last executing test programs:

3m20.104869156s ago: executing program 1 (id=231):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x13)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x2c, r3, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x800)
waitid(0x1, r1, 0x0, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x401}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000038000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000004000380080007"], 0xc0}}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x80, 0x1, 0x5, 0x1, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x68, 0x0, 0x9a, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0)
bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r9})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x580103, r9})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r11, 0x2, 0x70bd28, 0x400, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x64080}, 0x80)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r12, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x18, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)

3m19.962507306s ago: executing program 1 (id=232):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f0000001ec0)=""/4083, 0xff3}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000080)=""/45, 0x2d}], 0x5}, 0x100)
sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="dc010000160001000000000000000000fe880000000000000000000000000101ffffffff00000000000000000000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c0000006401010000000000000000000000000007000000000000000000000000006df10200000000000000000000000000000000000000000000005866b20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000fdffffff0000000000000000000000000000000008000001000000000000000005"], 0x1dc}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

3m19.853812215s ago: executing program 1 (id=233):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)={0x20, 0x1e, 0x301, 0x20000002, 0x0, {0x1f}, [@nested={0xc, 0x6, 0x0, 0x1, [@nested={0x5, 0xc1, 0x0, 0x1, [@generic="82"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a006007ffffffffffffaaaaaaaaaa2786dd694fd2cd00383a00fe8000000000000000000000000000bbff0200000000000000000000000000010106907802000000657c182cfff93a00fc020000000000000000000000000000ff010000000000000000000000000001053899b29ee050d0e215838aedc18885c8a869336b820b58d9d8e0db824ec5f4a5146d890c146a260aab025a3b93d922c1f0c4bfd4ae1f2f2de7988b15f0a33677a82ab0b84aa7d557245dd09aadd11fc4271843d595d4a1bbcd4ae2db85f4d17ab363f56242f892eace0195dbbe178f"], 0x72)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x1a1882, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r5, &(0x7f0000000340)={&(0x7f0000000100)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2a}}}], 0x18}, 0x40800) (async)
sendmsg$inet6(r5, &(0x7f0000000340)={&(0x7f0000000100)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2a}}}], 0x18}, 0x40800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) (async)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xffeffffb, 0x1007)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0xf, 0x10000, 0x4, 0xe, 0x0, 0xb, 0x7, 0xa, 0x101, 0x5, 0x8, 0x2, 0x7fe, 0xfffffffe, 0x0, 0xfffffffe, 0x5, 0x6, 0xfffff801, 0x89, 0x8, 0x1ff, 0x0, 0xb, 0xe6b, 0x68a1589b, 0x8, 0x65c, 0x2, 0xfffff8e9, 0x47cc]})

3m19.73201458s ago: executing program 1 (id=234):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000000000000000400060000000004100006000000000020"], 0x24, 0x0)
r1 = socket(0x2, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506024051000924030003030005490c240206", @ANYBLOB], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0)
r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2711, @local}, 0x10, 0x800)
ioctl$int_out(r2, 0x5460, &(0x7f0000000180))
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1, "7b51eb73143bf7d786a2cf9be826f8ed28e134e95dce0f478d6c5327c252730b", 0x80000001, 0x4, 0xd6, 0xe}, 0x3c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = socket(0x33, 0x80000, 0x1c0a)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_open_dev$hiddev(&(0x7f00000001c0), 0x80000000, 0x800)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r7=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x90)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000380), r7, 0x0, 0x2, 0x4}}, 0x20)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000240))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r10, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800)
ptrace(0x10, r8)
ptrace$cont(0x20, r8, 0x0, 0x0)

3m18.330815459s ago: executing program 1 (id=238):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000030301010b00000000000000000010"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r1, 0x8b0b, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00  \x00'})
r3 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='batadv_slave_0\x00', 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r7=>0x0})
bind$xdp(r5, &(0x7f0000000340)={0x2c, 0x3, r7, 0x6}, 0x10)
ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x5c13d96e38b20d07)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
write$char_usb(r4, &(0x7f0000006800)="10", 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r8=>0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timerfd_create(0x2, 0x80000)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
writev(r0, &(0x7f00000003c0), 0x0)

3m17.978881347s ago: executing program 1 (id=240):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6, 0x5c}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

3m17.749557487s ago: executing program 32 (id=240):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6, 0x5c}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

2m29.290237311s ago: executing program 0 (id=498):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4605, &(0x7f0000000240)={0x0, 0x1e0, 0x0, 0xf0ff1f})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

2m29.118658086s ago: executing program 0 (id=499):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf2521000000050020000000000009001f0070687931000000000c0005004000"], 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$unix(r4, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1a", 0x1}], 0x1, 0x0, 0x0, 0x10004814}}], 0x1, 0x480d0) (async)
close_range(r2, 0xffffffffffffffff, 0x0)
gettid() (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000000)="9918151a174699338ded602853988e23519ffe9346fed778247009cb7eefd1315a2a7883de7f6a3e06c90ebafb2c1a53fdd541762aba7b1436850f1c300542babee4aa53b55ad3146c91", &(0x7f0000000080)="9d7b48a647d74b487b69da9c45a4deebde3de20c55ed171c5849236b0aa786e938d974ea61fb8e6cda55cb"}}, &(0x7f0000000300)=<r5=>0x0)
r6 = inotify_init()
readv(r6, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
io_setup(0x7fff, &(0x7f00000055c0))

2m28.650865989s ago: executing program 0 (id=503):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x18, 0x200, 0x70bd25, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x48804)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000)
prctl$PR_SET_ENDIAN(0x14, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="9a712fac0f1c951c437230567dee9da1a9a01ba476748a7a00dc894b6b68cfcdd091da4b8556d400e0c331dc9c1d30461c0e31c4a1e0ed2f364d334558aed6823add55b09eeb3e0120ba70e22355a978c48a372f184347ae6f891ead1fa250b4a5441da7e45b31b0b3e62eefb853c52f2d9250604f0ed10ee88d4ee4c5809bb5b470bcf7e5ce490787c2c4ec8ade49654d4bcec456096199fecf333c2de7c081ade1687f342572fe72cf62", @ANYRESHEX=r0, @ANYRES64=r5, @ANYRESOCT=r0, @ANYRESDEC=r5, @ANYBLOB="45a7ff3595928ff15c92558364e0335d487cf6a76da8f5", @ANYRES8=r4, @ANYRESOCT=r0], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = accept4(r4, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f0000000180)=0x8)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x674a, 0x0, <r7=>r0})
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="66baf80cb860b20885ef66bafc0c66b8600066ef654575000f20e035000002000f22e0f226420f32c4e18e2aca2e642ef20fa501420f320f01cb66b81a018ee066ba2100b0b6ee", 0x47}], 0x1, 0x0, &(0x7f0000000280)=[@efer={0x2, 0x8000}, @dstype0={0x6, 0x4}], 0x2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x28, r1, 0x7, 0x4, 0x0, {{0x2}, {@val={0x8, 0x2}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4044}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x50, r11, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x401}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)

2m28.564567733s ago: executing program 0 (id=504):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d04, 0x0, 0x8}]})
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0xc5}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602)

2m27.883359422s ago: executing program 0 (id=507):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (async)
setitimer(0x2, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r1, &(0x7f0000000100)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x8, 0x1}, 0x4)
prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x0)
mlockall(0x7) (async)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) (async)
recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/232, 0xfffffffffffffd73}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000001380)=""/99, 0x63}, {&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/256, 0x100}, {&(0x7f00000005c0)=""/210, 0xd2}], 0x7}, 0x22122) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

2m27.635918207s ago: executing program 0 (id=510):
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0x7, &(0x7f0000001040)={0x3, 0x10}, 0x0)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55)
write(r0, &(0x7f0000000000)="0a000000010001", 0x7)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0)

2m12.446512286s ago: executing program 33 (id=510):
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0x7, &(0x7f0000001040)={0x3, 0x10}, 0x0)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55)
write(r0, &(0x7f0000000000)="0a000000010001", 0x7)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0)

2m8.521390082s ago: executing program 5 (id=561):
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r0 = getpgid(0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000100)='environ\x00')
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2) (async)
ptrace$peekuser(0x3, r2, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300) (async)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1}}], 0x1, 0x0)
preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)

2m7.850635827s ago: executing program 5 (id=584):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xb, "ff00f7000000000000000000af88008300"})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r1}, 0x68)
write$binfmt_aout(r1, &(0x7f0000000200)={{0x108, 0x4, 0x9, 0x15a, 0x3c7, 0x0, 0x297}, "23410b8faeb6fd9dd9868b838744fe022ce79c0a99d2be1b76d6a56f14ceb9c9183fea9a2b808e481f3b3b777a58aaf0664776379541f63a12bd513ea1f34c93f75fd458d5f2db312af9d53cc842f4d6dd3e428494ecc64fe5dca2f10c96d44daa9e352fabac64cfab8991e1a365e10e60b824dd68c63668b27d638e773fad7bf3f199989d6bd30e3534d1fd", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9ac)
r2 = syz_open_pts(r0, 0x141601)
close_range(r0, r2, 0x0)

2m7.769090629s ago: executing program 5 (id=586):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="bdacd51fab15cf9cef7b36d0aa511d2b622a0ee073abc5c4ab7d035195b41599635128241248881f2cff243fb1bac4511e9f"], 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000240)={0xa}, 0x1)
sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

2m4.606354469s ago: executing program 5 (id=599):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000000000002f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3dd6ede9", 0xdb}], 0x1}, 0x4000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xfffc, 0x3ff, 0x8, 0x9}, 0x5, [0x3, 0x800, 0x200, 0x100, 0x2, 0x1e52, 0xa3, 0xb, 0x3, 0xfb8e, 0x9, 0x0, 0x3, 0x40, 0x8, 0x2, 0x1ff, 0x2, 0x6ed, 0x7b8, 0x8, 0x6, 0xffffffff, 0x1, 0x2, 0x1ff, 0x1938, 0x5ea5, 0x2, 0xff, 0x1, 0x7, 0x4, 0x0, 0x6, 0x1, 0x400, 0x4, 0xbf, 0x2, 0x80000000, 0x1, 0xfffffffc, 0x2, 0x80000000, 0x0, 0xfffffff7, 0x5, 0x7ed, 0x8, 0xfffffffb, 0x8, 0x7, 0xfffffff7, 0x2, 0x279, 0x7f, 0x80000000, 0x8, 0x2, 0x3, 0x4, 0x5, 0x8], [0x7, 0x9, 0x9, 0x36, 0x981d, 0x75, 0x9f, 0x0, 0x9, 0x4dc, 0x1, 0x4, 0x1, 0x9, 0xb, 0x1, 0x0, 0x4, 0x1, 0x0, 0x3, 0x1, 0xfffffffd, 0x0, 0x9, 0xfffffffb, 0x3, 0xfffff000, 0x2, 0x0, 0x3, 0x3, 0x3, 0x4, 0xff, 0x4, 0xb2c3, 0x15f9, 0xa, 0x4, 0x10001, 0x6, 0x9, 0xff, 0x7, 0x6, 0x9, 0x81, 0xfffffff3, 0x8001, 0x4, 0x9, 0x9, 0x6, 0x3, 0x7, 0xc86d, 0x200, 0x7, 0x7, 0x4, 0xffff3165, 0x9, 0x4], [0x1, 0x2, 0x2, 0xfffffffa, 0x0, 0x9, 0x200, 0x7f, 0x6, 0x2, 0xfffffff7, 0x6, 0x7, 0xca75, 0x6, 0x9, 0x81, 0x7, 0x81, 0x8, 0x1, 0xa, 0x100, 0xf2, 0x6, 0x7, 0x8c, 0x7, 0x10000000, 0x80, 0x81, 0x7, 0x5, 0x8, 0x1, 0x962, 0xf91d, 0x2, 0xae, 0x5, 0x1, 0x8, 0x5, 0x7, 0x0, 0x83b, 0xfff, 0x0, 0x2, 0x4, 0x27d0, 0x9, 0x5, 0x3, 0x4e6, 0x1947, 0x6, 0x6, 0x6, 0x5, 0x8, 0x9, 0x7, 0x10001], [0x20f7, 0x0, 0x101, 0x79e, 0x3, 0x82a, 0x10001, 0xe5, 0x2, 0x2a, 0x0, 0xa0c, 0x6, 0x8, 0x3, 0x1, 0x7ff, 0x5, 0x4, 0x58, 0x5, 0x2, 0x3, 0x81, 0x10000, 0x7f, 0x2, 0x10000, 0x7, 0x40000000, 0x200, 0x9, 0x1, 0x7, 0xfffffe00, 0x9, 0x100, 0x9, 0x2, 0x7, 0xde, 0x200, 0x1, 0xf9, 0x0, 0x53265f23, 0x7, 0x3, 0xe, 0xfffffffa, 0x0, 0x1ff, 0x3, 0x800, 0x931, 0x3, 0x5, 0x8000, 0x0, 0xe, 0x2, 0x1, 0x5]}, 0x45c)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0x4000002}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x54}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)

2m4.45742531s ago: executing program 5 (id=601):
mprotect(&(0x7f00001b2000/0x4000)=nil, 0x4000, 0x8)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000040)={0x3, 0x200, 0x0, 0x0, 0x80000, 0xfffffffe})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f00000000c0)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick=0x8, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x7, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @connect={{0xf, 0x3}, {0x6, 0xb}}}, {0xf7, 0xf1, 0x0, 0x1, @tick, {0x70, 0x3c}, {0x1}, @quote={{0x5, 0x6}, 0x6}}], 0x70)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000540)={0x0, 'virt_wifi0\x00', {0x2}, 0x7ff})
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sync()
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082)
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x15243525538eff65)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x50, r9, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random="15"}, {0x4}]}]}, 0x50}}, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r7, @ANYBLOB="40082abd70484933121c0900000008000300c0c18d1b58061c614311ca9ffc34b192eb2a0450f210887c304f8ef9623a812d8fa97e3a139fdbd42801e639f330ef6f46507c095c1e4ecd51356d54099724ff76d4d3b6f47842", @ANYRES32=r10, @ANYBLOB="0c00990000000000220000001100070085336e4b6a3d8e46e219de1882000000050008000100000004000b000a00060008021100000000000400280018006e8004000100040001000400010004000100040002000500080002000000380050800800030001ac0f0009000100308ff73fe10000001100010043f6bed6dd36d205bff598bc91000000090001003b6e5b03ef000000050008000300000011000700a882033e049a873e7ec51f0e7d000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24040080}, 0x4054)
getsockopt(r5, 0xff, 0xf, 0x0, &(0x7f0000000000))
preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
r11 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r11, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000})

1m49.267558988s ago: executing program 34 (id=601):
mprotect(&(0x7f00001b2000/0x4000)=nil, 0x4000, 0x8)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000040)={0x3, 0x200, 0x0, 0x0, 0x80000, 0xfffffffe})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f00000000c0)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick=0x8, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x7, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @connect={{0xf, 0x3}, {0x6, 0xb}}}, {0xf7, 0xf1, 0x0, 0x1, @tick, {0x70, 0x3c}, {0x1}, @quote={{0x5, 0x6}, 0x6}}], 0x70)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000540)={0x0, 'virt_wifi0\x00', {0x2}, 0x7ff})
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sync()
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082)
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x15243525538eff65)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x50, r9, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random="15"}, {0x4}]}]}, 0x50}}, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r7, @ANYBLOB="40082abd70484933121c0900000008000300c0c18d1b58061c614311ca9ffc34b192eb2a0450f210887c304f8ef9623a812d8fa97e3a139fdbd42801e639f330ef6f46507c095c1e4ecd51356d54099724ff76d4d3b6f47842", @ANYRES32=r10, @ANYBLOB="0c00990000000000220000001100070085336e4b6a3d8e46e219de1882000000050008000100000004000b000a00060008021100000000000400280018006e8004000100040001000400010004000100040002000500080002000000380050800800030001ac0f0009000100308ff73fe10000001100010043f6bed6dd36d205bff598bc91000000090001003b6e5b03ef000000050008000300000011000700a882033e049a873e7ec51f0e7d000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24040080}, 0x4054)
getsockopt(r5, 0xff, 0xf, 0x0, &(0x7f0000000000))
preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
r11 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r11, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000})

44.754784911s ago: executing program 3 (id=1116):
connect$caif(0xffffffffffffffff, &(0x7f0000000040)=@dbg={0x25, 0x2, 0x1}, 0x18)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000200), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0xe, r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="080829bd7000fbdbdf250200000008000800ac1414aa06000a004e210000060001004e220000060001004e2300001400090000000000000000000000ffffffffffff050003006700000008000b00", @ANYRES32=r2, @ANYBLOB="060001004e240000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x44)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000240)=0x4, 0x4)
sendmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x50)

44.646733879s ago: executing program 3 (id=1117):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000015c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001580)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xcb85}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x903, 0x0, 0x0, {0x227a93f55ed58b06, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWRULE={0x164, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x104, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x12c, 0x3, 0xa, 0xd96ac961f72a6972, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0xaa, 0xc, "77849865595b24692e4f8108a000124a0aa98e414425c24d80e66438f34ed23ee8595718ec64473a8602b400625bd7ae807ab84e025ca1d8dc4d4cd92db62c74c053a372931667fd8b22d4eb60fe2aafa2ff8dfae64c574c801b582236b8983191fc9e28443991aa4765e8cb111b0b0b42c37d590e7304ae788d6d383a58c11c15bafa26c14ae34460ae97d470e4214cf5395c2ba8fa67d9f1162d05686a24c832b4a514cb6f"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xc25}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}], {0x14}}, 0x3d4}, 0x1, 0x0, 0x0, 0x4409c}, 0x4000)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000080), 0x1)
getpeername$packet(r0, 0x0, &(0x7f0000000280))
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x8080)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x400000001001, 0xfffffffffffffffd, 0x4c869, 0x400, 0x0, 0x80000001, 0x48c8, 0xfffffffffffffff9, 0x820000e3})
ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000180)=""/4096)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001640)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x54, 0x18, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x15, 0xc, "78392224ae59f6d91b615ddda3615d69cc"}]}, @NFT_MSG_NEWSET={0x324, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_DESC={0x2e0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xcd0e}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0x90, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x480}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0xb4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x164, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5f3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf579}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x69a2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2d}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x300}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x27}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe2b}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x32c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3a}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xc}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0xe5, 0xd, 0x1, 0x0, "a07c0d3566b798ee6b3e2ac6ae0df479fff3142398788d9cc51896d2769cafe0ec57746df1e72e477c03328e910c91f9761db4e0b6c47f3ab7ff7116e15a41ab47b778396d5ab9bfe6a3d524cf9534ac2b98085177077ee22a20ef4bd30e5503819ea5c0df1bda580d1266fde225611c009c2b38839a3c75412d831c579fa59bd401b94598ee8b60166c563cdfb45f3a2bc6c3d3fca4a81f7649e01bd5f086c76dd7c04806d233ccd91307326ad6802de357d29d9bd1857e356dc4541a1af9a66c4e834f91af7df83f68888b0148daa1fb846a8de20f0cbcc3795ab70c7fe71179"}, @NFTA_SET_DESC={0x1e0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x14c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4a1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5100000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4f3}, @NFTA_SET_DESC_CONCAT={0x70, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3dc46da2}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7e0}, 0x1, 0x0, 0x0, 0x4}, 0x4040040)

44.639158352s ago: executing program 3 (id=1118):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d800000018007b20e00212ba0d8105040a600000000f040b067c55a1bc0009003e0006990600000015000500fe800000d62c005401000000000000005aa7b755cbdbeb0300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010040730d7a5025ccca262f3db00f6b8280ffffffff000000005ce3099ad8ffd58384c627f7067d9433c31f6fd3acbde1cace81ed0b7fece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000004)
syz_usb_connect$cdc_ecm(0x2, 0x7c, &(0x7f0000000900)=ANY=[@ANYBLOB="12011001020000102505a1a440000000010109026a00010100000909040000ff02020000053f060000052400fdff0d240f010000000000000300001d2413056648e5be27e87ebf64c49413c7b2dc109e4f21af41b220aed10524"], 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000005e030801040000000000000070a7a42e3d880002000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f00000008c0)=0x7f)
syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
capset(&(0x7f0000000180)={0x19980330}, &(0x7f00000001c0)={0x3, 0x7, 0xd5, 0x8, 0x4, 0x4})
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x0, 0x0, 0x0, [], [0xfffffffc, 0x7, 0x3]})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]})
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000840)="f20f23086766c7442400010000006766c7442402f00000006766c744240600000000670f011424650f381e39ba6100ec65f2d9ff66b8a50000000f23c80f21f866350400a0000f23f866b8030000000f23d80f21f86635000000600f23f8dace0ff7d7", 0x63}], 0x1, 0x10, 0x0, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f00000000c0)=0xa, 0x4)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000840)=0x41f2, 0x4)
sendmmsg$inet(r9, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800)
recvmmsg(r9, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2100, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84ea1000ab16d6e230675f811000000040002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098f851f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="fe00100320e24508b1a2f75ca9f4010203010902120001560b6001090430800002020504"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})
socket$kcm(0x10, 0x2, 0x0)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000033c0)={'wlan0\x00', &(0x7f0000003380)=@ethtool_regs={0x4, 0x7}})
socket$nl_netfilter(0x10, 0x3, 0xc)

43.802025782s ago: executing program 3 (id=1122):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000100)={0x11, 0x4, r1}, 0x14)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x8, r1, 0x1, 0x6, 0x6, @remote}, 0x14)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="685f6fcf9cb8cc7b1655cccd77fc7f42e7a0e51f8ce3969739f91ffe7b8105af869f6b59368daa63ea8da547c1e11eaa5d1d2ab649f4ee713c77640d4145fc4299babb2b9a3943901efc2e", 0x4b, 0xfffffffffffffff8)
r6 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe)
keyctl$unlink(0x9, r6, r6)
keyctl$instantiate(0xc, r5, &(0x7f0000000140)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', '-*\xe1', 0x20, 0x62979e8c}, 0x2e, r6)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x61)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r4, 0x701, 0x74bd2b, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004074}, 0x40)
r8 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io$uac1(r8, 0x0, 0x0)
syz_usb_control_io$rtl8150(r8, 0x0, 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x1, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xff, 0x8, 0xea, {0x7, 0x25, 0x1, 0x0, 0x5, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xd, 0x10, {0x7, 0x25, 0x1, 0x4, 0xf2}}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0)
syz_usb_control_io$sierra_net(r8, 0x0, 0x0)
syz_usb_control_io$rtl8150(r8, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x0)

43.070793477s ago: executing program 3 (id=1127):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, 0x0})

43.061199228s ago: executing program 3 (id=1128):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x13)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async)
write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x13) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

27.990484169s ago: executing program 35 (id=1128):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x13)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async)
write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x13) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

22.137499019s ago: executing program 7 (id=1236):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xd0}}, 0x0)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7)
r3 = socket$kcm(0x29, 0x5, 0x0)
r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x10, 0x80800)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000280)={r4})
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x8, 0x3)

22.10903212s ago: executing program 7 (id=1237):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x2, 0x4)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x60, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="74bd5d728e5bb3b8b8c7bd353d47c428941b7c80f5da4689857267746667ea2c4b04027f8bdb8fc62aa8610fcc0edf12a57827aafc3bccc086b2cc18a82ecbfce054a5e296cf9a45efe067ac21bb12e83da394aac4da9c7449b3b7a5a762d4b551030c1fc5c5ed0e347052dd63223eb334f999e99b2c930bc860e36179be77d2235a7b892ca50c36a1b09921a0d39d83da722330bee8b8b8a33a02ae46c48e4df0518d21752bccf2db7d401c833d0bb9b4c3b7aa221e06cb880488ea2513b914805926b2e48a9d23ac25b9724094", 0xce)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4048040)
r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000005c0)=0x1c)
recvfrom$inet6(r7, &(0x7f0000000600)=""/38, 0x26, 0x40010000, &(0x7f0000000640)={0xa, 0x8, 0x800, @remote, 0x6}, 0x1c)
clock_gettime(0x0, &(0x7f00000006c0)={<r8=>0x0, <r9=>0x0})
ppoll(&(0x7f0000000680)=[{r7, 0x1d8}, {r0, 0x1000}], 0x2, &(0x7f0000000700)={r8, r9+10000000}, &(0x7f0000000740)={[0x1]}, 0x8)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x140f, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x24}}, 0x4044040)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0xf)
r10 = getpgid(0xffffffffffffffff)
sched_rr_get_interval(r10, &(0x7f0000000880))
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000980)={&(0x7f00000008c0)=""/150, 0x100000, 0x1000, 0x1, 0x2}, 0x20)
r11 = accept4(r2, &(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000a40)=0x80, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000001b00)=@nat={'nat\x00', 0x19, 0x6, 0x101c, [0x200000000ac0, 0x0, 0x0, 0x20000000149e, 0x20000000166c], 0x0, &(0x7f0000000a80), &(0x7f0000000ac0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x5, 0x14, 0x201, 'syz_tun\x00', 'batadv_slave_0\x00', 'vcan0\x00', 'veth1_to_bond\x00', @empty, [0xff, 0x0, 0xff, 0x7f, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x926, 0x976, 0x9ae, [@time={{'time\x00', 0x0, 0x18}, {{0x3, 0x6cb, 0x588c, 0xe7aa, 0x80000000, 0x6}}}, @among={{'among\x00', 0x0, 0x850}, {{@offset=0xc, @zero, 0x1, {[0x5a, 0x6, 0x1, 0x80000001, 0x3, 0x9, 0x0, 0xcce2, 0x6, 0x9c, 0x0, 0x8, 0x9, 0x0, 0x8, 0x3ff, 0x80000001, 0x1, 0x3ff, 0x0, 0xbe46, 0xffffffff, 0x6, 0x6, 0x53bb, 0x3ff, 0x10, 0xf, 0x2, 0x7f, 0x8e0d, 0x9, 0x8, 0x1ff, 0x7fff, 0xfff, 0xb72, 0xffffffff, 0x9, 0xb, 0x0, 0x3, 0x7, 0x4, 0x7b, 0x8, 0xfff, 0x9, 0x8e, 0x58c, 0x800, 0x7, 0x8001, 0xa, 0x1, 0x7ff, 0x4, 0x1, 0x0, 0xfffffffb, 0x9, 0xff, 0xc, 0xe, 0xffff, 0x7, 0x0, 0xfffffff4, 0x5, 0x4, 0x3, 0x7fff, 0xfffffff8, 0x0, 0xfffffffb, 0xc3fc, 0xe, 0x4, 0x2, 0x1, 0x8, 0x3ff, 0x1, 0xfffffff7, 0x3, 0x7, 0x0, 0x1, 0xfffffffd, 0x2, 0xfffffffc, 0xfffff198, 0xfff, 0x4, 0x8000, 0x1ff, 0x14, 0x5, 0x5, 0xfffffffd, 0x8, 0xf41, 0xa07a, 0x4230, 0x3, 0x6cff, 0x61c0, 0xffffffe0, 0x7, 0x89d, 0x5, 0x3, 0x1, 0xffffdcef, 0x3, 0x1, 0x3, 0xb2c, 0x0, 0x2, 0xd5a, 0xc980, 0x4, 0x64da, 0x1, 0x0, 0x800, 0xeb9, 0xffffff81, 0x2, 0x9, 0x6e9, 0x200, 0xf1, 0x6, 0x4, 0x7f, 0xe, 0xbc, 0x5, 0x1000, 0x6, 0x9, 0x8, 0x101, 0xfffffec9, 0x3a, 0x1, 0x6, 0x800, 0x2, 0x2, 0x6, 0x7, 0x7, 0xfff, 0x8, 0xd435, 0x0, 0xa, 0x8, 0x3, 0x6, 0x1, 0x4, 0x2, 0x9, 0xfffffff9, 0xfb, 0xdf, 0x9, 0x8, 0x2, 0x1, 0x4, 0x7, 0x100, 0x6, 0xfffffffd, 0xff, 0x4, 0x2, 0x1c00000, 0x81, 0x5, 0x4, 0x7, 0xe, 0x9, 0x996, 0x10001, 0x0, 0xc3, 0x40, 0x7, 0x7fff, 0xa, 0x4, 0x0, 0x5, 0x8, 0x7ea, 0xa8, 0x80000001, 0xd, 0x6, 0x0, 0x7fff, 0x2, 0x3, 0x7, 0x67, 0x2, 0x80000000, 0x800000, 0x96, 0x2, 0x8000, 0x0, 0x4f7, 0x3, 0x9, 0xffffffb9, 0x0, 0x40, 0x1, 0x7f, 0x5, 0x3800000, 0x0, 0x8, 0x7, 0x3, 0x800, 0xf7a, 0x81, 0x3, 0x4, 0x9, 0x9, 0x7, 0x81, 0x27, 0x80000001, 0x6, 0x7, 0x0, 0x9, 0x28000000, 0x7, 0x2, 0x1, 0x5, 0x1000, 0xca, 0x2, 0x3], 0x3, [{[0x3, 0xef], @remote}, {[0x2, 0x9], @multicast1}, {[0xf88, 0xfffffff1], @multicast2}]}, {[0x8, 0xebea, 0x7f, 0x5, 0x3, 0x6, 0x4, 0xbaad, 0x3, 0x80, 0x200, 0xfffffffb, 0x1, 0xb56, 0x2, 0x80, 0x243, 0x92, 0x0, 0x7, 0x8, 0x4, 0xfffffffb, 0x5, 0x9, 0x997, 0x2, 0x81, 0x0, 0x400, 0x5, 0x8, 0x8001, 0x2, 0x0, 0x4, 0xf0, 0xfffff801, 0x4, 0x8, 0x3a0, 0x7, 0x8, 0x6, 0xfffffffb, 0x0, 0x9, 0x4000, 0x10000, 0xd5b0, 0x2, 0x2, 0x1000, 0x7, 0x9, 0x5, 0x1, 0x80, 0x4, 0x2, 0x3e, 0x0, 0xffff, 0x8c45, 0x3, 0x1, 0x6, 0x6, 0x7, 0x7, 0xffffffff, 0x5, 0x6, 0x1df76228, 0x0, 0x56, 0x2, 0x4, 0x2, 0x6, 0x101, 0xffffffff, 0x10, 0x7, 0x8001, 0xee9, 0x81, 0x86, 0x4, 0x9, 0x6, 0x1, 0x0, 0x8, 0x0, 0x3, 0x0, 0x3, 0x2, 0x80000001, 0x200, 0x7, 0x2, 0x6, 0x4, 0x3, 0x2, 0x1, 0x3, 0x73c, 0x7, 0x0, 0x10, 0xbf32, 0x9, 0x5, 0x7, 0x6, 0x4, 0x93, 0x8, 0x58, 0x10, 0x7, 0x3, 0x7, 0xe869, 0x2c, 0x10000, 0x1ff, 0xb620, 0x1, 0x960, 0x7, 0x7fff, 0x81, 0x8, 0x1, 0x5, 0x10000, 0x5, 0x80, 0x10, 0xfff, 0x7b40, 0xef, 0x5e88b6e3, 0x10000, 0x1, 0x81, 0x200, 0xff, 0xf3, 0x7fff, 0x8001, 0x1, 0x1fb3, 0x3, 0x6, 0x4, 0x5, 0x0, 0x5, 0x9, 0x0, 0x6c0d967c, 0x1, 0xe7, 0x6, 0x1, 0xfffffffa, 0x762d, 0xfffffffb, 0x800, 0xffffffff, 0x8, 0x2, 0xa, 0x8, 0x3ff, 0x0, 0x7fffffff, 0x8000, 0x6, 0x3, 0x6f5f, 0x850, 0x711, 0x1b5, 0x7, 0x80000000, 0x5, 0x2, 0x7, 0xa7f7, 0xffffffff, 0xc00, 0x9, 0x3, 0x7, 0xcee, 0xfffffffa, 0x4, 0x85d1, 0x5, 0x4, 0x4, 0x0, 0xf, 0x4, 0x79, 0x9, 0x3, 0x83, 0x9, 0x1, 0x0, 0x3, 0xa8, 0x1, 0x7, 0x4, 0x0, 0x0, 0xfff, 0xf1800000, 0x6, 0xfff, 0xd, 0x8, 0x2, 0x5, 0x7, 0x7, 0xfffffffe, 0xff, 0x3, 0x6, 0x0, 0x2, 0x3, 0x2, 0x2, 0xf, 0x3, 0x7, 0x401, 0x8, 0x1000, 0x1, 0x1000, 0x80, 0x0, 0x4, 0x100, 0xffff6a13, 0x3], 0x1, [{[0x2, 0x1], @dev={0xac, 0x14, 0x14, 0x1a}}]}}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8, 'syz0\x00', {0x101}}}}], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x40, 0x16, 'nr0\x00', 'nr0\x00', 'xfrm0\x00', 'veth0_to_batadv\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @local, [0xff, 0xff, 0xff, 0xff], 0x12e, 0x166, 0x19e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x5}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0x9e, {0x9, 0x9, 0x9, @empty, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x7, 0x10, 0x9, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, [0x4466b81730fe02b4, 0x0, 0xff], 0x4e24, 0x4e23, 0x3, 0x25, 0x4, 0xf86e, 0x1, 0x1, 0x40, 0x54}, 0x0, 0x40}}}], [@arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@multicast, 0x10}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x3, 0x18, 0x8, 'team_slave_1\x00', 'hsr0\x00', 'virt_wifi0\x00', 'pimreg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, [0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff], 0xce, 0x106, 0x13e, [@arp={{'arp\x00', 0x0, 0x38}, {{0x308, 0x87d, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, @empty, 0xffffffff, @broadcast, [0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0x0, 0xff], 0x1d, 0x2}}}], [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@broadcast, 0x1}}}}, {0x5, 0x20, 0x22eb, 'gretap0\x00', 'pim6reg1\x00', 'veth0_virt_wifi\x00', 'veth1_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x6025, 0xfffa, 0x0, 0x0, "8f675c28b6027540c1deb2f0974ab5c0338cf2fd214f07304f0ad5d308e7d5d06e1d873f86c21d6a3a48e7a0def257cdbbab71c8ae75af9b536387915ecfec45"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x0, 0x11, 0xf9, 'vcan0\x00', 'gre0\x00', 'vcan0\x00', 'veth1_virt_wifi\x00', @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, [0xff, 0x80, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}}, {0x9, 0x10, 0x884c, 'veth1_to_hsr\x00', 'dummy0\x00', 'ip6tnl0\x00', 'bridge0\x00', @random="146e0540d8e2", [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xde, 0x116, [], [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, 0xfffffffffffffffc}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffe}}}}]}]}, 0x1094)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001b80))
r12 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001bc0), 0x222000, 0x0)
ioctl$TCGETA(r12, 0x5405, &(0x7f0000001c00))
r13 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000001c80)={'xfrm0\x00', &(0x7f0000001c40)=@ethtool_ringparam={0x30, 0x9, 0x5, 0x0, 0x7, 0x1ec343fa, 0x6, 0x0, 0x6}})
getsockname$unix(r11, &(0x7f0000001cc0), &(0x7f0000001d40)=0x6e)

21.143240341s ago: executing program 7 (id=1245):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
preadv(r0, &(0x7f0000000140)=[{0x0, 0x20}, {&(0x7f0000000500)=""/84, 0x54}], 0x2, 0x4, 0x8008)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x5, 0x3})
ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[0x1, 0x5, 0x1, 0x4, 0x8001, 0x8, 0x2], &(0x7f0000000100)=[0x3, 0x8, 0x8]})
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

17.908341063s ago: executing program 7 (id=1270):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x11}, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in=@local}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xcd}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in=@dev, 0x1, 0x33}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x9}]}]}, 0x1fc}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
setresgid(0x0, 0xee01, 0xffffffffffffffff)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
fchdir(r2)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0xffffffff}}, 0x2e)
connect$pppl2tp(r2, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0xffffffff, 0x0, 0x2}}, 0x2e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota'])
r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd)
quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0xee00, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1)
syz_clone(0x86000011, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000100)=0x4)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17.67248374s ago: executing program 7 (id=1271):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904"], 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000002780), 0x0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000140)=""/188)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8000, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x3c}], 0x1}, 0x48043)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r4=>0x0})
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14)
setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast1}, r4}, 0x14)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@private=0xa010100, 0x4e23, 0x2780, 0x4e21, 0x1, 0x9, 0x0, 0xa0, 0x73, r4, 0xffffffffffffffff}, {0xfffffffffffffffd, 0x3, 0x3, 0x1, 0x3, 0xffffffff, 0x203, 0x4}, {0x3, 0x400, 0x5, 0xffff}, 0x8001, 0x6e6bb7, 0x1, 0x1, 0x1, 0x2}, {{@in6=@mcast2, 0x4d2, 0x32}, 0xa, @in=@local, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x1ff, 0x3}}, 0xe8)

17.21675699s ago: executing program 7 (id=1275):
open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)}, 0x5}], 0x1, 0x2000, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r4, 0x4}, 0x8)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
close(0x3)

16.936036119s ago: executing program 36 (id=1275):
open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)}, 0x5}], 0x1, 0x2000, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r4, 0x4}, 0x8)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
close(0x3)

4.764939536s ago: executing program 8 (id=1331):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_emit_vhci(&(0x7f0000001980)=ANY=[@ANYBLOB="04030bf5"], 0xe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
fsopen(&(0x7f0000000240)='btrfs\x00', 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

4.423285992s ago: executing program 8 (id=1333):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x40, 0x18, 0x3, "0f47d0"}, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x67, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x485, 0x0, 0x29c}]})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x1, 0xe, "6bf4334fe2d3fb09541e013e9b75"}, 0x0}) (async)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5)
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="18005e0175"], 0x34}}, 0x20000000)
r7 = dup(r4) (async)
r8 = socket(0x11, 0x3, 0x0)
setsockopt(r8, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) (async)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r10=>0x0})
sendmsg(r8, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r10, 0x6}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001040)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f0000001180)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be456c0e142c5c5c48a41666e5", 0x30}], 0x2}, 0x40011) (async, rerun: 32)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4094}, 0x40400d4)
r13 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r13, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004001) (async)
write$UHID_INPUT(r7, &(0x7f0000001a40)={0xf, {"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", 0x1000}}, 0x1006)

3.967879527s ago: executing program 2 (id=1341):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, 0x2, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x0, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x603, 0xff00, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text32={0x20, &(0x7f0000000300)="260f22040fc79999b50000f20ff0080f017eccc4c2f91712f266de17b9d30800000f3266baa000b00cee66baa000ec0f20e035000400000f22e0", 0x3a}], 0x1, 0x43, 0x0, 0x0) (async)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) (async)
ioctl$TCSETS(r5, 0x4b72, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.75900618s ago: executing program 2 (id=1342):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0x3fc, &(0x7f0000000500)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x3be2b02884f95c63}]) (async)
syz_usb_connect(0x6, 0x24, &(0x7f0000000140)=ANY=[], 0x0)

3.231209132s ago: executing program 6 (id=1349):
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000003900), 0x109040, 0x0)
getdents(r3, 0x0, 0x0)
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000000)=0x2)
r4 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, 0x0, 0xc)
write$FUSE_CREATE_OPEN(r4, &(0x7f00000003c0)={0xa0, 0xfffffffffffffffe, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x80000000, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r4, r4, &(0x7f0000000080), 0x7f03)
write(r2, 0x0, 0x0)
readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/28, 0x1c}, {&(0x7f0000000140)=""/100, 0x64}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x3)

3.10327015s ago: executing program 2 (id=1350):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000200)=0x5, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2)

3.053365231s ago: executing program 6 (id=1352):
r0 = syz_io_uring_setup(0x1737, &(0x7f0000000140)={0x0, 0x35b0, 0x2000, 0x3, 0x2ea}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280))
r1 = syz_io_uring_setup(0x2ea, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x4, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000))
r2 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000ac0)={0x0, 0xff2e, 0x0, 0x0, 0x0, 0x0}) (async)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async)
poll(&(0x7f0000000000)=[{r1, 0xd010}], 0x1, 0x9)

2.949778992s ago: executing program 6 (id=1353):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00')
getdents64(r2, &(0x7f0000000000)=""/35, 0x23)
getdents(r2, 0xffffffffffffffff, 0x5a)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x116000, 0x1000, 0x0, 0x3}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20200, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4, 0x39}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0xb)
writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0xfffffffffffffcaf}], 0x1)
r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r7, 0xc0445624, &(0x7f00000005c0))
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000))
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000000c0)={0x1, 0x1, 0x0, "3b189831cb9c1d4fd54c60d1dd004dbb6cba09ca3420217017d0a3dad57650f5"})
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

2.870503026s ago: executing program 2 (id=1354):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000857f460e2004001a0038081d004231a0e69ee517d34460bc06000000a705251e6182949a3651f65e84c9f4f4938037e70e450900000000000000000000da6ab0018008c377", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
vmsplice(r5, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) (async)
recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) (async)
r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000100)={0x5, @sdr={0x8967c9bb9aedaa49, 0x4}}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, r7, 0xfffff000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async)
r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000000200)={r4, 0x0, 0x8c00000000000000, 0xfff, 0x7fff, 0x2, [0x3, 0x0, 0x7, 0x8, 0x3999, 0x7fffffff]}) (async)
ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f00000000c0)={0xffffffffffffffff, 0x101, 0x12cd})
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040)=0x846c, 0x4)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400010bd173a200ffdbdf2506"], 0x18}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/11, 0xb}], 0x1}, 0x7}], 0x1, 0x0, 0x0)

2.727768847s ago: executing program 2 (id=1355):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0) (async, rerun: 64)
r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (rerun: 64)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) (async)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) (async)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x5, 0x200)
ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000000)=0x2) (async)
r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) (async, rerun: 64)
ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) (rerun: 64)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000040)={0x5000, 0x11000}) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0101000051000000000002000000141a0000110001000000000000000000f500000a"], 0x3c}}, 0x20040084)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x10010, r1, 0x0) (async)
sendfile(r1, r1, 0x0, 0xffffffff) (async, rerun: 64)
ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000580)) (rerun: 64)
r9 = socket$inet6(0xa, 0x3, 0x38)
sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000110000100000000000500fcff0500000a1c000000160a0500000000001000000000000001080007400000000314000000110001000000000000000000fcff002aa2fbd63d8a43f990c32770a030757dea25124e4b45f5e8cce581bcd42c8704594470fb2a850f19e9b17b6474381ea73eabbf77d0912b51427116f6506c7232088a846bebc4e47382fa"], 0x44}, 0x1, 0x0, 0x0, 0x4c010}, 0x1) (async)
setsockopt$inet6_int(r9, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r10, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000001c0), 0x4}) (async)
connect$inet6(r9, &(0x7f0000000280)={0xa, 0x4e21, 0x5, @empty, 0xb}, 0x1c) (async)
writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) (async)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

2.7114083s ago: executing program 6 (id=1356):
pipe2(&(0x7f0000000180)={<r0=>0xffffffffffffffff}, 0x80080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080018"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
inotify_add_watch(r0, 0x0, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d617371"], 0xdc}}, 0x0)

2.574222189s ago: executing program 2 (id=1357):
r0 = open(&(0x7f0000000480)='.\x00', 0x101000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"], 0x8)
syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000001240)=ANY=[@ANYBLOB="408a0400deff63a8000900000000000000e7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000c04000000ca2583f9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000080)=0x2)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}})
close(0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000d40)={'syztnl0\x00', &(0x7f0000000cc0)={'ip6gre0\x00', <r4=>0x0, 0x2f, 0x8d, 0x9, 0xe57, 0x22, @local, @private2, 0x8000, 0x8, 0x3, 0x9}})
sendmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="0f94f5c7c9ee0d4a987e55e2cf981106e7e750487e9e46ade28e07a3c999330fda8f3b9cc6591420c30d715084e1d62e98f1e8babaa40dccc10f434f214f9b43029c985f333dccac07602583cba2f66f0a7e70c39d73f724763483f072657c08bc33ca90c4a9d78dd380f99b1dfc", 0x6e}, {&(0x7f0000000600)="d601d8340092d3d6962dd0", 0xb}, {&(0x7f0000000640)="0df60e900fcef5d630a19c296a60a2931ce9697cb417b7d51f79d7731319eccc386b25d9626be952219434a83bd16e779e35241a5e92d1de2663d3afa0e91e63", 0x40}, {&(0x7f0000000680)="5c61d2afefa5f9b3af646a60391b2e473d9e7e2cc4c995ccdf69801d6a11a78458ef63eb08a1b27aa1cecd060b0ac6e4464425ec16eb568da519f5b533ae20c21e1ed3e5ff712170e21173", 0x4b}], 0x4}}, {{&(0x7f0000000800)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000880)="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", 0xfb}, {&(0x7f0000000980)="ab315894962d9bf163191c17e0b0785cd62a177e8af3dcc848fc70bee2a75cd6c78926eab8bebdb1da58ab0fbd95036ea2df9fe56a8c18fa82b47c472204d34764e881cc25026b640ac37afd9e32799c7fe00af3ff4a2801bb4d1f00bd51171f3f29d37529773c54139235becfdc79e0618a199cf2f5fa955fa9af1d11b3a7a864eb49d017f079cca027ec63757420f95b46e39ca25da24455a0463ccf7b5148fc1a694b51defa8f648345c728aaa073b40b7e7bd9cd078bea2c9eceafb96f23afda5393a80ec72ccabd186d0856d8148e2f1e464c8919db5c2c13566d629f7fa40c0c732649be69da96d43712c31d9a0d", 0xf1}, {&(0x7f0000000a80)="20eedee82859f910f41f9e0fd5a25649b0195dc156ddce182f0db245ea5ee0bcfef767b71faa57ba960c7541f1a20a81ffa75eed6fcd556021ceb0fe88412af5b7becac877be9eef34aaabefc42f84b8da1fbfc71b44d29a1b08044568d5ca923fe1e5935e4d182055958e0b98d86e531c93c86cd5d4cc434878c28850582d86ede90f48352e45290d20feb76513dd5d3546831d9f0f496cb7be2d9c82aecc53910deba851d5fc30cec75b82ae6d7796b39d30", 0xb3}, {&(0x7f0000000b40)="dff90e41d8eb15ce7a48559717", 0xd}, {&(0x7f0000000b80)="8cc82ce9491d1a0078929f4094bf534d84ae688c5b4a2930d0f57131ac5180cdff4fc155abbfd2a705d9f222d43ab2d55d1bb092e8856500eb86f0adf20de411fad5fff7a3a91fee83201306cd35851dd5b1ed43f8e13698c8f5d0ceec0b49b4172f1b13fa453bc54ac841bd692a4ec1000184f638aadb51af67723016cee944742f2b9a4743", 0x86}], 0x5}}, {{&(0x7f0000000d80)=@ll={0x11, 0xf8, r4, 0x1, 0x8, 0x6, @local}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000e00)="059284037af156fc71f56bcbd29a634763da62b86076e1dc9feb56340d9d4a26601815e844a4c092ec2a90bf445ba4a5caaaa7339d6a889ad5f469036a96621035bf367200e7e5ebfe4c796c3074c4e14e0705b643a83695672adbf8122d9601dbe4a0cf4c3d64eb3c579129d82380a06b58b49e695ced1a92b86124eb856b5c66a8bc8a2b710397fbb6c9", 0x8b}, {&(0x7f0000000ec0)="86f3288975590c97525a99c65662186e632475ddb6e7c4d5b13099f165bd7b86", 0x20}, {&(0x7f0000000f00)="550bf3b4b1993bebda59a13a150c4d2df01decb7a798101e1f2f07ead13d1001e30e577c68582791f2f20436fb05470fe307403056", 0x35}, {&(0x7f0000000f40)="cbdfbda6b47d9ba3d7cc3b6cfba4107313a93fd072ad6a0053d01cbdd367a9145c4aa4b5727375d06e674f95bad33b8fd04384ec282ff153fbb2d00b7d0aaa4975c0237856160daeb171426f328ed0da2158d5e8527ca25d2fbe8591d2b00bb77403b27021548facb76e02c692f4d1944f22759dff3c1f64fc747c4cf746679d7b38bbf1206e6fedf0b31b18a1d47be9c6dd1df1050cc9bd86582d31099c82dae505e6d25412c6a790d98c7f9da3b0e97b84c9b1e27531b2fb307a33ffb927954b9bb47dc9014baadadda26db582a43e7d0360937b7e95f355438e13c7b7677070f72f532759", 0xe6}, {&(0x7f0000001040)="88e6e18875851c67d3473605e538553ca9581fbd25c251e0b4f305bbf13ef1ea35b6a8a387b773cf0f53ecd24fc4df47d85de6c9fe56101a3dca2c7f90c8e596c0c79b703031fb4d2eecd5122d6c25472ed0b15595a6843c4ba87cbef6215689ab09c9", 0x63}, {&(0x7f00000010c0)="bbb1bb52d263fb6597c028b428b4dc29ba7b0295d9a6630a43f534b7cd7a1ff2118a8f5a1de1ad5a2131bbe9f41d8e66c7ff1bf41000479ff9c6b5d5f32dd3e553f4b045593c46bf8703d8f8bfd834c1a67985217996abd67465b9f697b9a3727643e8707c", 0x65}, {&(0x7f0000001140)="86de03d9736589a1fc62e8b53e75c4c438b8b174236a9420527144ade114cbdc304aa929dfd2a1bffbd0a7dc83141be9eda7f3acea01e2491fd294e3b5be84c0adebedb457e51f", 0x47}], 0x7, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x270}}, {{&(0x7f00000014c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001540)="4300ae7c30811e55764a1accae", 0xd}, {&(0x7f0000001580)="a0c235a0cc5308ca45b7cbc93b4fdb2dc922a3cf626397554027f10d1f205508fa7c974ae0e20ab74ad69607177a294db064a1923c225f07549c055882cc1968a5ee2316ca0b23942e3e776d388b361244b13f5e3bc257b3c645b99cae263b5e910f2b75eeea1c893314bba2a392bdf46fc30a819e41180609a01431297896b53a8538d527035caa383e756bf5bc0aa00401ee0673430f58f353796e5d67946b86287405b5a4b4e074f57028065fad0effeb1ecc5409f98db145592a6685c263d49ab8d3d2057c67754c86a08d591b0ec83aadefdf60dc53d2d1de69", 0xdc}, {&(0x7f0000001680)="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", 0xfa}, {&(0x7f0000001780)="b5ac65d7b4a46047ee5554e05fcc390df5b36639dae6f8d118e4cef358c135f0e0265d5a9fd14c4e25d97296162d1cec89595f2b7468f2feadf0b350794c10e11371477b29f91615377ec44aec003c0df46313158294a6c12fa64f21df8b2a04b44147078641262ab884900141f396aacf5c713795f4b8528a0f5f68b26f8a915feb1f64cdd95a2df507b6bc06a1e7d7fb9f7b343fccd3f602a4b5d8ea1e014c2d8a0717b114b89c6f3c0b54749c84308ec7eebfe68c5a32d31a1473108f1523a85ff466aa1f07b158c11fc669370c608d38dde0718911abae649f6ddff7242ab480bd75a2d1e6cf240a79afae12ecac3d2426b4b2d35f5f", 0xf8}], 0x4, &(0x7f0000004500)=ANY=[@ANYBLOB="10100000000000000e01000005000000122cebe76fcb63e12aafc8b4bf4c6ad9a2aad48bfdae4733d83a96758a1fec624fecae75cdc542e9c9e93b508e345d45be9da0571e6623dc705783724cbd33c62c3cc4042a58299d00ec9e3b2e7f10b6d6e8f67513d2961bcb698921ef14bda17453919522e67b2134cf4157048cb867028a630ae3c647313de24ee1951672c05f57de1bba39d83bbe21bbf40629f54fcfbf0af75caf2e3bdf74088859540576b0c4693fdb9533b321af47a94b0151fc91ace736eefde710d6522e93825b34fc08964b3bc4826831f2d204666c6997200bc2069dcf0ff5e404e3d0adf75507e505271e0a4627cc600c045929d1b53be25d5e17242ea8802cc6268a4e4da6127da8841a6c6753b4cd58893ae31979323f1d5fca767e998c01092cb19351a60a3676432b337997eccfaf6680f5591dc45c4389d99ef1661c8cf174516d967dfd3b07c563c45e35ffe80a507e0386fd978b8a104fe62fcd0c6d6ff8a14aa00633b4171ed74ccaf3316354d85f3c8728efa49a466c7664163f3c5724b067b45e2c89b451b03c7c79dc744e2a6ca740c18adab25e05cfcf0ab2244b9f342c3c8252ef65e4f688bba69c2e77ed686c9c6fd69a1d72f4108ffc75bfdd256489f152879323bc656cc7ef3fdaa780228a05b9f028b55b215a9a2c34d8bc8332ef85d036717a38b80e548c1597cbdbde70282b94d4b9fc2ac2bf1f11eb615831e330e9674f9bface5330821c1cb0f7b5513c0d8c9fd8da573580db6344e27b319ad780235247ceb78b954402c30d69b9e97132f0202ef43c1c5f9f76e4f3da1a01b3cfc0964213aee318a0142f799eb275944b30d09b670d43ee6eecadde62a93b39d534aab875f7beb292af371d38ad61970adfd65feba9d5fa1127099deb4eea5b748a3e9049bb393ca7ff082692753e9c12a4ea2655a9cea3a0554dccd19cb8657487b61677622f27f8a7b311e9db63ab4c3828d85c5a095a52c26797000e588059114beeaf0816f70a1ea98f1f7d6815aaba8a1e87c748330f217cbcf562b7a1777a50809477db937367f3f9777839197b1f0630853015be82c8f50bd46437c52ea24599233c0558f3d3329ba9027ce582e6f9fc8231bd511793f26fdf8a38ac7109953524161cb7e90d5617e6e19e036fa02e154e6c879a8b2807a6de17b03e7818f6484cff83442c0082e84d03ecb7eeb21df45a38dc8b98ccdb5603ecff1ca6c8d855b5d47596a33c45371945c3b46c15520a82ec75583e93b863cfcbffe02e27286417abdc6ce7e1d76f1ee1a70820d0cec86ae8aca05833f17c78000bbc9a4dabaf8a190804a288609d4ad523b6fd0012c6655e91fd346617abb3347b6adf014f47afa824fd8cb51740f73d95806ffeac925a266c2c364775ce3f8732c741336edccec444c210846fa6289da2782b512dae856446e64698b3922ea4b4bb6b6a85ea270decbb5ab03fe2744000a79cc9bfb88d33cb02cdb3b158ff33f3cf6c1509b562eff8ad90f23b72926a8ff19d99bef1567fb148ecc1c9d94ad6676e39e01b67cd5dc013b023f4e2844e3fdcd34cd1f3720ebfa2551762db1a3034d61e3e4d18c3ae685fa8b57dd20b54290ca946a1b3aceb5450fae81ec068b31d43d8bf5d21c10e82ba5a02a1221cb83d32d14f551da1330b7ce3ccd5b28a1f9477c8b613e1764d014db588ad8f2eed9556ec6be812bdcd0877f14f66c246860ff9eba7b888be241024ac6b844f5914cc8649b6603bf184a236249553028ee298090bae8ef54d9462132b3e6d08437e23446b2c5ac3859d67e4185d514143e1021700e268a411b48b3f8ef9aa9d6e914f01f49442e14530683e7ec14840f0ccc159b8e7b76ec0a32bd5207642d0d667489e89f734907cab2208ce0dae30d5490b066bed1a5368321225b0dfbb415283efe28d4011a097e21b42dba62ec846bc136e7e19e5f52f7767b37588b20cdd9716b6bc173acf4980ff80f39a255c5d43009a163f7bc5c9c8a33e5d500005a106b68de406d4ac8d49a90de261a97f39cdf7b54ac797a11c2477377c66b422b576d68229e6ab6e1953d9991991deb07b2e0a3c1ec5c09ee63264acb336877f080a3b7c0f3db23b74347c4fb865cf531b59f4fbae721b77e7cdf18a17fb0571e336eab9dad976f8defa34bb471cbbe5094e3abd9217dbe5dd8ea2096d78fa9b176698ff1713a8ce02a3b1c0a6a5a55dd2e9fb2f0243dcf289692df4f39501407d864d3157657912942dd0611c96448157082f8ad1f8d30354c06d338c3eb3d7cd77c23658989c9fb7af1959bd6472e9e5063f5b4c132b38ae839e75f31b88a3094763af373dd17329fb7a346626e1b13fd16682cbc5cd9dbf422d8f722f0db7c7ed359e34d530d2447a118f00272a4adb0875f06dff6da2094d5c5a30d7442dce78a9cb021cbb09b0dbc7cd4edf41ce53ea4cf5c076fe6e1c82b3814f9763ea04a43bb382bf786c893b835e95d2f6ef32254d133c6c5e734af6eed7515987ec0c588bc54a048fbcabf249d556ecad8f9178adb26feebbed46df47ea43f4acead39ea427287a2a98b2e5069359d33b4122265f83a7d09b67f213c75e2b2af5ff719f7045e5637fcd772ca0528a46988f22169058dfe65bc7a6f741fca08a9f88ff7a4c9ab62cbc59a1bba58690dd7ff7b9d08fc318c13dad5443eea7536801e07a350833ef8ff4706916c11d373b5c786fcba01c97eeac921654d19baba8f7b719886ff07a00564948e24afc9d215fe201d2f4a18b4e28980557a0c16fbb697ccecaeb02307fa00585259038005fa08beae2e628e5e811eb81178e3c5601eb1f6569a0080cfb4648ee1b03a71c75f4c12e053f51f2fe8542342c7ae0af95d798f6e9b2311a1119ebbcf304d139fad9c0b9030ed58de1a6ace12329c63b0b0e630668fad6981b5cd5401f79617b22a52818dddbc3ece91911cb1791bac9e053434b5ea36ec0590c0f9b6f627fc4fb7d1158669a1eb800db669b68b6b74e90b87bc50cd06b3256de39c2dbb289195b70a9d63a38deb2911199e843c512fe8b79965d51cfa7d6c18f40500603954df9c5d3ca76640a77cc817eda970bb4b2387cdaffbdfcf882110141c0e7b6ee31f0294ec0481241e84d03aa0ab615d73a50f92d5ac3094d3a28eee0471fb05e25e2a44e830d2537155bb74e88249b83548802aad24e911e65b75b3ae6fb4cf56337b32bf0ccec6cced998058a1cab76d62a2dbbaf64a4732622d1c9bd46bc7a08d9e0b2a16bd9203188b32239194d34a97d28a73963cf11f249eb5688a8f078a57dda624d535dbb4c97897958f4a1c9f8df0caacd53915d836555a34d4e75268cc0d085689971dfdb1fcd57068a46b4d84be7896ae32be52347bc8758e43e0da4fc1f49f372bf3f59ee43251909c5f67ec54544487b616159dc2ac47eeed61fe63acd9cbdbdd477777129825418652fbf43f836733abc496ef699f8aa7ae996fb4ac89ef18f16dcdfddd9a73802e35678d17829c90ce3c86ea5a6a466b03ca5b5b947b2fee987210e78d6422336c604c627c21f838b4015c70acc20654a41d2bfb0017275736b290c124a728fb796f79d5aefcdb360bd666c2423e1e8d5184897360d2e8da3052fc14ebbd7205d072c357156ae7d8c6e0a9fd28d3948c9524d9449091289208bb4fa03346c6e17e4467a919c3fcbee5c6ab693df78945b9bbe3eeda03bb00ca4845b08a88ad0c72f24bc6359c76f1bcb8bf0f40b8a4a0a5c7faeb20ca18d78b9b9c7c9f49daa81ab7918b26026b2ee49575ab6c38445926b411823ee5e22233f4e4a72edf6db10a8a000397d19fa612c95d08481c5f1b797292a3d54519d0d59744a4a5c346161313826b3c68eaac1fa4832be169b83eb8bfdb2e97b4f6402eb965a7f3e8ee82cc23b312f50a503ce915de39db8264827cb14fd8bfb8d96e896b8e14888a6b771fff30a3b8a002f716ced3a0d530a5a45a5c8e7c7a9af16c5a2a5b370cf2e97fdad5299906467f296f04057af2e02f6d1bb2d0ed9c0d9bba3c484665721165de34da6d696f3dc601b3ef16b563e1a67ba0c487e2dbc8d0cb75a2b434f996a9440d172e86ba84f9f547fcaa72cd266d08c4137fe9c16fa33493cfd14a41744a4983f05fdd75946045c8aab02b2207c469bf951f7f214ae7a0fa996efe42f1b78e65b642025cdbbb1b380c2b4a0163a4451373561d0bfe6b26b4007b49edb884f376b707412c6be35c9f37cbc07d1b5199f6ed53446fcba016a00543775e32fa549e109c2f72dc3cbc66445728544bc7dbf4ba875fecb0e62d84509cf0c200d3fae568a57f6c26ec8523205ae7b403320a108fa3dd3da7b8f454d4cca14b58c0d3d9b1e995ff172bcfa8e104b5a1536ded3a3620ce142625179b8ffb82ef25238bcd68155d1f84364fcb98b8f327887609eb60d57d7096850cc444b03b5c9cdd2feb1a9a36efb70eec91dc6506730813fac8869a8f59a35f3a58341196203f2c3d8b876a9544b9487a253dccfa2dd5f0ef6e6d44e06e9e366901184af371f8e932be274e29432e09cd67a6029ce5cc47713a49a51c0617dc75638dccb5c2ae6017376f399ba982e017ef731fbbf282692acb61a2281b35337ee82ba46b1a57b36c4188788946daea84ac15b0bfaf928c2118afa2db0564fe60a14aeb8607b20cd255f4be1f218c66f8e6e168d50d111c4d6d781c7ab475f7c21c77c4f0bafa19451d92fad0461853c8a8e800ae1af3977983a4e0714ae5575a890e99089e9fd63a00ed4925d864630e2d69b9c71553b7904d0d30d505e8e2cfbb49bd417d830f96091c149e1d738dabdb97f5957c0231278c698714d1d1136906fd1361f95c87eedff21f90c5d8ccce3e6dbf14864fac47f06c64f692d07384c27b934f1b83a435c9cbc6a42e34affa5817ddbed528749a07361a19f213f97f601bdafc338f10449858d06f91000d14721df099dc2fb7243ab7490afb4cb773e7b0cd51304ccbed2b1b4f17cc7b7b0c29a856c662deb1730150f7a9d43e7be52e1b0403a16710f1e75aa1ffa6c070367cdc94fce9bc071045bc01ca0d8cb32b09623b469d821492f464c938e6a7c286f9e848320c0c84003270e75aabe62ef3ddec5f5ee11558258a2fd4535d87a1bd9ed036ed44666bcae4884d35d6ce91f75eba5a8bd7e94e9cf8f28cacfbf26e15e006316144af8d1015acf94245d667e280984930fe3cd60ae9660f862c0da0cc4a0ba2b4c56739b224f0c023c6faf0584e29f09e39a9db69a015b9748ad9203f1d7b6ecac7819d8f969f49374aa331644f08532a4ba2485fb4917cf9d0f1008b5bd5125e044789e8cb22e83a02f03a655883a410d9086d32bb955c9db443c6dcb1a4baeb27312c3a4a600bada602e48c2464abc8cf5c116f9a4f8a3ac7ddfbd38b20a7f9dff8e85b4b8c76b8178335e3b4399257ab49d34e7f8f47ab4cfda4929e192e3dd906bcd004969cd46e2a26bab29e435289cf78d598ab0a2e25966acb199e9c0ef16d4660d53cfae9b84be843088a663eaf4138c1bfa2a76ec23db788d8c79f67ace426ac05157d4122f3b48a8da4f6fc6b6df4aab3008d4f5a99af00ca8136543485b669bfc9e75a7b735829cae30431549b914aaf7e16989839f92dc207f105e1f13a1876e0facf6d6d98db88dabcec4dd72796abab3d56bac85f0d0c44addf3c7cd9d4b93ba64edaf45a07886f471baa8c3659eaeac3ae02dfbe78c317a82a5075506d9f209bef6e27c8894854e3d66ecb66e606111429e255fd3c93f22370e133e61895a4697c5eb15d5bff661cdb88ef80000000000000001000000e746ffff7527e0df5c89a32f804719c536b6a5e7aa4e3e7fb43ae595fe93640631964b6213b428a369054de5ca18b88d62d924d66126f2dcb873ca1aa3882651f9d774ffaa6618e7dc17cb4fb7558c0eb041e3cf9b1772b10de4e53e8f58abe72c5d70308ff7e271b9a6b2925898d8cfd19e017799cbb3099942d34d21d30e70a01c058a7c05685d2ecb3fd573a2157d82c93c8ff308e330b039de6b1db7388e1ca4c018bcaf73d43a4fd733d22aadfa545759c1c0287b33ac8c1d24c7bb0a4133b240c82e43e5b5aab1e9aa8f3280ca2b3b5e1d42bdf007358a516b89e66e604b71fbb680c5b0d854f485eca800000000000000100100000800000039aba12ae4a6d6f4cb93101b4112302d908a3ac45ff07f279f04ba5b59c86f49529a352564e86bed123311e46818fa6df3e47f6e1545c34655ab50ed22402429adcd9b0db1cbc587506b98e1772365e7daaba324f4424e02c369eb1f51289cde4d11db57cb9b2a017f6da0931f733b6917bc1ada2ac8e1fa03d5cc62860d271c516d215c890cf9054971b8928d184bffd907d847de580ca57800000000000000180100000200000087a5b763b1eb2fa2f778430bd25dc93487844b0ea7656012de8b6a77f8065aa4dc0e4580cec337560dba9ba21c27c377d22133d55a4a58b87277c8898242eedc97133b6c49210fa0493c9a7d30e4455e16e1802845179ffc0b1935d828fa2f6b8c2a60000000000098000000000000001e0000000600000082d6ead596cb3f3675a58cec66b4d17e3d00611d752344a3f31c4765f48297824e4b55cf69cd54f6c10c3ba5961094cd88fc357e85b3081432d39de19b4647cc669905273cf31b6a659f758dc981ddb62207c74f7dbeaa9a7f864be243c6b523457ac9c279e8cbf60070285b4501346c17c599c150bfba726f425324b292ab4bdd68ef3e3edb920070000000000000000a010000b0040000b6f0fd7a53f56eb93df9dfe3da48df22450fd6186dc3da66534d8d704ebbf96edb78144a8fa09d19a69208f40f31346ed0305dbaa66f54a869bbf8d57701448fea9f1da7d7e8ae0f5f9f916a86cb8d851314f597f54d9de07da5bca0cc32f20030000000000000008800000005000000bc60bf68ee25b63a049059832adf4ef6b8a004c74a052eba4c75f1201f34bf00e0000000000000000901000004000000f55fa52ed454ce097e04cc1a7f4222497caede77495b5f06937a30ceb8315432f8d9a992ac2e57630e79ca33b8c72de0ca551e9d2ccd3c3910ea7710a217f3d0ff68f239f577d79a8c5d7537b55e683a0c46336fb0f051228f57e9c36f1e5bc8243b07da751d2b8dc301cdd619e97fb66ee6b084a49ce31cc0b49f8fadc7cc5546ee1f6f38aa9973024e83493a012ab14335a4d5692919eff65ce316bf489a70d39b9aa263184b9a82287d3447d709a498ff7cfaac00d2fcdc719e4db04e27c35e3a9a993e01970aad919eeb4f4700009c272ad1487fa68f8fbf93b79e834cd5c52e119f1d7e1c0a030e69d83d2c822c91e7c0d6d6efe424d7a33ee293d4726abef82ee71a714e0b675dd4b43f61ead237ec02cac4c0b2867b057c9eddaeeeb89b6113b75e91050ffc9ef50c74dac98d6b259286202fe5d8d4e78e7df03eb3e6d27b704429c0083e2da517d5d09fb528ffccdc85de5227dbf66d740b53816c02b6d0cff08743a091fc15aa2a10e6bc2f4db2825ea5f581fec7"], 0x1440}}, {{&(0x7f0000002d00)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @default, @null, @bcast, @default, @bcast, @bcast, @null]}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002d80)="0a4d7ab2d6b28d58852a", 0xa}, {&(0x7f0000002dc0)="17cc51cc471c97e3882c8c6856cf0d7a1ca7598a27646c943a4f1da5bdced060e73e562cc64aebce4ca9", 0x2a}, {&(0x7f0000002e00)="83b1698d6b223900b285975a498bc520fffeb6d93af84e61fef7fda28557428552fe4b79397107ec33e7bae6ec47cde7bc8cfa26e6e12dde050a55294747ebca7f44beda1ec5d66f7677328d9bc21ca321bdea9226c9280aca3554e456e47379058153052387031c4d58614cdb91d06336eecedfedcc10fd3206f72a216c90ead69e9531b4901d34d67abb09b326c04c350e6428037166bc10d951ac061adfaff2", 0xa1}, {&(0x7f0000002ec0)="ff8dd0543eaec87ab8cdf3d7931ee472528db4e3fa2560093dbd6a4951ce01d20304b10571f68a391a9dfed2879c69da4d9079da7dd76d7d22e201eee59f85a11811e0b7e7393fbb71da9bc7f6607700e735df9e3c5a048a88edfd2362", 0x5d}, {&(0x7f0000002f40)="1a30dec894b4a532a9db0b3f5ee470d27b91d8740443df1b8529dabcd89f037d243f2609ad73e81ec1ba17ae", 0x2c}, {&(0x7f0000002f80)="28d37d90156a8cb6af4692", 0xb}, {&(0x7f0000002fc0)="8a96782ab2fbac202753d1d826be3525df4b52544f938ea0cba92b664554c9d17920f80bf1fce1d1f7151e3a7581a04741ba63ef9b97a634412860", 0x3b}], 0x7}}], 0x5, 0x24000090)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171ea757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13340000000000005ab9594700"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "00e200"}]}]}, 0x104}}, 0x4)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}}, 0x4000000)

2.562896139s ago: executing program 6 (id=1358):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
ioctl$SIOCAX25GETINFOOLD(r0, 0x891d, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)

2.362413647s ago: executing program 4 (id=1361):
syz_usb_connect$uac3(0x3, 0xc1, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3048, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0xa, 0x20, 0x4, {0x8, 0xb, 0x2, 0x1, 0x1, 0x26, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xb, 0x10000, 0x9, 0x5, 0xc, 0x7, 0x58, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0xff, 0x1, 0xd5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x7f, 0x2, 0xcf}, @as_header={0x17, 0x24, 0x1, 0x8, 0x5, 0x200, 0x1, 0x9, 0x45, 0xf2b1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xb, 0xa, 0x3, {0xa, 0x25, 0x25, 0x6, 0x8, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x1, 0x6, {0xa, 0x25, 0x25, 0x2, 0xff, 0x4}}}}}}}}]}}, 0x0)

2.198324183s ago: executing program 8 (id=1362):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x58000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0x54000, 0xfec00000, 0x3, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6c, 0xfb, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x5, 0x7d, 0x1, 0xd9, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
syz_usb_connect(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a03080004030e09050e03"], 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000480)=""/86, 0x56}, {&(0x7f0000000580)=""/227, 0xe3}, {&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000800)=""/121, 0x79}], 0x4, &(0x7f0000001100)}, 0x2120)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, r2, 0x2000)
syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000100)="66b8000000000f23c00f21f86635030008000f23f867650fc734c80f20e06635000002000f22e00f74c466b9800000c00f326635000800000f30baf80c66b842f9008766efbafc0cedbaf80c66b844b7418f66efbafc0cec66b9800000c00f326635008000000f300f063e0f79dc", 0x6e}], 0x1, 0x21, &(0x7f0000000340)=[@flags={0x3, 0x2}], 0x1)
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000a0040b11837000000000000010902240001000058010904000001030000000921fd7f000122eb0009058103"], 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r7=>0x0})
r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00')
preadv(r8, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0)
r9 = syz_open_dev$evdev(&(0x7f0000002ac0), 0x0, 0x0)
read$hidraw(r9, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010800000000ffdbdf250b00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x40}}, 0x0)
r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000008c0)={0x0, &(0x7f0000000900)=[@out_dx={0x6a, 0x28, {0x94d2, 0x2, 0x2}}, @uexit={0x0, 0x0, 0x7}, @enable_nested={0x12c, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host64=0x2c01, 0x2d20000, 0x7f, 0xfff}}, @set_irq_handler={0xc8, 0x20, {0xb5}}, @out_dx={0x6a, 0x28, {0x976b, 0x2, 0x27e9}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xe7, 0x0, 0x3, 0x2}}, @nested_amd_clgi, @enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_vmresume={0x130, 0x18}, @rdmsr={0x66, 0x0, {0x8f8}}, @nested_amd_invlpga={0x17d, 0x20, {0x4, 0x1945}}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x1, 0xff}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x36e2, 0x6}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @enable_nested={0x12c, 0xffffffffffffff8d}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0x27000, 0xf411}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro64=0x2401, 0x2105, 0x3ff, 0xfffffffffffffffc}}, @nested_load_syzos={0x136, 0xf0, {0x0, 0xcd41, [@nested_amd_inject_event={0x180, 0x38, {0x2, 0x54, 0x7, 0x7, 0x2}}, @in_dx={0x69, 0x20, {0xc75f, 0x4}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @uexit={0x0, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0x7c74, 0x4, 0x800000000000000}}, @wr_crn={0x67, 0xfffffffffffffe8d, {0x3, 0x5}}]}}, @nested_load_syzos={0x136, 0x78, {0x1, 0x5, [@set_irq_handler={0xc8, 0x20, {0xfb, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x1, 0xd}}]}}, @out_dx={0x6a, 0x28, {0xf5fa, 0x1, 0x1ff}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xa2, 0x80000001, 0x7ff, 0x1}}, @code={0xa, 0x5c, {"b9800000c00f3235008000000f3066470f1c444705260f18d766ba6100b86b060000ef66f3400fc73136263e0fc7693066ba2000b000eec483997ebb0a000000a3f30f1ef28f4838a61a00"}}, @nested_amd_vmload={0x182, 0x18}, @wr_crn={0x67, 0x20, {0x2, 0x8}}, @nested_vmlaunch={0x12f, 0x18}], 0x54c})
mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, r4, 0x1, 0x10, r10, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
set_mempolicy(0x0, &(0x7f0000000000)=0x5, 0x0)
r11 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r11, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)

1.792919884s ago: executing program 4 (id=1363):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x7f, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000180)=@ethtool_test={0x1a, 0x2ae, 0xfffffffc, 0x5, [0x6, 0x61000000000000, 0x967, 0x3, 0x28000000]}})

1.64334512s ago: executing program 4 (id=1364):
r0 = userfaultfd(0x80801)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
madvise(&(0x7f0000d9c000/0x1000)=nil, 0x1000, 0x17)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1})

1.578959061s ago: executing program 4 (id=1365):
syz_usb_connect$uac2(0x2, 0x83, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x8, 0x0, 0x7, {0x8, 0xb, 0x1, 0x0, 0x1, 0x4, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6b, 0x1, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x3, 0xe, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x7, 0x7, {0x8, 0x25, 0x1, 0x81, 0x3c, 0x10, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0xb, 0x2, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x2, 0x89bf}}}}}}}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x781, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x0, 0x9a, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x6, 0x6, {0x9, 0x21, 0x101, 0xa0, 0x1, {0x22, 0x174}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x3, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x4a, 0x6, 0x5}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x9, 0xc, 0xd8, 0xdf, 0xff}, 0x25, &(0x7f0000000140)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x5, 0xf00, 0xf800, [0x30, 0x808000, 0x0, 0x3f, 0xc0c0]}]}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2009}}, {0x88, &(0x7f0000000200)=@string={0x88, 0x3, "b8788c4cc373afb067064eabdb675277eb065a75a2845928dc83c3b21e7d79da497f960ce6e370378cdbbacb9a378b2165d43b93810c0b8f8099a3573b50c823a1d6ddb7ccb6a6bcef6c103a69b67e78d17f961ac1c890e6290db67808807a5106b1239803456ada00c0e5b9d74bea8572edcefa05339997e3636d5c7e1389d25e6748dacebd"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3409}}, {0xb8, &(0x7f0000000340)=@string={0xb8, 0x3, "23c402ee880e6a314399ebb98c194d4f762895481bb016a283a7791c2ba6f42e7d8cca06aa91344313b8f401b08b03dcc44152ccc8913c6b4d0f6f1e01ecfb95a3f3ca64edc3b67c530077f5430bd1a66cede9910180a191827a397d5c82d9a9cdfc3fdfc468b2842392c4e5c8f8a56e279c29c73c21edb4ef6134fb169239deb69f466ca266941e47a30ccac0e90ec46dd4ec3bc5c78d8fcdd1694eeec8662b514a2307a69a210aefc209db1680d3404ea0e1f72227"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x8e, &(0x7f0000000440)=@string={0x8e, 0x3, "f851d597d9f68297f1a213dca0c3219ede3168d4eda42ea70db7c49ed262b0a81e78a10edcf04ed8eab9ae018b14d747e54cfd591a08ce801f9700f1377eea73dbf12fbc2c76740b07dfacd198b0c6fb0cf5b0e429c27a1298bb6c6e017cd89eb612e34d9d60ba4a8747f774547f525a698812cfc5591b46f036f0d7e9c97963df418119248b6c08d2b43d70"}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, &(0x7f0000000580)={0x0, 0x23, 0x28, {0x28, 0x7, "79ab6a40385987c1318e740e21169c51f07150c51414baf656b060ed4af590bc94b5d4643fdc"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}, &(0x7f0000000600)={0x0, 0x22, 0x15, {[@main=@item_4={0x3, 0x0, 0x7, "3dce3896"}, @local=@item_012={0x0, 0x2, 0xa}, @main=@item_4={0x3, 0x0, 0xc, "1a879d96"}, @main=@item_012={0x2, 0x0, 0x9, 'XF'}, @main=@item_012={0x1, 0x0, 0xc, "f5"}, @main=@item_4={0x3, 0x0, 0xb, "b07068e0"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x2b, 0x1, {0x22, 0xa04}}}}, &(0x7f0000000940)={0x2c, &(0x7f00000006c0)={0x40, 0xb, 0xb3, "ac25bc6f5f23920e5ca23f9298ebab9886ae75be5d25a31846e0bcd486960e3679f21a1935bd74b39f71a1fc7cbe4d5e457321d3327ce6424d4c5f9d22a9b228c677c404c0c236501254329c0231a8ca8c500124cc3a1cd0b538c7683b13f08c1fa2333ee74717e2bec82293d6817537d8d3111b873d4142461eeedc901bbf4c2a99c419e24ca51cbf707916b60ca5f11d71afa7fe6a62d3f00f1de3dee193d8868a18af59f2a62ed6cc861d4902ca0e2d221d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xb0}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000800)={0x20, 0x1, 0xe8, "38fa75ad1e0a9527e1c3bf83cc50c52474778f7f820fe5b36c29657364751664c04bb1b5e103144ec75778fef7ad97f47f8cb0b8230ed925f07f35d9b408362c1fe7e63390b969d350af008a8e9b82b42c3a9f9054f3152971e22d307751889afde8c4b6251225a8733a3cde87a9dfb8081f245cbee9420a59ae9c37302cd0d5bd91be8932985df63cb181a9e60ec4f6f74020c4ed4562582ea81dd69330aef665eae2cbc12d774d64d56a9fb85d9face9c4f08075da05e074e22f81601b098fdcbd939db0a701ab5674da921bd0b4f0cc161f809fb2fb30db9811faef25ed18a5fd20779448424b"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0x3}})

960.179628ms ago: executing program 4 (id=1366):
r0 = socket(0x10, 0x3, 0x0)
r1 = semget$private(0x0, 0x6, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a00"], 0x50}}, 0x0)
semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2)
semop(r1, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000240))
r2 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0)
mmap(&(0x7f0000001000/0xe000)=nil, 0xe000, 0x0, 0x12, r2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r4, 0x0, 0x9)
semop(r1, &(0x7f0000000280)=[{0x1, 0x2, 0x1000}, {0x0, 0x5836, 0x1000}, {0x2, 0x5, 0x1000}, {0x0, 0x7, 0x1000}, {0x3, 0xfffa, 0x1000}, {0x4, 0x4}], 0x6)
fchdir(r6)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file1\x00')
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
request_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xaece, 0x400000000000000)
preadv(r8, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000001b40)=""/4132, 0x44d}], 0x2, 0x10, 0x4)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x500, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00013e46000000000000001c"], 0x28}}, 0x0)

770.166575ms ago: executing program 6 (id=1367):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x1, 0x5, 0x10001, 0x2, "afb8c85e7ea50c0d06e7c9ee2dd84cf540669d", 0x2, 0x4})
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

702.962555ms ago: executing program 8 (id=1368):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2)
r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
ftruncate(r1, 0x10000)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000500)={0x0, 0x2, [{r1, 0x0, 0x0, 0x8000}, {r1, 0x0, 0x0, 0xd1736705547f5f7c}]})

631.916565ms ago: executing program 8 (id=1369):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000021, 0x0, 0x8}]})
getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f00000000c0))

507.065644ms ago: executing program 8 (id=1370):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'rti800\x00', [0x6, 0x7, 0xd, 0x7f, 0x10002, 0x8009, 0xc, 0x2, 0x61, 0x2b, 0x6b5e, 0x2, 0x3e, 0x403, 0x800, 0xf, 0x405, 0x1a449, 0x3, 0x40400003, 0x89, 0xfffffffb, 0xa, 0x9, 0x6, 0x4, 0x2a, 0x6, 0x8, 0x8, 0x7]})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) (async)
syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x8, 0x20, 0x5, {0x8, 0xb, 0x1, 0x2, 0x1, 0x3, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x9, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3f, 0x5, 0x93, {0x8, 0x25, 0x1, 0x80, 0x3f, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5e, 0x5, 0x0, 0x4, 0x40, 0x8, 0xb7}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x89, 0x0, 0x0, {0x8, 0x25, 0x1, 0x2, 0x36, 0x40, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60)
listen(r3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})

0s ago: executing program 4 (id=1371):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa, 0x4], 0x10000, 0x202}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
pipe(0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0) (async)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001714b579"], 0x20}}, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async)
r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0xc, 0x9, 0x5}) (async)
write$bt_hci(r8, &(0x7f0000000080)=ANY=[], 0x6)
fcntl$setlease(r7, 0x400, 0x0) (async)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0)
fcntl$setlease(r9, 0x400, 0x0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) (async)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
openat$sysfs(0xffffffffffffff9c, 0x0, 0x18b502, 0x0) (async)
close_range(r10, 0xffffffffffffffff, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000300)=0x3, 0x4)

kernel console output (not intermixed with test programs):

443328][ T8703]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  247.443357][ T8703]  ? tcp_sendmsg+0x21/0x50
[  247.443381][ T8703]  ? __local_bh_enable_ip+0xd0/0x130
[  247.443406][ T8703]  ? __pfx_inet6_sendmsg+0x10/0x10
[  247.443430][ T8703]  tcp_sendmsg+0x2f/0x50
[  247.443452][ T8703]  __sys_sendto+0x4a3/0x710
[  247.443473][ T8703]  ? __pfx___sys_sendto+0x10/0x10
[  247.443490][ T8703]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  247.443525][ T8703]  ? __fget_files+0x3a0/0x420
[  247.443558][ T8703]  ? ksys_write+0x242/0x270
[  247.443577][ T8703]  ? __pfx_ksys_write+0x10/0x10
[  247.443598][ T8703]  __x64_sys_sendto+0xde/0x100
[  247.443618][ T8703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.443636][ T8703]  do_syscall_64+0x15f/0xf80
[  247.443657][ T8703]  ? trace_irq_disable+0x3b/0x140
[  247.443678][ T8703]  ? clear_bhb_loop+0x40/0x90
[  247.443699][ T8703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.443723][ T8703] RIP: 0033:0x7fa78c79c819
[  247.443741][ T8703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.443755][ T8703] RSP: 002b:00007fa78d68f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  247.443774][ T8703] RAX: ffffffffffffffda RBX: 00007fa78ca15fa0 RCX: 00007fa78c79c819
[  247.443787][ T8703] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[  247.443797][ T8703] RBP: 00007fa78d68f090 R08: 0000200000000140 R09: 000000000000001c
[  247.443808][ T8703] R10: 0000000028004044 R11: 0000000000000246 R12: 0000000000000001
[  247.443819][ T8703] R13: 00007fa78ca16038 R14: 00007fa78ca15fa0 R15: 00007ffee706e858
[  247.443847][ T8703]  </TASK>
[  247.561616][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.576911][ T6161] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  247.597831][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.606036][ T6161] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  247.631389][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.641362][ T6161] quatech2 3-1:0.51: device disconnected
[  247.650076][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.889215][ T5933] usb 7-1: config 0 descriptor??
[  247.898212][ T5933] hub 7-1:0.0: USB hub found
[  247.940800][ T5933] hub 7-1:0.0: config failed, can't read hub descriptor (err -22)
[  247.964267][ T5933] usbhid 7-1:0.0: can't add hid device: -71
[  247.978987][ T5933] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  248.028441][ T5933] usb 7-1: USB disconnect, device number 4
[  248.265363][ T8716] netlink: 40 bytes leftover after parsing attributes in process `syz.4.728'.
[  248.277862][ T8716] netlink: 40 bytes leftover after parsing attributes in process `syz.4.728'.
[  248.435459][ T6161] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  248.465003][ T5933] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  248.565024][ T6161] usb 3-1: device descriptor read/64, error -71
[  248.617306][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  248.628453][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  248.638341][ T5933] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  248.648263][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.659929][ T5933] usb 7-1: config 0 descriptor??
[  248.720897][ T8722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.730427][ T8722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.743938][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'.
[  248.804930][ T6161] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  248.885169][ T5933] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  248.913265][ T5933] usb 7-1: USB disconnect, device number 5
[  248.935278][ T6161] usb 3-1: device descriptor read/64, error -71
[  249.045195][ T6161] usb usb3-port1: attempt power cycle
[  249.393987][ T8728] netlink: 384 bytes leftover after parsing attributes in process `syz.3.734'.
[  249.403170][ T6161] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  249.419818][ T8728] kvm: pic: non byte write
[  249.435878][ T6161] usb 3-1: device descriptor read/8, error -71
[  249.568447][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.578802][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.684936][ T6161] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  249.705320][ T6161] usb 3-1: device descriptor read/8, error -71
[  249.815546][ T6161] usb usb3-port1: unable to enumerate USB device
[  249.864970][ T5843] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  249.962205][ T8742] netlink: 'syz.4.738': attribute type 29 has an invalid length.
[  249.970644][ T8742] netlink: 'syz.4.738': attribute type 3 has an invalid length.
[  249.978910][ T8742] netlink: 132 bytes leftover after parsing attributes in process `syz.4.738'.
[  250.029011][ T5843] usb 7-1: Using ep0 maxpacket: 16
[  250.047480][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.065001][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  250.076818][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  250.087344][ T5843] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  250.097256][ T5843] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  250.111792][ T5843] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  250.127049][ T5843] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  250.140231][ T5843] usb 7-1: Manufacturer: syz
[  250.159641][ T5843] usb 7-1: config 0 descriptor??
[  250.467805][ T5843] rc_core: IR keymap rc-hauppauge not found
[  250.481858][ T5843] Registered IR keymap rc-empty
[  250.488636][ T5843] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  250.515133][ T5843] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  250.546409][ T5843] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  250.574074][ T5843] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input24
[  250.594280][ T5843] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  250.615337][ T5843] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  250.645533][ T5843] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  250.677177][ T5843] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  250.704322][ T8760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.716373][ T5843] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  250.717244][ T8760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.735144][ T5843] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  250.741435][ T8760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.755759][ T5843] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  250.763174][ T8760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.785086][ T5843] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  250.805203][ T5843] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  250.835268][ T5843] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  250.857711][ T5843] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  250.866989][ T5843] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  250.884320][ T5843] usb 7-1: USB disconnect, device number 6
[  251.332623][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.348335][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.814935][ T5933] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  251.928975][ T8784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.937953][ T8784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.965006][ T5933] usb 7-1: Using ep0 maxpacket: 32
[  251.971761][ T5933] usb 7-1: config 0 has an invalid interface number: 188 but max is 0
[  251.981498][ T5933] usb 7-1: config 0 has no interface number 0
[  251.987720][ T5933] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  252.001458][ T5933] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  252.010708][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.018756][ T5933] usb 7-1: Product: syz
[  252.022955][ T5933] usb 7-1: Manufacturer: syz
[  252.027640][ T5933] usb 7-1: SerialNumber: syz
[  252.034507][ T5933] usb 7-1: config 0 descriptor??
[  252.041565][ T8782] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  252.250707][ T8781] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  252.485160][ T5952] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  252.514517][ T8798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.524458][ T8798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.646507][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.657789][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.670121][ T5952] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  252.680300][ T5952] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  252.701431][ T5952] usb 3-1: Manufacturer: syz
[  252.719279][ T5952] usb 3-1: config 0 descriptor??
[  252.894973][ T5933] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  252.915820][ T5933] asix 7-1:0.188: probe with driver asix failed with error -32
[  252.964585][ T5933] usb 7-1: USB disconnect, device number 7
[  253.191846][ T8812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.202610][ T8812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.337837][ T5952] uclogic 0003:256C:006D.0013: failed retrieving Huion firmware version: -71
[  253.348042][ T5952] uclogic 0003:256C:006D.0013: failed probing parameters: -71
[  253.362518][ T5952] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71
[  253.379271][ T5952] usb 3-1: USB disconnect, device number 96
[  253.465014][ T5933] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  253.480769][ T8814] dvmrp0: entered allmulticast mode
[  253.547269][ T8816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.765'.
[  253.635792][ T5933] usb 7-1: Using ep0 maxpacket: 8
[  253.643946][ T5933] usb 7-1: unable to get BOS descriptor or descriptor too short
[  253.653492][ T5933] usb 7-1: config 0 has an invalid interface number: 58 but max is 0
[  253.663035][ T5933] usb 7-1: config 0 has no interface number 0
[  253.672438][ T5933] usb 7-1: config 0 interface 58 has no altsetting 0
[  253.683531][ T5933] usb 7-1: New USB device found, idVendor=056e, idProduct=4002, bcdDevice=98.ec
[  253.692978][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.702985][ T5933] usb 7-1: Product: syz
[  253.707333][ T5933] usb 7-1: Manufacturer: syz
[  253.711958][ T5933] usb 7-1: SerialNumber: syz
[  253.722573][ T5933] usb 7-1: config 0 descriptor??
[  253.734947][ T5933] pegasus 7-1:0.58: Missing or invalid endpoints
[  254.128120][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.142496][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.154421][ T8831] netlink: 26332 bytes leftover after parsing attributes in process `syz.3.771'.
[  254.276725][   T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  254.434951][   T10] usb 3-1: Using ep0 maxpacket: 32
[  254.444152][   T10] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  254.453082][   T10] usb 3-1: config 0 has no interface number 0
[  254.460781][   T10] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  254.475724][   T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  254.485196][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.493323][   T10] usb 3-1: Product: syz
[  254.498324][   T10] usb 3-1: Manufacturer: syz
[  254.503038][   T10] usb 3-1: SerialNumber: syz
[  254.523141][   T10] usb 3-1: config 0 descriptor??
[  254.533066][ T8829] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22
[  254.752488][ T8829] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22
[  254.798877][ T8836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.815587][ T8836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.886900][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.774'.
[  255.003462][ T8843] netlink: 830 bytes leftover after parsing attributes in process `syz.4.775'.
[  255.021754][ T8843] netlink: 36 bytes leftover after parsing attributes in process `syz.4.775'.
[  255.641083][ T8850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.657823][ T8850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.675810][ T8851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.687555][ T8851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.741569][ T8855] fuse: Bad value for 'fd'
[  255.871254][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.886126][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  255.888851][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.993868][   T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  256.008529][   T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9
[  256.035790][   T10] asix 3-1:0.188: probe with driver asix failed with error -71
[  256.051928][   T10] usb 3-1: USB disconnect, device number 97
[  256.147669][ T5843] usb 7-1: USB disconnect, device number 8
[  256.200849][ T8861] netlink: 36 bytes leftover after parsing attributes in process `syz.6.781'.
[  256.864943][ T5843] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  256.948544][ T8885] netlink: 'syz.4.791': attribute type 75 has an invalid length.
[  257.015683][ T5843] usb 7-1: Using ep0 maxpacket: 16
[  257.023172][ T5843] usb 7-1: config 1 has an invalid interface number: 105 but max is 0
[  257.032291][ T5843] usb 7-1: config 1 has no interface number 0
[  257.038809][ T5843] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  257.052704][ T5843] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  257.063290][ T5843] usb 7-1: config 1 interface 105 has no altsetting 0
[  257.073295][ T5843] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  257.084008][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  257.092604][ T5843] usb 7-1: Product: syz
[  257.097123][ T5843] usb 7-1: Manufacturer: syz
[  257.102683][ T5843] usb 7-1: SerialNumber: syz
[  257.115422][ T8875] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  257.122848][ T8875] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  257.185055][ T5933] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  257.354983][ T5933] usb 3-1: Using ep0 maxpacket: 8
[  257.368453][ T5933] usb 3-1: config 0 has an invalid interface number: 139 but max is 0
[  257.376761][ T5933] usb 3-1: config 0 has no interface number 0
[  257.382890][ T5933] usb 3-1: too many endpoints for config 0 interface 139 altsetting 223: 161, using maximum allowed: 30
[  257.394144][ T5933] usb 3-1: config 0 interface 139 altsetting 223 has 0 endpoint descriptors, different from the interface descriptor's value: 161
[  257.408417][ T5933] usb 3-1: config 0 interface 139 has no altsetting 0
[  257.418936][ T5933] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  257.428268][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.438086][ T5933] usb 3-1: Product: syz
[  257.442642][ T5933] usb 3-1: Manufacturer: syz
[  257.447504][ T5933] usb 3-1: SerialNumber: syz
[  257.455479][ T5933] usb 3-1: config 0 descriptor??
[  257.539061][ T8875] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  257.546811][ T8875] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  257.676858][ T8881] netlink: 80 bytes leftover after parsing attributes in process `syz.2.789'.
[  257.690051][   T10] usb 3-1: USB disconnect, device number 98
[  257.959164][ T5843] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  257.970858][ T5843] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  258.000518][ T5843] aqc111 7-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 96:0e:7d:d6:1e:ed
[  258.193223][ T5843] usb 7-1: USB disconnect, device number 9
[  258.211337][ T5843] aqc111 7-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  258.289485][ T5843] aqc111 7-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  258.312192][ T5843] aqc111 7-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  258.322967][ T5843] aqc111 7-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  258.812655][ T8925] netlink: 36 bytes leftover after parsing attributes in process `syz.6.797'.
[  258.844738][ T8925] netlink: 24 bytes leftover after parsing attributes in process `syz.6.797'.
[  259.327664][ T8937] kvm: kvm [8935]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  259.350034][ T8937] kvm: kvm [8935]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  259.444921][ T5915] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  259.597364][ T5915] usb 7-1: unable to get BOS descriptor or descriptor too short
[  259.606913][ T5915] usb 7-1: config 129 has an invalid interface number: 135 but max is 0
[  259.619798][ T5915] usb 7-1: config 129 has an invalid interface number: 5 but max is 0
[  259.639983][ T5915] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  259.654932][ T5952] usb 3-1: new low-speed USB device number 99 using dummy_hcd
[  259.661232][ T5915] usb 7-1: config 129 has no interface number 0
[  259.678580][ T5915] usb 7-1: config 129 has no interface number 1
[  259.685272][ T5915] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  259.722782][ T5915] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  259.737582][ T5915] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  259.751456][ T5915] usb 7-1: config 129 interface 135 has no altsetting 0
[  259.759047][ T5915] usb 7-1: config 129 interface 5 has no altsetting 0
[  259.769846][ T5915] usb 7-1: string descriptor 0 read error: -22
[  259.777287][ T5915] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  259.786607][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.813451][ T5915] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  259.821660][ T5915] usb 7-1: MIDIStreaming interface descriptor not found
[  259.840756][ T5952] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  259.881778][ T5952] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0
[  259.923569][ T5952] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 166, changing to 4
[  259.964271][ T5952] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0
[  260.001874][ T5952] usb 3-1: string descriptor 0 read error: -22
[  260.013970][ T5952] usb 3-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40
[  260.036296][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.051033][ T5915] usb 7-1: USB disconnect, device number 10
[  260.086257][ T5952] usb 3-1: low speed audio streaming not supported
[  260.093076][ T5952] usb 3-1: low speed audio streaming not supported
[  260.191374][   T10] libceph: connect (1)[c::]:6789 error -101
[  260.226746][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.227306][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  260.242008][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.271014][ T5952] usb 3-1: USB disconnect, device number 99
[  260.282527][   T10] libceph: connect (1)[c::]:6789 error -101
[  260.309239][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  260.597888][ T5915] libceph: connect (1)[c::]:6789 error -101
[  260.604391][ T5915] libceph: mon0 (1)[c::]:6789 connect error
[  260.848491][ T9001] fuse: Bad value for 'fd'
[  260.922095][ T9008] netlink: 'syz.2.817': attribute type 10 has an invalid length.
[  260.930148][ T9008] netlink: 55 bytes leftover after parsing attributes in process `syz.2.817'.
[  261.011878][ T9012] netlink: 'syz.4.818': attribute type 21 has an invalid length.
[  261.021001][ T9012] netlink: 128 bytes leftover after parsing attributes in process `syz.4.818'.
[  261.030540][ T9012] netlink: 'syz.4.818': attribute type 4 has an invalid length.
[  261.038604][ T9012] netlink: 'syz.4.818': attribute type 3 has an invalid length.
[  261.096712][ T9014] syzkaller1: entered promiscuous mode
[  261.102315][ T9014] syzkaller1: entered allmulticast mode
[  261.114233][ T5915] raw-gadget.5 gadget.5: failed to queue reset event
[  261.121800][   T10] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  261.130384][ T5843] libceph: connect (1)[c::]:6789 error -101
[  261.136949][ T5843] libceph: mon0 (1)[c::]:6789 connect error
[  261.195020][ T5915] raw-gadget.5 gadget.5: failed to queue resume event
[  261.263540][ T9018] fuseblk: Unknown parameter 'roVÀ6æª.G'
[  261.265150][ T5915] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  261.279269][    C0] raw-gadget.5 gadget.5: ignoring, device is not running
[  261.286734][ T5915] raw-gadget.5 gadget.5: failed to queue reset event
[  261.298583][   T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  261.308281][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.316402][   T10] usb 7-1: Product: syz
[  261.320818][   T10] usb 7-1: Manufacturer: syz
[  261.325497][   T10] usb 7-1: SerialNumber: syz
[  261.333030][   T10] usb 7-1: config 0 descriptor??
[  261.355015][ T5915] raw-gadget.5 gadget.5: failed to queue resume event
[  261.414954][ T5915] usb 6-1: device descriptor read/64, error -32
[  261.525933][ T5915] raw-gadget.5 gadget.5: failed to queue suspend event
[  261.533354][ T5915] raw-gadget.5 gadget.5: failed to queue reset event
[  261.542905][   T10] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  261.615037][ T5915] raw-gadget.5 gadget.5: failed to queue resume event
[  261.675350][ T5915] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  261.684101][    C0] raw-gadget.5 gadget.5: ignoring, device is not running
[  261.691612][ T5915] raw-gadget.5 gadget.5: failed to queue reset event
[  261.744613][   T10] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  261.765416][ T5915] raw-gadget.5 gadget.5: failed to queue resume event
[  261.835116][ T5915] usb 6-1: device descriptor read/64, error -32
[  261.882953][ T9027] netlink: 2300 bytes leftover after parsing attributes in process `syz.4.823'.
[  261.945021][ T5915] raw-gadget.5 gadget.5: failed to queue suspend event
[  261.952248][ T5915] usb usb6-port1: attempt power cycle
[  261.959189][ T5915] raw-gadget.5 gadget.5: failed to queue disconnect event
[  261.967115][ T5915] raw-gadget.5 gadget.5: failed to queue reset event
[  262.038259][   T10] libceph: connect (1)[c::]:6789 error -101
[  262.044396][ T5915] raw-gadget.5 gadget.5: failed to queue resume event
[  262.053732][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  262.060353][ T5915] raw-gadget.5 gadget.5: failed to queue reset event
[  262.275548][ T5915] raw-gadget.5 gadget.5: failed to queue resume event
[  262.335000][ T5915] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  262.355116][    C0] raw-gadget.5 gadget.5: ignoring, device is not running
[  262.362251][ T5915] usb 6-1: device descriptor read/8, error -32
[  262.485074][ T5915] raw-gadget.5 gadget.5: failed to queue suspend event
[  262.492439][ T5915] raw-gadget.5 gadget.5: failed to queue reset event
[  262.565368][ T5915] raw-gadget.5 gadget.5: failed to queue resume event
[  262.624973][ T5915] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  262.645234][    C0] raw-gadget.5 gadget.5: ignoring, device is not running
[  262.652447][ T5915] usb 6-1: device descriptor read/8, error -32
[  262.775200][ T5915] raw-gadget.5 gadget.5: failed to queue suspend event
[  262.782372][ T5915] usb usb6-port1: unable to enumerate USB device
[  262.853002][ T9036] kvm: user requested TSC rate below hardware speed
[  263.091976][ T9052] IPv4: Oversized IP packet from 172.20.20.24
[  263.100785][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  263.108085][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  263.136991][ T8983] ceph: No mds server is up or the cluster is laggy
[  263.870238][ T6161] usb 7-1: USB disconnect, device number 11
[  264.015615][   T30] audit: type=1326 audit(1775294718.307:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.4.838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31f539c819 code=0x0
[  264.267965][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.290364][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.406544][ T9095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.415544][ T9095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.545091][ T5933] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  264.584966][    T9] usb 3-1: new full-speed USB device number 100 using dummy_hcd
[  264.705011][ T5933] usb 7-1: Using ep0 maxpacket: 32
[  264.712505][ T5933] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  264.723031][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.733475][ T5933] usb 7-1: config 0 descriptor??
[  264.738445][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  264.739041][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[  264.761196][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  264.771794][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  264.785437][    T9] usb 3-1: string descriptor 0 read error: -22
[  264.791841][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  264.801134][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.817911][    T9] usb 3-1: 0:2 : does not exist
[  264.949247][ T5933] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  264.968831][ T5933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  264.982425][ T5933] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  264.991854][ T5933] usb 7-1: media controller created
[  265.020747][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  265.228862][    T9] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5)
[  265.255742][    T9] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  265.331346][    T9] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  265.442267][ T9110] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  265.565673][ T5933] az6027: usb out operation failed. (-71)
[  265.585137][ T5933] stb0899_attach: Driver disabled by Kconfig
[  265.597312][ T5933] az6027: no front-end attached
[  265.597312][ T5933] 
[  265.614210][ T6161] usb 3-1: USB disconnect, device number 100
[  265.625541][ T5933] az6027: usb out operation failed. (-71)
[  265.641054][ T5933] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  265.695504][ T5933] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25
[  265.746353][ T5933] dvb-usb: schedule remote query interval to 400 msecs.
[  265.755583][ T5933] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  265.782558][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.809220][ T5933] usb 7-1: USB disconnect, device number 12
[  265.810417][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.880733][ T5933] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  266.156499][ T9131] netlink: 'syz.6.856': attribute type 41 has an invalid length.
[  266.164909][ T9131] netlink: 40 bytes leftover after parsing attributes in process `syz.6.856'.
[  266.505062][ T5939] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  266.635841][ T5939] usb 3-1: device descriptor read/64, error -71
[  266.884942][ T5939] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  266.938152][ T9153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.948285][ T9153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.957960][ T9153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.966754][ T9153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.024905][ T5939] usb 3-1: device descriptor read/64, error -71
[  267.145201][ T5939] usb usb3-port1: attempt power cycle
[  267.255016][    T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  267.404978][    T9] usb 7-1: Using ep0 maxpacket: 8
[  267.411990][    T9] usb 7-1: config 27 has an invalid interface number: 207 but max is 0
[  267.420495][    T9] usb 7-1: config 27 has no interface number 0
[  267.426809][    T9] usb 7-1: config 27 interface 207 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  267.437954][    T9] usb 7-1: config 27 interface 207 has no altsetting 0
[  267.447574][    T9] usb 7-1: New USB device found, idVendor=041e, idProduct=405f, bcdDevice=d1.ca
[  267.456842][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.464943][    T9] usb 7-1: Product: syz
[  267.469135][    T9] usb 7-1: Manufacturer: syz
[  267.473745][    T9] usb 7-1: SerialNumber: syz
[  267.504963][ T5939] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  267.525571][ T5939] usb 3-1: device descriptor read/8, error -71
[  267.691996][    T9] gspca_main: ov519-2.14.0 probing 041e:405f
[  267.699340][    T9] ov519 7-1:27.207: reg_w 5a failed -71
[  267.756585][ T9161] fuse: Bad value for 'fd'
[  267.776164][ T5939] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  267.797154][ T5939] usb 3-1: device descriptor read/8, error -71
[  267.915833][ T5939] usb usb3-port1: unable to enumerate USB device
[  268.183297][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.868'.
[  268.192224][ T9170] openvswitch: netlink: Flow actions attr not present in new flow.
[  268.210942][   T30] audit: type=1326 audit(1775294722.497:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.4.868" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31f539c819 code=0x0
[  268.439501][ T9178] netlink: 'syz.6.870': attribute type 2 has an invalid length.
[  269.299592][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'.
[  270.022933][ T9195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.038425][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.040070][ T9195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.049043][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.403653][ T9210] tmpfs: Unknown parameter 'ypo~
[  270.403653][ T9210] prefer'
[  270.470452][ T9212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.479738][ T9212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.540477][ T9217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.549745][ T9217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.675096][ T5933] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  270.824932][ T5933] usb 3-1: Using ep0 maxpacket: 16
[  270.831742][ T5933] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  270.850013][ T5933] usb 3-1: config 0 interface 0 has no altsetting 0
[  270.857472][ T5933] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00
[  270.866572][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.877796][ T5933] usb 3-1: config 0 descriptor??
[  271.090359][ T9209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.106273][ T9209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.336834][ T5933] elecom 0003:056E:011C.0014: unknown main item tag 0x0
[  271.358468][ T5933] elecom 0003:056E:011C.0014: unknown main item tag 0x0
[  271.374901][ T5933] elecom 0003:056E:011C.0014: unknown main item tag 0x0
[  271.392207][ T5933] elecom 0003:056E:011C.0014: unknown main item tag 0x0
[  271.402336][ T5933] elecom 0003:056E:011C.0014: unknown main item tag 0x0
[  271.422680][ T5933] elecom 0003:056E:011C.0014: unknown main item tag 0x0
[  271.433065][ T5933] elecom 0003:056E:011C.0014: unknown main item tag 0x0
[  271.456080][ T5933] elecom 0003:056E:011C.0014: unknown main item tag 0x0
[  271.474282][ T5933] elecom 0003:056E:011C.0014: unknown main item tag 0x0
[  271.486027][ T5933] elecom 0003:056E:011C.0014: unknown main item tag 0x0
[  271.513327][ T5933] elecom 0003:056E:011C.0014: hidraw0: USB HID v0.00 Device [HID 056e:011c] on usb-dummy_hcd.2-1/input0
[  271.613628][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.879'.
[  271.696280][ T5915] usb 3-1: USB disconnect, device number 105
[  271.954141][ T9231] could not allocate digest TFM handle cryptd(blake2b-160)
[  272.051721][ T9249] fuse: Bad value for 'fd'
[  272.124202][ T9252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.151256][ T9252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.279439][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'.
[  272.728010][ T5915] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  272.822937][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.831938][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.885035][ T5915] usb 3-1: Using ep0 maxpacket: 32
[  272.892274][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short
[  272.901553][ T5915] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  272.918415][ T5915] usb 3-1: New USB device found, idVendor=0499, idProduct=1037, bcdDevice= 0.40
[  272.927674][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.936828][ T5915] usb 3-1: Product: syz
[  272.941285][ T5915] usb 3-1: Manufacturer: syz
[  272.952492][ T5915] usb 3-1: SerialNumber: syz
[  273.141897][ T9289] netlink: 88 bytes leftover after parsing attributes in process `syz.4.905'.
[  273.364561][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'.
[  273.390296][ T5915] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  273.409219][ T5915] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[  273.428033][ T5915] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  273.435919][ T5915] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2
[  273.449558][ T5915] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  273.455945][ T9291] netlink: 72 bytes leftover after parsing attributes in process `syz.4.906'.
[  273.496500][ T5915] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2
[  273.509003][ T5915] usb 3-1: USB disconnect, device number 106
[  273.540134][ T6182] udevd[6182]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  273.795990][ T1776] block nbd0: Possible stuck request ffff888027817000: control (read@0,1024B). Runtime 180 seconds
[  273.806852][ T1776] block nbd0: Possible stuck request ffff8880278171c0: control (read@1024,1024B). Runtime 180 seconds
[  273.818144][ T1776] block nbd0: Possible stuck request ffff888027817380: control (read@2048,1024B). Runtime 180 seconds
[  273.830092][ T1776] block nbd0: Possible stuck request ffff888027817540: control (read@3072,1024B). Runtime 180 seconds
[  274.847859][ T9313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.860115][ T9313] overlayfs: failed to clone upperpath
[  275.332060][ T9341] 9pnet_fd: p9_fd_create_tcp (9341): problem connecting socket to 127.0.0.1
[  275.704916][    T9] ov519 7-1:27.207: Can't determine sensor slave IDs
[  275.712188][    T9] ov519 7-1:27.207: OV519 Config failed
[  275.720869][    T9] ov519 7-1:27.207: probe with driver ov519 failed with error -22
[  275.740685][    T9] usb 7-1: USB disconnect, device number 13
[  276.001189][ T5939] IPVS: starting estimator thread 0...
[  276.046592][    T9] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  276.105078][ T9355] IPVS: using max 24 ests per chain, 57600 per kthread
[  276.207453][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  276.218992][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  276.230516][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  276.243987][    T9] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  276.256065][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.270145][    T9] usb 7-1: config 0 descriptor??
[  276.280604][ T9344] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  276.291231][ T9344] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  276.719471][    T9] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor
[  276.733471][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0015/input/input27
[  276.855955][    T9] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.20 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0
[  276.930656][ T9344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.963063][ T9344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.989122][    T9] usb 7-1: USB disconnect, device number 14
[  277.101734][ T9362] 9p: Bad value for 'rfdno'
[  277.302580][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.311773][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.549197][ T9378] syzkaller1: entered promiscuous mode
[  277.554751][ T9378] syzkaller1: entered allmulticast mode
[  278.079561][ T9392] netlink: 108 bytes leftover after parsing attributes in process `syz.3.936'.
[  278.088700][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'.
[  278.728406][ T9406] mkiss: ax0: crc mode is auto.
[  278.924966][ T5939] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  279.084950][ T5939] usb 7-1: Using ep0 maxpacket: 32
[  279.094884][    T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  279.095378][ T5939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.113977][ T5939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.127974][ T5939] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  279.137524][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.157417][ T5939] usb 7-1: config 0 descriptor??
[  279.174088][ T5939] usbhid 7-1:0.0: can't add hid device: -22
[  279.186774][ T5939] usbhid 7-1:0.0: probe with driver usbhid failed with error -22
[  279.245129][    T9] usb 3-1: Using ep0 maxpacket: 32
[  279.263142][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[  279.297529][    T9] usb 3-1: string descriptor 0 read error: -22
[  279.309383][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40
[  279.323765][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.418958][   T10] usb 7-1: USB disconnect, device number 15
[  279.602358][ T9419] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  279.802623][    T9] hid_parser_main: 30 callbacks suppressed
[  279.802650][    T9] apple 0003:05AC:027D.0016: unknown main item tag 0x0
[  279.815633][    T9] apple 0003:05AC:027D.0016: unknown main item tag 0x0
[  279.822638][    T9] apple 0003:05AC:027D.0016: unknown main item tag 0x0
[  279.837341][    T9] apple 0003:05AC:027D.0016: unknown main item tag 0x0
[  279.841483][ T9429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.844288][    T9] apple 0003:05AC:027D.0016: unknown main item tag 0x0
[  279.857865][ T9429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.860873][    T9] apple 0003:05AC:027D.0016: unknown main item tag 0x0
[  279.875798][    T9] apple 0003:05AC:027D.0016: unknown main item tag 0x0
[  279.879727][ T9429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.882909][    T9] apple 0003:05AC:027D.0016: unknown main item tag 0x0
[  279.894160][ T9429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.898373][    T9] apple 0003:05AC:027D.0016: unknown main item tag 0x0
[  279.913087][    T9] apple 0003:05AC:027D.0016: unknown main item tag 0x0
[  280.006191][    T9] apple 0003:05AC:027D.0016: hidraw0: USB HID vff.7f Device [HID 05ac:027d] on usb-dummy_hcd.2-1/input0
[  280.022701][    T9] usb 3-1: USB disconnect, device number 107
[  280.207797][ T9433] fido_id[9433]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  280.448903][ T9440] dlm: no locking on control device
[  280.460671][ T9440] dlm: no locking on control device
[  280.474224][ T9440] dlm: no locking on control device
[  280.624546][ T9444] netlink: 104 bytes leftover after parsing attributes in process `syz.4.951'.
[  280.703204][ T9448] pim6reg: entered allmulticast mode
[  280.726349][ T9448] pim6reg: left allmulticast mode
[  281.017908][ T5939] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  281.184926][ T5939] usb 3-1: Using ep0 maxpacket: 16
[  281.196998][ T5939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.224867][ T5939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.241794][ T5939] usb 3-1: config 0 interface 0 has no altsetting 0
[  281.248815][ T5939] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  281.258192][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.270250][ T5939] usb 3-1: config 0 descriptor??
[  281.294885][    T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  281.449451][    T9] usb 7-1: device descriptor read/64, error -71
[  281.494131][ T9448] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  281.704892][    T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  281.834983][    T9] usb 7-1: device descriptor read/64, error -71
[  281.922647][ T5939] usbhid 3-1:0.0: can't add hid device: -71
[  281.929963][ T5939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  281.941815][ T5939] usb 3-1: USB disconnect, device number 108
[  281.957092][    T9] usb usb7-port1: attempt power cycle
[  282.216024][ T9479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.226595][ T9479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.238570][ T9479] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512
[  282.314979][    T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  282.335525][    T9] usb 7-1: device descriptor read/8, error -71
[  282.510585][ T9491] kvm: kvm [9490]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x5
[  282.519783][ T9491] kvm: kvm [9490]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x5
[  282.532086][ T9491] kvm: kvm [9490]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x5
[  282.543845][ T9491] kvm: kvm [9490]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x5
[  282.552796][ T9491] kvm: kvm [9490]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x5
[  282.564019][ T9491] kvm_intel: kvm [9490]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x5
[  282.584909][    T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  282.606880][    T9] usb 7-1: device descriptor read/8, error -71
[  282.715476][    T9] usb usb7-port1: unable to enumerate USB device
[  282.885002][ T5843] usb 3-1: new full-speed USB device number 109 using dummy_hcd
[  282.972780][ T9500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.983335][ T9501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.059904][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  283.076121][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.104888][ T5843] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  283.122583][ T5843] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  283.132449][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.159365][ T5843] usb 3-1: config 0 descriptor??
[  283.222646][ T9512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.237216][ T9512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.596642][ T5843] hid-multitouch 0003:0457:07DA.0017: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0
[  283.868488][ T5843] usb 3-1: USB disconnect, device number 109
[  283.942004][ T9522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.950914][ T9522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.096063][ T9522] netlink: 128 bytes leftover after parsing attributes in process `syz.3.974'.
[  284.123547][ T9522] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  284.509226][ T9535] pim6reg1: entered promiscuous mode
[  284.510622][   T30] audit: type=1326 audit(1775294738.797:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.2.980" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92c879c819 code=0x0
[  284.515136][ T9535] pim6reg1: entered allmulticast mode
[  284.714482][ T9543] 9p: Bad value for 'rfdno'
[  284.878077][ T9551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.898917][ T9551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.119781][ T9551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.129064][ T9551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.194901][ T5843] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[  285.339218][ T9551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.347517][ T5843] usb 7-1: not running at top speed; connect to a high speed hub
[  285.352460][ T9551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.361733][ T5843] usb 7-1: config 2 has an invalid interface number: 195 but max is 0
[  285.372398][ T5843] usb 7-1: config 2 has no interface number 0
[  285.378585][ T5843] usb 7-1: config 2 interface 195 has no altsetting 0
[  285.405540][ T5843] usb 7-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=c8.6b
[  285.417482][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.426106][ T5843] usb 7-1: Product: syz
[  285.430457][ T5843] usb 7-1: Manufacturer: syz
[  285.435626][ T5843] usb 7-1: SerialNumber: syz
[  285.490152][ T9561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.517290][ T9561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.806696][ T5843] gspca_main: spca505-2.14.0 probing 041e:401d
[  285.818288][ T5843] gspca_spca505: reg write: error -71
[  285.828150][ T5843] spca505 7-1:2.195: probe with driver spca505 failed with error -5
[  285.839940][ T5843] usb 7-1: USB disconnect, device number 20
[  285.973719][ T9571] Invalid option length (0) for dns_resolver key
[  286.292461][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.302886][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.313185][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.322900][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.334276][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.356704][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.372949][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.383951][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.393554][ T5843] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  286.509217][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.995'.
[  286.534880][ T5843] usb 3-1: device descriptor read/64, error -71
[  286.653389][ T9591] netlink: 'syz.6.996': attribute type 1 has an invalid length.
[  286.686500][ T9591] netlink: 244 bytes leftover after parsing attributes in process `syz.6.996'.
[  286.786221][ T5843] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  286.936209][ T5843] usb 3-1: device descriptor read/64, error -71
[  286.964918][ T6161] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  287.045478][ T5843] usb usb3-port1: attempt power cycle
[  287.114970][ T6161] usb 7-1: Using ep0 maxpacket: 32
[  287.122141][ T6161] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 70, changing to 10
[  287.134259][ T6161] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid maxpacket 16960, setting to 1024
[  287.146170][ T6161] usb 7-1: config 0 interface 0 has no altsetting 0
[  287.152827][ T6161] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  287.162711][ T6161] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.173473][ T6161] usb 7-1: config 0 descriptor??
[  287.384942][ T5843] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  287.406863][ T5843] usb 3-1: device descriptor read/8, error -71
[  287.644918][ T5843] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  287.667109][ T5843] usb 3-1: device descriptor read/8, error -71
[  287.785259][ T5843] usb usb3-port1: unable to enumerate USB device
[  287.909493][ T9613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.922573][ T9613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.967003][ T6161] corsair-cpro 0003:1B1C:0C10.0018: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.6-1/input0
[  288.158976][ T9590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.168106][ T9590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.183786][ T6161] corsair-cpro 0003:1B1C:0C10.0018: probe with driver corsair-cpro failed with error -61
[  288.385411][ T6161] usb 7-1: USB disconnect, device number 21
[  288.753576][ T9620] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  288.934514][ T9623] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1008'.
[  288.986510][ T9625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.999985][ T9625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.525865][ T5933] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  289.719888][ T5933] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  289.739083][ T5933] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  289.764691][ T5933] usb 3-1: config 220 has no interface number 2
[  289.774217][ T5933] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  289.789213][ T5933] usb 3-1: config 220 interface 0 has no altsetting 0
[  289.800969][ T5933] usb 3-1: config 220 interface 76 has no altsetting 0
[  289.808521][ T5933] usb 3-1: config 220 interface 1 has no altsetting 0
[  289.820174][ T5933] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  289.835396][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.866629][ T5933] usb 3-1: Product: syz
[  289.871862][ T5933] usb 3-1: Manufacturer: syz
[  289.886058][ T5933] usb 3-1: SerialNumber: syz
[  290.177337][ T5843] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  290.213762][ T5933] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  290.221987][ T5933] uvcvideo 3-1:220.0: No valid video chain found.
[  290.228670][ T5933] usb 3-1: selecting invalid altsetting 0
[  290.257724][ T5933] usb 3-1: selecting invalid altsetting 0
[  290.272069][ T5933] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  290.293069][ T5933] usb 3-1: USB disconnect, device number 114
[  290.335328][ T5843] usb 7-1: Using ep0 maxpacket: 16
[  290.354003][ T5843] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.361461][ T9654] overlayfs: failed to get inode (-116)
[  290.374652][ T9654] overlayfs: failed to get inode (-116)
[  290.395378][ T5843] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.414186][ T5843] usb 7-1: config 0 interface 0 has no altsetting 0
[  290.424745][ T5843] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  290.453849][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.473315][ T5843] usb 7-1: config 0 descriptor??
[  290.515992][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'.
[  290.579211][ T9663] cgroup: Invalid name
[  290.757493][ T9667] kvm: pic: level sensitive irq not supported
[  290.757729][ T9667] kvm: pic: non byte read
[  290.777618][ T9667] kvm: pic: level sensitive irq not supported
[  290.777742][ T9667] kvm: pic: non byte read
[  290.895902][ T9646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.927809][ T9646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.961272][ T5843] mcp2221 0003:04D8:00DD.0019: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  291.379240][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.388419][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.657699][ T9694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1035'.
[  292.164938][ T5939] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  292.322050][ T5939] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  292.345362][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.368298][ T5939] usb 3-1: Product: syz
[  292.377840][ T5939] usb 3-1: Manufacturer: syz
[  292.382508][ T5939] usb 3-1: SerialNumber: syz
[  292.401753][ T5939] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  292.419752][ T6161] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  292.507087][ T9716] virt_wifi0 speed is unknown, defaulting to 1000
[  292.515044][ T9716] virt_wifi0 speed is unknown, defaulting to 1000
[  292.530117][ T9716] virt_wifi0 speed is unknown, defaulting to 1000
[  292.543738][ T9716] smbdirect: ib_dev[]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  292.562566][ T9716] smbdirect: ib_dev[]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  292.579607][ T9716] smbdirect: ib_dev[]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  292.596310][ T9716] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  292.619596][ T9716] infiniband : RDMA CMA: cma_listen_on_dev, error -98
[  292.706704][ T9716] virt_wifi0 speed is unknown, defaulting to 1000
[  292.724577][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 14
[  292.725647][ T9716] virt_wifi0 speed is unknown, defaulting to 1000
[  292.732181][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 2
[  292.743548][ T9716] virt_wifi0 speed is unknown, defaulting to 1000
[  292.746491][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 511
[  292.761031][ T5855] Bluetooth: hci5: hcon ffff888053b18000 sent 0 < count 255
[  292.771231][ T9716] virt_wifi0 speed is unknown, defaulting to 1000
[  292.793840][ T9716] virt_wifi0 speed is unknown, defaulting to 1000
[  292.802902][ T9716] virt_wifi0 speed is unknown, defaulting to 1000
[  292.867375][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1043'.
[  292.882148][ T5843] usb 7-1: USB disconnect, device number 22
[  292.894181][ T9726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.905835][ T9726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.046461][ T9702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.057825][ T9702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.068495][   T10] usb 3-1: USB disconnect, device number 115
[  293.235401][ T5843] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  293.397213][ T5843] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[  293.405454][ T5843] usb 7-1: can't read configurations, error -22
[  293.476373][ T6161] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  293.483567][ T6161] ath9k_htc: Failed to initialize the device
[  293.491947][   T10] usb 3-1: ath9k_htc: USB layer deinitialized
[  293.536144][ T5843] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  293.645302][ T9735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1046'.
[  293.700011][ T5843] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[  293.720111][ T5843] usb 7-1: can't read configurations, error -22
[  293.736217][ T5843] usb usb7-port1: attempt power cycle
[  294.098758][ T5843] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  294.116645][ T9750] x_tables: duplicate entry at hook 1
[  294.127674][ T5843] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[  294.138219][ T5843] usb 7-1: can't read configurations, error -22
[  294.264204][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'.
[  294.277749][ T5843] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  294.292804][ T9761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.303789][ T9761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.330813][ T5843] usb 7-1: config index 0 descriptor too short (expected 9, got 0)
[  294.343087][ T5843] usb 7-1: can't read configurations, error -22
[  294.359989][ T5843] usb usb7-port1: unable to enumerate USB device
[  294.514938][ T5939] usb 3-1: new full-speed USB device number 116 using dummy_hcd
[  294.550212][ T9767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.559361][ T9767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.667525][ T5939] usb 3-1: unable to get BOS descriptor or descriptor too short
[  294.675919][ T5939] usb 3-1: not running at top speed; connect to a high speed hub
[  294.685339][ T5939] usb 3-1: config 15 has an invalid interface number: 131 but max is 0
[  294.693802][ T5939] usb 3-1: config 15 has no interface number 0
[  294.700274][ T5939] usb 3-1: config 15 interface 131 has no altsetting 0
[  294.709472][ T5939] usb 3-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=ea.30
[  294.718858][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.727095][ T5939] usb 3-1: Product: syz
[  294.731396][ T5939] usb 3-1: Manufacturer: syz
[  294.736076][ T5939] usb 3-1: SerialNumber: syz
[  294.950433][ T5939] gspca_main: mr97310a-2.14.0 probing 093a:010f
[  294.956929][ T5939] gspca_mr97310a: reg write [21] error -22
[  294.962883][ T5939] mr97310a 3-1:15.131: probe with driver mr97310a failed with error -22
[  294.976109][ T5939] usb 3-1: USB disconnect, device number 116
[  295.598964][ T9777] comedi comedi4: comedi_config --init_data is deprecated
[  295.608371][ T9777] 9p: Bad value for 'wfdno'
[  295.884971][ T5933] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[  296.014943][ T5933] usb 3-1: device descriptor read/64, error -71
[  296.225053][ T5939] usb 7-1: new low-speed USB device number 27 using dummy_hcd
[  296.254971][ T5933] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  296.377427][ T5939] usb 7-1: unable to get BOS descriptor or descriptor too short
[  296.385282][ T5933] usb 3-1: device descriptor read/64, error -71
[  296.392759][ T5939] usb 7-1: config 4 has an invalid interface number: 112 but max is 0
[  296.401260][ T5939] usb 7-1: config 4 has no interface number 0
[  296.407593][ T5939] usb 7-1: config 4 interface 112 has no altsetting 0
[  296.495331][ T5933] usb usb3-port1: attempt power cycle
[  296.514924][ T9766] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  296.843100][ T5933] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  296.875583][ T5933] usb 3-1: device descriptor read/8, error -71
[  297.114980][ T5933] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[  297.124040][ T9790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.135323][ T9790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.147692][ T5933] usb 3-1: device descriptor read/8, error -71
[  297.159599][ T9790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.168700][ T9790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.256369][ T5933] usb usb3-port1: unable to enumerate USB device
[  299.013870][ T5939] usb 7-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40
[  299.026686][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.043744][ T5939] usb 7-1: can't set config #4, error -71
[  299.060249][ T5939] usb 7-1: USB disconnect, device number 27
[  299.085340][ T5952] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  299.254936][ T5952] usb 3-1: Using ep0 maxpacket: 8
[  299.267311][ T5952] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  299.293369][ T5952] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  299.310293][ T5952] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  299.323100][ T5952] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  299.338568][ T5952] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  299.349144][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.570472][ T5952] usb 3-1: GET_CAPABILITIES returned 0
[  299.589509][ T5952] usbtmc 3-1:16.0: can't read capabilities
[  299.777050][ T9805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.787045][ T9805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.798967][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'.
[  299.816973][ T9805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.828793][ T9805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.190601][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'.
[  300.559378][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1084'.
[  300.569647][ T9853] openvswitch: netlink: Flow key attr not present in new flow.
[  300.579660][ T9853] program syz.3.1084 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  300.736126][ T5855] Bluetooth: hci5: Invalid connection link type handle 0x00c9
[  300.814530][ T9868] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1089'.
[  300.824427][ T9868] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1089'.
[  300.835187][ T9868] netlink: 'syz.6.1089': attribute type 5 has an invalid length.
[  300.842970][ T9868] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1089'.
[  300.903670][ T9870] Invalid argument reading file caps for ./file0
[  300.969387][ T9872] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1091'.
[  300.984016][ T9872] .30ªX¹¦D: renamed from macvtap0 (while UP)
[  301.001812][ T9872] .30ªX¹¦D: entered allmulticast mode
[  301.007519][ T9872] veth0_macvtap: entered allmulticast mode
[  301.014098][ T9872] A link change request failed with some changes committed already. Interface .30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  301.039984][ T9874] syzkaller1: entered promiscuous mode
[  301.046191][ T9874] syzkaller1: entered allmulticast mode
[  301.190846][ T9881] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  301.198428][ T9881] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  301.210660][ T9881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.221755][ T9881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.344901][ T5915] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  301.476450][ T5915] usb 7-1: device descriptor read/64, error -71
[  301.718015][ T5915] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  301.723736][ T5952] usb 3-1: USB disconnect, device number 121
[  301.845871][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'.
[  301.857674][ T5915] usb 7-1: device descriptor read/64, error -71
[  301.877286][ T9887] netlink: 'syz.4.1098': attribute type 2 has an invalid length.
[  301.959286][ T9891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.966257][ T5915] usb usb7-port1: attempt power cycle
[  301.972224][ T9891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.002021][ T9893] netlink: 'syz.2.1101': attribute type 27 has an invalid length.
[  302.029346][ T9895] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1102'.
[  302.048246][ T9895] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1102'.
[  302.058826][ T9895] netlink: 'syz.4.1102': attribute type 5 has an invalid length.
[  302.328481][ T5915] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  302.356876][ T5915] usb 7-1: device descriptor read/8, error -71
[  302.374059][ T9910] usb usb1: usbfs: process 9910 (syz.2.1108) did not claim interface 0 before use
[  302.597576][ T5915] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  302.636834][ T5915] usb 7-1: device descriptor read/8, error -71
[  302.647829][ T9920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.661163][ T9920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.756147][ T5915] usb usb7-port1: unable to enumerate USB device
[  302.864929][ T5952] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  303.015117][ T5952] usb 3-1: Using ep0 maxpacket: 32
[  303.023125][ T5952] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  303.031944][ T5952] usb 3-1: config 0 has no interface number 0
[  303.038209][ T5952] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  303.050024][ T5952] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  303.059392][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.067486][ T5952] usb 3-1: Product: syz
[  303.071669][ T5952] usb 3-1: Manufacturer: syz
[  303.078725][ T5952] usb 3-1: SerialNumber: syz
[  303.089571][ T5952] usb 3-1: config 0 descriptor??
[  303.098619][ T5952] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  303.108551][ T5952] em28xx 3-1:0.132: Video interface 132 found:
[  303.390749][ T9936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  303.399254][ T9936] IPv6: NLM_F_CREATE should be set when creating new route
[  303.411017][ T9936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.427722][ T9936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.463193][ T9938] 9p: Bad value for 'wfdno'
[  303.491349][ T9936] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  303.502075][ T9936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.511639][ T5952] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  303.515634][ T9936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.876382][ T1776] block nbd0: Possible stuck request ffff888027817000: control (read@0,1024B). Runtime 210 seconds
[  303.887544][ T1776] block nbd0: Possible stuck request ffff8880278171c0: control (read@1024,1024B). Runtime 210 seconds
[  303.899490][ T1776] block nbd0: Possible stuck request ffff888027817380: control (read@2048,1024B). Runtime 210 seconds
[  303.910915][ T1776] block nbd0: Possible stuck request ffff888027817540: control (read@3072,1024B). Runtime 210 seconds
[  303.923948][ T5952] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  303.936890][ T5952] em28xx 3-1:0.132: board has no eeprom
[  303.994898][ T5952] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  304.006292][ T5952] em28xx 3-1:0.132: analog set to bulk mode.
[  304.012399][ T5933] em28xx 3-1:0.132: Registering V4L2 extension
[  304.039157][ T5952] usb 3-1: USB disconnect, device number 122
[  304.052667][ T5952] em28xx 3-1:0.132: Disconnecting em28xx
[  304.152137][ T5933] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  304.161754][ T5933] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  304.169980][ T5933] em28xx 3-1:0.132: No AC97 audio processor
[  304.184165][ T5933] usb 3-1: Decoder not found
[  304.198864][ T5933] em28xx 3-1:0.132: failed to create media graph
[  304.214908][ T5933] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  304.240176][ T5933] em28xx 3-1:0.132: Remote control support is not available for this card.
[  304.252399][ T5952] em28xx 3-1:0.132: Closing input extension
[  304.265051][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.280811][ T5952] em28xx 3-1:0.132: Freeing device
[  304.286299][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.302560][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.318006][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.564973][ T5915] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  304.636282][ T9957] tipc: Started in network mode
[  304.656439][ T9957] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[  304.697954][ T9957] tipc: Enabled bearer <udp:syz1>, priority 10
[  304.738493][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.749804][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.764047][ T5915] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  304.774478][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.786518][ T5915] usb 7-1: config 0 descriptor??
[  305.410687][ T5915] usbhid 7-1:0.0: can't add hid device: -71
[  305.418150][ T5915] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  305.428921][ T5915] usb 7-1: USB disconnect, device number 32
[  305.594933][ T5933] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  305.744873][ T5933] usb 3-1: Using ep0 maxpacket: 32
[  305.751965][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.763751][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.773622][ T5933] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  305.782788][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.794335][ T5933] usb 3-1: config 0 descriptor??
[  305.803196][ T5933] hub 3-1:0.0: USB hub found
[  305.817704][ T6161] tipc: Node number set to 4269801492
[  305.969068][ T9983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.006797][ T5933] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  306.276814][ T9994] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  306.293039][ T9994] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  306.308972][ T9994] bond0: (slave ipvlan1): Error -95 calling set_mac_address
[  306.393680][T10006] __nla_validate_parse: 2 callbacks suppressed
[  306.393807][T10006] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1139'.
[  306.614946][ T5933] usbhid 3-1:0.0: can't add hid device: -71
[  306.622582][ T5933] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  306.645771][ T5933] usb 3-1: USB disconnect, device number 123
[  306.715006][ T5843] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  306.874981][ T5843] usb 7-1: Using ep0 maxpacket: 8
[  306.881767][ T5843] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 179, changing to 7
[  306.893101][ T5843] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7
[  306.906824][ T5843] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  306.916128][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.924196][ T5843] usb 7-1: Product: syz
[  306.929138][ T5843] usb 7-1: Manufacturer: syz
[  306.934162][ T5843] usb 7-1: SerialNumber: syz
[  307.054915][ T5915] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  307.153138][ T5843] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  307.185068][ T5915] usb 3-1: device descriptor read/64, error -71
[  307.209707][ T5843] usb 7-1: USB disconnect, device number 33
[  307.244337][ T8137] udevd[8137]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  307.424894][ T5915] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  307.555083][ T5915] usb 3-1: device descriptor read/64, error -71
[  307.665612][ T5915] usb usb3-port1: attempt power cycle
[  307.691449][T10023] 8021q: VLANs not supported on syzkaller1
[  307.795599][T10023] syzkaller1: left promiscuous mode
[  307.801158][T10023] syzkaller1: left allmulticast mode
[  308.004992][ T5915] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  308.026615][ T5915] usb 3-1: device descriptor read/8, error -71
[  308.074052][ T5952] kernel read not supported for file /newroot/79 (pid: 5952 comm: kworker/1:6)
[  308.275379][ T5915] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  308.295570][ T5915] usb 3-1: device descriptor read/8, error -71
[  308.325021][ T5952] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  308.405696][ T5915] usb usb3-port1: unable to enumerate USB device
[  308.410577][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1148'.
[  308.484964][ T5952] usb 7-1: Using ep0 maxpacket: 16
[  308.496472][ T5952] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  308.515260][ T5952] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  308.529528][ T5952] usb 7-1: config 0 has no interface number 0
[  308.536754][ T5952] usb 7-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  308.551793][ T5952] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  308.561307][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  308.570044][ T5952] usb 7-1: Product: syz
[  308.575339][ T5952] usb 7-1: SerialNumber: syz
[  308.583376][ T5952] usb 7-1: config 0 descriptor??
[  308.599058][ T5952] usbhid 7-1:0.8: couldn't find an input interrupt endpoint
[  308.659137][T10044] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  308.669700][T10044] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  308.683806][T10044] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  308.693862][T10044] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  308.707626][T10044] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  308.718260][T10044] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  308.729890][T10044] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  308.739961][T10044] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  308.749672][T10044] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1)
[  308.802272][ T5915] usb 7-1: USB disconnect, device number 34
[  309.114889][ T5933] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  309.244939][ T5933] usb 3-1: device descriptor read/64, error -71
[  309.484920][ T5933] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  309.585119][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'.
[  309.614891][ T5933] usb 3-1: device descriptor read/64, error -71
[  309.735598][ T5933] usb usb3-port1: attempt power cycle
[  310.085002][ T5933] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  310.117051][ T5933] usb 3-1: device descriptor read/8, error -71
[  310.384985][ T5933] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  310.406043][ T5933] usb 3-1: device descriptor read/8, error -71
[  310.415432][ T5915] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  310.525813][ T5933] usb usb3-port1: unable to enumerate USB device
[  310.564952][ T5915] usb 7-1: Using ep0 maxpacket: 32
[  310.572121][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  310.583124][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  310.592933][ T5915] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  310.602093][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.611998][ T5915] usb 7-1: config 0 descriptor??
[  310.621631][ T5915] hub 7-1:0.0: USB hub found
[  310.738145][T10062] overlayfs: failed to clone lowerpath
[  310.738299][T10064] overlayfs: failed to clone lowerpath
[  310.799048][T10067] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1159'.
[  310.822127][ T5915] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  311.433085][ T5915] usbhid 7-1:0.0: can't add hid device: -71
[  311.441651][ T5915] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  311.465561][ T5915] usb 7-1: USB disconnect, device number 35
[  311.876739][ T5933] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  312.038233][ T5933] usb 7-1: device descriptor read/64, error -71
[  312.265168][ T5939] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  312.284905][ T5933] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  312.414913][ T5933] usb 7-1: device descriptor read/64, error -71
[  312.422552][ T5939] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  312.434368][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.451218][ T5939] usb 3-1: config 0 descriptor??
[  312.459388][ T5939] cp210x 3-1:0.0: cp210x converter detected
[  312.525787][ T5933] usb usb7-port1: attempt power cycle
[  312.863335][ T5939] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  312.864304][T10073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.871345][ T5933] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  312.884318][T10073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.907427][ T5939] usb 3-1: cp210x converter now attached to ttyUSB0
[  312.917432][ T5933] usb 7-1: device descriptor read/8, error -71
[  313.103310][ T5843] usb 3-1: USB disconnect, device number 6
[  313.120271][ T5843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  313.136608][ T5843] cp210x 3-1:0.0: device disconnected
[  313.165649][ T5933] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  313.188688][ T5933] usb 7-1: device descriptor read/8, error -71
[  313.305319][ T5933] usb usb7-port1: unable to enumerate USB device
[  313.596618][ T5933] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  313.735569][ T5933] usb 7-1: device descriptor read/64, error -71
[  313.908659][T10100] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1169'.
[  313.990362][ T5933] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  314.126990][ T5933] usb 7-1: device descriptor read/64, error -71
[  314.231319][T10116] overlayfs: conflicting options: userxattr,metacopy=on
[  314.257379][ T5933] usb usb7-port1: attempt power cycle
[  314.411062][   T30] audit: type=1326 audit(1775294768.697:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.4.1175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31f539c819 code=0x0
[  314.462668][T10127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1174'.
[  314.489728][T10127] netlink: 'syz.2.1174': attribute type 63 has an invalid length.
[  314.505034][T10127] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1174'.
[  314.526487][T10127] gretap0: entered allmulticast mode
[  314.535659][T10127] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  314.615057][ T5933] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  314.655919][ T5933] usb 7-1: device descriptor read/8, error -71
[  314.904946][ T5933] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  314.928087][ T5933] usb 7-1: device descriptor read/8, error -71
[  314.954950][ T5939] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  315.035366][ T5933] usb usb7-port1: unable to enumerate USB device
[  315.085110][ T5939] usb 3-1: device descriptor read/64, error -71
[  315.345765][ T5939] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[  315.504886][ T5939] usb 3-1: device descriptor read/64, error -71
[  315.625334][ T5939] usb usb3-port1: attempt power cycle
[  315.964949][ T5939] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  315.985432][ T5939] usb 3-1: device descriptor read/8, error -71
[  316.225004][ T5939] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[  316.255586][ T5939] usb 3-1: device descriptor read/8, error -71
[  316.375540][ T5939] usb usb3-port1: unable to enumerate USB device
[  316.665001][ T6161] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  316.838813][ T6161] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  316.849132][ T6161] usb 7-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  316.862333][ T6161] usb 7-1: config 2 interface 0 has no altsetting 0
[  316.871635][ T6161] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  316.880852][ T6161] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.889052][ T6161] usb 7-1: Product: syz
[  316.893303][ T6161] usb 7-1: Manufacturer: syz
[  316.898744][ T6161] usb 7-1: SerialNumber: syz
[  317.132467][ T6161] ims_pcu 7-1:2.0: probe with driver ims_pcu failed with error -22
[  317.146078][ T6161] usb 7-1: USB disconnect, device number 44
[  317.320017][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  317.928712][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'.
[  318.085738][ T5843] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  318.287236][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  318.297549][ T5843] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  318.306786][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.317447][ T5843] usb 7-1: config 0 descriptor??
[  318.326140][ T5843] pwc: Askey VC010 type 2 USB webcam detected.
[  318.384884][ T5933] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  318.526267][T10197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.535222][T10215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.535770][T10197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.546741][ T5933] usb 3-1: Using ep0 maxpacket: 8
[  318.555555][T10215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.560568][ T5933] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  318.574521][ T5933] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  318.584462][ T5933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  318.595988][ T5933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  318.606350][ T5933] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  318.619594][ T5933] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  318.628853][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.795609][ T5843] pwc: recv_control_msg error -32 req 02 val 2b00
[  318.802933][ T5843] pwc: recv_control_msg error -32 req 02 val 2700
[  318.810589][ T5843] pwc: recv_control_msg error -32 req 02 val 2c00
[  318.817717][ T5843] pwc: recv_control_msg error -32 req 04 val 1000
[  318.828251][ T5843] pwc: recv_control_msg error -32 req 04 val 1300
[  318.835970][ T5843] pwc: recv_control_msg error -32 req 04 val 1400
[  318.843107][ T5843] pwc: recv_control_msg error -32 req 02 val 2000
[  318.851259][ T5843] pwc: recv_control_msg error -32 req 02 val 2100
[  318.858394][ T5843] pwc: recv_control_msg error -32 req 04 val 1500
[  318.866297][ T5933] usb 3-1: usb_control_msg returned -32
[  318.866401][ T5843] pwc: recv_control_msg error -32 req 02 val 2500
[  318.872162][ T5933] usbtmc 3-1:16.0: can't read capabilities
[  318.879477][ T5843] pwc: recv_control_msg error -32 req 02 val 2400
[  318.891841][ T5843] pwc: recv_control_msg error -32 req 02 val 2600
[  318.899455][ T5843] pwc: recv_control_msg error -32 req 02 val 2900
[  318.907172][ T5843] pwc: recv_control_msg error -32 req 02 val 2800
[  318.915244][ T5843] pwc: recv_control_msg error -32 req 04 val 1100
[  318.922250][ T5843] pwc: recv_control_msg error -32 req 04 val 1200
[  318.931399][ T5843] pwc: Registered as video103.
[  318.940232][ T5843] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input28
[  319.268111][T10221] virt_wifi0 speed is unknown, defaulting to 1000
[  319.574511][T10226] usbtmc 3-1:16.0: usb_control_msg returned -32
[  319.590202][T10219] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  319.778200][ T5933] usb 3-1: USB disconnect, device number 11
[  320.026032][ T5933] usb 7-1: USB disconnect, device number 45
[  320.110948][ T5843] usb 4-1: USB disconnect, device number 65
[  320.256708][   T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  320.271554][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  320.283660][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  320.294522][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  320.306539][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  320.373296][T10234] virt_wifi0 speed is unknown, defaulting to 1000
[  320.475009][ T5933] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  320.496524][T10234] chnl_net:caif_netlink_parms(): no params data found
[  320.611268][T10234] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.615113][ T5952] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  320.618619][T10234] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.633350][ T5933] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  320.641800][T10234] bridge_slave_0: entered allmulticast mode
[  320.643131][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.659121][T10234] bridge_slave_0: entered promiscuous mode
[  320.668040][ T5933] usb 7-1: config 0 descriptor??
[  320.674147][T10234] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.681377][ T5933] cp210x 7-1:0.0: cp210x converter detected
[  320.705658][T10234] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.713372][T10234] bridge_slave_1: entered allmulticast mode
[  320.721619][T10234] bridge_slave_1: entered promiscuous mode
[  320.763124][T10234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.775608][ T5952] usb 3-1: Using ep0 maxpacket: 32
[  320.782694][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.797772][T10234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.806959][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.826604][ T5952] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  320.854913][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.866323][T10234] team0: Port device team_slave_0 added
[  320.873613][ T5952] usb 3-1: config 0 descriptor??
[  320.883316][T10234] team0: Port device team_slave_1 added
[  320.889342][ T5933] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -32
[  320.904901][ T5933] cp210x 7-1:0.0: querying part number failed
[  320.931686][ T5933] usb 7-1: cp210x converter now attached to ttyUSB0
[  320.957334][T10234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.964392][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  320.990414][T10234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.004491][T10234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.011884][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  321.039086][T10234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.091714][T10234] hsr_slave_0: entered promiscuous mode
[  321.098440][T10234] hsr_slave_1: entered promiscuous mode
[  321.106886][T10234] debugfs: 'hsr0' already exists in 'hsr'
[  321.112672][T10234] Cannot create hsr debugfs directory
[  321.312118][ T5952] hid_parser_main: 4005 callbacks suppressed
[  321.312142][ T5952] ft260 0003:0403:6030.001A: unknown main item tag 0x0
[  321.335006][ T5952] ft260 0003:0403:6030.001A: unknown main item tag 0x0
[  321.373532][T10234] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  321.383790][T10234] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  321.394720][T10234] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  321.406669][T10234] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  321.498158][T10234] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.513907][ T5952] ft260 0003:0403:6030.001A: chip code: 0000 0000
[  321.523927][ T5952] ft260 0003:0403:6030.001A: failed to retrieve system status
[  321.532466][ T5952] ft260 0003:0403:6030.001A: probe with driver ft260 failed with error -5
[  321.533655][T10234] 8021q: adding VLAN 0 to HW filter on device team0
[  321.558594][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.565769][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.581419][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.588643][ T6044] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.736293][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'.
[  321.754440][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'.
[  321.812094][T10234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.126909][T10256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.136037][T10256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.173247][T10234] veth0_vlan: entered promiscuous mode
[  322.193965][T10234] veth1_vlan: entered promiscuous mode
[  322.247383][T10234] veth0_macvtap: entered promiscuous mode
[  322.261263][T10234] veth1_macvtap: entered promiscuous mode
[  322.292048][T10234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.309542][T10234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.322931][T10281] C: renamed from lo (while UP)
[  322.331164][T10281] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  322.352824][  T143] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.362701][ T5855] Bluetooth: hci6: command tx timeout
[  322.365225][  T143] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.381438][  T143] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.390496][  T143] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.529392][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.539526][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.567794][ T6051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.577010][ T6051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.176710][ T5915] usb 7-1: USB disconnect, device number 46
[  323.188666][ T5915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  323.202002][ T5915] cp210x 7-1:0.0: device disconnected
[  323.391123][ T5952] usb 3-1: USB disconnect, device number 12
[  323.797953][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 14
[  323.805720][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 2
[  323.813004][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 511
[  323.821973][ T5855] Bluetooth: hci5: hcon ffff888053b18000 sent 0 < count 255
[  323.882400][T10318] netlink: 'syz.6.1227': attribute type 10 has an invalid length.
[  323.892274][T10318] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1227'.
[  323.905589][ T5915] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  324.069989][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  324.089485][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.100989][ T5915] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  324.116086][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.133447][ T5915] usb 3-1: config 0 descriptor??
[  324.435495][ T5855] Bluetooth: hci6: command tx timeout
[  324.495380][T10340] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1229'.
[  324.620202][T10348] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1230'.
[  324.839177][T10359] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in;
[  324.839177][T10359]    program syz.6.1232 not setting count and/or reply_len properly
[  325.104913][ T5952] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  325.254996][ T5952] usb 7-1: Using ep0 maxpacket: 32
[  325.262035][ T5952] usb 7-1: config 4 has an invalid interface number: 228 but max is 0
[  325.270666][ T5952] usb 7-1: config 4 has no interface number 0
[  325.277261][ T5952] usb 7-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30
[  325.288435][ T5952] usb 7-1: config 4 interface 228 altsetting 12 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  325.301582][ T5952] usb 7-1: config 4 interface 228 altsetting 12 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  325.312968][ T5952] usb 7-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  325.328324][ T5952] usb 7-1: config 4 interface 228 has no altsetting 0
[  325.339635][ T5952] usb 7-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  325.349000][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.357075][ T5952] usb 7-1: Product: syz
[  325.361272][ T5952] usb 7-1: Manufacturer: syz
[  325.365988][ T5952] usb 7-1: SerialNumber: syz
[  325.578380][T10359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.589340][T10359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.736366][ T5855] Bluetooth: hci6: hcon ffff88807d874000 sent 1 < count 14
[  325.746718][ T5855] Bluetooth: hci6: hcon ffff88807d874000 sent 0 < count 2
[  325.754207][ T5855] Bluetooth: hci6: hcon ffff88807d874000 sent 0 < count 511
[  325.762779][ T5855] Bluetooth: hci6: hcon ffff888036c04000 sent 1 < count 255
[  325.834541][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  326.129560][T10378] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1238'.
[  326.166469][T10378] netlink: 'syz.4.1238': attribute type 6 has an invalid length.
[  326.515203][ T5855] Bluetooth: hci6: command tx timeout
[  326.673783][ T5915] usbhid 3-1:0.0: can't add hid device: -71
[  326.688154][ T5915] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  326.699508][ T5915] usb 3-1: USB disconnect, device number 13
[  327.294869][ T5915] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  327.445158][ T5915] usb 3-1: Using ep0 maxpacket: 32
[  327.455595][ T5915] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  327.465217][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.473250][ T5915] usb 3-1: Product: syz
[  327.478146][ T5915] usb 3-1: Manufacturer: syz
[  327.482800][ T5915] usb 3-1: SerialNumber: syz
[  327.491694][ T5915] usb 3-1: config 0 descriptor??
[  327.703610][ T5915] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: failure sending bit rate
[  327.714387][ T5915] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71
[  327.733158][ T5915] usb 3-1: USB disconnect, device number 14
[  327.802577][ T5952] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  327.810326][ T5952] usb 7-1: invalid MIDI out EP 0
[  327.939081][T10407] netlink: 'syz.2.1248': attribute type 3 has an invalid length.
[  327.941367][ T5952] snd-usb-audio 7-1:4.228: probe with driver snd-usb-audio failed with error -22
[  327.956632][T10407] netlink: 'syz.2.1248': attribute type 1 has an invalid length.
[  327.956655][T10407] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1248'.
[  327.956673][T10407] NCSI netlink: No device for ifindex 0
[  328.030382][ T5952] usb 7-1: USB disconnect, device number 47
[  328.132805][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  328.266829][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 14
[  328.277372][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 2
[  328.284574][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 511
[  328.292475][ T5855] Bluetooth: hci5: hcon ffff888053b18000 sent 0 < count 255
[  328.422414][   T30] audit: type=1326 audit(1775294782.707:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10428 comm="syz.6.1256" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2a899c819 code=0x0
[  328.603828][ T5855] Bluetooth: hci6: command tx timeout
[  328.863400][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 14
[  328.871204][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 2
[  328.880504][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 511
[  328.888773][ T5855] Bluetooth: hci5: hcon ffff888053b18000 sent 0 < count 255
[  329.138265][ T5952] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  329.751968][T10460] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96
[  330.601775][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 14
[  330.609404][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 2
[  330.616764][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 511
[  330.624860][ T5855] Bluetooth: hci5: hcon ffff888053b18000 sent 0 < count 255
[  330.892799][ T6056] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.024005][ T6056] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.134282][ T6056] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.294476][ T6056] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.330646][   T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  331.347836][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  331.358082][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  331.372147][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  331.380392][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  331.534517][T10482] virt_wifi0 speed is unknown, defaulting to 1000
[  331.710434][T10493] vivid-003: disconnect
[  331.754366][T10482] chnl_net:caif_netlink_parms(): no params data found
[  331.862246][T10482] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.870158][T10482] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.878062][T10482] bridge_slave_0: entered allmulticast mode
[  331.886113][T10482] bridge_slave_0: entered promiscuous mode
[  331.895737][T10482] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.902962][T10482] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.910501][T10482] bridge_slave_1: entered allmulticast mode
[  331.918575][T10482] bridge_slave_1: entered promiscuous mode
[  331.958229][T10482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.971571][T10482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.992008][ T5933] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  332.014086][T10482] team0: Port device team_slave_0 added
[  332.022876][T10482] team0: Port device team_slave_1 added
[  332.064753][T10482] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.072663][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  332.116301][T10482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.140052][T10482] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.147168][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  332.178103][T10482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.189393][ T5933] usb 7-1: unable to get BOS descriptor or descriptor too short
[  332.209638][ T5933] usb 7-1: config 192 has an invalid interface number: 40 but max is 1
[  332.230677][ T5933] usb 7-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config
[  332.251997][ T5933] usb 7-1: config 192 has 1 interface, different from the descriptor's value: 2
[  332.270719][ T5933] usb 7-1: config 192 has no interface number 0
[  332.289133][T10482] hsr_slave_0: entered promiscuous mode
[  332.295122][ T5933] usb 7-1: too many endpoints for config 192 interface 40 altsetting 217: 207, using maximum allowed: 30
[  332.308583][ T5933] usb 7-1: config 192 interface 40 altsetting 217 has 0 endpoint descriptors, different from the interface descriptor's value: 207
[  332.323352][T10482] hsr_slave_1: entered promiscuous mode
[  332.329665][T10482] debugfs: 'hsr0' already exists in 'hsr'
[  332.335743][T10482] Cannot create hsr debugfs directory
[  332.341163][ T5933] usb 7-1: config 192 interface 40 has no altsetting 0
[  332.358992][ T5933] usb 7-1: New USB device found, idVendor=125f, idProduct=a94a, bcdDevice= 1.60
[  332.376995][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.397256][ T5933] usb 7-1: Product: syz
[  332.401500][ T5933] usb 7-1: Manufacturer: syz
[  332.406107][ T5933] usb 7-1: SerialNumber: syz
[  332.649248][T10492] vivid-003: reconnect
[  332.650646][ T5933] usb-storage 7-1:192.40: USB Mass Storage device detected
[  332.692319][ T5933] usb-storage 7-1:192.40: Quirks match for vid 125f pid a94a: 2000000
[  332.805044][ T5933] usb 7-1: USB disconnect, device number 48
[  332.862848][ T6056] bridge_slave_1: left allmulticast mode
[  332.884248][ T6056] bridge_slave_1: left promiscuous mode
[  332.899285][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.922830][ T6056] bridge_slave_0: left allmulticast mode
[  332.935561][ T6056] bridge_slave_0: left promiscuous mode
[  332.947899][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.458961][ T5843] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  333.599253][ T6056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  333.608054][ T5843] usb 3-1: device descriptor read/64, error -71
[  333.627865][ T6056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  333.647859][ T5855] Bluetooth: hci6: command tx timeout
[  333.655498][ T6056] bond0 (unregistering): Released all slaves
[  333.714271][T10482] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  333.793784][T10482] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  333.873738][ T5843] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  333.918750][T10537] fuse: Unknown parameter 'f†ˆ0x0000000000000007'
[  333.949213][T10482] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  333.996748][T10482] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  334.041228][ T5843] usb 3-1: device descriptor read/64, error -71
[  334.064961][T10545] capability: warning: `syz.6.1289' uses deprecated v2 capabilities in a way that may be insecure
[  334.185482][ T5843] usb usb3-port1: attempt power cycle
[  334.250364][ T6056] hsr_slave_0: left promiscuous mode
[  334.258754][ T6056] hsr_slave_1: left promiscuous mode
[  334.265081][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  334.282335][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0
[  334.291357][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  334.299696][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1
[  334.335798][ T1776] block nbd0: Possible stuck request ffff888027817000: control (read@0,1024B). Runtime 240 seconds
[  334.347031][ T1776] block nbd0: Possible stuck request ffff8880278171c0: control (read@1024,1024B). Runtime 240 seconds
[  334.358400][ T1776] block nbd0: Possible stuck request ffff888027817380: control (read@2048,1024B). Runtime 240 seconds
[  334.374032][ T1776] block nbd0: Possible stuck request ffff888027817540: control (read@3072,1024B). Runtime 240 seconds
[  334.399061][ T6056] veth1_macvtap: left promiscuous mode
[  334.411762][ T6056] veth0_macvtap: left promiscuous mode
[  334.423197][ T6056] veth1_vlan: left promiscuous mode
[  334.431771][ T6056] veth0_vlan: left promiscuous mode
[  334.571147][ T5843] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  334.618388][ T5843] usb 3-1: device descriptor read/8, error -71
[  334.887261][ T5843] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  334.932397][ T5843] usb 3-1: device descriptor read/8, error -71
[  335.059851][ T5843] usb usb3-port1: unable to enumerate USB device
[  335.139128][ T6056] team0 (unregistering): Port device team_slave_1 removed
[  335.163695][ T6056] team0 (unregistering): Port device team_slave_0 removed
[  335.870314][ T5855] Bluetooth: hci6: command tx timeout
[  336.051319][T10482] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.176513][T10482] 8021q: adding VLAN 0 to HW filter on device team0
[  336.223231][  T143] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.230489][  T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.250577][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.257825][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.597619][ T5843] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  336.785335][ T5843] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  336.807906][ T5843] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  336.829551][ T5843] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  336.840482][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.869025][T10588] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  336.883986][T10482] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.889023][ T5843] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  336.891118][ T6161] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  337.171710][ T5843] usb 7-1: USB disconnect, device number 49
[  337.476221][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 14
[  337.483679][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 2
[  337.491324][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 511
[  337.499732][ T5855] Bluetooth: hci5: hcon ffff888053b18000 sent 0 < count 255
[  337.590314][T10632] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1302'.
[  337.761019][T10482] veth0_vlan: entered promiscuous mode
[  337.789507][T10482] veth1_vlan: entered promiscuous mode
[  337.859277][T10482] veth0_macvtap: entered promiscuous mode
[  337.875825][T10482] veth1_macvtap: entered promiscuous mode
[  337.895254][T10640] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  337.940341][T10482] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.983693][T10482] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.017161][  T143] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.049557][  T143] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.069707][  T143] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.096775][ T5855] Bluetooth: hci6: command tx timeout
[  338.126424][  T143] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.459733][ T6044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.473663][ T6044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.571323][ T6051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.593341][ T6051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.020403][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 14
[  339.028761][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 2
[  339.036508][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 511
[  339.044844][ T5855] Bluetooth: hci5: hcon ffff888053b18000 sent 0 < count 255
[  339.278810][T10681] netlink: 'syz.4.1313': attribute type 4 has an invalid length.
[  339.342979][T10681] netlink: 'syz.4.1313': attribute type 4 has an invalid length.
[  339.578999][ T5843] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  339.762957][ T5843] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  339.779545][ T5843] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  339.807509][ T5843] usb 9-1: config 0 interface 0 has no altsetting 0
[  339.815976][ T5843] usb 9-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  339.837820][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.864999][ T5843] usb 9-1: config 0 descriptor??
[  339.880710][T10682] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  340.262264][ T6161] usb 3-1: device descriptor read/64, error -71
[  340.315969][ T5855] Bluetooth: hci6: command tx timeout
[  340.335077][T10679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.345877][T10679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.518723][ T6161] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  340.578000][T10679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.596298][T10679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.635116][ T5843] input: HID 0458:5012 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5012.001B/input/input29
[  340.691797][ T6161] usb 3-1: Using ep0 maxpacket: 32
[  340.702485][ T6161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.715731][ T6161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.726395][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 14
[  340.727149][ T6161] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  340.734487][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 2
[  340.751223][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 511
[  340.758915][ T6161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.768045][ T5855] Bluetooth: hci5: hcon ffff888053b18000 sent 0 < count 255
[  340.769633][ T6161] usb 3-1: config 0 descriptor??
[  340.790673][ T5843] input: HID 0458:5012 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5012.001B/input/input30
[  340.836150][ T6161] hub 3-1:0.0: USB hub found
[  340.836715][ T5843] kye 0003:0458:5012.001B: input,hiddev0,hidraw0: USB HID v80.01 Device [HID 0458:5012] on usb-dummy_hcd.8-1/input0
[  340.897937][ T5843] usb 9-1: USB disconnect, device number 2
[  341.071866][ T6161] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  341.089127][T10712] fido_id[10712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[  341.465023][T10723] netlink: 'syz.6.1323': attribute type 11 has an invalid length.
[  341.718449][ T6161] usbhid 3-1:0.0: can't add hid device: -71
[  341.730032][ T6161] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  341.774411][ T6161] usb 3-1: USB disconnect, device number 21
[  341.856560][T10726] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  342.207415][ T5843] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  342.313980][ T6161] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  342.390874][ T5843] usb 7-1: config 1 has an invalid interface number: 93 but max is 0
[  342.399156][ T5843] usb 7-1: config 1 has no interface number 0
[  342.405472][ T5843] usb 7-1: config 1 interface 93 has no altsetting 0
[  342.412511][ T5843] usb 7-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02
[  342.421626][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.456267][ T6161] usb 3-1: device descriptor read/64, error -71
[  342.710967][ T6161] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  342.859115][ T6161] usb 3-1: device descriptor read/64, error -71
[  342.893577][ T5843] gl620a 7-1:1.93: probe with driver gl620a failed with error -22
[  342.913831][ T5843] usb 7-1: USB disconnect, device number 50
[  342.979079][ T6161] usb usb3-port1: attempt power cycle
[  343.336616][T10751] kvm: pic: non byte write
[  343.884875][ T5843] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  343.927670][   T10] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  344.048528][ T5843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.061561][ T5843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.072484][ T5843] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  344.083825][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.096014][ T5843] usb 9-1: config 0 descriptor??
[  344.102447][   T10] usb 7-1: Using ep0 maxpacket: 16
[  344.112584][   T10] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  344.124800][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.138291][   T10] usb 7-1: config 0 descriptor??
[  344.152624][   T10] gspca_main: sonixj-2.14.0 probing 0471:0327
[  344.385851][   T10] gspca_sonixj: reg_r err -71
[  344.393814][   T10] sonixj 7-1:0.0: probe with driver sonixj failed with error -71
[  344.406319][   T10] usb 7-1: USB disconnect, device number 51
[  344.542614][ T5843] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0
[  344.566391][ T5843] cp2112 0003:10C4:EA90.001C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0
[  344.650470][ T5843] cp2112 0003:10C4:EA90.001C: Part Number: 0x47 Device Version: 0xD0
[  344.692707][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 14
[  344.700514][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 2
[  344.707907][ T5855] Bluetooth: hci5: hcon ffff888033400000 sent 0 < count 511
[  344.715798][ T5855] Bluetooth: hci5: hcon ffff888053b18000 sent 0 < count 255
[  345.114889][T10823] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1354'.
[  345.151183][T10825] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1354'.
[  345.151340][T10821] netlink: 'syz.6.1353': attribute type 10 has an invalid length.
[  345.168901][T10821] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1353'.
[  345.179620][T10821] dummy0: entered promiscuous mode
[  345.207867][ T5843] cp2112 0003:10C4:EA90.001C: error setting SMBus config
[  345.234944][ T5843] cp2112 0003:10C4:EA90.001C: probe with driver cp2112 failed with error -71
[  345.253967][ T5843] usb 9-1: USB disconnect, device number 3
[  345.334214][T10832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.363634][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1356'.
[  345.372864][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1356'.
[  345.541998][T10840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1359'.
[  345.648306][   T29] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  345.820871][   T29] usb 3-1: Using ep0 maxpacket: 32
[  345.828861][   T29] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  345.838098][   T29] usb 3-1: config 0 has no interface number 0
[  345.845019][   T29] usb 3-1: config 0 interface 184 has no altsetting 0
[  345.858501][   T29] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  345.867971][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.880947][   T29] usb 3-1: Product: syz
[  345.885479][   T29] usb 3-1: Manufacturer: syz
[  345.890185][   T29] usb 3-1: SerialNumber: syz
[  345.897778][   T29] usb 3-1: config 0 descriptor??
[  345.916304][ T5843] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  346.075402][ T5843] usb 7-1: Using ep0 maxpacket: 8
[  346.075484][ T6161] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  346.084749][ T5843] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  346.098498][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.106549][ T5843] usb 7-1: Product: syz
[  346.110810][ T5843] usb 7-1: Manufacturer: syz
[  346.115422][ T5843] usb 7-1: SerialNumber: syz
[  346.123243][ T5843] usb 7-1: config 0 descriptor??
[  346.248689][ T6161] usb 9-1: config 0 has an invalid interface number: 35 but max is 0
[  346.268336][ T6161] usb 9-1: config 0 has no interface number 0
[  346.275369][ T6161] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10
[  346.293642][ T6161] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  346.309631][ T6161] usb 9-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[  346.326419][ T6161] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.339117][ T6161] usb 9-1: Product: syz
[  346.344345][   T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  346.349775][ T5843] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  346.355331][ T6161] usb 9-1: Manufacturer: syz
[  346.368948][   T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  346.379916][ T6161] usb 9-1: SerialNumber: syz
[  346.387906][   T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  346.401492][ T6161] usb 9-1: config 0 descriptor??
[  346.415345][ T6161] cypress_m8 9-1:0.35: Nokia CA-42 V2 Adapter converter detected
[  346.426480][   T29] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61
[  346.601915][ T5843] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  346.614438][ T5843] usb 7-1: USB disconnect, device number 52
[  346.640420][T10846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  346.651680][T10846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  346.677394][ T6161] usb 9-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0
[  346.694042][ T6161] usb 9-1: USB disconnect, device number 4
[  346.720348][ T6161] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0
[  346.731890][ T6161] cypress_m8 9-1:0.35: device disconnected
[  347.233626][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1366'.
[  347.582204][ T5843] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  347.710479][    T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  347.746177][ T5843] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  347.754896][ T5843] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  347.764005][ T5843] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  347.774694][ T5843] usb 7-1: config 220 has no interface number 2
[  347.781026][ T5843] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  347.794528][ T5843] usb 7-1: config 220 interface 0 has no altsetting 0
[  347.801858][ T5843] usb 7-1: config 220 interface 76 has no altsetting 0
[  347.808869][ T5843] usb 7-1: config 220 interface 1 has no altsetting 0
[  347.817867][ T5843] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  347.827041][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.835126][ T5843] usb 7-1: Product: syz
[  347.839514][ T5843] usb 7-1: Manufacturer: syz
[  347.845525][ T5843] usb 7-1: SerialNumber: syz
[  347.881519][    T9] usb 9-1: Using ep0 maxpacket: 32
[  347.889318][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  347.898613][    T9] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7
[  347.909803][    T9] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 137, changing to 7
[  347.921022][    T9] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  347.934005][    T9] usb 9-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[  347.943523][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.952532][    T9] usb 9-1: Product: syz
[  347.956839][    T9] usb 9-1: Manufacturer: syz
[  347.961491][    T9] usb 9-1: SerialNumber: syz
[  348.010189][   T31] INFO: task syz.0.510:7978 blocked for more than 143 seconds.
[  348.018728][   T31]       Tainted: G             L      syzkaller #0
[  348.026727][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  348.027329][T10875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1371'.
[  348.035619][   T31] task:syz.0.510       state:D stack:28088 pid:7978  tgid:7977  ppid:5841   task_flags:0x400140 flags:0x00080002
[  348.080750][   T31] Call Trace:
[  348.098222][   T31]  <TASK>
[  348.102335][ T5843] usb 7-1: selecting invalid altsetting 0
[  348.108455][   T31]  __schedule+0x165c/0x5520
[  348.113163][   T31]  ? __pfx___schedule+0x10/0x10
[  348.118709][ T5843] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  348.126136][   T31]  ? schedule+0x90/0x360
[  348.131175][ T5843] uvcvideo 7-1:220.0: No valid video chain found.
[  348.137815][   T31]  schedule+0x164/0x360
[  348.142036][   T31]  schedule_preempt_disabled+0x13/0x30
[  348.147562][   T31]  __mutex_lock+0x856/0x1420
[  348.153500][   T31]  ? __mutex_lock+0x5fc/0x1420
[  348.158548][   T31]  ? bdev_open+0xe0/0xd30
[  348.165872][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  348.172400][   T31]  ? __pfx_bd_prepare_to_claim+0x10/0x10
[  348.179494][ T5843] usb 7-1: selecting invalid altsetting 0
[  348.185554][   T31]  ? alloc_file_pseudo_noaccount+0x259/0x310
[  348.191784][ T5843] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  348.200104][   T31]  ? disk_block_events+0xab/0x120
[  348.212108][   T31]  ? bdev_open+0xbe/0xd30
[  348.217804][ T5843] usb 7-1: USB disconnect, device number 53
[  348.224199][    T9] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  348.231056][   T31]  bdev_open+0xe0/0xd30
[  348.240799][   T31]  bdev_file_open_by_dev+0x1be/0x240
[  348.260987][   T31]  setup_bdev_super+0x5a/0x5b0
[  348.271777][   T31]  get_tree_bdev_flags+0x389/0x4f0
[  348.287409][   T31]  ? __pfx_vxfs_fill_super+0x10/0x10
[  348.298308][   T31]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  348.319576][   T31]  vfs_get_tree+0x92/0x2a0
[  348.324239][   T31]  do_new_mount+0x341/0xd30
[  348.328780][   T31]  ? apparmor_capable+0x126/0x170
[  348.342661][   T31]  ? __pfx_do_new_mount+0x10/0x10
[  348.350209][   T31]  ? ns_capable+0x89/0xe0
[  348.358476][   T31]  ? user_path_at+0xd4/0x160
[  348.369023][   T31]  __se_sys_mount+0x31d/0x420
[  348.383718][   T31]  ? __pfx___se_sys_mount+0x10/0x10
[  348.389018][   T31]  ? __x64_sys_mount+0x20/0xc0
[  348.405198][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.414838][   T31]  do_syscall_64+0x15f/0xf80
[  348.426906][   T31]  ? trace_irq_disable+0x3b/0x140
[  348.433111][   T31]  ? clear_bhb_loop+0x40/0x90
[  348.448411][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.457055][   T31] RIP: 0033:0x7f2b35f9c819
[  348.469034][   T31] RSP: 002b:00007f2b36eb3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  348.490420][   T31] RAX: ffffffffffffffda RBX: 00007f2b36215fa0 RCX: 00007f2b35f9c819
[  348.508664][   T31] RDX: 0000200000000240 RSI: 0000200000000040 RDI: 0000200000000000
[  348.518460][   T31] RBP: 00007f2b36032c91 R08: 0000000000000000 R09: 0000000000000000
[  348.528277][   T31] R10: 00000000020080c4 R11: 0000000000000246 R12: 0000000000000000
[  348.552606][   T31] R13: 00007f2b36216038 R14: 00007f2b36215fa0 R15: 00007ffe24b8f4d8
[  348.565221][   T31]  </TASK>
[  348.568853][   T31] 
[  348.568853][   T31] Showing all locks held in the system:
[  348.573603][    T9] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71
[  348.585874][   T31] 5 locks held by kworker/0:0/9:
[  348.594524][    T9] usb 9-1: USB disconnect, device number 5
[  348.600715][   T31] 1 lock held by khungtaskd/31:
[  348.614337][   T31]  #0: ffffffff8e95d260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  348.631713][   T31] 2 locks held by getty/5597:
[  348.637317][   T31]  #0: ffff8880322fd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  348.665845][ T8137] udevd[8137]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  348.670712][   T31]  #1: 
[  348.686811][ T5843] usb 3-1: USB disconnect, device number 25
[  348.709653][   T31] ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  348.750461][   T31] 3 locks held by kworker/0:3/5843:
[  348.756870][   T31]  #0: ffff88801eaad540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  348.769330][   T31]  #1: ffffc90004007c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  348.783658][   T31]  #2: ffff88802a8051d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  348.792984][   T31] 1 lock held by udevd/5854:
[  348.797636][   T31]  #0: ffff8880277e3350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  348.807073][   T31] 2 locks held by syz.0.510/7978:
[  348.812391][   T31]  #0: ffff88807cbc20d8 (&type->s_umount_key#82/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0
[  348.824725][   T31]  #1: ffff8880277e3350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  348.835503][   T31] 
[  348.837904][   T31] =============================================
[  348.837904][   T31] 
[  348.847365][   T31] NMI backtrace for cpu 1
[  348.847383][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  348.847408][   T31] Tainted: [L]=SOFTLOCKUP
[  348.847415][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  348.847425][   T31] Call Trace:
[  348.847433][   T31]  <TASK>
[  348.847440][   T31]  dump_stack_lvl+0xe8/0x150
[  348.847474][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  348.847495][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  348.847524][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  348.847548][   T31]  sys_info+0x135/0x170
[  348.847575][   T31]  watchdog+0xfd3/0x1030
[  348.847606][   T31]  ? watchdog+0x1c9/0x1030
[  348.847634][   T31]  kthread+0x388/0x470
[  348.847656][   T31]  ? __pfx_watchdog+0x10/0x10
[  348.847676][   T31]  ? __pfx_kthread+0x10/0x10
[  348.847699][   T31]  ret_from_fork+0x514/0xb70
[  348.847729][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  348.847755][   T31]  ? __switch_to+0xc79/0x1410
[  348.847781][   T31]  ? __pfx_kthread+0x10/0x10
[  348.847809][   T31]  ret_from_fork_asm+0x1a/0x30
[  348.847844][   T31]  </TASK>
[  348.847863][   T31] Sending NMI from CPU 1 to CPUs 0:
[  348.965623][    C0] NMI backtrace for cpu 0
[  348.965645][    C0] CPU: 0 UID: 0 PID: 5827 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  348.965668][    C0] Tainted: [L]=SOFTLOCKUP
[  348.965674][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  348.965683][    C0] RIP: 0010:tcp_recvmsg_locked+0x474/0x3640
[  348.965710][    C0] Code: 00 00 8b 5c 24 40 89 de 83 e6 20 31 ff 89 b4 24 6c 01 00 00 e8 7d 03 a9 f7 89 de 81 e6 00 00 00 02 31 ff 89 b4 24 68 01 00 00 <e8> 67 03 a9 f7 48 8b 84 24 b8 00 00 00 48 83 c0 10 48 89 84 24 70
[  348.965722][    C0] RSP: 0018:ffffc90003b37640 EFLAGS: 00000246
[  348.965737][    C0] RAX: ffffffff8a1d7253 RBX: 0000000000000040 RCX: 0000000000000000
[  348.965748][    C0] RDX: ffff88805b26bd00 RSI: 0000000000000000 RDI: 0000000000000000
[  348.965757][    C0] RBP: ffffc90003b37a10 R08: ffffc90003b37a80 R09: ffffc90003b37a5c
[  348.965768][    C0] R10: dffffc0000000000 R11: fffffbfff20677df R12: ffff88805b123400
[  348.965778][    C0] R13: dffffc0000000000 R14: ffff88805b1234e8 R15: ffff88805b123d16
[  348.965789][    C0] FS:  000055558cfb2540(0000) GS:ffff888125204000(0000) knlGS:0000000000000000
[  348.965802][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  348.965813][    C0] CR2: 00007f576a7e92f8 CR3: 000000005a77a000 CR4: 00000000003526f0
[  348.965829][    C0] Call Trace:
[  348.965838][    C0]  <TASK>
[  348.965859][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  348.965879][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  348.965900][    C0]  ? __pfx_tcp_recvmsg_locked+0x10/0x10
[  348.965919][    C0]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  348.965943][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  348.965958][    C0]  ? lock_sock_nested+0x6a/0x100
[  348.965979][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  348.965998][    C0]  ? tcp_recvmsg+0x1e4/0x7e0
[  348.966018][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  348.966040][    C0]  tcp_recvmsg+0x205/0x7e0
[  348.966061][    C0]  ? __pfx_aa_sk_perm+0x10/0x10
[  348.966075][    C0]  ? __pfx_tcp_recvmsg+0x10/0x10
[  348.966095][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  348.966113][    C0]  ? sock_rps_record_flow+0x19/0x350
[  348.966131][    C0]  ? inet_recvmsg+0xb3/0x120
[  348.966147][    C0]  ? __pfx_inet_recvmsg+0x10/0x10
[  348.966164][    C0]  sock_recvmsg+0x155/0x1b0
[  348.966187][    C0]  sock_read_iter+0x251/0x320
[  348.966207][    C0]  ? __pfx_sock_read_iter+0x10/0x10
[  348.966231][    C0]  ? bpf_lsm_file_permission+0x9/0x20
[  348.966246][    C0]  ? security_file_permission+0x75/0x260
[  348.966270][    C0]  vfs_read+0x582/0xa70
[  348.966290][    C0]  ? debug_object_free+0x2d7/0x490
[  348.966312][    C0]  ? __pfx_vfs_read+0x10/0x10
[  348.966349][    C0]  ksys_read+0x150/0x270
[  348.966364][    C0]  ? __pfx_ksys_read+0x10/0x10
[  348.966380][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.966396][    C0]  do_syscall_64+0x15f/0xf80
[  348.966417][    C0]  ? clear_bhb_loop+0x40/0x90
[  348.966434][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.966449][    C0] RIP: 0033:0x7f2651157997
[  348.966462][    C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  348.966474][    C0] RSP: 002b:00007ffd205bb5a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  348.966489][    C0] RAX: ffffffffffffffda RBX: 000055558cfb2540 RCX: 00007f2651157997
[  348.966499][    C0] RDX: 0000000000000004 RSI: 00007ffd205bb5fc RDI: 0000000000000003
[  348.966509][    C0] RBP: 00007ffd205bbaa0 R08: 0000000000000000 R09: 0000000000000000
[  348.966518][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004
[  348.966528][    C0] R13: 00007ffd205bb5fc R14: 00007ffd205bb690 R15: 0000000000000000
[  348.966546][    C0]  </TASK>
[  349.331414][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  349.338400][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  349.349220][   T31] Tainted: [L]=SOFTLOCKUP
[  349.353754][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  349.364349][   T31] Call Trace:
[  349.367739][   T31]  <TASK>
[  349.370677][   T31]  vpanic+0x56c/0xa60
[  349.374675][   T31]  ? __pfx___schedule+0x10/0x10
[  349.379579][   T31]  ? __pfx_vpanic+0x10/0x10
[  349.384240][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  349.390448][   T31]  panic+0xc5/0xd0
[  349.394290][   T31]  ? __pfx_panic+0x10/0x10
[  349.398719][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  349.404197][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  349.410366][   T31]  watchdog+0x102c/0x1030
[  349.414716][   T31]  ? watchdog+0x1c9/0x1030
[  349.419149][   T31]  kthread+0x388/0x470
[  349.423222][   T31]  ? __pfx_watchdog+0x10/0x10
[  349.427903][   T31]  ? __pfx_kthread+0x10/0x10
[  349.432500][   T31]  ret_from_fork+0x514/0xb70
[  349.437133][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  349.442346][   T31]  ? __switch_to+0xc79/0x1410
[  349.447047][   T31]  ? __pfx_kthread+0x10/0x10
[  349.451743][   T31]  ret_from_fork_asm+0x1a/0x30
[  349.456545][   T31]  </TASK>
[  349.459980][   T31] Kernel Offset: disabled
[  349.464311][   T31] Rebooting in 86400 seconds..