2fa15b805ea8e25da9ac85b30e8a0799e86ddcd8fdab9dcde199a8686ab58c91b5e0766c10d0b19f66b2cd0f2b7f68c9fb8d5bc8f9474fa0e05b19c9c91011fb5b3fce5a32fbf404fb9736df6a0f6b7c912d00f0621689599a6ed1f62f05d8e3874f45716a33241db4e0d708aa47e995457e4f7d60e2dda2fd68d0678e181e199b123f159aa15a2031bd1ffd9b1d9d73094b"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x10}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x707f82ebca1cecb9, 0x3, 0xfc, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000000f00)={0x0, 0xfffffffffffffffe, 0xc7, &(0x7f00000007c0)={0x5, 0xf, 0xc7, 0x4, [@generic={0xa1, 0x10, 0x0, "b33b41d579691a1d53e5009288579ea0c56710461e19a62489fe97e9806c0099f6891527cd345fb2f6bc512f76510cc76ccbae7ab3d0469433671e8bdf690a398c9c148f03b26477efe1c6b0be7d8afb97eec65eb2428d24ab5c20ba952847472586ef031d1c2ef9c3975f1baae74135177adfa1f6390bf435010edf9de93b185993ecbb7aebdf518739c13d300f8b12e76d3a0e6c662258aa42602d4a74"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "63088d16857ec0751164a72cb0658c5d"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0x1, 0x1}]}, 0x7, [{0xb4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40361397a4f42720031c6e00ba0d2d7a826ae1cd654ef6bd82da369a7d8a4aed0641847708f13dc2003e47c60882e78eeab1d24852baeacb447f773f7a7377fa769b1cf7d0599146c1b565f8e830b7df475925538f8482879fbffe49d6b6b5c7ec70a3fc33b25e5c8015212945cb2dbe69d756d62dc6fb83ffdd66f200fccf9518e549e0e82543e7d6441adfb56b08d88eb8bf906f66f342cfc438fa99fcd077156d7af7804"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4b}}, {0xc7, &(0x7f0000000940)=@string={0xc7, 0x3, "88611e8c2954dcf77f3669ac347c8ba5366528e2aa093d08240b0b8337536aa3a0de192e470794ac0493ecdca21265ab024cd16ecc67a6c3c82d777a10a5847cafd43a4883b6764cd1dce163f0dffbdad570743c95769959cabd8a69de45bf3bbbef3000571e8d53967f5e8153d815e2dad625bfaeccb365aff8edd8ea2bc4f9d7d442a3d123a59c8b2e6b7630226a17d8d7fab429079d6ecd0bdbe25d1897b7c6dfdeaf6630fc4dc515b291f8141d16043cc5e50f9817a47625a77e27de6d37816d5363b2"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2001}}, {0x70, &(0x7f0000000a40)=@string={0x70, 0x3, "0241979c7635882012186b3478270d193dbfea65dba4846bd75bbc4b3eefc2489eaa7e090afb754e47ba419c6be3df239191184f8943e65767fe681c803689107f47dfa887c043a3563178f7d1e0d8ac60cb8d7029d0902d0b41273a7cfaeacabf4ac65a645e82734dfbcdf8d1d8"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1809}}]})
openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

6.363371293s ago: executing program 2 (id=10019):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mknod(&(0x7f0000000a40)='./file0\x00', 0x10, 0x101)
mount$afs(0x0, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x0, &(0x7f0000001040)={[{}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x40, 0x10, 0x6f, {0x6f, 0x22, "d8af71c06472e1dd05f5b27b413abbbfeda0606064425ab445830b1aaaa3bbb55697e450a532c4cf46f711c3a65095501703eb447f334a001da57ad90283d1a4f5cb4fc511c91d0a2a4dc6c92d9ffe9ac2fecd716abb020d1fa97b442ca987261a93251cc00ea3266c72706386"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x6, 0x7a, "c78a6bc1df6ed17628c466798530581635d7eadd7514bd106c7fff44379b62c5b128e97586e25d498c598d005d63e5a31d610262004b86e2725f8b2a04175f4a8bcf889dcb0aaa100390b291e3cd118fab2f2b0804cd18786bd5891cf0587371d74831cb0aaa6903597c8cdf095ac7cbfe2cc75d0a5dde8264d0"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, 0xfffffffffffffffd, &(0x7f0000000280)={0x20, 0x82, 0x1, '\a'}, &(0x7f00000002c0)={0x20, 0x83, 0x3, 'Ss@'}, &(0x7f0000000300)={0x20, 0x84, 0x3, "c2816a"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "0955b6"}})

5.611345185s ago: executing program 1 (id=10023):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x248802, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x0, 0xee00}], {0x4, 0x4}, [{0x8, 0x1, 0xee00}, {0x8, 0x0, r2}], {}, {0x20, 0x6}}, 0x3c, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0xf8b, 0x2, 0x3, 0x6, 0x8}) (async)
r5 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r5, 0x107, 0x9, 0x0, &(0x7f0000000040)) (async)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r7=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xa1ab, @mcast1, 0x2}, r7}}, 0x30)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r8=>r0, {0x4}}, './file0\x00'})
fremovexattr(r8, &(0x7f0000000100)=@random={'security.', '\x00'})
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x180, 0x80, 0x0})
syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d5bb"], 0x0) (async)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000000180)='[\x8d\x00', &(0x7f00000001c0)='./file0\x00', r8)

3.834706253s ago: executing program 1 (id=10033):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'rose0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x8, 0x0)
r3 = dup2(r0, r2)
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000b40)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, &(0x7f00000008c0)={0x14, &(0x7f0000000840)={0x20, 0x21, 0x2f, {0x2f, 0x24, "515373b845d69aadfed20d966437aa6881cc59ba8b61814a9d39823ad9e252feea7b4b8f6b7a0c750c2a78562e"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000000b00)={0x34, &(0x7f0000000900)={0x0, 0x11, 0x8e, "b71a1213f75208e0a1533e67ee932b8c349b9b8f174838794c58603406a0023957c6f11ea654a1ff28260f14ad1c523f665e728c8becb58498fb06b2d2e3124c41342b5997c732728016e97feed34e2eb0fc00c2117551b6ab0a0b6f707a9aa90d44628f34da0451de34ee7e09e12a6c3e2d7c1344a451ca7d1392093fa26523ababac4c8c517e4ca7779612c297"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xe4}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000a40)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000a80)={0x40, 0xa0, 0x4, 0xff}, &(0x7f0000000ac0)={0xc0, 0xa2, 0x2f, "2792a4a589344d90c2f6fb1aae508db333b2e8f5cf6c5c46761078d822921a2bfa11636b87ad9db664a62fbcca0c08"}})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x82)
inotify_init()
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, 0x3, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_QUOTA={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3e}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80000001}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x5)
fchdir(r6)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
fanotify_init(0x200, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x20, 0xf, 0x52, {0x52, 0x3, "0258b42a8f64ad20a208baa8210de3849578601581ad4cef8804f563169e42f23d38522ccc67a4146c7e9fb9b0a352dfdbe11838d0cdc82e9d50585706373f6cf044355c5edd6f5ba493144876f76107"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f00000000c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "1fd07bf758448450f1d891e4d9a0fdf8"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0xff, 0x9, "2734d3ce", "5c962a7d"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x1, 0x0, 0x4, 0x8, 0x9}}}, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x20, 0x31, 0x9f, "664ca37bcfdea0ad2a5e887a1d8d64439e161e0a17a72beac36df34edd9e93a1169bff6f487d2f137369abe3eb457e2784fce942c755a42f0ea4d929f75f2e894bfd432004318578144dd2bf7038bf5478e182c7a79ab44801da3059b81f58ee884f5614d3c1cd691d3526e2c7d3fa8fa131f0f562e98b048e8693168682dac094f2d610f5a3dc3c596e55ce91d89fe30cf4298a32388bf5334ee50fca286a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xe6}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x100, 0x8}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000540)={0x40, 0xb, 0x2, "9903"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xabe2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "9ce2"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x5f}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xfd}})
syz_usb_control_io$uac2(r4, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0)

3.629928949s ago: executing program 2 (id=10035):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = syz_open_dev$video4linux(&(0x7f00000060c0), 0x7, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000006140)={0x0, 0x0, 0x0, '\x00', 0x0})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
dup3(r1, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x0, 0xa, 0x0, 0x61}})
preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000000300)=""/97, 0x61}], 0x1, 0x0, 0x0, 0x0)
open_by_handle_at(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="200000006200000061000000000000000400fa000000000005000000b3030000ffffffff00000000"], 0x111000)
lseek(r2, 0xfffffffffffffffd, 0x0)

3.370527616s ago: executing program 2 (id=10037):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000a00000000003a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xcc}}, 0x0)

3.123445473s ago: executing program 5 (id=10039):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={<r0=>0x0}, &(0x7f00000000c0)=0xc)
syz_open_procfs(r0, &(0x7f0000000100)='coredump_filter\x00')
exit(0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x541b, 0x0)
r2 = socket$inet6(0x2d, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0x2d, 0x4e20, 0xfd9, @mcast1, 0xffffffff}, 0x1c)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

3.079606031s ago: executing program 2 (id=10040):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001002000000000000000020000000400000014000100ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41081010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x240000cc)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2.151508506s ago: executing program 5 (id=10043):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mknod(&(0x7f0000000a40)='./file0\x00', 0x10, 0x101)
mount$afs(0x0, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x0, &(0x7f0000001040)={[{}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x40, 0x10, 0x6f, {0x6f, 0x22, "d8af71c06472e1dd05f5b27b413abbbfeda0606064425ab445830b1aaaa3bbb55697e450a532c4cf46f711c3a65095501703eb447f334a001da57ad90283d1a4f5cb4fc511c91d0a2a4dc6c92d9ffe9ac2fecd716abb020d1fa97b442ca987261a93251cc00ea3266c72706386"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x6, 0x7a, "c78a6bc1df6ed17628c466798530581635d7eadd7514bd106c7fff44379b62c5b128e97586e25d498c598d005d63e5a31d610262004b86e2725f8b2a04175f4a8bcf889dcb0aaa100390b291e3cd118fab2f2b0804cd18786bd5891cf0587371d74831cb0aaa6903597c8cdf095ac7cbfe2cc75d0a5dde8264d0"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, 0xfffffffffffffffd, &(0x7f0000000280)={0x20, 0x82, 0x1, '\a'}, &(0x7f00000002c0)={0x20, 0x83, 0x3, 'Ss@'}, &(0x7f0000000300)={0x20, 0x84, 0x3, "c2816a"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "0955b6"}})

2.14695975s ago: executing program 2 (id=10045):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in=@remote, {0x3, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d3a5550860a1de8547aa140db9a2000000"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async, rerun: 32)
dup3(r0, r2, 0x80000) (async, rerun: 32)
sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363168a2559f334d436138406b699de69db13fd737428808940bcd0940dc930c81aaad8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987ebfdb041df6bbc2d10b61eb755df569c9cb7c4951ddb54505f67244cd16e376fbbdebc994d22a474b7bc494cafcac137748c8ebff7807053222d67c3ee79861e8cf4ff092236fccfbe08dcb5d7c2ba08b25883740695452a401800e631b0309b9a6963cc00e9e52df03723ce3", 0xcf}, {&(0x7f0000000f80)="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", 0x20b}], 0x2}, 0x0) (async, rerun: 64)
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) (rerun: 64)
close(r0)

1.938491211s ago: executing program 2 (id=10046):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {0x0, r2, 0x1}}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[], 0x0)
r4 = socket(0x1e, 0x1, 0x0)
connect$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x8a, &(0x7f0000000040), 0x4)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x8, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x204, 0x3, 0x5, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x6, 0x10}}]}}}]}}]}}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x15555555555557c0, [{0x0, &(0x7f0000000340)=@lang_id={0x0, 0x3, 0x441}}, {0x0, &(0x7f0000000240)=@lang_id={0x0, 0x3, 0x4ff}}, {0x0, &(0x7f0000000440)=@lang_id={0x0, 0x3, 0x446}}, {0x0, &(0x7f0000002800)=@string={0x0, 0x3, "768074190819b7e0da848cdf5ca9a1bf45641e3646a5500db1baa1173d716041e1d38481bf71e1f2767c19437f3e732b7d4247f052dba5e841ff84bb84a5858630ab947f63d916d713aec8a294bb73f6491775a94b689941df67bc5841256ccdc14c6b4ed5be012cf3109e74f9c8396d93ab54c3fbeacd319ab39c465cf6f5c58a8f8021c962ff14595b053ead5a9b5557f88c7ea911a821c9275ab45c4070c72aa7af594f00b21139d47af29c03fdeb22ae7111a91e219292c86a658a53a838b1f4ae0d725372a60310df59584828d9c4b8b855f7935775a5ee5a4e35cd9cd5d4b3742f2a0443f0a763fdde6209480147173c1e7ebf3c58a36f79b082"}}, {0x0, &(0x7f0000000480)=@string={0x0, 0x3, "c094269c65a9e30f6457f6d489af5d9880f654cd0a86cf9a6f0baf9c95e5c65820831e55c85dfff1d181abdbd77a129efd2bfef6ba78b8e64d895f29b3f4c7e20d1ca0472648784ed5bf892419e4f038bae28ea3b20c882623809b566b80c680fda92ed55cb29e4160549c3713e6d61ef54ca1eedc4e5417e971fb9f799b4829c9db6c8d2d68b75b5478ffae65473735abc0d537b79c0f1e5dcc4bd3ae627f2da5feb600ed7e4aad7ff2cc34ae15c4c03b663e03256a76165870030e6e0239d32a44b978752388a97f50d25625cbfa6c8b"}}, {0x0, &(0x7f00000005c0)=@string={0x0, 0x3, "7912f456d55f919c00144973f4c11df15da386e49dfb73689a42a20d17cc6f129b3fe2d5294c7ae361a1341cdfe19ef45ca45a59cecaba0cf13f3bd4cc6e9dce93525a96d56284f854a49de31b02c8ce6ff77620ae33a4b46a24c0b6054ce76019c57327ed89393b1c0b92a753"}}, {0x0, &(0x7f0000002680)=@string={0x0, 0x3, "b328986d6e26eb0059c6746df4034971acc032c399b0977f547e5e137244f7b1a8a58f8606682ce72f7ff5a32c023f1cc91ef0bf5bf5ae28c404305579b36512e6334200fea7826481813bb79b0a8545b58940b6651f3ea9ef065f9c99a204da1805d5f001aaa9062b79a40072f873265664ef171403b8246fbb41d33e7bdef96aebd90cef882ad3a0e42509eea8bc6759aae2e1a28f0cf77fc0dcbb6687908e02621f3955a70d75782a16c4a5fae40a112e5a323d86dbd6e07b9ad1e18c1708ac74f3897c7e257e28a6cce99bb2926626a7e73b532606"}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="cdb13100", @ANYRES16=r6, @ANYBLOB="010026bd70007cdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="08009e0040270000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40400d0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x10b)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0)
read$FUSE(r9, &(0x7f0000000640)={0x2020}, 0x2020)
unlinkat(r9, &(0x7f0000000140)='./file1\x00', 0x7ffde38f5ee1df6f)
lseek(r8, 0xfffffffffffffffd, 0x0)

1.763204184s ago: executing program 6 (id=10047):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac000000000000000000000d00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}})

1.651020611s ago: executing program 6 (id=10048):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x153a01, 0x33)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2})
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
getpeername$inet(r3, 0x0, &(0x7f0000000040))
setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}, 0xc)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x8e, 0x0, 0x1})
write$cgroup_netprio_ifpriomap(r1, &(0x7f00000010c0)=ANY=[], 0x8)
statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getgid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x100)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="95b1c50c9c7f0be0c70276ec202c726f6f746d6f64653d30303030303030303030303030303030303034d6516dc1a9d5b89b04d92025f8e54f83dae9ef79b240e1a0f59f1269ca8af381bb5ce55446380ecb7ca7583899d9", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',allow_other,blksize=0x0000000000000a00,blksize=0x0000000000000000,allow_other,max_read=0x000000000000000e,max_read=0x0000000000000000,dont_appraise,dont_appraise,obj_role=^,uid<', @ANYRESDEC=r6, @ANYBLOB=',\x00'])
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31116b876c1d0000007ea60864160af36514001ac00800020007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
read$eventfd(r1, &(0x7f0000000480), 0x8)

1.541844598s ago: executing program 6 (id=10049):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000a00000000ff8400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xcc}}, 0x0)

1.439180763s ago: executing program 6 (id=10050):
r0 = fanotify_init(0x200, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x455, 0x8000003, r1, 0x0)
fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl(r1, 0x54b, &(0x7f0000000100)="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")

1.438978221s ago: executing program 5 (id=10051):
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000010000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="df000000"], 0x14c}}, 0x4810)

1.407524398s ago: executing program 6 (id=10052):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e24, 0x8001, @loopback, 0x10005}}, 0x6, 0x6}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYRES32=0x0, @ANYBLOB="0404"], 0x20}], 0x1}, 0x0)
socket(0x26, 0x5, 0x3e)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x20440)
ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000080))

1.322768715s ago: executing program 1 (id=10053):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='sit0\x00'})
r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
read$midi(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000020c0), 0x2000000, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000000200\r0,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000000), 0x4)
ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000040)="1ab9d97eae5c42cc5e4ce03a4519762fda0e80df436d67b13e6a13907af7ae88898da06dc639f91b8e4e8fe0bde5604bcabf9ae63129f2a495296273a3a5f6aec78bafaf77a92a22ed4604e0923ff46bd888fc46c22c55f430f02c2a448545500ee024ce69097a5d811019d5cf47dedf352d86677278")
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0xc09, 0x6548, 0x1, 0x8, 0xb, 0x5, 0x2, 0x64d9}, 0x20)
setsockopt$inet6_buf(r3, 0x29, 0x0, &(0x7f00000001c0)="4e6251cdcc9fb2fa7326cac5c4f38dad6d9984ec09077f774b6b41dcdc6c5cd2db822d207716a7963010461a54c28ded98fdd146b2b9ee15ab26e85e4c4c487f0c98fce3e18dcda19589cf7d4294cc657b8ce108b2deda694b81f64af0624310d4b3c2715c924d69644449b6128e7a9a33e89d41da0b0ba33f1f6cdbd5ef93f2b5f8923e838a24fc91120af51800852c580e8b3c90cc238c6211c04c3579a97ee68211851837152f03369a38765834c14b36f0e33c1f6c15f1d375b41bd6e717d4b68a09b4d575d886", 0xc9)

1.270599419s ago: executing program 5 (id=10054):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000200000000000020000000400000014000100ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41081010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x240000cc)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

819.907765ms ago: executing program 1 (id=10055):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x1, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000080)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000380)={0x20, 0x18, 0x4, "8e9a515d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x1a, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x22)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="0f2251b91d0b0000b8af44b963ba3f1dd6600f306465640f7835915025a50f01cf652e0fc75b0066ba4000b8f6756351ef0f01c9660f38810266ba2000ec66ba4100ec", 0x43}], 0x1, 0x70, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_io_uring_setup(0x2422, &(0x7f0000000380)={0x0, 0x4000, 0x13090, 0x2, 0x29}, 0x0, 0x0)
r6 = epoll_create1(0x80000)
epoll_pwait2(r6, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x101, 0x7, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x4ffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x916, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x2008, 0x4, 0x8000, 0x9, 0x7fffffff, 0x404, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x4000006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x0, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x804, 0x8, 0x5, 0x8001, 0x1000, 0x38, 0x800003, 0x200, 0x80, 0x800001, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffbf, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x7], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7ffd, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4)

760.080189ms ago: executing program 6 (id=10056):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xf)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x200, 0x10, 0x6, 0x5, 0x81, "20bfc47903d15a442ad159b4bdc95d7bd74b16", 0x7, 0xb6e})
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000400)=0xfffffffe, 0x4)
syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000140)=ANY=[@ANYBLOB="120101020000002030144b4740000102030109021f00010104800609040000010103300209050e020800039f0704250100672f"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

325.601789ms ago: executing program 5 (id=10057):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac000000000000000000001200", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}})

0s ago: executing program 5 (id=10058):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x40, 0x11, 0x9a, {0x9a, 0x31, "1599eeeab5d5869087b95f022d263c4df741d66d09a08ed872b018efc52a4c163846d2139a691e44c8037bdeb5da67d4cb0a1304ce4fc4a0e41201fa24e2c994d00a23c13ed8cd8e5e849fbae592217a45241b1a1584198116743328c6fdf891b647ebe178cff46f4378ddce6392b8c2784dbf25759d54199241d11cb49d623adee0dfa4a4dfcda19d0bd96aa723c93720e8940c38f91c3f"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x0, 0x9, 0xb6, "14aa98e89b12b1dd5188d4d1fb11138f76822e7e38419d0f57ec70d5069cc69a764419e35383d8842b2ec36244c4263e91b3bdfa0eba2dcaa386bf8de80f9ae969e99419cd696fdda99f7d25fd4ea04632e4dd01edbfa1234bafefa784f3b29f9ccbc3a6fd05208da6c64584af9b1e5684a4ef8fa4ac79cc8638818a4174915699d237bc605b526c8daa1606abf54e4d86466b2cc68cef53f815d8bbf25cb7c359bc149b58358af8e19516ed2db1c9b4eab0d321f08e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2e}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)={0x40, 0x13}, 0x0, 0x0})

kernel console output (not intermixed with test programs):

T6667] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1825.374253][ T6667] usb 3-1: config 0 has no interface number 0
[ 1825.383576][ T6667] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1825.394073][ T6667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1825.402301][ T6667] usb 3-1: Product: syz
[ 1825.406710][ T6667] usb 3-1: Manufacturer: syz
[ 1825.412117][ T6667] usb 3-1: SerialNumber: syz
[ 1825.421353][ T6667] usb 3-1: config 0 descriptor??
[ 1825.433668][ T6667] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1825.636303][T31746] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9680'.
[ 1825.647963][T31743] vxcan1 speed is unknown, defaulting to 1000
[ 1825.858039][T31731] kAFS: No cell specified
[ 1826.019596][  T797] usb 2-1: new full-speed USB device number 95 using dummy_hcd
[ 1826.197251][  T797] usb 2-1: not running at top speed; connect to a high speed hub
[ 1826.231474][  T797] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[ 1826.285488][  T797] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[ 1826.294902][  T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1826.303843][  T797] usb 2-1: Product: syz
[ 1826.308193][  T797] usb 2-1: Manufacturer: syz
[ 1826.313231][  T797] usb 2-1: SerialNumber: syz
[ 1826.564297][T31751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1826.588861][T13973] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[ 1826.597942][T31751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1826.630773][T31751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1826.657899][T31751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1826.685264][T31751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1826.705147][T31751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1826.715568][T31798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1826.733478][T31798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1826.760173][  T797] usb 2-1: 1:1 : format type 0 is detected, processed as PCM
[ 1826.770811][T31798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1826.779911][  T797] usb 2-1: 1:1 : sample bitwidth 225 in over sample bytes 1
[ 1826.787598][  T797] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[ 1826.798426][T31798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1826.807978][T13973] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1826.814978][  T797] usb 2-1: 1:1 : invalid channels 0
[ 1826.823343][T13973] usb 7-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[ 1826.836419][  T797] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1826.846013][T13973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1826.858139][T31798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1826.866916][T13973] usb 7-1: Product: syz
[ 1826.874737][T13973] usb 7-1: Manufacturer: syz
[ 1826.885052][T31798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1826.897828][T13973] usb 7-1: SerialNumber: syz
[ 1826.917217][T13973] usb 7-1: config 0 descriptor??
[ 1826.978004][  T797] usb 2-1: USB disconnect, device number 95
[ 1827.086319][ T6667] gspca_spca1528: reg_r err -71
[ 1827.098650][ T6667] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[ 1827.130839][T31780] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9682'.
[ 1827.135849][ T6667] usb 3-1: USB disconnect, device number 80
[ 1827.169864][T13973] gspca_main: sonixb-2.14.0 probing 0c45:6005
[ 1827.200694][T13973] sonixb 7-1:0.0: Error reading register 00: -71
[ 1827.233515][T13973] usb 7-1: USB disconnect, device number 66
[ 1827.341823][T31854] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9686'.
[ 1827.507548][T31865] loop2: detected capacity change from 0 to 7
[ 1827.517219][T31865] Dev loop2: unable to read RDB block 7
[ 1827.523627][T31865]  loop2: unable to read partition table
[ 1827.530925][T31865] loop2: partition table beyond EOD, truncated
[ 1827.537210][T31865] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1827.568865][T12367] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1827.740635][T12367] usb 2-1: Using ep0 maxpacket: 16
[ 1827.754197][T12367] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1827.779266][T12367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1827.798009][T12367] usb 2-1: Product: syz
[ 1827.824432][T12367] usb 2-1: Manufacturer: syz
[ 1827.847808][T12367] usb 2-1: SerialNumber: syz
[ 1827.872925][T12367] usb 2-1: config 0 descriptor??
[ 1827.893550][T12367] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1827.977177][T31886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1828.009173][T31887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1828.017953][T31886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1828.045725][T31887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1828.111543][T12367] gspca_spca508: reg_read err -32
[ 1828.121149][T12367] gspca_spca508: reg_read err -32
[ 1828.129363][T12367] gspca_spca508: reg_read err -32
[ 1828.375236][T31906] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9697'.
[ 1828.468878][ T5912] usb 3-1: new full-speed USB device number 81 using dummy_hcd
[ 1828.549306][T12367] gspca_spca508: reg write: error -71
[ 1828.563727][T12367] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[ 1828.579007][T12367] usb 2-1: USB disconnect, device number 96
[ 1828.655944][ T5912] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1828.678252][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1828.687401][ T5912] usb 3-1: Product: syz
[ 1828.693027][T31923] loop2: detected capacity change from 0 to 7
[ 1828.696149][ T5912] usb 3-1: Manufacturer: syz
[ 1828.705219][ T5912] usb 3-1: SerialNumber: syz
[ 1828.718300][ T5912] usb 3-1: config 0 descriptor??
[ 1828.721136][T15079] Dev loop2: unable to read RDB block 7
[ 1828.729324][T15079]  loop2: unable to read partition table
[ 1828.735279][T15079] loop2: partition table beyond EOD, truncated
[ 1828.750352][T31923] Dev loop2: unable to read RDB block 7
[ 1828.756481][T31923]  loop2: unable to read partition table
[ 1828.763788][T31923] loop2: partition table beyond EOD, truncated
[ 1828.780238][T11892] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[ 1828.784619][T31923] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1828.915876][T31930] vxcan1 speed is unknown, defaulting to 1000
[ 1828.953144][ T5912] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1828.963464][T11892] usb 7-1: Using ep0 maxpacket: 8
[ 1828.981708][T11892] usb 7-1: config 2 has an invalid interface number: 72 but max is 0
[ 1828.992146][T11892] usb 7-1: config 2 has no interface number 0
[ 1829.010316][T11892] usb 7-1: config 2 interface 72 has no altsetting 0
[ 1829.036635][T11892] usb 7-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f
[ 1829.069267][T11892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1829.079256][T11892] usb 7-1: Product: syz
[ 1829.089372][T11892] usb 7-1: Manufacturer: syz
[ 1829.102722][T11892] usb 7-1: SerialNumber: syz
[ 1829.314885][T31934] validate_nla: 6 callbacks suppressed
[ 1829.314920][T31934] netlink: 'syz.5.9701': attribute type 1 has an invalid length.
[ 1829.330498][T31937] Invalid argument reading file caps for ./file0
[ 1829.359536][T31934] netlink: 'syz.5.9701': attribute type 2 has an invalid length.
[ 1829.386977][T31911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1829.409068][T31911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1829.451436][T11892] usb 7-1: bad CDC descriptors
[ 1829.495990][T11892] usb 7-1: USB disconnect, device number 67
[ 1829.537570][T31950] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.9703'.
[ 1829.555059][T31950] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9703'.
[ 1829.806201][T31975] netlink: 'syz.5.9704': attribute type 10 has an invalid length.
[ 1829.888328][T31975] team0 (unregistering): Port device team_slave_0 removed
[ 1829.958323][T31975] team0 (unregistering): Port device team_slave_1 removed
[ 1829.976174][ T5912] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1830.214977][T31996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1830.227908][T31996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1830.243041][T31996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1830.253175][T31996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1830.350367][T13973] usb 7-1: new high-speed USB device number 68 using dummy_hcd
[ 1830.508882][T13973] usb 7-1: Using ep0 maxpacket: 16
[ 1830.516469][T13973] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[ 1830.525052][T13973] usb 7-1: config 0 has no interface number 0
[ 1830.532402][T13973] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 1830.544505][T13973] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1830.557094][T13973] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1830.566510][T13973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1830.574749][T13973] usb 7-1: Product: syz
[ 1830.579385][T13973] usb 7-1: Manufacturer: syz
[ 1830.584063][T13973] usb 7-1: SerialNumber: syz
[ 1830.599490][T13973] usb 7-1: config 0 descriptor??
[ 1830.608635][T31986] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1830.616339][T31986] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1830.818685][T32008] loop2: detected capacity change from 0 to 7
[ 1830.828635][T31986] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1830.840338][T32008] Dev loop2: unable to read RDB block 7
[ 1830.847020][T32008]  loop2: unable to read partition table
[ 1830.849526][T31986] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1830.853684][T32008] loop2: partition table beyond EOD, truncated
[ 1830.874873][T32008] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1830.987776][T32016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1831.003397][T32016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1831.129990][T32023] vxcan1 speed is unknown, defaulting to 1000
[ 1831.296420][ T6667] usb 3-1: USB disconnect, device number 81
[ 1831.340273][T31986] cgroup: fork rejected by pids controller in /syz6
[ 1831.498345][T32027] netlink: 'syz.1.9712': attribute type 1 has an invalid length.
[ 1831.506530][T32027] netlink: 'syz.1.9712': attribute type 2 has an invalid length.
[ 1831.535726][T13973] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1831.548553][T13973] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[ 1831.563615][T13973] asix 7-1:0.251: probe with driver asix failed with error -71
[ 1831.600582][T13973] usb 7-1: USB disconnect, device number 68
[ 1831.717052][T32165] kernel profiling enabled (shift: 0)
[ 1831.739059][ T6667] usb 3-1: new low-speed USB device number 82 using dummy_hcd
[ 1831.781914][T32171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1831.804171][T32171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1831.881156][ T6667] usb 3-1: device descriptor read/64, error -71
[ 1832.143607][ T6667] usb 3-1: new low-speed USB device number 83 using dummy_hcd
[ 1832.280629][ T6667] usb 3-1: device descriptor read/64, error -71
[ 1832.419975][ T6667] usb usb3-port1: attempt power cycle
[ 1832.783405][ T6667] usb 3-1: new low-speed USB device number 84 using dummy_hcd
[ 1832.819608][ T6667] usb 3-1: device descriptor read/8, error -71
[ 1832.973393][ T8507] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1833.080162][ T6667] usb 3-1: new low-speed USB device number 85 using dummy_hcd
[ 1833.142205][ T6667] usb 3-1: device descriptor read/8, error -71
[ 1833.260731][ T6667] usb usb3-port1: unable to enumerate USB device
[ 1833.460808][T17588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1833.491396][T17588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1833.503641][T17588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1833.514685][T17588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1833.523978][T17588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1833.581353][ T8507] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1833.689884][T32191] vxcan1 speed is unknown, defaulting to 1000
[ 1833.833818][ T8507] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1833.956419][ T8507] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1834.009607][T32209] loop2: detected capacity change from 0 to 7
[ 1834.019343][T32209] Dev loop2: unable to read RDB block 7
[ 1834.029620][T32209]  loop2: unable to read partition table
[ 1834.035612][T32209] loop2: partition table beyond EOD, truncated
[ 1834.054590][T32209] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1834.156172][T32226] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.9720'.
[ 1834.266088][T32231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1834.277179][T32231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1834.294864][T32231] kAFS: No cell specified
[ 1834.522270][ T8507] bridge_slave_1: left allmulticast mode
[ 1834.532795][ T8507] bridge_slave_1: left promiscuous mode
[ 1834.549058][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1834.570537][ T8507] bridge_slave_0: left allmulticast mode
[ 1834.590995][ T8507] bridge_slave_0: left promiscuous mode
[ 1834.597028][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1834.776684][    T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1834.855791][ T8507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1834.870140][ T8507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1834.882279][ T8507] bond0 (unregistering): Released all slaves
[ 1834.891096][ T5912] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[ 1834.912844][T32191] chnl_net:caif_netlink_parms(): no params data found
[ 1834.939225][    T9] usb 2-1: Using ep0 maxpacket: 8
[ 1834.956406][    T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[ 1834.975779][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1834.995551][T32287] vxcan1 speed is unknown, defaulting to 1000
[ 1835.034831][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1835.061049][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1835.109921][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1835.130301][ T5912] usb 3-1: Using ep0 maxpacket: 16
[ 1835.135791][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1835.165857][ T5912] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1835.176966][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1835.192451][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1835.230656][ T5912] usb 3-1: Product: syz
[ 1835.238418][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1835.250880][ T5912] usb 3-1: Manufacturer: syz
[ 1835.255566][ T5912] usb 3-1: SerialNumber: syz
[ 1835.305029][ T5912] usb 3-1: config 0 descriptor??
[ 1835.368475][ T5912] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1835.378670][T32330] netlink: 'syz.5.9724': attribute type 1 has an invalid length.
[ 1835.387826][T32330] netlink: 'syz.5.9724': attribute type 2 has an invalid length.
[ 1835.497345][    T9] usb 2-1: usb_control_msg returned -32
[ 1835.507258][    T9] usbtmc 2-1:16.0: can't read capabilities
[ 1835.555597][ T5912] gspca_spca508: reg_read err -32
[ 1835.562780][ T5912] gspca_spca508: reg_read err -32
[ 1835.579759][ T5912] gspca_spca508: reg_read err -32
[ 1835.622648][T32191] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1835.631068][T32191] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1835.638668][T32191] bridge_slave_0: entered allmulticast mode
[ 1835.649884][T32191] bridge_slave_0: entered promiscuous mode
[ 1835.678548][T32191] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1835.692055][T32191] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1835.700305][T32191] bridge_slave_1: entered allmulticast mode
[ 1835.719748][T32191] bridge_slave_1: entered promiscuous mode
[ 1835.751580][T17588] Bluetooth: hci1: command tx timeout
[ 1835.867531][    C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1835.904777][T32376] usbtmc 2-1:16.0: Unable to send data, error -71
[ 1835.996463][ T5912] gspca_spca508: reg write: error -71
[ 1836.013866][ T5912] spca508 3-1:0.0: probe with driver spca508 failed with error -71
[ 1836.034033][T32191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1836.062588][ T5912] usb 3-1: USB disconnect, device number 86
[ 1836.097363][T32191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1836.396902][ T8507] hsr_slave_0: left promiscuous mode
[ 1836.405551][ T8507] hsr_slave_1: left promiscuous mode
[ 1836.427075][ T8507] veth1_macvtap: left promiscuous mode
[ 1836.433022][ T8507] veth0_macvtap: left promiscuous mode
[ 1836.440460][ T8507] veth1_vlan: left promiscuous mode
[ 1836.445952][ T8507] veth0_vlan: left promiscuous mode
[ 1836.647174][T32431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9725'.
[ 1836.899240][ T8507] team0 (unregistering): Port device team_slave_1 removed
[ 1836.922421][ T8507] team0 (unregistering): Port device team_slave_0 removed
[ 1837.064230][T32191] team0: Port device team_slave_0 added
[ 1837.080476][T32191] team0: Port device team_slave_1 added
[ 1837.118921][ T6667] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[ 1837.215165][T32191] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1837.222352][T32191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1837.277266][T32191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1837.308636][T32191] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1837.317764][ T6667] usb 3-1: Using ep0 maxpacket: 8
[ 1837.329287][T32191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1837.397476][ T6667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1837.418820][T32191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1837.429139][ T6667] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1837.445647][ T6667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1837.474597][ T6667] usb 3-1: config 0 descriptor??
[ 1837.513428][T11892] usb 2-1: USB disconnect, device number 97
[ 1837.730844][T32486] loop2: detected capacity change from 0 to 7
[ 1837.741941][T32486] Dev loop2: unable to read RDB block 7
[ 1837.748360][T32486]  loop2: unable to read partition table
[ 1837.756768][T32486] loop2: partition table beyond EOD, truncated
[ 1837.766624][T32486] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1837.797492][ T6667] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1837.820590][T17588] Bluetooth: hci1: command tx timeout
[ 1837.874869][T32505] qrtr: Invalid version 43
[ 1837.881287][T32506] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9729'.
[ 1837.893724][T32505] program syz.1.9729 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1837.902368][T32507] program syz.1.9729 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1837.935421][T32507] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1837.962467][T32191] hsr_slave_0: entered promiscuous mode
[ 1837.985054][T32191] hsr_slave_1: entered promiscuous mode
[ 1838.000807][T32191] debugfs: 'hsr0' already exists in 'hsr'
[ 1838.008814][T32191] Cannot create hsr debugfs directory
[ 1838.705729][T32613] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9733'.
[ 1839.121087][T32633] loop2: detected capacity change from 0 to 7
[ 1839.139702][T32633] Dev loop2: unable to read RDB block 7
[ 1839.147928][T32633]  loop2: unable to read partition table
[ 1839.154192][T32633] loop2: partition table beyond EOD, truncated
[ 1839.161852][T32633] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1839.233403][T32628] vxcan1 speed is unknown, defaulting to 1000
[ 1839.908916][T17588] Bluetooth: hci1: command tx timeout
[ 1839.924627][T12367] usb 3-1: USB disconnect, device number 87
[ 1840.017021][T32668] netlink: 'syz.5.9739': attribute type 1 has an invalid length.
[ 1840.040383][T32668] netlink: 'syz.5.9739': attribute type 2 has an invalid length.
[ 1840.108349][T32663] vxcan1 speed is unknown, defaulting to 1000
[ 1840.253684][T32191] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1840.287292][T32191] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1840.315539][T32191] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1840.327707][T32191] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1840.358878][T12367] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[ 1840.532802][T12367] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1840.563392][T12367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1840.582848][T12367] usb 3-1: Product: syz
[ 1840.587255][T12367] usb 3-1: Manufacturer: syz
[ 1840.596815][T12367] usb 3-1: SerialNumber: syz
[ 1840.627576][T32191] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1841.024697][T32191] 8021q: adding VLAN 0 to HW filter on device team0
[ 1841.060494][T12367] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1841.088295][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1841.089021][T12367] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1841.095973][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1841.172356][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1841.179690][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1841.512258][  T304] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9742'.
[ 1841.736278][T32191] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1841.879888][T11892] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1841.978889][T17588] Bluetooth: hci1: command tx timeout
[ 1842.049037][T11892] usb 2-1: Using ep0 maxpacket: 32
[ 1842.057448][T11892] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1842.072684][T11892] usb 2-1: config 0 has no interface number 0
[ 1842.086388][T11892] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1842.097508][T11892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1842.108433][T11892] usb 2-1: Product: syz
[ 1842.114235][T11892] usb 2-1: Manufacturer: syz
[ 1842.119699][T11892] usb 2-1: SerialNumber: syz
[ 1842.136862][T11892] usb 2-1: config 0 descriptor??
[ 1842.142015][T32191] veth0_vlan: entered promiscuous mode
[ 1842.165636][T32191] veth1_vlan: entered promiscuous mode
[ 1842.235513][T32191] veth0_macvtap: entered promiscuous mode
[ 1842.252435][T32191] veth1_macvtap: entered promiscuous mode
[ 1842.288636][T32191] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1842.311694][T32191] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1842.335170][ T8507] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1842.348219][ T8507] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1842.358621][ T8507] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1842.377975][ T8507] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1842.586979][T11892] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1842.599365][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1842.639812][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1842.662360][T11892] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1842.720782][T14440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1842.731897][T14440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1842.948440][  T344] loop2: detected capacity change from 0 to 7
[ 1842.961305][T12808] Dev loop2: unable to read RDB block 7
[ 1842.967074][T12808]  loop2: unable to read partition table
[ 1842.976914][T12808] loop2: partition table beyond EOD, truncated
[ 1842.988213][  T344] Dev loop2: unable to read RDB block 7
[ 1843.002092][  T344]  loop2: unable to read partition table
[ 1843.008197][  T344] loop2: partition table beyond EOD, truncated
[ 1843.014732][  T344] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1843.082071][  T351] Bluetooth: MGMT ver 1.23
[ 1843.152375][  T353] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9751'.
[ 1843.237130][  T355] vxcan1 speed is unknown, defaulting to 1000
[ 1843.471912][  T359] netlink: 'syz.5.9752': attribute type 1 has an invalid length.
[ 1843.482749][  T359] netlink: 'syz.5.9752': attribute type 2 has an invalid length.
[ 1843.513421][T11892] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1843.526862][T11892] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32
[ 1843.762731][  T382] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9753'.
[ 1844.084850][ T6667] usb 2-1: USB disconnect, device number 98
[ 1844.452160][  T409] loop2: detected capacity change from 0 to 7
[ 1844.476474][T10558] Dev loop2: unable to read RDB block 7
[ 1844.486709][T10558]  loop2: unable to read partition table
[ 1844.494054][T10558] loop2: partition table beyond EOD, truncated
[ 1844.505777][  T409] Dev loop2: unable to read RDB block 7
[ 1844.518220][  T409]  loop2: unable to read partition table
[ 1844.532915][  T409] loop2: partition table beyond EOD, truncated
[ 1844.548894][  T409] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1844.710066][  T419] vxcan1 speed is unknown, defaulting to 1000
[ 1844.815313][T12367] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000094. ret = -EPROTO
[ 1844.834915][T12367] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1844.834926][  T425] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9763'.
[ 1844.881041][T12367] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1844.919640][T12367] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[ 1844.947653][T12367] usb 3-1: USB disconnect, device number 88
[ 1845.034342][  T423] netlink: 'syz.1.9762': attribute type 1 has an invalid length.
[ 1845.047777][  T423] netlink: 'syz.1.9762': attribute type 2 has an invalid length.
[ 1845.212389][T17588] Bluetooth: Wrong link type (-71)
[ 1845.529982][T12367] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[ 1845.532178][  T473] overlayfs: missing 'lowerdir'
[ 1845.641873][  T475] loop2: detected capacity change from 0 to 7
[ 1845.650207][  T475] Dev loop2: unable to read RDB block 7
[ 1845.655878][  T475]  loop2: unable to read partition table
[ 1845.663123][  T475] loop2: partition table beyond EOD, truncated
[ 1845.675638][  T475] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1845.723268][T12367] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1845.750460][T12367] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1845.762338][T12367] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1845.791892][T12367] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1845.815886][T12367] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1845.831422][T12367] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1845.841074][T12367] usb 7-1: Manufacturer: syz
[ 1845.890159][T12367] usb 7-1: config 0 descriptor??
[ 1846.064286][  T498] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9773'.
[ 1846.109911][ T5912] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 1846.167181][T12367] usbhid 7-1:0.0: can't add hid device: -71
[ 1846.181465][T12367] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1846.211130][T12367] usb 7-1: USB disconnect, device number 69
[ 1846.284018][ T5912] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1846.294720][ T5912] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1846.312941][ T5912] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[ 1846.323194][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1846.332534][ T5912] usb 2-1: Product: syz
[ 1846.336843][ T5912] usb 2-1: Manufacturer: syz
[ 1846.341965][ T5912] usb 2-1: SerialNumber: syz
[ 1846.524198][  T522] vxcan1 speed is unknown, defaulting to 1000
[ 1846.574117][ T5912] usb 2-1: 0:1 : does not exist
[ 1846.579851][ T5912] usb 2-1: BAAD SPEAKER p_chmask mismatch
[ 1846.667714][ T5912] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1846.695812][ T5912] usb 2-1: USB disconnect, device number 99
[ 1846.749659][T15079] udevd[15079]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1846.857917][  T543] overlayfs: missing 'lowerdir'
[ 1846.916724][  T526] netlink: 'syz.5.9777': attribute type 1 has an invalid length.
[ 1846.933077][  T526] netlink: 'syz.5.9777': attribute type 2 has an invalid length.
[ 1846.953177][  T547] loop2: detected capacity change from 0 to 7
[ 1846.967886][ T5190] Dev loop2: unable to read RDB block 7
[ 1846.981445][ T5190]  loop2: unable to read partition table
[ 1846.998668][  T550] fuse: Unknown parameter 'fd?`�%{eÂKgd�.�]>��0x0000000000000004'
[ 1847.002432][ T5190] loop2: partition table beyond EOD, truncated
[ 1847.025168][  T547] Dev loop2: unable to read RDB block 7
[ 1847.031306][  T547]  loop2: unable to read partition table
[ 1847.037306][  T547] loop2: partition table beyond EOD, truncated
[ 1847.044272][  T547] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1847.056742][ T5190] Dev loop2: unable to read RDB block 7
[ 1847.068877][ T5190]  loop2: unable to read partition table
[ 1847.074994][ T5190] loop2: partition table beyond EOD, truncated
[ 1847.245249][  T574] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9782'.
[ 1847.254576][   T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[ 1847.368533][  T584] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9783'.
[ 1847.411689][   T24] usb 3-1: Using ep0 maxpacket: 32
[ 1847.430601][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1847.469391][   T24] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1847.487960][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1847.498097][   T24] usb 3-1: Product: syz
[ 1847.502775][   T24] usb 3-1: Manufacturer: syz
[ 1847.517827][   T24] usb 3-1: SerialNumber: syz
[ 1847.559093][   T24] usb 3-1: config 0 descriptor??
[ 1847.582756][   T24] usb 3-1: bad CDC descriptors
[ 1847.637041][   T24] usb 3-1: unsupported MDLM descriptors
[ 1847.780062][ T5912] usb 3-1: USB disconnect, device number 89
[ 1847.870768][   T24] usb 7-1: new full-speed USB device number 70 using dummy_hcd
[ 1847.968863][   T10] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1848.031416][   T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1848.042753][   T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1848.054645][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1848.066314][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1848.076321][   T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1848.092973][   T24] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1848.102181][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1848.109028][   T10] usb 2-1: device descriptor read/64, error -71
[ 1848.110552][   T24] usb 7-1: Product: syz
[ 1848.121044][   T24] usb 7-1: Manufacturer: syz
[ 1848.125657][   T24] usb 7-1: SerialNumber: syz
[ 1848.132874][   T24] usb 7-1: config 0 descriptor??
[ 1848.301669][  T610] overlayfs: missing 'lowerdir'
[ 1848.347051][   T24] radio-si470x 7-1:0.0: DeviceID=0x2493 ChipID=0x6900
[ 1848.360781][   T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1848.396486][  T613] loop2: detected capacity change from 0 to 7
[ 1848.404012][  T613] Dev loop2: unable to read RDB block 7
[ 1848.410548][  T613]  loop2: unable to read partition table
[ 1848.416452][  T613] loop2: partition table beyond EOD, truncated
[ 1848.425504][  T613] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1848.511486][   T10] usb 2-1: device descriptor read/64, error -71
[ 1848.546738][   T24] radio-si470x 7-1:0.0: software version 36, hardware version 147
[ 1848.629841][   T10] usb usb2-port1: attempt power cycle
[ 1848.747238][   T24] radio-si470x 7-1:0.0: submitting int urb failed (-90)
[ 1848.968953][   T10] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1848.989727][   T10] usb 2-1: device descriptor read/8, error -71
[ 1849.150433][   T24] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71
[ 1849.163582][   T24] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22
[ 1849.180990][   T24] usb 7-1: USB disconnect, device number 70
[ 1849.241874][   T10] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1849.270025][   T10] usb 2-1: device descriptor read/8, error -71
[ 1849.331333][  T639] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9793'.
[ 1849.392795][  T642] syzkaller1: entered promiscuous mode
[ 1849.398375][  T642] syzkaller1: entered allmulticast mode
[ 1849.405830][   T10] usb usb2-port1: unable to enumerate USB device
[ 1849.567175][  T647] vxcan1 speed is unknown, defaulting to 1000
[ 1849.879971][  T651] netlink: 'syz.5.9795': attribute type 1 has an invalid length.
[ 1849.899568][  T651] netlink: 'syz.5.9795': attribute type 2 has an invalid length.
[ 1850.272503][  T677] overlayfs: missing 'lowerdir'
[ 1850.433099][  T680] loop2: detected capacity change from 0 to 7
[ 1850.442208][  T680] Dev loop2: unable to read RDB block 7
[ 1850.447890][  T680]  loop2: unable to read partition table
[ 1850.454352][  T680] loop2: partition table beyond EOD, truncated
[ 1850.464679][  T680] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1850.651766][  T691] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9802'.
[ 1850.926979][  T707] vxcan1 speed is unknown, defaulting to 1000
[ 1851.043928][  T715] overlayfs: missing 'lowerdir'
[ 1851.265428][  T713] netlink: 'syz.6.9805': attribute type 1 has an invalid length.
[ 1851.280159][  T713] netlink: 'syz.6.9805': attribute type 2 has an invalid length.
[ 1851.429429][   T24] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1851.570942][   T24] usb 2-1: device descriptor read/64, error -71
[ 1851.696860][  T746] loop2: detected capacity change from 0 to 7
[ 1851.718619][T15079] Dev loop2: unable to read RDB block 7
[ 1851.733845][  T745] netlink: 830 bytes leftover after parsing attributes in process `syz.5.9811'.
[ 1851.743524][T15079]  loop2: unable to read partition table
[ 1851.755357][T15079] loop2: partition table beyond EOD, truncated
[ 1851.763913][  T745] efs: cannot read volume header
[ 1851.801635][  T746] Dev loop2: unable to read RDB block 7
[ 1851.810188][  T746]  loop2: unable to read partition table
[ 1851.823038][  T746] loop2: partition table beyond EOD, truncated
[ 1851.840458][  T746] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1851.845621][   T24] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1851.999872][  T751] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9812'.
[ 1852.028905][   T24] usb 2-1: device descriptor read/64, error -71
[ 1852.152238][   T24] usb usb2-port1: attempt power cycle
[ 1852.377999][  T769] overlayfs: missing 'lowerdir'
[ 1852.510330][   T24] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1852.531324][   T24] usb 2-1: device descriptor read/8, error -71
[ 1852.789837][   T24] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 1852.821599][  T778] vxcan1 speed is unknown, defaulting to 1000
[ 1852.829715][   T24] usb 2-1: device descriptor read/8, error -71
[ 1852.949974][   T24] usb usb2-port1: unable to enumerate USB device
[ 1853.112526][  T783] netlink: 'syz.6.9818': attribute type 1 has an invalid length.
[ 1853.121360][  T783] netlink: 'syz.6.9818': attribute type 2 has an invalid length.
[ 1853.134764][  T783] netlink: 'syz.6.9818': attribute type 4 has an invalid length.
[ 1853.145692][  T783] netlink: 'syz.6.9818': attribute type 2 has an invalid length.
[ 1853.342173][  T812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1853.355919][  T812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1853.425653][  T816] loop2: detected capacity change from 0 to 7
[ 1853.437448][T15079] Dev loop2: unable to read RDB block 7
[ 1853.443459][T15079]  loop2: unable to read partition table
[ 1853.452222][T15079] loop2: partition table beyond EOD, truncated
[ 1853.460681][  T816] Dev loop2: unable to read RDB block 7
[ 1853.466573][  T816]  loop2: unable to read partition table
[ 1853.474382][  T816] loop2: partition table beyond EOD, truncated
[ 1853.485027][  T816] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1853.564612][  T821] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9823'.
[ 1853.919026][ T5912] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[ 1854.069118][ T5912] usb 7-1: Using ep0 maxpacket: 32
[ 1854.085844][ T5912] usb 7-1: config 0 has an invalid interface number: 196 but max is 0
[ 1854.094404][ T5912] usb 7-1: config 0 has no interface number 0
[ 1854.101312][ T5912] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[ 1854.111913][ T5912] usb 7-1: config 0 interface 196 has no altsetting 0
[ 1854.122766][ T5912] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[ 1854.140414][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1854.166783][ T5912] usb 7-1: Product: syz
[ 1854.184284][ T5912] usb 7-1: Manufacturer: syz
[ 1854.206942][ T5912] usb 7-1: SerialNumber: syz
[ 1854.242429][ T5912] usb 7-1: config 0 descriptor??
[ 1854.278317][  T823] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[ 1854.655186][  T861] vxcan1 speed is unknown, defaulting to 1000
[ 1854.767144][  T834] program syz.5.9827 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1855.049517][  T865] netlink: 'syz.1.9830': attribute type 1 has an invalid length.
[ 1855.057668][  T865] netlink: 'syz.1.9830': attribute type 2 has an invalid length.
[ 1855.078056][  T865] netlink: 'syz.1.9830': attribute type 4 has an invalid length.
[ 1855.086489][  T865] netlink: 'syz.1.9830': attribute type 2 has an invalid length.
[ 1855.281226][  T874] loop2: detected capacity change from 0 to 7
[ 1855.300904][  T874] Dev loop2: unable to read RDB block 7
[ 1855.311599][ T5912] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[ 1855.327212][  T874]  loop2: unable to read partition table
[ 1855.340123][  T874] loop2: partition table beyond EOD, truncated
[ 1855.354220][  T874] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1855.466246][ T5912] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached
[ 1855.879509][  T797] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[ 1855.939350][  T929] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9832'.
[ 1855.976344][  T929] netlink: 120 bytes leftover after parsing attributes in process `syz.5.9832'.
[ 1856.085853][  T797] usb 3-1: Using ep0 maxpacket: 16
[ 1856.144477][  T797] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1856.163267][  T797] usb 3-1: config 0 has no interface number 0
[ 1856.196886][  T797] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1856.236450][  T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1856.276462][  T797] usb 3-1: Product: syz
[ 1856.296764][  T797] usb 3-1: Manufacturer: syz
[ 1856.314314][  T797] usb 3-1: SerialNumber: syz
[ 1856.316250][  T958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1856.376455][  T958] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1856.394121][  T797] usb 3-1: config 0 descriptor??
[ 1856.436387][  T797] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1856.727702][T11892] usb 7-1: USB disconnect, device number 71
[ 1856.825253][  T902] kAFS: No cell specified
[ 1856.890860][T11892] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected
[ 1857.160376][ T1000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1857.170315][ T5912] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1857.187149][ T1000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1857.229241][T11892] usb 7-1: new high-speed USB device number 72 using dummy_hcd
[ 1857.329169][ T5912] usb 2-1: device descriptor read/64, error -71
[ 1857.391629][T11892] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1857.413913][T11892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1857.440500][T11892] usb 7-1: config 0 descriptor??
[ 1857.579922][ T5912] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1857.729182][ T5912] usb 2-1: device descriptor read/64, error -71
[ 1857.849244][ T5912] usb usb2-port1: attempt power cycle
[ 1857.865855][T11892] hackrf 7-1:0.0: usb_control_msg() failed -71 request 0f
[ 1857.874797][T11892] hackrf 7-1:0.0: Could not detect board
[ 1857.880966][T11892] hackrf 7-1:0.0: probe with driver hackrf failed with error -71
[ 1857.891844][T11892] usb 7-1: USB disconnect, device number 72
[ 1857.920813][  T980] vxcan1 speed is unknown, defaulting to 1000
[ 1858.014567][ T1032] netlink: 'syz.5.9839': attribute type 2 has an invalid length.
[ 1858.062904][  T797] gspca_spca1528: reg_r err -71
[ 1858.074391][  T797] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[ 1858.101377][  T797] usb 3-1: USB disconnect, device number 90
[ 1858.189002][ T5912] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1858.210039][ T5912] usb 2-1: device descriptor read/8, error -71
[ 1858.448926][ T5912] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1858.482575][ T5912] usb 2-1: device descriptor read/8, error -71
[ 1858.610799][ T5912] usb usb2-port1: unable to enumerate USB device
[ 1858.827147][ T1073] vxcan1 speed is unknown, defaulting to 1000
[ 1859.044297][ T1077] netlink: 'syz.6.9844': attribute type 1 has an invalid length.
[ 1859.053442][ T1077] netlink: 'syz.6.9844': attribute type 2 has an invalid length.
[ 1859.063350][ T1077] netlink: 'syz.6.9844': attribute type 4 has an invalid length.
[ 1859.071704][ T1077] netlink: 'syz.6.9844': attribute type 2 has an invalid length.
[ 1859.601939][ T1114] kvm: kvm [1113]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0
[ 1859.657119][ T1125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1859.706979][ T1125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1859.731526][ T1114] kvm: kvm [1113]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0
[ 1859.759235][ T1125] kAFS: No cell specified
[ 1859.827195][ T1114] kvm: kvm [1113]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0
[ 1859.869044][  T797] usb 7-1: new low-speed USB device number 73 using dummy_hcd
[ 1859.948949][ T1114] kvm: kvm [1113]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0
[ 1859.991882][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1860.005144][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[ 1860.053520][ T1114] kvm: kvm [1113]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0
[ 1860.094653][  T797] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1860.112418][  T797] usb 7-1: config index 0 descriptor too short (expected 57261, got 36)
[ 1860.141493][  T797] usb 7-1: config 110 has too many interfaces: 34, using maximum allowed: 32
[ 1860.150095][ T5912] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[ 1860.178701][  T797] usb 7-1: config 110 has an invalid interface number: 227 but max is 33
[ 1860.198280][  T797] usb 7-1: config 110 has an invalid descriptor of length 0, skipping remainder of the config
[ 1860.211789][ T1114] kvm: kvm [1113]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0
[ 1860.225549][  T797] usb 7-1: config 110 has 1 interface, different from the descriptor's value: 34
[ 1860.245715][  T797] usb 7-1: config 110 has no interface number 0
[ 1860.260772][  T797] usb 7-1: config 110 interface 227 has no altsetting 0
[ 1860.309839][  T797] usb 7-1: string descriptor 0 read error: -22
[ 1860.317834][  T797] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=cc.bf
[ 1860.339403][  T797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1860.386848][  T797] imon_raw 7-1:110.227: IR endpoint missing
[ 1860.402382][ T5912] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[ 1860.421523][ T5912] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253
[ 1860.423213][ T1114] kvm: kvm [1113]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0
[ 1860.463858][ T5912] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[ 1860.480210][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1860.509177][ T5912] usb 3-1: Product: syz
[ 1860.522804][ T5912] usb 3-1: Manufacturer: syz
[ 1860.535844][ T5912] usb 3-1: SerialNumber: syz
[ 1860.551012][ T5912] usb 3-1: config 0 descriptor??
[ 1860.568241][ T5912] gspca_main: sunplus-2.14.0 probing 055f:c630
[ 1860.578277][ T1114] kvm: kvm [1113]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0
[ 1860.705859][ T1114] kvm: kvm [1113]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0
[ 1860.832905][ T1114] kvm: kvm [1113]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0
[ 1860.956504][ T1169] vxcan1 speed is unknown, defaulting to 1000
[ 1861.308253][ T1175] netlink: 'syz.1.9856': attribute type 1 has an invalid length.
[ 1861.316311][ T1175] netlink: 'syz.1.9856': attribute type 2 has an invalid length.
[ 1861.327564][ T1175] netlink: 'syz.1.9856': attribute type 4 has an invalid length.
[ 1861.355105][ T1175] netlink: 'syz.1.9856': attribute type 2 has an invalid length.
[ 1861.607016][ T1200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1861.635525][ T1200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1861.926471][ T1207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1861.953178][ T1207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1861.983663][ T1207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1862.008107][ T1207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1862.409124][  T797] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1862.458175][ T6667] usb 7-1: USB disconnect, device number 73
[ 1862.548902][  T797] usb 2-1: device descriptor read/64, error -71
[ 1862.684123][ T1242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1862.698730][ T1242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1862.788856][  T797] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 1862.892148][ T5802] usb 3-1: USB disconnect, device number 91
[ 1862.929162][ T6667] usb 7-1: new high-speed USB device number 74 using dummy_hcd
[ 1862.943525][  T797] usb 2-1: device descriptor read/64, error -71
[ 1863.059272][  T797] usb usb2-port1: attempt power cycle
[ 1863.099897][ T6667] usb 7-1: Using ep0 maxpacket: 16
[ 1863.107207][ T6667] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1863.115359][ T6667] usb 7-1: config 0 has no interface number 0
[ 1863.124156][ T6667] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1863.134228][ T6667] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1863.142421][ T6667] usb 7-1: Product: syz
[ 1863.146670][ T6667] usb 7-1: Manufacturer: syz
[ 1863.151753][ T6667] usb 7-1: SerialNumber: syz
[ 1863.160065][ T6667] usb 7-1: config 0 descriptor??
[ 1863.173935][ T6667] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1863.408940][  T797] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 1863.431099][  T797] usb 2-1: device descriptor read/8, error -71
[ 1863.460298][ T1269] vxcan1 speed is unknown, defaulting to 1000
[ 1863.577610][ T1237] kAFS: No cell specified
[ 1863.638624][ T1273] netlink: 'syz.5.9867': attribute type 1 has an invalid length.
[ 1863.646569][ T1273] netlink: 'syz.5.9867': attribute type 2 has an invalid length.
[ 1863.656989][ T1273] netlink: 'syz.5.9867': attribute type 4 has an invalid length.
[ 1863.665383][ T1273] netlink: 'syz.5.9867': attribute type 2 has an invalid length.
[ 1863.688906][  T797] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 1863.729736][  T797] usb 2-1: device descriptor read/8, error -71
[ 1863.839303][  T797] usb usb2-port1: unable to enumerate USB device
[ 1863.945336][ T1299] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9868'.
[ 1864.301591][ T1306] input: syz0 as /devices/virtual/input/input158
[ 1864.359634][ T1317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9872'.
[ 1864.498844][ T1324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1864.511847][ T1324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1864.606632][ T6667] gspca_spca1528: reg_w err -71
[ 1864.620429][ T6667] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71
[ 1864.663406][ T6667] usb 7-1: USB disconnect, device number 74
[ 1864.676029][ T1324] tmpfs: Group quota block hardlimit too large.
[ 1864.743366][ T1345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9874'.
[ 1865.175931][ T1361] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9877'.
[ 1865.327840][ T1372] Invalid ELF header magic: != ELF
[ 1865.351851][ T1374] loop2: detected capacity change from 0 to 7
[ 1865.359659][T15079] Dev loop2: unable to read RDB block 7
[ 1865.365417][T15079]  loop2: unable to read partition table
[ 1865.372627][T15079] loop2: partition table beyond EOD, truncated
[ 1865.383384][ T1374] Dev loop2: unable to read RDB block 7
[ 1865.389160][ T1374]  loop2: unable to read partition table
[ 1865.395206][ T1374] loop2: partition table beyond EOD, truncated
[ 1865.402370][ T1374] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1865.532814][ T1381] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[ 1865.545792][ T1381] CIFS mount error: No usable UNC path provided in device string!
[ 1865.545792][ T1381] 
[ 1865.558650][ T1381] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1865.578908][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms
[ 1865.587134][    C1] lec:lec_tx_timeout: lec0
[ 1865.909777][  T797] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1865.986301][ T1403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1865.988238][ T1403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1866.039994][  T797] usb 2-1: device descriptor read/64, error -71
[ 1866.251238][ T1413] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9888'.
[ 1866.288967][  T797] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 1866.409157][T11892] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[ 1866.439028][  T797] usb 2-1: device descriptor read/64, error -71
[ 1866.549840][  T797] usb usb2-port1: attempt power cycle
[ 1866.559346][T11892] usb 3-1: Using ep0 maxpacket: 16
[ 1866.572457][T11892] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1866.572487][T11892] usb 3-1: config 0 has no interface number 0
[ 1866.578817][T11892] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1866.578849][T11892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1866.578871][T11892] usb 3-1: Product: syz
[ 1866.578887][T11892] usb 3-1: Manufacturer: syz
[ 1866.578904][T11892] usb 3-1: SerialNumber: syz
[ 1866.582366][T11892] usb 3-1: config 0 descriptor??
[ 1866.595463][T11892] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1866.687707][ T1419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1866.688163][ T1419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1866.898885][  T797] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1866.919875][  T797] usb 2-1: device descriptor read/8, error -71
[ 1866.994457][ T1408] kAFS: No cell specified
[ 1867.158909][  T797] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1867.181049][  T797] usb 2-1: device descriptor read/8, error -71
[ 1867.289419][  T797] usb usb2-port1: unable to enumerate USB device
[ 1867.381093][ T1426] loop2: detected capacity change from 0 to 7
[ 1867.399631][ T1426] Dev loop2: unable to read RDB block 7
[ 1867.411997][ T1426]  loop2: unable to read partition table
[ 1867.428228][ T1426] loop2: partition table beyond EOD, truncated
[ 1867.445620][ T1426] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1868.014926][T11892] gspca_spca1528: reg_w err -71
[ 1868.031650][T11892] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[ 1868.060576][T11892] usb 3-1: USB disconnect, device number 92
[ 1868.504282][ T1469] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9897'.
[ 1868.720644][ T1483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1868.742523][ T1483] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1868.800289][ T5802] usb 7-1: new high-speed USB device number 75 using dummy_hcd
[ 1868.917685][ T1496] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1868.927813][ T1496] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1868.959000][ T5802] usb 7-1: device descriptor read/64, error -71
[ 1869.209497][ T5802] usb 7-1: new high-speed USB device number 76 using dummy_hcd
[ 1869.299077][ T5912] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1869.349501][ T5802] usb 7-1: device descriptor read/64, error -71
[ 1869.365968][ T1514] netlink: 'syz.5.9904': attribute type 11 has an invalid length.
[ 1869.375907][ T1514] netlink: 'syz.5.9904': attribute type 10 has an invalid length.
[ 1869.385018][ T1514] macvlan0: entered promiscuous mode
[ 1869.390596][ T1514] macvlan0: entered allmulticast mode
[ 1869.407745][ T1514] veth1_vlan: entered allmulticast mode
[ 1869.418951][ T5914] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[ 1869.445672][ T1514] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[ 1869.471128][ T5802] usb usb7-port1: attempt power cycle
[ 1869.473288][ T5912] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[ 1869.500941][ T5912] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253
[ 1869.533205][ T5912] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[ 1869.542668][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1869.552809][ T5912] usb 2-1: Product: syz
[ 1869.557125][ T5912] usb 2-1: Manufacturer: syz
[ 1869.564864][ T5912] usb 2-1: SerialNumber: syz
[ 1869.577341][ T5912] usb 2-1: config 0 descriptor??
[ 1869.597666][ T5912] gspca_main: sunplus-2.14.0 probing 055f:c630
[ 1869.630625][ T5914] usb 3-1: Using ep0 maxpacket: 8
[ 1869.643843][ T5914] usb 3-1: config 218 has too many interfaces: 244, using maximum allowed: 32
[ 1869.679204][ T5914] usb 3-1: config 218 has 1 interface, different from the descriptor's value: 244
[ 1869.702498][ T5914] usb 3-1: config 218 has no interface number 0
[ 1869.723319][ T5914] usb 3-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1869.735591][ T5914] usb 3-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1869.757610][ T5914] usb 3-1: config 218 interface 95 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1869.774066][ T5914] usb 3-1: config 218 interface 95 has no altsetting 0
[ 1869.805403][ T5914] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[ 1869.819488][ T5802] usb 7-1: new high-speed USB device number 77 using dummy_hcd
[ 1869.833204][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1869.842560][ T5914] usb 3-1: Product: syz
[ 1869.846809][ T5914] usb 3-1: Manufacturer: syz
[ 1869.851908][ T5914] usb 3-1: SerialNumber: syz
[ 1869.861253][ T5802] usb 7-1: device descriptor read/8, error -71
[ 1870.119452][ T5802] usb 7-1: new high-speed USB device number 78 using dummy_hcd
[ 1870.151732][ T5802] usb 7-1: device descriptor read/8, error -71
[ 1870.185772][ T1536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1870.199729][ T1536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1870.270445][ T5802] usb usb7-port1: unable to enumerate USB device
[ 1870.304908][ T5914] usb 3-1: USB disconnect, device number 93
[ 1870.475628][ T1551] vxcan1 speed is unknown, defaulting to 1000
[ 1870.609459][ T1556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1870.629642][ T1556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1870.647268][ T1555] FAULT_INJECTION: forcing a failure.
[ 1870.647268][ T1555] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1870.661793][ T1555] CPU: 1 UID: 0 PID: 1555 Comm: syz.2.9906 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1870.661830][ T1555] Tainted: [L]=SOFTLOCKUP
[ 1870.661838][ T1555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1870.661852][ T1555] Call Trace:
[ 1870.661861][ T1555]  <TASK>
[ 1870.661871][ T1555]  dump_stack_lvl+0xe8/0x150
[ 1870.661907][ T1555]  should_fail_ex+0x412/0x560
[ 1870.661946][ T1555]  _copy_from_user+0x2d/0xb0
[ 1870.661970][ T1555]  ___sys_sendmsg+0x1c6/0x360
[ 1870.662004][ T1555]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1870.662065][ T1555]  ? __fget_files+0x2a/0x420
[ 1870.662086][ T1555]  ? __fget_files+0x3a0/0x420
[ 1870.662118][ T1555]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1870.662146][ T1555]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1870.662182][ T1555]  ? __pfx_ksys_write+0x10/0x10
[ 1870.662219][ T1555]  do_syscall_64+0x14d/0xf80
[ 1870.662247][ T1555]  ? trace_irq_disable+0x3b/0x150
[ 1870.662268][ T1555]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1870.662290][ T1555]  ? clear_bhb_loop+0x40/0x90
[ 1870.662315][ T1555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1870.662337][ T1555] RIP: 0033:0x7f0eae99c799
[ 1870.662358][ T1555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1870.662378][ T1555] RSP: 002b:00007f0eaf7d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1870.662401][ T1555] RAX: ffffffffffffffda RBX: 00007f0eaec16090 RCX: 00007f0eae99c799
[ 1870.662416][ T1555] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1870.662429][ T1555] RBP: 00007f0eaf7d3090 R08: 0000000000000000 R09: 0000000000000000
[ 1870.662442][ T1555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1870.662455][ T1555] R13: 00007f0eaec16128 R14: 00007f0eaec16090 R15: 00007ffda3fd3bf8
[ 1870.662487][ T1555]  </TASK>
[ 1871.021089][ T1584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1871.031517][ T1584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1871.044452][ T1584] kAFS: No cell specified
[ 1871.627926][ T1599] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1871.646676][ T1599] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1871.928971][ T6667] usb 7-1: new high-speed USB device number 79 using dummy_hcd
[ 1871.983660][ T8752] lec:lec_start_xmit: lec0:No lecd attached
[ 1872.077187][ T1608] input: syz0 as /devices/virtual/input/input161
[ 1872.088311][ T6667] usb 7-1: Using ep0 maxpacket: 8
[ 1872.121956][  T797] usb 2-1: USB disconnect, device number 120
[ 1872.132061][ T6667] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1872.177673][ T6667] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1872.210916][ T6667] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1872.247101][ T6667] usb 7-1: config 0 descriptor??
[ 1872.438584][ T1629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9916'.
[ 1872.459346][ T1629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9916'.
[ 1872.494545][ T6667] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1872.571308][   T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 1872.646116][ T1642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1872.656093][ T1642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1872.671876][ T1642] kAFS: No cell specified
[ 1872.749098][   T10] usb 3-1: Using ep0 maxpacket: 32
[ 1872.758733][   T10] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1872.768332][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1872.776659][   T10] usb 3-1: Product: syz
[ 1872.782028][   T10] usb 3-1: Manufacturer: syz
[ 1872.787689][   T10] usb 3-1: SerialNumber: syz
[ 1872.795893][   T10] usb 3-1: config 0 descriptor??
[ 1872.806024][   T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1872.849192][T11892] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 1872.988897][T11892] usb 2-1: device descriptor read/64, error -71
[ 1873.082641][ T1608] tmpfs: Group quota block hardlimit too large.
[ 1873.230598][T11892] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1873.250696][ T1650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1873.262528][ T1650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1873.295040][   T10] gspca_ov534_9: reg_w failed -71
[ 1873.369115][T11892] usb 2-1: device descriptor read/64, error -71
[ 1873.489229][T11892] usb usb2-port1: attempt power cycle
[ 1873.698901][   T10] gspca_ov534_9: Unknown sensor 0000
[ 1873.699075][   T10] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22
[ 1873.716800][   T10] usb 3-1: USB disconnect, device number 94
[ 1873.829392][T11892] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 1873.849963][T11892] usb 2-1: device descriptor read/8, error -71
[ 1874.085014][ T1682] vxcan1 speed is unknown, defaulting to 1000
[ 1874.091484][T11892] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 1874.120737][T11892] usb 2-1: device descriptor read/8, error -71
[ 1874.138929][   T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 1874.239243][T11892] usb usb2-port1: unable to enumerate USB device
[ 1874.270910][ T1686] netlink: 'syz.5.9922': attribute type 1 has an invalid length.
[ 1874.279849][ T1686] netlink: 'syz.5.9922': attribute type 2 has an invalid length.
[ 1874.318945][   T10] usb 3-1: Using ep0 maxpacket: 32
[ 1874.331655][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1874.341309][   T10] usb 3-1: config 18 has an invalid interface number: 188 but max is 0
[ 1874.349996][   T10] usb 3-1: config 18 has no interface number 0
[ 1874.356435][   T10] usb 3-1: config 18 interface 188 altsetting 215 endpoint 0xB has invalid maxpacket 1024, setting to 64
[ 1874.369398][   T10] usb 3-1: config 18 interface 188 has no altsetting 0
[ 1874.380821][   T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5c, bcdDevice=51.cf
[ 1874.390155][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1874.398213][   T10] usb 3-1: Product: Д
[ 1874.403221][   T10] usb 3-1: Manufacturer: 擤羠鴍ꦗ掴覧짽ᅴ劯꘷靨䖮դ췹ꙍ伙ବ舳䭷相鐗䃦爒节㠱喏ଛ漖槹䞅䑧篏轳ⱕ玝ㆂ郒꿱
[ 1874.419316][   T10] usb 3-1: SerialNumber: 泗⺾痘⢮鯽匷퍌횷מּ䒅竪䏁﬉툻ᬍᏱ李⮈錦짽泂뜂㥚쉌뵽뼏࿧䛢㕥珐䘒ᔲ
[ 1874.647056][ T1677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1874.687862][ T1711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1874.698108][ T1677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1874.709701][ T1711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1874.713692][ T5878] usb 7-1: USB disconnect, device number 79
[ 1874.755636][ T1711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1874.792357][ T1711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1874.851358][   T10] uvcvideo 3-1:18.188: Found UVC 0.00 device Д (8086:0b5c)
[ 1874.874965][   T10] uvcvideo 3-1:18.188: No valid video chain found.
[ 1874.886735][ T1732] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9925'.
[ 1874.983251][   T10] usb 3-1: USB disconnect, device number 95
[ 1875.405569][ T1750] loop2: detected capacity change from 0 to 7
[ 1875.413490][ T1750] Dev loop2: unable to read RDB block 7
[ 1875.419101][ T5878] usb 7-1: new high-speed USB device number 80 using dummy_hcd
[ 1875.427361][ T1750]  loop2: unable to read partition table
[ 1875.433593][ T1750] loop2: partition table beyond EOD, truncated
[ 1875.441511][ T1750] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1875.531407][ T1759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9931'.
[ 1875.580128][ T5878] usb 7-1: Using ep0 maxpacket: 16
[ 1875.598539][ T5878] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1875.624474][ T5878] usb 7-1: config 0 has no interface number 0
[ 1875.636253][ T5878] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1875.665908][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1875.681261][ T1764] vxcan1 speed is unknown, defaulting to 1000
[ 1875.685847][ T5878] usb 7-1: Product: syz
[ 1875.713952][ T5878] usb 7-1: Manufacturer: syz
[ 1875.728982][ T5878] usb 7-1: SerialNumber: syz
[ 1875.743125][ T5878] usb 7-1: config 0 descriptor??
[ 1875.763791][ T5878] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1875.893544][ T1771] netlink: 'syz.2.9932': attribute type 1 has an invalid length.
[ 1875.903245][ T1771] netlink: 'syz.2.9932': attribute type 2 has an invalid length.
[ 1876.048914][   T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 1876.164280][ T1743] kAFS: No cell specified
[ 1876.219336][   T10] usb 2-1: Using ep0 maxpacket: 8
[ 1876.230893][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1876.235139][ T1801] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9934'.
[ 1876.279295][   T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1876.295396][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1876.353751][   T10] usb 2-1: config 0 descriptor??
[ 1876.581159][   T10] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1877.206249][ T5878] gspca_spca1528: reg_w err -71
[ 1877.224976][ T1815] input: syz0 as /devices/virtual/input/input163
[ 1877.233698][ T5878] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71
[ 1877.248520][ T5878] usb 7-1: USB disconnect, device number 80
[ 1877.578895][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms
[ 1877.586988][    C1] lec:lec_tx_timeout: lec0
[ 1877.748986][ T5878] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 1877.943312][ T5878] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[ 1877.967939][ T5878] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253
[ 1877.995492][ T5878] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[ 1878.006760][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1878.014944][ T5878] usb 3-1: Product: syz
[ 1878.019262][ T5878] usb 3-1: Manufacturer: syz
[ 1878.023993][ T5878] usb 3-1: SerialNumber: syz
[ 1878.036489][ T5878] usb 3-1: config 0 descriptor??
[ 1878.054625][ T5878] gspca_main: sunplus-2.14.0 probing 055f:c630
[ 1878.569057][ T1885] loop2: detected capacity change from 0 to 7
[ 1878.578588][T10558] Dev loop2: unable to read RDB block 7
[ 1878.585970][T10558]  loop2: unable to read partition table
[ 1878.595814][T10558] loop2: partition table beyond EOD, truncated
[ 1878.606596][ T1885] Dev loop2: unable to read RDB block 7
[ 1878.625679][ T1885]  loop2: unable to read partition table
[ 1878.642311][ T1885] loop2: partition table beyond EOD, truncated
[ 1878.656930][ T1885] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1878.789579][ T5878] usb 2-1: USB disconnect, device number 125
[ 1878.805061][ T1892] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[ 1878.837503][ T1892] Error validating options; rc = [-22]
[ 1878.926798][ T1902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1878.941678][ T1902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1879.043853][ T1923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1879.055081][ T1923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1879.108936][T13973] usb 7-1: new high-speed USB device number 81 using dummy_hcd
[ 1879.198966][ T5878] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 1879.272834][T13973] usb 7-1: Using ep0 maxpacket: 16
[ 1879.288041][T13973] usb 7-1: no configurations
[ 1879.298825][T13973] usb 7-1: can't read configurations, error -22
[ 1879.365754][ T5878] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1879.378090][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1879.386498][ T5878] usb 2-1: Product: syz
[ 1879.390994][ T5878] usb 2-1: Manufacturer: syz
[ 1879.395710][ T5878] usb 2-1: SerialNumber: syz
[ 1879.417171][ T5878] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1879.429582][T13973] usb 7-1: new high-speed USB device number 82 using dummy_hcd
[ 1879.455913][T12367] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1879.590316][T13973] usb 7-1: Using ep0 maxpacket: 16
[ 1879.613400][T13973] usb 7-1: no configurations
[ 1879.619520][T13973] usb 7-1: can't read configurations, error -22
[ 1879.640781][T13973] usb usb7-port1: attempt power cycle
[ 1879.739401][T17588] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1879.758880][ T6667] Bluetooth: hci6: Opcode 0x0c1a failed: -110
[ 1879.773721][ T6667] Bluetooth: hci6: Error when powering off device on rfkill (-110)
[ 1879.884305][ T1910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9942'.
[ 1879.911744][   T24] usb 2-1: USB disconnect, device number 126
[ 1879.981218][T13973] usb 7-1: new high-speed USB device number 83 using dummy_hcd
[ 1880.012064][T13973] usb 7-1: Using ep0 maxpacket: 16
[ 1880.018454][T13973] usb 7-1: no configurations
[ 1880.024836][T13973] usb 7-1: can't read configurations, error -22
[ 1880.162501][T13973] usb 7-1: new high-speed USB device number 84 using dummy_hcd
[ 1880.190255][T13973] usb 7-1: Using ep0 maxpacket: 16
[ 1880.207592][T13973] usb 7-1: no configurations
[ 1880.215267][T13973] usb 7-1: can't read configurations, error -22
[ 1880.223194][T13973] usb usb7-port1: unable to enumerate USB device
[ 1880.529047][ T1971] vxcan1 speed is unknown, defaulting to 1000
[ 1880.540549][T12367] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1880.562460][T12367] ath9k_htc: Failed to initialize the device
[ 1880.587904][   T24] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1880.623641][ T5802] usb 3-1: USB disconnect, device number 96
[ 1880.942890][ T1977] netlink: 'syz.1.9943': attribute type 1 has an invalid length.
[ 1880.959041][ T1977] netlink: 'syz.1.9943': attribute type 2 has an invalid length.
[ 1881.859336][ T2042] loop2: detected capacity change from 0 to 7
[ 1881.867417][ T2042] Dev loop2: unable to read RDB block 7
[ 1881.874013][ T2042]  loop2: unable to read partition table
[ 1881.879335][ T5802] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[ 1881.882658][ T2042] loop2: partition table beyond EOD, truncated
[ 1881.895132][ T2042] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1881.904667][T17588] Bluetooth: hci2: command 0x0406 tx timeout
[ 1881.915180][ T6667] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[ 1881.928292][ T6667] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[ 1882.051136][ T5802] usb 2-1: device descriptor read/64, error -71
[ 1882.236049][ T2070] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9953'.
[ 1882.324872][ T2075] vxcan1 speed is unknown, defaulting to 1000
[ 1882.331149][ T5802] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[ 1882.379281][   T24] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 1882.479025][ T5802] usb 2-1: device descriptor read/64, error -71
[ 1882.539407][   T24] usb 3-1: Using ep0 maxpacket: 32
[ 1882.551787][   T24] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 1882.566749][   T24] usb 3-1: config 0 has no interface number 0
[ 1882.584637][   T24] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1882.599325][ T5802] usb usb2-port1: attempt power cycle
[ 1882.608853][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1882.630082][   T24] usb 3-1: Product: syz
[ 1882.639770][   T24] usb 3-1: Manufacturer: syz
[ 1882.647953][   T24] usb 3-1: SerialNumber: syz
[ 1882.664769][   T24] usb 3-1: config 0 descriptor??
[ 1882.687425][ T2097] overlayfs: missing 'lowerdir'
[ 1882.772367][ T2097] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1882.959676][ T5802] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[ 1883.001912][ T5802] usb 2-1: device descriptor read/8, error -71
[ 1883.090273][   T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1883.105353][   T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1883.251398][ T5802] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[ 1883.279703][ T5802] usb 2-1: device descriptor read/8, error -71
[ 1883.389509][ T5802] usb usb2-port1: unable to enumerate USB device
[ 1883.761199][ T2120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1883.771267][ T2120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1883.785015][ T2120] kAFS: No cell specified
[ 1883.879013][T27223] usb 7-1: new high-speed USB device number 85 using dummy_hcd
[ 1884.028894][T27223] usb 7-1: Using ep0 maxpacket: 16
[ 1884.034837][T27223] usb 7-1: no configurations
[ 1884.041123][T27223] usb 7-1: can't read configurations, error -22
[ 1884.168952][T27223] usb 7-1: new high-speed USB device number 86 using dummy_hcd
[ 1884.298986][T17588] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1884.305167][ T6667] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1884.311792][ T6667] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[ 1884.339044][T27223] usb 7-1: Using ep0 maxpacket: 16
[ 1884.345124][T27223] usb 7-1: no configurations
[ 1884.360022][T27223] usb 7-1: can't read configurations, error -22
[ 1884.373919][T27223] usb usb7-port1: attempt power cycle
[ 1884.420295][ T2129] loop2: detected capacity change from 0 to 7
[ 1884.433369][ T2129] Dev loop2: unable to read RDB block 7
[ 1884.439467][ T2129]  loop2: unable to read partition table
[ 1884.445473][ T2129] loop2: partition table beyond EOD, truncated
[ 1884.453165][ T2129] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1884.491355][   T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1884.517687][   T24] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[ 1884.546054][   T24] usb 3-1: USB disconnect, device number 97
[ 1884.586563][ T2142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1884.597488][ T2142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1884.718949][T27223] usb 7-1: new high-speed USB device number 87 using dummy_hcd
[ 1884.751890][T27223] usb 7-1: Using ep0 maxpacket: 16
[ 1884.771077][T27223] usb 7-1: no configurations
[ 1884.777993][T27223] usb 7-1: can't read configurations, error -22
[ 1884.901071][ T2170] vxcan1 speed is unknown, defaulting to 1000
[ 1884.928987][T27223] usb 7-1: new high-speed USB device number 88 using dummy_hcd
[ 1884.969711][T27223] usb 7-1: Using ep0 maxpacket: 16
[ 1884.983827][T27223] usb 7-1: no configurations
[ 1884.999153][T27223] usb 7-1: can't read configurations, error -22
[ 1885.017674][T27223] usb usb7-port1: unable to enumerate USB device
[ 1885.272465][ T2184] netlink: 'syz.2.9967': attribute type 1 has an invalid length.
[ 1885.280492][ T2184] netlink: 'syz.2.9967': attribute type 2 has an invalid length.
[ 1885.288334][ T2184] FAULT_INJECTION: forcing a failure.
[ 1885.288334][ T2184] name failslab, interval 1, probability 0, space 0, times 0
[ 1885.305352][ T2180] vxcan1 speed is unknown, defaulting to 1000
[ 1885.311775][ T2184] CPU: 1 UID: 0 PID: 2184 Comm: syz.2.9967 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1885.311803][ T2184] Tainted: [L]=SOFTLOCKUP
[ 1885.311809][ T2184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1885.311820][ T2184] Call Trace:
[ 1885.311829][ T2184]  <TASK>
[ 1885.311837][ T2184]  dump_stack_lvl+0xe8/0x150
[ 1885.311869][ T2184]  should_fail_ex+0x412/0x560
[ 1885.311906][ T2184]  should_failslab+0xa8/0x100
[ 1885.311936][ T2184]  kmem_cache_alloc_node_noprof+0x8f/0x690
[ 1885.311963][ T2184]  ? __alloc_skb+0x186/0x7d0
[ 1885.311984][ T2184]  ? __alloc_skb+0x1d0/0x7d0
[ 1885.312003][ T2184]  ? __local_bh_enable_ip+0xd0/0x130
[ 1885.312037][ T2184]  __alloc_skb+0x1d0/0x7d0
[ 1885.312058][ T2184]  ? netlink_ack_tlv_len+0x6c/0x210
[ 1885.312084][ T2184]  netlink_ack+0x146/0xa50
[ 1885.312102][ T2184]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1885.312123][ T2184]  ? netlink_sendmsg+0x813/0xb40
[ 1885.312144][ T2184]  ? sock_sendmsg_nosec+0x18f/0x1d0
[ 1885.312173][ T2184]  ? ___sys_sendmsg+0x2a5/0x360
[ 1885.312195][ T2184]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[ 1885.312220][ T2184]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1885.312253][ T2184]  netlink_rcv_skb+0x2b6/0x4b0
[ 1885.312276][ T2184]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1885.312301][ T2184]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1885.312334][ T2184]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1885.312364][ T2184]  netlink_unicast+0x80f/0x9b0
[ 1885.312404][ T2184]  ? __pfx_netlink_unicast+0x10/0x10
[ 1885.312437][ T2184]  ? netlink_sendmsg+0x650/0xb40
[ 1885.312458][ T2184]  ? skb_put+0x11b/0x210
[ 1885.312484][ T2184]  netlink_sendmsg+0x813/0xb40
[ 1885.312517][ T2184]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1885.312542][ T2184]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1885.312583][ T2184]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1885.312605][ T2184]  sock_sendmsg_nosec+0x18f/0x1d0
[ 1885.312649][ T2184]  ____sys_sendmsg+0x589/0x8c0
[ 1885.312681][ T2184]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1885.312709][ T2184]  ? import_iovec+0x73/0xa0
[ 1885.312729][ T2184]  ___sys_sendmsg+0x2a5/0x360
[ 1885.312754][ T2184]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1885.312805][ T2184]  ? __fget_files+0x2a/0x420
[ 1885.312823][ T2184]  ? __fget_files+0x3a0/0x420
[ 1885.312847][ T2184]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1885.312871][ T2184]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1885.312899][ T2184]  ? __pfx_ksys_write+0x10/0x10
[ 1885.312929][ T2184]  do_syscall_64+0x14d/0xf80
[ 1885.312952][ T2184]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1885.312969][ T2184]  ? clear_bhb_loop+0x40/0x90
[ 1885.312990][ T2184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1885.313007][ T2184] RIP: 0033:0x7f0eae99c799
[ 1885.313025][ T2184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1885.313040][ T2184] RSP: 002b:00007f0eaf7d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1885.313059][ T2184] RAX: ffffffffffffffda RBX: 00007f0eaec16090 RCX: 00007f0eae99c799
[ 1885.313072][ T2184] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1885.313083][ T2184] RBP: 00007f0eaf7d3090 R08: 0000000000000000 R09: 0000000000000000
[ 1885.313094][ T2184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1885.313104][ T2184] R13: 00007f0eaec16128 R14: 00007f0eaec16090 R15: 00007ffda3fd3bf8
[ 1885.313131][ T2184]  </TASK>
[ 1886.459008][ T6667] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[ 1886.459434][T17588] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1886.485431][ T6667] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[ 1886.618892][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1886.723226][ T2270] loop2: detected capacity change from 0 to 7
[ 1886.732081][T15079] Dev loop2: unable to read RDB block 7
[ 1886.737814][T15079]  loop2: unable to read partition table
[ 1886.744003][T15079] loop2: partition table beyond EOD, truncated
[ 1886.753035][ T2270] Dev loop2: unable to read RDB block 7
[ 1886.758722][ T2270]  loop2: unable to read partition table
[ 1886.765629][ T2270] loop2: partition table beyond EOD, truncated
[ 1886.772547][ T2270] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1886.780028][   T24] usb 2-1: Using ep0 maxpacket: 16
[ 1886.797044][   T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1886.814901][   T24] usb 2-1: config 0 has no interface number 0
[ 1886.836328][   T24] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1886.854105][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1886.866363][   T24] usb 2-1: Product: syz
[ 1886.871575][   T24] usb 2-1: Manufacturer: syz
[ 1886.876299][   T24] usb 2-1: SerialNumber: syz
[ 1886.892363][   T24] usb 2-1: config 0 descriptor??
[ 1886.913114][   T24] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1886.920108][ T6667] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 1887.079181][ T6667] usb 3-1: Using ep0 maxpacket: 32
[ 1887.086365][ T6667] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 1887.095426][ T6667] usb 3-1: config 0 has no interface number 0
[ 1887.104824][ T6667] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1887.114219][ T6667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1887.126812][ T6667] usb 3-1: Product: syz
[ 1887.131292][ T6667] usb 3-1: Manufacturer: syz
[ 1887.136096][ T6667] usb 3-1: SerialNumber: syz
[ 1887.146193][ T6667] usb 3-1: config 0 descriptor??
[ 1887.268976][  T797] usb 7-1: new high-speed USB device number 89 using dummy_hcd
[ 1887.332504][ T2248] kAFS: No cell specified
[ 1887.418896][  T797] usb 7-1: Using ep0 maxpacket: 32
[ 1887.425978][  T797] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[ 1887.434714][  T797] usb 7-1: config 0 has no interface number 0
[ 1887.441327][  T797] usb 7-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1887.451570][  T797] usb 7-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1887.461829][  T797] usb 7-1: config 0 interface 12 has no altsetting 0
[ 1887.473771][  T797] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1887.483095][  T797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1887.491300][  T797] usb 7-1: Product: syz
[ 1887.495538][  T797] usb 7-1: Manufacturer: syz
[ 1887.500379][  T797] usb 7-1: SerialNumber: syz
[ 1887.508087][  T797] usb 7-1: config 0 descriptor??
[ 1887.521285][  T797] f81534 7-1:0.12: unsupported endpoint max packet size
[ 1887.555767][ T6667] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1887.566777][ T6667] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1887.659019][ T2297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1887.668510][ T2297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1887.766054][ T5919] usb 7-1: USB disconnect, device number 89
[ 1888.253432][ T2307] vxcan1 speed is unknown, defaulting to 1000
[ 1888.352733][   T24] gspca_spca1528: reg_w err -71
[ 1888.370339][   T24] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[ 1888.415437][   T24] usb 2-1: USB disconnect, device number 5
[ 1888.520309][ T2311] netlink: 'syz.5.9975': attribute type 1 has an invalid length.
[ 1888.528390][ T2311] netlink: 'syz.5.9975': attribute type 2 has an invalid length.
[ 1888.619112][ T5919] usb 7-1: new high-speed USB device number 90 using dummy_hcd
[ 1888.782206][ T5919] usb 7-1: Using ep0 maxpacket: 32
[ 1888.796671][ T5919] usb 7-1: config 0 has an invalid interface number: 35 but max is 0
[ 1888.812579][ T5919] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1888.859434][ T5919] usb 7-1: config 0 has no interface number 0
[ 1888.873677][ T5919] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1888.890659][ T5919] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1888.910117][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1888.951918][ T5919] usb 7-1: Product: syz
[ 1888.964907][ T5919] usb 7-1: Manufacturer: syz
[ 1888.977343][ T5919] usb 7-1: SerialNumber: syz
[ 1889.035306][ T6667] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1889.048612][ T5919] usb 7-1: config 0 descriptor??
[ 1889.068272][ T6667] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[ 1889.087088][ T5919] radio-si470x 7-1:0.35: could not find interrupt in endpoint
[ 1889.096982][ T6667] usb 3-1: USB disconnect, device number 98
[ 1889.110765][ T5919] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5
[ 1889.286494][ T5919] radio-raremono 7-1:0.35: Thanko's Raremono connected: (10C4:818A)
[ 1889.318469][ T2369] loop2: detected capacity change from 0 to 7
[ 1889.332510][T27223] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1889.356460][ T2369] Dev loop2: unable to read RDB block 7
[ 1889.382060][ T2369]  loop2: unable to read partition table
[ 1889.399150][ T2369] loop2: partition table beyond EOD, truncated
[ 1889.406588][ T2369] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1889.496443][ T5919] radio-raremono 7-1:0.35: raremono_cmd_main failed (-71)
[ 1889.522154][T27223] usb 2-1: Using ep0 maxpacket: 16
[ 1889.537306][T27223] usb 2-1: no configurations
[ 1889.554007][ T5919] radio-raremono 7-1:0.35: V4L2 device registered as radio48
[ 1889.562031][T27223] usb 2-1: can't read configurations, error -22
[ 1889.582800][ T5919] usb 7-1: USB disconnect, device number 90
[ 1889.590469][ T5919] radio-raremono 7-1:0.35: Thanko's Raremono disconnected
[ 1889.671625][ T2396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1889.683227][ T2396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1889.699024][T27223] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1889.839063][T11892] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[ 1889.858891][T27223] usb 2-1: Using ep0 maxpacket: 16
[ 1889.864815][T27223] usb 2-1: no configurations
[ 1889.869852][T27223] usb 2-1: can't read configurations, error -22
[ 1889.876444][T27223] usb usb2-port1: attempt power cycle
[ 1889.998941][T11892] usb 3-1: Using ep0 maxpacket: 16
[ 1890.006147][T11892] usb 3-1: config 50 has an invalid interface number: 161 but max is 3
[ 1890.014633][T11892] usb 3-1: config 50 has an invalid interface number: 112 but max is 3
[ 1890.023030][T11892] usb 3-1: config 50 contains an unexpected descriptor of type 0x2, skipping
[ 1890.032034][T11892] usb 3-1: config 50 has an invalid interface number: 7 but max is 3
[ 1890.040369][T11892] usb 3-1: config 50 has an invalid interface number: 156 but max is 3
[ 1890.048924][T11892] usb 3-1: config 50 has no interface number 0
[ 1890.055171][T11892] usb 3-1: config 50 has no interface number 1
[ 1890.061900][T11892] usb 3-1: config 50 has no interface number 2
[ 1890.068156][T11892] usb 3-1: config 50 has no interface number 3
[ 1890.076219][T11892] usb 3-1: config 50 interface 161 altsetting 1 endpoint 0x6 has invalid maxpacket 2031, setting to 1024
[ 1890.087727][T11892] usb 3-1: config 50 interface 161 altsetting 1 has a duplicate endpoint with address 0x3, skipping
[ 1890.098724][T11892] usb 3-1: config 50 interface 161 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[ 1890.109932][T11892] usb 3-1: config 50 interface 161 altsetting 1 has a duplicate endpoint with address 0x3, skipping
[ 1890.124212][T11892] usb 3-1: config 50 interface 161 altsetting 1 endpoint 0xF has an invalid bInterval 60, changing to 9
[ 1890.136048][T11892] usb 3-1: config 50 interface 161 altsetting 1 has a duplicate endpoint with address 0x1, skipping
[ 1890.147237][T11892] usb 3-1: config 50 interface 161 altsetting 1 bulk endpoint 0xC has invalid maxpacket 32
[ 1890.157597][T11892] usb 3-1: config 50 interface 161 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[ 1890.168722][T11892] usb 3-1: config 50 interface 161 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[ 1890.179944][T11892] usb 3-1: config 50 interface 161 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[ 1890.190961][T11892] usb 3-1: config 50 interface 112 altsetting 246 has an invalid descriptor for endpoint zero, skipping
[ 1890.202265][T11892] usb 3-1: config 50 interface 112 altsetting 246 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[ 1890.213712][T11892] usb 3-1: config 50 interface 112 altsetting 246 endpoint 0x9 has an invalid bInterval 84, changing to 10
[ 1890.225646][T11892] usb 3-1: config 50 interface 112 altsetting 246 has a duplicate endpoint with address 0x4, skipping
[ 1890.236865][T11892] usb 3-1: config 50 interface 112 altsetting 246 has an invalid descriptor for endpoint zero, skipping
[ 1890.241204][T27223] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1890.255676][T11892] usb 3-1: config 50 interface 7 altsetting 12 has an invalid descriptor for endpoint zero, skipping
[ 1890.267277][T11892] usb 3-1: config 50 interface 156 altsetting 9 has a duplicate endpoint with address 0x3, skipping
[ 1890.288721][ T2403] sctp: [Deprecated]: syz.6.9984 (pid 2403) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1890.288721][ T2403] Use struct sctp_sack_info instead
[ 1890.290043][T11892] usb 3-1: config 50 interface 156 altsetting 9 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1890.319972][T27223] usb 2-1: Using ep0 maxpacket: 16
[ 1890.327758][T27223] usb 2-1: no configurations
[ 1890.332717][T27223] usb 2-1: can't read configurations, error -22
[ 1890.360933][T11892] usb 3-1: config 50 interface 156 altsetting 9 has a duplicate endpoint with address 0x82, skipping
[ 1890.377488][T11892] usb 3-1: config 50 interface 156 altsetting 9 has a duplicate endpoint with address 0x3, skipping
[ 1890.382338][ T2403] Invalid ELF header magic: != ELF
[ 1890.395932][T11892] usb 3-1: config 50 interface 156 altsetting 9 has a duplicate endpoint with address 0xF, skipping
[ 1890.407754][T11892] usb 3-1: config 50 interface 156 altsetting 9 endpoint 0xB has invalid wMaxPacketSize 0
[ 1890.418165][T11892] usb 3-1: config 50 interface 156 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1890.432532][T11892] usb 3-1: config 50 interface 156 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1890.445038][T11892] usb 3-1: config 50 interface 156 altsetting 9 has a duplicate endpoint with address 0xC, skipping
[ 1890.456485][T11892] usb 3-1: config 50 interface 156 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1890.473791][T11892] usb 3-1: config 50 interface 156 altsetting 9 has a duplicate endpoint with address 0xF, skipping
[ 1890.486328][T11892] usb 3-1: config 50 interface 156 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1890.497838][T11892] usb 3-1: config 50 interface 156 altsetting 9 bulk endpoint 0xA has invalid maxpacket 1024
[ 1890.499127][T27223] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1890.516464][T11892] usb 3-1: config 50 interface 156 altsetting 9 has a duplicate endpoint with address 0xC, skipping
[ 1890.531747][T11892] usb 3-1: config 50 interface 156 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[ 1890.546385][T11892] usb 3-1: config 50 interface 161 has no altsetting 0
[ 1890.554654][T11892] usb 3-1: config 50 interface 112 has no altsetting 0
[ 1890.562170][T11892] usb 3-1: config 50 interface 7 has no altsetting 0
[ 1890.569728][T11892] usb 3-1: config 50 interface 156 has no altsetting 0
[ 1890.570292][T27223] usb 2-1: Using ep0 maxpacket: 16
[ 1890.588007][T27223] usb 2-1: no configurations
[ 1890.592867][T27223] usb 2-1: can't read configurations, error -22
[ 1890.603605][T11892] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=72.1d
[ 1890.612918][T11892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1890.617280][T27223] usb usb2-port1: unable to enumerate USB device
[ 1890.621933][T11892] usb 3-1: Product: я
[ 1890.621954][T11892] usb 3-1: Manufacturer: ⊿ꅁᢇ鞫痋⼄ࣉ㯦䴑㤢秲뎽蓖뤣楒ﻍ葺Ӻ뙼그۳ꡖ唠켠㮋쥲懥襄憲ꜯ愆⚶೸ꘕ⡺뚗ܗﳇ쟙꼪塱㭹萆赟Ꞁ㙨뀝௝⮧桜※⛥┰び꾣医謌鏠ꢏ钾椗毆홍豈렬焝줔ꏌ䰯㬿ᕁᝮ戋땪ⱔ쫐桉间≭ᵡ闫蔸孒⏒业沐췭䵑ຎ疪
[ 1890.621989][T11892] usb 3-1: SerialNumber: 䠰땖ៗ쐠⃎弎荻룲縳鼻긡䓦彼츓凫횪⫮찷렛ᗊ쳭呧ꝰⲴფ㑂ତ둵뤗骨薁П⑲բໄ佣醞뿻퐣蒊ǻ圐࢘㲰螟뽳党憶⛧䁨ന싌㍩髞흪䖚늵㴩쒹ꗗ拏슰ﻑ㜗䫧伆닏캙﬷瓞穥棘䁚ᖙ۠淥俷ᮗゃﺶ
[ 1890.702932][ T2382] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1890.717248][ T2382] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1890.744371][ T2410] netlink: 'syz.6.9986': attribute type 11 has an invalid length.
[ 1890.756316][ T2410] tmpfs: Unknown parameter 'grpquotJ_block_hardlimit'
[ 1890.806896][ T2412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1890.817459][ T2412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1890.941393][T11892] usb 3-1: bad CDC descriptors
[ 1890.947773][T11892] usb 3-1: unsupported MDLM descriptors
[ 1890.963945][T11892] cdc_acm 3-1:50.112: skipping garbage
[ 1890.969689][T11892] cdc_acm 3-1:50.112: skipping garbage
[ 1890.992484][T11892] usb 3-1: USB disconnect, device number 99
[ 1891.078963][   T10] usb 7-1: new low-speed USB device number 91 using dummy_hcd
[ 1891.208941][   T10] usb 7-1: device descriptor read/64, error -71
[ 1891.392258][ T2441] vxcan1 speed is unknown, defaulting to 1000
[ 1891.459006][   T10] usb 7-1: new low-speed USB device number 92 using dummy_hcd
[ 1891.599907][   T10] usb 7-1: device descriptor read/64, error -71
[ 1891.714206][ T2440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1891.724745][ T2440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1891.731427][   T10] usb usb7-port1: attempt power cycle
[ 1891.798914][T11892] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[ 1891.980823][T11892] usb 3-1: Using ep0 maxpacket: 32
[ 1891.997140][T11892] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1892.015897][T11892] usb 3-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40
[ 1892.025076][T11892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1892.033216][T11892] usb 3-1: Product: syz
[ 1892.037428][T11892] usb 3-1: Manufacturer: syz
[ 1892.042144][T11892] usb 3-1: SerialNumber: syz
[ 1892.129000][   T10] usb 7-1: new low-speed USB device number 93 using dummy_hcd
[ 1892.161919][   T10] usb 7-1: device descriptor read/8, error -71
[ 1892.182454][ T2515] openvswitch: netlink: Multiple metadata blocks provided
[ 1892.310390][T11892] usb 3-1: 1:1: invalid format type 0x1001 is detected, processed as PCM
[ 1892.333260][T11892] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1892.408974][   T10] usb 7-1: new low-speed USB device number 94 using dummy_hcd
[ 1892.431496][T11892] usb 3-1: USB disconnect, device number 100
[ 1892.444326][   T10] usb 7-1: device descriptor read/8, error -71
[ 1892.559319][   T10] usb usb7-port1: unable to enumerate USB device
[ 1892.738998][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1892.878452][ T2569] vxcan1 speed is unknown, defaulting to 1000
[ 1892.899133][   T10] usb 2-1: Using ep0 maxpacket: 8
[ 1892.913290][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1892.939187][   T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1892.960804][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1892.982839][   T10] usb 2-1: config 0 descriptor??
[ 1893.205300][   T10] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1893.711464][ T2624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1893.726570][ T2624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1893.749198][   T10] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[ 1893.813144][ T2632] netlink: 'syz.6.9999': attribute type 8 has an invalid length.
[ 1893.887819][ T2634] vxcan1 speed is unknown, defaulting to 1000
[ 1893.909450][   T10] usb 3-1: Using ep0 maxpacket: 32
[ 1893.922173][   T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 1893.930852][   T10] usb 3-1: config 0 has no interface number 0
[ 1893.944607][   T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1893.956001][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1893.964232][   T10] usb 3-1: Product: syz
[ 1893.968455][   T10] usb 3-1: Manufacturer: syz
[ 1893.974348][   T10] usb 3-1: SerialNumber: syz
[ 1893.995553][   T10] usb 3-1: config 0 descriptor??
[ 1894.159166][ T5912] usb 7-1: new high-speed USB device number 95 using dummy_hcd
[ 1894.320005][ T5912] usb 7-1: Using ep0 maxpacket: 32
[ 1894.332120][ T5912] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1894.344054][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1894.353134][ T5912] usb 7-1: Product: syz
[ 1894.357516][ T5912] usb 7-1: Manufacturer: syz
[ 1894.363791][ T5912] usb 7-1: SerialNumber: syz
[ 1894.375998][ T5912] usb 7-1: config 0 descriptor??
[ 1894.395726][ T5912] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1894.406732][   T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1894.429351][   T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1894.639295][ T2683] vxcan1 speed is unknown, defaulting to 1000
[ 1894.800436][ T2690] netlink: 'syz.5.10003': attribute type 1 has an invalid length.
[ 1894.808460][ T2690] netlink: 'syz.5.10003': attribute type 2 has an invalid length.
[ 1894.816838][ T2690] FAULT_INJECTION: forcing a failure.
[ 1894.816838][ T2690] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1894.832448][ T2690] CPU: 1 UID: 0 PID: 2690 Comm: syz.5.10003 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1894.832483][ T2690] Tainted: [L]=SOFTLOCKUP
[ 1894.832492][ T2690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1894.832506][ T2690] Call Trace:
[ 1894.832516][ T2690]  <TASK>
[ 1894.832526][ T2690]  dump_stack_lvl+0xe8/0x150
[ 1894.832563][ T2690]  should_fail_ex+0x412/0x560
[ 1894.832600][ T2690]  _copy_from_user+0x2d/0xb0
[ 1894.832625][ T2690]  kstrtouint_from_user+0xd6/0x180
[ 1894.832659][ T2690]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1894.832707][ T2690]  proc_fail_nth_write+0x8e/0x210
[ 1894.832731][ T2690]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1894.832760][ T2690]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1894.832785][ T2690]  vfs_write+0x29a/0xb90
[ 1894.832822][ T2690]  ? __pfx_vfs_write+0x10/0x10
[ 1894.832850][ T2690]  ? __fget_files+0x2a/0x420
[ 1894.832877][ T2690]  ? __fget_files+0x3a0/0x420
[ 1894.832897][ T2690]  ? __fget_files+0x2a/0x420
[ 1894.832929][ T2690]  ksys_write+0x150/0x270
[ 1894.832959][ T2690]  ? __pfx_ksys_write+0x10/0x10
[ 1894.832999][ T2690]  do_syscall_64+0x14d/0xf80
[ 1894.833026][ T2690]  ? trace_irq_disable+0x3b/0x150
[ 1894.833048][ T2690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1894.833070][ T2690]  ? clear_bhb_loop+0x40/0x90
[ 1894.833097][ T2690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1894.833119][ T2690] RIP: 0033:0x7fe61155cfce
[ 1894.833139][ T2690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1894.833164][ T2690] RSP: 002b:00007fe61249cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1894.833206][ T2690] RAX: ffffffffffffffda RBX: 00007fe61249d6c0 RCX: 00007fe61155cfce
[ 1894.833223][ T2690] RDX: 0000000000000001 RSI: 00007fe61249d0a0 RDI: 0000000000000004
[ 1894.833237][ T2690] RBP: 00007fe61249d090 R08: 0000000000000000 R09: 0000000000000000
[ 1894.833251][ T2690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1894.833264][ T2690] R13: 00007fe611816128 R14: 00007fe611816090 R15: 00007ffff98c7978
[ 1894.833299][ T2690]  </TASK>
[ 1895.276262][   T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1895.289916][   T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32
[ 1895.519659][   T10] usb 2-1: USB disconnect, device number 10
[ 1895.759223][ T5912] gspca_ov534_9: reg_w failed -110
[ 1895.847914][T27223] usb 3-1: USB disconnect, device number 101
[ 1895.939047][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1895.948694][ T2771] vxcan1 speed is unknown, defaulting to 1000
[ 1895.955421][ T2776] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10006'.
[ 1896.080048][ T5912] gspca_ov534_9: Unknown sensor 0000
[ 1896.080150][ T5912] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22
[ 1896.108969][   T10] usb 2-1: Using ep0 maxpacket: 16
[ 1896.119336][   T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1896.129644][   T10] usb 2-1: config 1 descriptor has 1 excess byte, ignoring
[ 1896.137161][   T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1896.162010][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1896.173556][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1896.186231][   T10] usb 2-1: Product: syz
[ 1896.191690][   T10] usb 2-1: Manufacturer: syz
[ 1896.198416][   T10] usb 2-1: SerialNumber: syz
[ 1896.626237][   T10] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1896.637858][   T10] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[ 1896.652061][   T10] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1896.689815][  T797] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[ 1896.727978][   T10] usb 2-1: USB disconnect, device number 11
[ 1896.796806][T15079] udevd[15079]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1896.851696][  T797] usb 3-1: Using ep0 maxpacket: 16
[ 1896.875334][  T797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1896.887409][  T797] usb 3-1: config 0 has no interfaces?
[ 1896.902192][  T797] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1896.932065][  T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1896.949321][  T797] usb 3-1: Product: syz
[ 1896.960190][  T797] usb 3-1: Manufacturer: syz
[ 1896.967350][T27223] usb 7-1: USB disconnect, device number 95
[ 1896.985380][  T797] usb 3-1: SerialNumber: syz
[ 1897.046829][ T2872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1897.057006][  T797] usb 3-1: config 0 descriptor??
[ 1897.069157][ T2872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1897.398945][T27223] usb 7-1: new high-speed USB device number 96 using dummy_hcd
[ 1897.478981][ T5919] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1897.548913][T27223] usb 7-1: Using ep0 maxpacket: 16
[ 1897.569074][T27223] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1897.588861][T27223] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1897.616162][T27223] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1897.629753][T27223] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1897.642031][T27223] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1897.651247][ T5919] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[ 1897.660563][ T5919] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253
[ 1897.684409][ T5919] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[ 1897.697689][T27223] usb 7-1: config 0 descriptor??
[ 1897.706636][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1897.747235][ T5919] usb 2-1: Product: syz
[ 1897.751885][ T5919] usb 2-1: Manufacturer: syz
[ 1897.758018][ T5919] usb 2-1: SerialNumber: syz
[ 1897.770720][ T5919] usb 2-1: config 0 descriptor??
[ 1897.782959][ T5919] gspca_main: sunplus-2.14.0 probing 055f:c630
[ 1897.919238][ T2875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1897.931778][ T2875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1898.149223][T27223] microsoft 0003:045E:07DA.007C: item 0 4 0 8 parsing failed
[ 1898.158652][T27223] microsoft 0003:045E:07DA.007C: parse failed
[ 1898.165670][T27223] microsoft 0003:045E:07DA.007C: probe with driver microsoft failed with error -22
[ 1898.350699][ T5919] usb 7-1: USB disconnect, device number 96
[ 1898.737665][ T2915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1898.747832][ T2915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1899.468412][   T10] usb 3-1: USB disconnect, device number 102
[ 1899.919122][   T10] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 1899.957021][ T2944] vxcan1 speed is unknown, defaulting to 1000
[ 1900.069211][   T10] usb 3-1: Using ep0 maxpacket: 16
[ 1900.093659][   T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1900.120036][   T10] usb 3-1: config 0 has no interface number 0
[ 1900.142665][   T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1900.149185][ T2950] netlink: 76 bytes leftover after parsing attributes in process `syz.5.10021'.
[ 1900.160863][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1900.160895][   T10] usb 3-1: Product: syz
[ 1900.160913][   T10] usb 3-1: Manufacturer: syz
[ 1900.160929][   T10] usb 3-1: SerialNumber: syz
[ 1900.202326][   T10] usb 3-1: config 0 descriptor??
[ 1900.244864][   T10] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1900.267732][T27223] usb 2-1: USB disconnect, device number 12
[ 1900.475744][ T2981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1900.489766][ T2981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1900.640701][ T2939] kAFS: No cell specified
[ 1900.682886][ T2996] can: request_module (can-proto-3) failed.
[ 1900.749191][T27223] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1900.899331][T27223] usb 2-1: Using ep0 maxpacket: 32
[ 1900.937117][T27223] usb 2-1: config 0 has an invalid interface number: 239 but max is 0
[ 1900.979102][T27223] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1901.008461][T27223] usb 2-1: config 0 has no interface number 0
[ 1901.028945][T27223] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[ 1901.064324][T27223] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[ 1901.094771][T27223] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[ 1901.108715][T27223] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[ 1901.120468][T27223] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[ 1901.135060][T27223] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[ 1901.165806][T27223] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1901.186760][T27223] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1901.197103][T27223] usb 2-1: config 0 interface 239 has no altsetting 0
[ 1901.208734][T27223] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[ 1901.218641][T27223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1901.230372][T27223] usb 2-1: Product: syz
[ 1901.234731][T27223] usb 2-1: Manufacturer: syz
[ 1901.239820][T27223] usb 2-1: SerialNumber: syz
[ 1901.252009][T27223] usb 2-1: config 0 descriptor??
[ 1901.275325][ T2973] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1901.283582][ T2973] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1901.291943][ T3007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1901.320857][ T3007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1901.343405][T17588] Bluetooth: hci4: urb ffff88802b281100 submission failed (90)
[ 1901.352342][ T3007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1901.378283][ T3007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1901.443949][ T3007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1901.469617][ T3007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1901.498417][T27223] usb 2-1: USB disconnect, device number 13
[ 1901.643048][ T3033] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10028'.
[ 1901.685599][   T10] gspca_spca1528: reg_w err -71
[ 1901.692221][   T10] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[ 1901.731141][   T10] usb 3-1: USB disconnect, device number 103
[ 1902.057812][ T3057] tmpfs: Unknown parameter 'usrqu�d*���(K���h��'
[ 1902.131407][   T30] audit: type=1326 audit(6063941965.430:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3063 comm="syz.5.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61159c799 code=0x7ffc0000
[ 1902.154223][   T30] audit: type=1326 audit(6063941965.430:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3063 comm="syz.5.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61159c799 code=0x7ffc0000
[ 1902.182095][   T30] audit: type=1326 audit(6063941965.450:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3063 comm="syz.5.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61159c799 code=0x7ffc0000
[ 1902.206958][   T30] audit: type=1326 audit(6063941965.450:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3063 comm="syz.5.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe61159c799 code=0x7ffc0000
[ 1902.239181][   T30] audit: type=1326 audit(6063941965.450:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3063 comm="syz.5.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61159c799 code=0x7ffc0000
[ 1902.271947][   T30] audit: type=1326 audit(6063941965.450:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3063 comm="syz.5.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61159c799 code=0x7ffc0000
[ 1902.296434][   T30] audit: type=1326 audit(6063941965.450:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3063 comm="syz.5.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61159c799 code=0x7ffc0000
[ 1902.329392][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1902.354390][   T30] audit: type=1326 audit(6063941965.450:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3063 comm="syz.5.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61159c799 code=0x7ffc0000
[ 1902.383154][   T30] audit: type=1326 audit(6063941965.450:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3063 comm="syz.5.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe61159c799 code=0x7ffc0000
[ 1902.409935][   T30] audit: type=1326 audit(6063941965.450:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3063 comm="syz.5.10034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61159c799 code=0x7ffc0000
[ 1902.449405][ T3068] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10035'.
[ 1902.508981][   T10] usb 2-1: Using ep0 maxpacket: 32
[ 1902.526325][   T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1902.557939][   T10] usb 2-1: config 0 has no interface number 0
[ 1902.580372][   T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1902.602929][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1902.611941][ T3070] loop2: detected capacity change from 0 to 7
[ 1902.623973][   T10] usb 2-1: Product: syz
[ 1902.630376][ T3070] Dev loop2: unable to read RDB block 7
[ 1902.639752][   T10] usb 2-1: Manufacturer: syz
[ 1902.642558][ T3070]  loop2: unable to read partition table
[ 1902.656520][   T10] usb 2-1: SerialNumber: syz
[ 1902.660104][ T3070] loop2: partition table beyond EOD, truncated
[ 1902.676708][ T3077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10037'.
[ 1902.688440][ T3070] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1902.694126][   T10] usb 2-1: config 0 descriptor??
[ 1902.904584][ T3090] vxcan1 speed is unknown, defaulting to 1000
[ 1902.972389][ T3099] loop8: detected capacity change from 0 to 7
[ 1902.981942][ T3099] Dev loop8: unable to read RDB block 7
[ 1902.987739][ T3099]  loop8: AHDI p1 p2 p3
[ 1902.992566][ T3099] loop8: partition table partially beyond EOD, truncated
[ 1903.002215][ T3099] loop8: p1 start 1601398130 is beyond EOD, truncated
[ 1903.009820][ T3099] loop8: p2 start 1702059890 is beyond EOD, truncated
[ 1903.102216][T15079] Dev loop8: unable to read RDB block 7
[ 1903.120455][T15079]  loop8: AHDI p1 p2 p3
[ 1903.128478][   T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1903.129209][T15079] loop8: partition table partially beyond EOD, 
[ 1903.152287][   T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1903.160531][T15079] truncated
[ 1903.189275][T15079] loop8: p1 start 1601398130 is beyond EOD, truncated
[ 1903.211302][T15079] loop8: p2 start 1702059890 is beyond EOD, truncated
[ 1903.232763][ T3099] Dev loop8: unable to read RDB block 7
[ 1903.240229][ T3099]  loop8: AHDI p1 p2 p3
[ 1903.247206][ T3099] loop8: partition table partially beyond EOD, truncated
[ 1903.276350][ T3096] netlink: 'syz.2.10040': attribute type 1 has an invalid length.
[ 1903.286467][ T3096] netlink: 'syz.2.10040': attribute type 2 has an invalid length.
[ 1903.295501][ T3099] loop8: p1 start 1601398130 is beyond EOD, truncated
[ 1903.311144][ T3099] loop8: p2 start 1702059890 is beyond EOD, truncated
[ 1903.807676][ T3137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1903.840829][ T3137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1903.892021][ T3139] sp0: Synchronizing with TNC
[ 1903.897348][ T3137] kAFS: No cell specified
[ 1903.913732][ T3135] [U] �``
[ 1904.024265][   T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1904.056507][   T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32
[ 1904.159482][ T3160] loop2: detected capacity change from 0 to 7
[ 1904.167753][ T3160] Dev loop2: unable to read RDB block 7
[ 1904.173806][ T3160]  loop2: unable to read partition table
[ 1904.187549][ T3160] loop2: partition table beyond EOD, truncated
[ 1904.194213][ T3160] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1904.299312][  T797] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 1904.317589][ T3166] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10048'.
[ 1904.327511][ T3166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10048'.
[ 1904.400301][ T3168] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10049'.
[ 1904.452129][  T797] usb 3-1: device descriptor read/64, error -71
[ 1904.569853][ T5912] usb 2-1: USB disconnect, device number 14
[ 1904.663437][ T3187] vxcan1 speed is unknown, defaulting to 1000
[ 1904.705456][ T3193] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1904.720359][  T797] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 1904.731847][ T3193] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[ 1904.774868][ T3193] bond0: (slave sit0): Error -95 calling set_mac_address
[ 1904.881950][  T797] usb 3-1: device descriptor read/64, error -71
[ 1905.023608][  T797] usb usb3-port1: attempt power cycle
[ 1905.122721][ T3196] netlink: 'syz.5.10054': attribute type 1 has an invalid length.
[ 1905.152258][ T3196] netlink: 'syz.5.10054': attribute type 2 has an invalid length.
[ 1905.379113][  T797] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 1905.422045][  T797] usb 3-1: device descriptor read/8, error -71
[ 1905.432186][ T5919] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1905.538899][T27223] usb 7-1: new high-speed USB device number 97 using dummy_hcd
[ 1905.610743][ T3245] loop2: detected capacity change from 0 to 7
[ 1905.640952][ T3245] Dev loop2: unable to read RDB block 7
[ 1905.648350][ T5919] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1905.653775][ T3245]  loop2: unable to read partition table
[ 1905.688605][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1905.697505][ T3245] loop2: partition table beyond EOD, 
[ 1905.697586][  T797] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 1905.697883][ T3245] truncated
[ 1905.705112][ T5919] usb 2-1: Product: syz
[ 1905.721387][ T5919] usb 2-1: Manufacturer: syz
[ 1905.726087][ T5919] usb 2-1: SerialNumber: syz
[ 1905.730948][T27223] usb 7-1: Using ep0 maxpacket: 32
[ 1905.740354][  T797] usb 3-1: device descriptor read/8, error -71
[ 1905.747293][T27223] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1905.750037][ T3245] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1905.767008][T27223] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8
[ 1905.799895][T27223] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[ 1905.813654][T27223] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1905.822502][T27223] usb 7-1: Product: syz
[ 1905.830774][T27223] usb 7-1: Manufacturer: syz
[ 1905.835876][T27223] usb 7-1: SerialNumber: syz
[ 1905.849573][  T797] usb usb3-port1: unable to enumerate USB device
[ 1905.877433][ T3213] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[ 1905.993341][ T3255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1906.018743][ T3255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1906.150012][T27223] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 1906.170067][T27223] usb 7-1: MIDIStreaming interface descriptor not found
[ 1906.209966][ T5919] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1906.260137][ T5919] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1906.344672][T27223] usb 7-1: USB disconnect, device number 97
[ 1906.422656][T10554] udevd[10554]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1907.221672][ T3322] netlink: 'syz.5.10061': attribute type 11 has an invalid length.
[ 1907.299308][ T3325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1907.309652][ T3325] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1907.339961][ T5838] Bluetooth: hci4: command 0x1003 tx timeout
[ 1907.351778][T17588] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1907.469153][T27223] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[ 1907.618922][T27223] usb 3-1: Using ep0 maxpacket: 16
[ 1907.626495][T27223] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1907.634660][T27223] usb 3-1: config 0 has no interface number 0
[ 1907.643209][T27223] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1907.652417][T27223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1907.660703][T27223] usb 3-1: Product: syz
[ 1907.664958][T27223] usb 3-1: Manufacturer: syz
[ 1907.671047][T27223] usb 3-1: SerialNumber: syz
[ 1907.680618][T27223] usb 3-1: config 0 descriptor??
[ 1907.690805][T27223] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1907.874006][ T3334] sctp: [Deprecated]: syz.5.10063 (pid 3334) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1907.874006][ T3334] Use struct sctp_sack_info instead
[ 1907.894287][ T3334] sctp: [Deprecated]: syz.5.10063 (pid 3334) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1907.894287][ T3334] Use struct sctp_sack_info instead
[ 1907.914355][ T3334] sctp: [Deprecated]: syz.5.10063 (pid 3334) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1907.914355][ T3334] Use struct sctp_sack_info instead
[ 1908.027543][ T3340] trusted_key: encrypted_key: insufficient parameters specified
[ 1908.140443][ T3316] kAFS: No cell specified
[ 1908.177831][ T5919] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO
[ 1908.193847][ T5919] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1908.208389][ T5919] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1908.220863][ T5919] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[ 1908.245038][ T5919] usb 2-1: USB disconnect, device number 15
[ 1909.161498][T27223] gspca_spca1528: reg_w err -71
[ 1909.166512][T27223] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[ 1909.180885][T27223] usb 3-1: USB disconnect, device number 108
[ 1921.426046][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1921.438447][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[ 1926.618885][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms
[ 1926.626971][    C1] lec:lec_tx_timeout: lec0
[ 1935.893528][ T8752] lec:lec_start_xmit: lec0:No lecd attached
[ 1941.578986][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms
[ 1941.587054][    C1] lec:lec_tx_timeout: lec0
[ 1982.870778][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1982.884574][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[ 1988.538903][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms
[ 1988.546995][    C1] lec:lec_tx_timeout: lec0
[ 2000.680682][ T8752] lec:lec_start_xmit: lec0:No lecd attached
[ 2005.688890][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 2005.696943][    C1] lec:lec_tx_timeout: lec0
[ 2044.308181][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2044.322172][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[ 2049.578923][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms
[ 2049.587049][    C1] lec:lec_tx_timeout: lec0
[ 2057.099291][   T31] INFO: task kworker/1:5:5892 blocked for more than 143 seconds.
[ 2057.107120][   T31]       Tainted: G             L      syzkaller #0
[ 2057.113813][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2057.122683][   T31] task:kworker/1:5     state:D stack:21568 pid:5892  tgid:5892  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 2057.134854][   T31] Workqueue: usb_hub_wq hub_event
[ 2057.140075][   T31] Call Trace:
[ 2057.143392][   T31]  <TASK>
[ 2057.146366][   T31]  __schedule+0x1664/0x5590
[ 2057.151633][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[ 2057.156677][   T31]  ? irqentry_exit+0x61a/0x700
[ 2057.161701][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2057.166811][   T31]  ? __pfx___schedule+0x10/0x10
[ 2057.172731][   T31]  ? schedule+0x90/0x360
[ 2057.177073][   T31]  schedule+0x164/0x360
[ 2057.182435][   T31]  usb_kill_urb+0x1cf/0x2f0
[ 2057.187089][   T31]  ? __pfx_usb_kill_urb+0x10/0x10
[ 2057.192295][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2057.198426][   T31]  usb_start_wait_urb+0x1a3/0x510
[ 2057.203989][   T31]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 2057.209660][   T31]  usb_control_msg+0x232/0x3e0
[ 2057.214481][   T31]  hub_port_init+0x1257/0x28d0
[ 2057.219372][   T31]  hub_event+0x2593/0x4f30
[ 2057.223885][   T31]  ? __pfx_hub_event+0x10/0x10
[ 2057.228706][   T31]  ? process_one_work+0x87c/0x1650
[ 2057.233923][   T31]  process_one_work+0x949/0x1650
[ 2057.239048][   T31]  ? irqentry_exit+0x61a/0x700
[ 2057.243906][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 2057.249400][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2057.254496][   T31]  worker_thread+0xb46/0x1140
[ 2057.260951][   T31]  kthread+0x388/0x470
[ 2057.268863][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 2057.275392][   T31]  ? __pfx_kthread+0x10/0x10
[ 2057.280176][   T31]  ret_from_fork+0x51e/0xb90
[ 2057.284899][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2057.290175][   T31]  ? __switch_to+0xc7d/0x1450
[ 2057.294914][   T31]  ? __pfx_kthread+0x10/0x10
[ 2057.299633][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2057.304476][   T31]  </TASK>
[ 2057.307656][   T31] 
[ 2057.307656][   T31] Showing all locks held in the system:
[ 2057.316381][   T31] 1 lock held by khungtaskd/31:
[ 2057.321446][   T31]  #0: ffffffff8e960560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2057.331572][   T31] 1 lock held by klogd/5179:
[ 2057.336208][   T31] 2 locks held by getty/5579:
[ 2057.342620][   T31]  #0: ffff8880331b40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2057.354942][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[ 2057.365267][   T31] 5 locks held by kworker/1:5/5892:
[ 2057.370579][   T31]  #0: ffff8880222a5548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x855/0x1650
[ 2057.383228][   T31]  #1: ffffc900049a7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650
[ 2057.395532][   T31]  #2: ffff88802c74d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[ 2057.405498][   T31]  #3: ffff88802c739528 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30
[ 2057.416567][   T31]  #4: ffff88802b8b1868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30
[ 2057.427344][   T31] 
[ 2057.430075][   T31] =============================================
[ 2057.430075][   T31] 
[ 2057.439774][   T31] NMI backtrace for cpu 0
[ 2057.439800][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2057.439829][   T31] Tainted: [L]=SOFTLOCKUP
[ 2057.439838][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2057.439850][   T31] Call Trace:
[ 2057.439859][   T31]  <TASK>
[ 2057.439868][   T31]  dump_stack_lvl+0xe8/0x150
[ 2057.439904][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 2057.439939][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2057.439977][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 2057.440013][   T31]  sys_info+0x135/0x170
[ 2057.440040][   T31]  watchdog+0xfd9/0x1030
[ 2057.440068][   T31]  ? watchdog+0x21a/0x1030
[ 2057.440095][   T31]  kthread+0x388/0x470
[ 2057.440118][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2057.440137][   T31]  ? __pfx_kthread+0x10/0x10
[ 2057.440159][   T31]  ret_from_fork+0x51e/0xb90
[ 2057.440191][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2057.440216][   T31]  ? __switch_to+0xc7d/0x1450
[ 2057.440252][   T31]  ? __pfx_kthread+0x10/0x10
[ 2057.440274][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2057.440321][   T31]  </TASK>
[ 2057.440340][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 2057.557346][    C1] NMI backtrace for cpu 1
[ 2057.557370][    C1] CPU: 1 UID: 0 PID: 5179 Comm: klogd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2057.557394][    C1] Tainted: [L]=SOFTLOCKUP
[ 2057.557401][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2057.557414][    C1] RIP: 0010:debug_smp_processor_id+0xb/0x20
[ 2057.557446][    C1] Code: f9 e9 67 ff ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 80 fe 29 8c <48> c7 c6 c0 fe 29 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90
[ 2057.557462][    C1] RSP: 0018:ffffc90003317500 EFLAGS: 00000083
[ 2057.557480][    C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81cdd71c
[ 2057.557492][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8c29fe80
[ 2057.557504][    C1] RBP: 0000000000000008 R08: ffffffff903422b7 R09: 1ffffffff2068456
[ 2057.557516][    C1] R10: dffffc0000000000 R11: fffffbfff2068457 R12: ffff88808c6d8000
[ 2057.557530][    C1] R13: ffff88808c6d0000 R14: ffffffff9a741020 R15: 0000000000000008
[ 2057.557543][    C1] FS:  00007fdc135dbc80(0000) GS:ffff8881250f7000(0000) knlGS:0000000000000000
[ 2057.557559][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2057.557571][    C1] CR2: 00007ffc74503fc8 CR3: 000000007dd48000 CR4: 00000000003526f0
[ 2057.557588][    C1] Call Trace:
[ 2057.557595][    C1]  <TASK>
[ 2057.557602][    C1]  rcu_is_watching+0x15/0xb0
[ 2057.557631][    C1]  trace_irq_disable+0x3b/0x150
[ 2057.557651][    C1]  _raw_spin_lock_irqsave+0x1a/0x60
[ 2057.557672][    C1]  debug_check_no_obj_freed+0x145/0x550
[ 2057.557731][    C1]  ? __page_table_check_zero+0x6a/0x3e0
[ 2057.557763][    C1]  ? __page_table_check_zero+0x397/0x3e0
[ 2057.557784][    C1]  ? __page_table_check_zero+0x6a/0x3e0
[ 2057.557809][    C1]  __free_frozen_pages+0x52c/0xd60
[ 2057.557836][    C1]  __slab_free+0x263/0x2b0
[ 2057.557861][    C1]  ? qlist_free_all+0x8c/0x100
[ 2057.557883][    C1]  qlist_free_all+0x97/0x100
[ 2057.557905][    C1]  kasan_quarantine_reduce+0x148/0x160
[ 2057.557927][    C1]  __kasan_slab_alloc+0x22/0x80
[ 2057.557950][    C1]  kmem_cache_alloc_node_noprof+0x384/0x690
[ 2057.557972][    C1]  ? __alloc_skb+0x1d0/0x7d0
[ 2057.557990][    C1]  ? kmem_cache_alloc_node_noprof+0x23e/0x690
[ 2057.558013][    C1]  __alloc_skb+0x1d0/0x7d0
[ 2057.558033][    C1]  alloc_skb_with_frags+0xca/0x890
[ 2057.558061][    C1]  sock_alloc_send_pskb+0x878/0x990
[ 2057.558094][    C1]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 2057.558119][    C1]  ? sock_def_readable+0xae/0x580
[ 2057.558146][    C1]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[ 2057.558173][    C1]  unix_dgram_sendmsg+0x460/0x18e0
[ 2057.558215][    C1]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 2057.558245][    C1]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 2057.558278][    C1]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 2057.558303][    C1]  sock_sendmsg_nosec+0x18f/0x1d0
[ 2057.558331][    C1]  __sys_sendto+0x3ff/0x590
[ 2057.558350][    C1]  ? __pfx___sys_sendto+0x10/0x10
[ 2057.558385][    C1]  ? rcu_is_watching+0x15/0xb0
[ 2057.558414][    C1]  __x64_sys_sendto+0xde/0x100
[ 2057.558434][    C1]  do_syscall_64+0x14d/0xf80
[ 2057.558456][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2057.558475][    C1]  ? clear_bhb_loop+0x40/0x90
[ 2057.558495][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2057.558513][    C1] RIP: 0033:0x7fdc1372b407
[ 2057.558545][    C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 2057.558561][    C1] RSP: 002b:00007ffde2a43120 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[ 2057.558578][    C1] RAX: ffffffffffffffda RBX: 00007fdc135dbc80 RCX: 00007fdc1372b407
[ 2057.558591][    C1] RDX: 0000000000000052 RSI: 00007ffde2a43260 RDI: 0000000000000003
[ 2057.558603][    C1] RBP: 00007ffde2a43690 R08: 0000000000000000 R09: 0000000000000000
[ 2057.558615][    C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffde2a436a8
[ 2057.558627][    C1] R13: 00007ffde2a43260 R14: 0000000000000037 R15: 00007ffde2a43260
[ 2057.558649][    C1]  </TASK>
[ 2057.959247][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 2057.966177][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2057.976901][   T31] Tainted: [L]=SOFTLOCKUP
[ 2057.981261][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2057.991354][   T31] Call Trace:
[ 2057.994677][   T31]  <TASK>
[ 2057.997645][   T31]  vpanic+0x56c/0xa60
[ 2058.001680][   T31]  ? __pfx___schedule+0x10/0x10
[ 2058.006576][   T31]  ? __pfx_vpanic+0x10/0x10
[ 2058.011153][   T31]  panic+0xc5/0xd0
[ 2058.014924][   T31]  ? __pfx_panic+0x10/0x10
[ 2058.019392][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 2058.024811][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 2058.031022][   T31]  watchdog+0x1023/0x1030
[ 2058.035402][   T31]  ? watchdog+0x21a/0x1030
[ 2058.039864][   T31]  kthread+0x388/0x470
[ 2058.043983][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2058.048709][   T31]  ? __pfx_kthread+0x10/0x10
[ 2058.053348][   T31]  ret_from_fork+0x51e/0xb90
[ 2058.057994][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2058.063157][   T31]  ? __switch_to+0xc7d/0x1450
[ 2058.067890][   T31]  ? __pfx_kthread+0x10/0x10
[ 2058.072566][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2058.077418][   T31]  </TASK>
[ 2058.081092][   T31] Kernel Offset: disabled
[ 2058.085474][   T31] Rebooting in 86400 seconds..