last executing test programs:

3m13.389464327s ago: executing program 2 (id=841):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000300)="0f01c866b9030100c00f32baa10066b80050000066efbaf80c66b8bbaaa28366efbafc0cb04fee0f09660f50df0f6e01660f38813f0f20c06635000001000f22c0662ef30f1ecb", 0x47}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0xfffffffffffffcf4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m13.228242864s ago: executing program 2 (id=842):
open(&(0x7f0000000080)='./bus\x00', 0x147c7c, 0x0)
mount(&(0x7f0000000200)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x69000, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1bc)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x0)
r2 = fanotify_init(0xf00, 0x40000)
fanotify_mark(r2, 0x105, 0x4000997d, r1, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x148)
read(r2, &(0x7f00000000c0)=""/77, 0x4d)
munmap(&(0x7f0000004000/0x3000)=nil, 0x3000)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x1e)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)={0x400000}, 0x18)
syz_usb_connect(0x5, 0x778, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014347710f0031d5880500102030109026607020904e0010904580906ff01070009210800050122d30209058002100000db0e072501020803001402dc06d26f73c49ae3689cf5b150d70e623eb009050802100052021008236dbdb498797609058000ff0303da040725010380050009050602080007a70207250180020010072501410804000905a4011000023703072501010a070093221f7ee797335292a4582c83c5eb8d957e801682b01aeae0f778aa496f8c8a35305a8825397fe5fbbcfd99681b665ee120df0260f06b07e7801ff2d6200f15c8964825e9d711fcd215554c94fb4cd5a43d56b4c494cfbc3803b814ba0b5ef782853a54705c4b198d0e6540060f496446f53a8d7fdcad70ed1b70fbe6ffe389da690e4ee177f761f920c9d94693e61dbd52dc09050501200001000b07250180000300072501800700000904", @ANYRES32], 0x0)
linkat(r3, &(0x7f0000000100)='./bus\x00', r0, &(0x7f0000000180)='./file0\x00', 0x1400)

3m12.668545302s ago: executing program 2 (id=843):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0xa)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4)
creat(&(0x7f0000000140)='./bus\x00', 0xb0)
mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./bus\x00', &(0x7f00000003c0)='xfs\x00', 0x0, &(0x7f0000000340)='discard')

3m12.593906006s ago: executing program 2 (id=844):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\v\x00\x00\x00\x00\x00\x00C'])
chdir(&(0x7f0000000140)='./file0\x00')
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r2, 0x5607, 0x4)
write$UHID_INPUT(r0, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e00)={0x18, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x62, 0x144, 0x0, 0x0, @ipv4=@multicast1}]}, 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0xc000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r4, 0x8008976)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000e80)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f60e", 0x44}, {&(0x7f00000009c0)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e", 0xf4}, {&(0x7f0000000f00)="f48ed488b79c19020b12c847a2b2bd6910d9e9dde186c648318dcc169dff39a3990286898efed16221dab719543a20fc028c0d910d5faa93e1681842fa9c6d5fe96a168e3320464326fbfd8a129db351f0d5f9a328a4358e5c0334de68436dd2b6c2502f45f248d2a7f0ebaafd021a8b306e63dd563b492896f4c09e6d5dc738b5bdc947bc7d209c1b04445155481e33fc1ef3329e34267522cae90ee707e7cbb9ca3065d53f2e86949582355a7b2cca99e1504cb2ff0c6ad674e7ceb632351c38ff3aacd22c389c43bcfeb4a4cbec9d41813f520eace7e54347a8dc9e44cd8687a97ce0ed8a2ced68318e8b8361db585ed78e80b2f7af86e42d9b8bf132a33d851e", 0x102}, {&(0x7f0000000c40)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5d28c905d5b4dc64f1a", 0xb9}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc77a271c54201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000002300)="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", 0x2af}], 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)

3m12.574721542s ago: executing program 2 (id=845):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x24044000}, 0x4040000)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="cf042dbd70f0fedf7fc5f8e1132a6932077f", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000600bd0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

3m12.250873982s ago: executing program 2 (id=846):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000052c0), 0x3ff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc058565d, &(0x7f0000000000)={0x0, 0x3})
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d00)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB="40007a80"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4800)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000000000)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$setregs(0xf, r7, 0x0, &(0x7f0000000540))
acct(0x0)
ptrace$cont(0x20, r7, 0x0, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000280)={0x9, 0xa9e, {<r8=>r7}, {}, 0x0, 0x3})
ptrace$ARCH_SHSTK_DISABLE(0x1e, r8, 0x2, 0x5002)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1040}, 0x4000040)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4d00000003060104000000000000000000140000050004000000000005000100060000000d0003000005000500050000000900020073797a3000"/72], 0x48}}, 0x0)

3m11.986037716s ago: executing program 32 (id=846):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000052c0), 0x3ff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc058565d, &(0x7f0000000000)={0x0, 0x3})
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d00)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB="40007a80"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4800)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000000000)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$setregs(0xf, r7, 0x0, &(0x7f0000000540))
acct(0x0)
ptrace$cont(0x20, r7, 0x0, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000280)={0x9, 0xa9e, {<r8=>r7}, {}, 0x0, 0x3})
ptrace$ARCH_SHSTK_DISABLE(0x1e, r8, 0x2, 0x5002)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1040}, 0x4000040)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4d00000003060104000000000000000000140000050004000000000005000100060000000d0003000005000500050000000900020073797a3000"/72], 0x48}}, 0x0)

2m29.732357012s ago: executing program 1 (id=1032):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000040)=0xf, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8084)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000000)=0xd07b627b, 0x4)
cachestat(r3, &(0x7f0000000180)={0xffffffffffffffff, 0x80000000}, &(0x7f0000000200), 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x408, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_EXPR={0x23c, 0x11, 0x0, 0x1, @range={{0xa}, @val={0x22c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x210, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfb, 0x1, "2ada504f9f4df1a485e75b23900e8b263f9910286aa808c3dbd5ea5dd6769a9082855e907406b1f3ad74aa42d894da1378a83e957790e4f1878d695aae142b92dc2fd57f895deb19d78474a68ce2e5e5cc7073102ac681ca10938f32c1c35480504d99b9355a9271704c9173b8e480dca85eb48e46af225c084f7bcc274ad8baf7ba4a034c0b48108f88a21f602373d113c257b5e0443bfd97e15c8e4cde0f79fe692c366e9baf2ac37192e87ab67478ec2dac1882e4005480128e31aa9f9b06fe8191599d28c9bd580c5ff21b8ec1cf623bfb60edd5ee1fe3a5a4d1889ce6712c501199df7ff3d33f93bcfabb88eaabbda70b09bdfbee"}, @NFTA_DATA_VALUE={0x5c, 0x1, "bfc7dd01c40311f7c9df02c6655e59f64dceec7b75f57e93049396ae5075d9d4d8871ae5bfd0b8309894d6f7957307228998cc720d64486020497d7d88f8d1853f99e692bce76ec19b96eb100302a33df5a6da2ab6baed5a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "00900a08748f912f6c5c9ff5fe709d1960ad7d361af89682a240f1b4e48a390e19a459362339e9e86df0c0ea6bd7e980d48c9f4b1c5d7ce232528a4ef11a6ed057421779427ba210d595d18d06a6140f9261c32652c36a35565b1cca435d2fdb9f833dfad829871f021aa8f6096a4fadd7752f6c714bab820fdf8fd474f12735a8f61eb0ce9802cb878e77cce506a7562264f09d51303b526989b63b009dc0ae104f2a5e"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_DESC={0x1a0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xecfe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0xe8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb0f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x31}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}]}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x408}, 0x1, 0x0, 0x0, 0x20040040}, 0x5)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, r1}, 0x68)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x8000)
r5 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r5, &(0x7f0000000240)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xb}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000002900000039"], 0x18}}], 0x1, 0x20000000)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$inet6(r7, &(0x7f0000005d40)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000017c0)="01e266b8f3d6a1d424d03661a7d99521f0f5cca9f580cc80f8a6cf1876e772e4da0705073e6b5acfff207dcce84b0aba22a2f8fd78210c187f117f7d50508d2e7f3d5ec1c36aa8f4e0e1e6c531e6192cf6d9ada9805013fc4088ee6d9b210dcd82267add95d086c54f7877a65e23920de3c7e15cda66bd201aa82a61f35880d272053c2d6f298507681273b0df5f6d72e690951a5a9a7c6356ae246fd4df086a0a37", 0xa2}], 0x1}}], 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r8=>0x0})
sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14)

2m29.273037691s ago: executing program 1 (id=1043):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000140)={0xa, 0x4e23, 0xaea9, @mcast2, 0x6}, 0x6) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000140)={0xa, 0x4e23, 0xaea9, @mcast2, 0x6}, 0x6)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x200000, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) (async)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
sendto$inet6(r0, &(0x7f0000000180)="08d6", 0x2, 0x800, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @remote, 0x400}, 0x1c)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]})
sendto$inet6(r0, &(0x7f0000000140)="8369b66f", 0x20, 0x0, 0x0, 0x0) (async)
sendto$inet6(r0, &(0x7f0000000140)="8369b66f", 0x20, 0x0, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={<r1=>0x0}, &(0x7f0000000040)=0xfffffffffffffec1)
syz_open_procfs(r1, &(0x7f0000000000)='net/mcfilter\x00') (async)
syz_open_procfs(r1, &(0x7f0000000000)='net/mcfilter\x00')

2m29.147502089s ago: executing program 1 (id=1038):
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev})
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf012, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[]}, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141220, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40890}, 0x24008004)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMRRU(r2, 0x4010744d, &(0x7f0000000080)=0xc)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x6, 0x7, {0x7, 0x23, "3d91419da5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2m27.379374436s ago: executing program 1 (id=1047):
syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa000905", @ANYBLOB="3ef6"], 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)=@multiplanar_overlay={0x6, 0x0, 0x4, 0x4, 0x100, {0x0, 0x2710}, {0x1, 0xc, 0x3, 0x0, 0x6, 0x0, "3458328f"}, 0x9, 0x3, {&(0x7f00000000c0)=[{0x4, 0x3, {0x2}, 0x8}, {0x4, 0x2f4, {}, 0xfffff001}]}, 0x4})
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0)

2m26.09660827s ago: executing program 1 (id=1053):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00')
fanotify_mark(0xffffffffffffffff, 0xc0, 0x8001001, 0xffffffffffffffff, 0x0)
getdents64(r1, &(0x7f0000000000)=""/35, 0x23)
getdents(r1, 0xffffffffffffffff, 0x5a)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030200e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011000148be67d0ac41a0c2aff4e5127f8c5672447947398a19c51a996f3fae9e80e31d531cf15e6b1a97b26a183040cca76957926a565e9ecde37f9495b7ab2c4dab530e7e90b6b69ddb496171a6030f2148087599da3684b6a49e42135945126793b95d3aaee65f1350fdd78d39e4dd89fa61a1c3c300c73cdaaad9197d2b5b05384adb5fcd46ff17d4100db2ebc86431a5562a60fc1fbc545be52ec767df6f7c2a9d0b6c8fb36f16bdaf2249883c0515e6ea8f16023105ce7f559ea0a25212c09d6e0e"], 0x7c}}, 0x800)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a40)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x1c4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c20, 0x3, 0x0, 0x1, [{0x21c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x38, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_DATA={0x1a4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x18, 0x1, "f2fd8a72a6acab3675a13ff5dcc0ac8f56c1c32a"}, @NFTA_DATA_VALUE={0x49, 0x1, "5ed39f1916a75468586f57c1bb96650ef6ff714574559e5070c47c3a96140ef1fc9b4c43ba96752344e81331f87d73883192c848063110795bc831f698ec8dba5ae391de37"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1a09a3cc146a0af7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x48, 0x1, "f90479cd063a0b42113e35b4de07f3de1ecffc62b4df78c9c2c770188633af46f0a2c3442559066ea2854f3905f92a57f4ecb17036d1f644bc638614b46920a8c5838b89"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "e0c5d047bbb6ced662f9b0d5c13b8a3127adc97b285e865a1742d7ec315c47f1baf6bd801efbd8894389c82fa29a2eb71723e1e55a49b758be9212cd1f18aaee732d4325516c1d2db98995cc673f2c319450f7c7594a08600cfe3bfc0fb26625ee1f1b14b6d409816d594c75f56e1390f5fc9223d39dc9b0e129255ff120555a7de6450511c577154e"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x268, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x230, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xeb, 0x1, "9d8e08ecd6bde858c9aa545cd770b69a2d23c85283147a17c9c87e826df97e6e04b8388641c87f61a8b3f49783c77f18e26df79a1da0654fb656df7d963c50da527cea2f1e744a619f771fa61ccccf7e34f648d5fa290b440881004dfbcbe49eb8c34eb3480a2bd0d8d5c66c21354d842addfd15f494c0a0c99764e7166f7b9667c34cfb0a6902d22165883b3af37f67f2c96f272e968ada8b4c49ba00b698f3a445f8498ebe73f42ce54711ce8e73f67a6523ee2af08a1c5148b1921eb6e368216c8b2a54d3fde070e1b6063feae4d83cb1ec5c3b9ba564fefbb94bb5d8e1a824d0447d942567"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "eb814581c6e7aae5e5ac5616dcef5e13951364345ed1aa11bfb93a2ffa51b4eb8783efdc1586cf19f4ec46d6f605415415601d4cc28d2ec2d9893570f6478b14f6151c280bc4699a3ca0c939af17c9d137d536e3c5e4fc98fb6e9c9bdbc5d9fb1adff4a5547d0cef9d795ecc365a4700d0e3fe14cf32f22a3cf4fbe182a22ba1142e8faedb7bc6399820a5b4a7e4610945543ea46ecb33fee2f8c67a0611e8812cfec46caf43203f2134f722590a3248f7ad3448c0c1c25a8d8cab81c1ca0aa0c4a5b00a0276789ffe877a812ac61872350f3226cbbb247bec4aa2e9f8"}, @NFTA_DATA_VALUE={0x22, 0x1, "fe33c909d9259859750f5c6d6d7116da4c690866679d8f8cf993044576ca"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x32, 0x6, 0x1, 0x0, "22043df97e93492d92b471b95d6b739f410f66c7132ebbee8db405acfc8a3b8fc9fe2b8060927a6365ec4f5fd514"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x151c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x1c0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "614a2c9e"}, @NFTA_DATA_VALUE={0x15, 0x1, "cc50765e592ded5fb44923d018facd8e26"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc7, 0x1, "d3b2ad38c96e28f2b454680c4e0980d76da6434fe467603517245e9a6e2231a886677b28f54ca161b58718168036c2f04c06327671616cd99abc0f67c44281c3d76d5ea24417d5b7625f3b5ffa6d1cd254a00feffaea001b0a82663b006fc7e79f851f09f696c8ab10163d1d2df9f12265d731897114cf5d13138bb5c50a3b50303c7d6fc4cbb879e3b843507e9148495264a3ac0849923973ead9988364f8b79e83c1e381028612a0fd9bb88b09eb99365547c89847529802e1f8d590b30d4235f59a"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x14, 0x1, "b0382d7cd374f95d74aacdaf22b8688b"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x25, 0x1, "f57a8cc570358754c2e0aaa79efd70b85fdfe73e9cf3e7514ad118cb3dc85069c4"}]}, @NFTA_SET_ELEM_KEY={0x130c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "371b6aaf742c408e2aba11b9f15d6cea9d16afc41dd257af1977d267f7d6463f20e663d3132df6e31fe4545ee468736100d2b07745e5e205ee7fa0e02784032a08d141d656b22211dc3e3d7d58479fffdef76ef44ee6bb6d4164a967c0c24a714b8ea9cff6012e4fafe2e95f0ee0237970075970522ea8"}, @NFTA_DATA_VALUE={0x86, 0x1, "67cfa39da70d90cd5b5199bd9c15804d160a49facd4ad2538b610981f945888185a3628c08de28e99c554e76c2a0443bfc0e1f3b6d05ea90640f4e0bbd3e56b4698af621c710d8491931dbe0c15e0d87d6f894f8a61720ef141d84c6040636795c78447c39ea0f2cf66a6265144a0fb403656a61769ce32e3af6622fa97f168874dd"}, @NFTA_DATA_VALUE={0x57, 0x1, "d48c045dfbc608b1b51277879edfad303804adecccff288ea8c0cb26fd101de0f026f7be0872bc6712e1c9a55ce6d29bfacd7c0229dbea268f79899f1e00a969674aba3778f1b4b0859817b5bd974b12a7e35e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xd6, 0x1, "93b5db9ae37b05a2fd3f932b8877a01d6718115b16e6fc00a3ac894d9a33b881a77f3fac088d01481f89a7181c7065143c33a464a01d129d0ee931e4623ec4d2166701cf1a63cc6c71b474c777040f6cbb653fdedd36b59dead0486904b28d2e0174bbe567ad068e5bcb2a3655b94df8075fa22b383198cb94eb4c7c2cbcd4ac3c3b7f8815348a0f5d4bef2992945027eb9dd50d254ae531eca5ca9c5118fdd83e90a2bd80fa622764fbbebb0a2563625b85ab226c9a1b5bc6064738b23d80356e66bbfc80eab09e3840f35424d0063330e0"}, @NFTA_DATA_VALUE={0x66, 0x1, "4bf2f4f6b99377370e7ad12c109fb157e8b11b06cdb24c5339037b3ddd75b7fdba9cb649c69bfec782fb6a3eca0d7f7b59dc4f28e9e07ba01e16171ba78735ec408a421d7fca2767a74f4f2158649246b3ccd36a623fcdf7e5f3baf06c1922d52797"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x26c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x101}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x5}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_EXPRESSIONS={0x14c, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}, {0x5c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPR={0x40, 0x7, 0x0, 0x1, {{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}}}, {0x1c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_DATA={0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x3d, 0x6, 0x1, 0x0, "29eaaea75fc6488e2d2c4a624d4d4f7ff95587d535bec31fc830c97d39a65206cbaff0d5d673a50781410affc19b7e82113dd4ff0b284e6210"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1cc8}}, 0x4048010)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x191)
rmdir(&(0x7f0000000100)='./control\x00')
syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bc"])
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bff000/0x400000)=nil)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x1c5, 0x0, 0xc}]})
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @remote}}, 0xffffec54, 0x9, 0xffff1896, 0xfe, 0x25, 0x7fff}, 0x9c)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xb8, 0x0, &(0x7f0000000580)=[@clear_death, @increfs_done={0x40106308, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@weak_binder={0x77622a85, 0x100b}, @fda={0x66646185, 0x6, 0x1}, @flat=@weak_handle={0x77682a85, 0x2, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}, @exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x100}, @fda={0x66646185, 0x7, 0x0, 0x3b}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/115, 0x73, 0x0, 0x3f}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x1}], 0xbb, 0x0, &(0x7f0000000740)="79d3cd076997dd2f8ed862226272e07062afd9f739123cde856e2f1367dd9b4d4d7f8665d4033c895dea85217d9cfb04a5a6d55ea612fd6f00b20d44948961cb9a6624e460c3fa3cb84fc013fe54b2560ff7fa1d0a9f65dee78d8207276f4ebfde0efc6887a47a85878266558d5a4e652698180594ba736fdcab37497f3e8f2e5110d780e8dfc0760cdebf76e6cc3d8b6a8b3b3b72ec6fbd98783c70efc49adba41f8ac1583cc74d8d9caaf8187d3c3953a06de06e9c0cd86655df"})
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0)

2m25.484679931s ago: executing program 1 (id=1057):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)

2m9.622317676s ago: executing program 33 (id=1057):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)

52.145198725s ago: executing program 3 (id=1691):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30"], 0x7c}}, 0x0)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000003}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x8014)
sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x20000000)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800"], 0x34}}, 0xc000)
r4 = syz_open_dev$radio(&(0x7f0000000180), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, 0x0)
pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="28bba7", 0x3}], 0x1, 0x7, 0x96)
close_range(r1, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010f64711f3000000000000000000000a20000000000a01020000000000000000050000000900010073797a300000000014000000080a010200000000000000000000000914000000110001000000003b9164b0000000000a8bcdceedf59618ce8ab6e9da7f1c5c06b9c8713c4c3aaa509a802389c47d711bbdda864ad69ceda29c0018bef4ca88498bcd6da2b77e1a427a3528884aefeb848d170b9bd9747fb809"], 0x5c}}, 0x0)

52.004774553s ago: executing program 3 (id=1693):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff})
setuid(0xee00)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', 0x0})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r5=>0x0})
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000003c0)=""/253, &(0x7f0000000040)=0xfd)
bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0xff, 0x2}, 0x6621350e9d60fd79}, 0x18)
connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x1, 0xf0}, 0x1}, 0x18)
sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@loopback, @private2, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}, 0x4, [0x0, 0x8, 0x8, 0x80000001]}})
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904"], 0x0)

51.45479887s ago: executing program 3 (id=1696):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
close_range(r2, 0xffffffffffffffff, 0x2)
syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40040904000702b95fc30309058803200006020409058302000aa0a9d3541a6cb180248cebfd09bcfd76cfea81ace5"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})
r3 = dup3(r1, r2, 0x80000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'batadv_slave_1\x00', @local}) (async)
write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x0, 0x80, 0xfffe, 0x548c, 0x5, 0x9}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x1400, 0x0, 0xfe, 0x1, 0x0, @private=0xa010100, @rand_addr=0x64010102}, @dest_unreach={0x3, 0xd, 0x0, 0x0, 0x5, 0xe, {0x5, 0x4, 0x2, 0x2c, 0xfd, 0x66, 0x5, 0x66, 0xb, 0x7, @multicast1, @local}, "0002000000000000"}}}, 0x46)

50.568283531s ago: executing program 3 (id=1704):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c0}, 0x24048004)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000000)=0x1, 0x4)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, r4, 0x7867268dc8eb0315, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
socket(0x27, 0x1, 0x311)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
r6 = signalfd4(r5, &(0x7f0000000000)={[0xd46]}, 0x8, 0x80000)
setsockopt$sock_int(r6, 0x1, 0x1e, &(0x7f0000000080)=0x7, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0, 0x1328}], 0x2, 0x0, 0x0, 0x41}, 0x0)
sendmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="a99dedbc3d80b74f9b1f7a7ae97b823ae4af9123c78452bdbb3d81e12eca56d948c17be594ed070a7e25bc1a15c6", 0x2e}, {&(0x7f0000000340)="581041ba5d7daff532d214d80a9db52943988f75fc7c87934fe7f49ea0d4aed06d9c8ea3d38e2c6621c6ab8e3c51d089cb3b73343a060aab869b4fd11e4263317d2fb19b6f6c0fc450dfddae", 0x4c}, {&(0x7f00000003c0)="ba65e1bbb5047b40074bf5eba01b85aaac6472d7cb494b00000000000000ff5d7940b2df9fbeb40a3ad5e77cfab514c2383a0ac39af0bdce0269e893a65fec056e42dbad7081eebac8bc0145e2ca920496d37ecbf0cb3fce7bb15b7b28029b073f2f68710d3a0868cf596fc84cdb93149c4c70c36346c21d10390d83f827dde3ebdb05e6b31e0690f1426ef61500513b873ac86ca0f308537fa6456f70db2e942d8538fdee13c58b5075a98cb55642ab407ebef61784924ab61ee4c4327064c7571d1aea430b27aeddbbc9dc4ec768c1dd65a59541116aa91c164e2721667388", 0xe0}], 0x3}, 0x20000051)
readv(r8, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1})
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
connect$tipc(r6, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x10)

50.265659733s ago: executing program 3 (id=1706):
r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x4, {0xe9, 0x2, 0x2, 0xe1ce}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_LOCK(r4, 0x6405)
ioctl$COMEDI_UNLOCK(r4, 0x6406)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r6, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r7, 0xc87a, 0x80000})
close_range(r2, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x104}}, 0x20000000)

49.852785774s ago: executing program 3 (id=1711):
r0 = socket$inet6(0x10, 0x80002, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x2}]}, 0x10) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
write$dsp(r1, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) (async, rerun: 32)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000280)=0xfffffffb) (rerun: 32)
sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) (async, rerun: 32)
r2 = socket(0x2, 0x80805, 0x0) (rerun: 32)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000001080)=0x8) (rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa8000000060a0b040000000000000000020000007c000480780001800b00010074617267657400006800028050000300cd4b6abe4203f10e000000000000ff5fe87a9d3ac869f3a860917523679a5eb46131471826390d810593448ba1ecbf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e35370a0001004e464c4f4700000008000240000000000900010073797a30000000000900020073797a32"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r3, 0x2, 0x9, 0x101}, &(0x7f0000000040)=0x10) (async)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r3, 0x9}, &(0x7f00000000c0)=0x8)

34.736102194s ago: executing program 34 (id=1711):
r0 = socket$inet6(0x10, 0x80002, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x2}]}, 0x10) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
write$dsp(r1, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) (async, rerun: 32)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000280)=0xfffffffb) (rerun: 32)
sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) (async, rerun: 32)
r2 = socket(0x2, 0x80805, 0x0) (rerun: 32)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000001080)=0x8) (rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa8000000060a0b040000000000000000020000007c000480780001800b00010074617267657400006800028050000300cd4b6abe4203f10e000000000000ff5fe87a9d3ac869f3a860917523679a5eb46131471826390d810593448ba1ecbf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e35370a0001004e464c4f4700000008000240000000000900010073797a30000000000900020073797a32"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r3, 0x2, 0x9, 0x101}, &(0x7f0000000040)=0x10) (async)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r3, 0x9}, &(0x7f00000000c0)=0x8)

6.16569822s ago: executing program 5 (id=1999):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x10000)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000005c0)={<r1=>0x0, 0x4, 0x576})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000080)) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000004c0)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80c0f5591050000006066bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e168c4a4", 0x5a}], 0x1, 0x7c, 0x0, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x18)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f00000000c0)={0xed, 0x0, 0x8})
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
close_range(r2, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x4, 0x66032, 0xffffffffffffffff, 0x40000000)
r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x2c, 0x6e})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000009c0)={r1, 0x1d, 0xaf}) (async)
mount$tmpfs(0x0, &(0x7f0000000200)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000240)={[{@usrquota}], [{@subj_user={'subj_user', 0x3d, '{@^'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ']/\xbdu,{/{$&Q(@%:..'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x36, 0x63, 0x30, 0x31, 0x34, 0x61, 0x34], 0x2d, [0x31, 0x62, 0x36, 0x61], 0x2d, [0x35, 0x62, 0x63, 0x36], 0x2d, [0x36, 0x61, 0x38, 0xb], 0x2d, [0x38, 0x36, 0x63, 0x33, 0x34, 0x34, 0x39, 0x64]}}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@subj_type={'subj_type', 0x3d, 'smackfsdef'}}, {@smackfsdef}, {@subj_user={'subj_user', 0x3d, '-\xa6\xd3.:'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]})

5.965319752s ago: executing program 5 (id=2000):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x420000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x2})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x26000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x70000})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x57, 0xbdb], 0x25000, 0x304})
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.962092142s ago: executing program 5 (id=2001):
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000043242108d81301006230010203010902120001000000000904"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r2, 0x114, 0x2, 0x0, 0x20) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xa, &(0x7f0000000000)=0x3, 0x4)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x80180, 0x0)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f00000001c0))

4.300239541s ago: executing program 6 (id=2016):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c)
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r2, 0x8008976)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000e80)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f60e", 0x44}, {&(0x7f00000009c0)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e", 0xf4}, {&(0x7f0000000f00)="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", 0x102}, {&(0x7f0000000c40)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5d28c905d5b4dc64f1a", 0xb9}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc77a271c54201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000002300)="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", 0x2af}], 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000200)=[<r3=>0x0, 0x0], 0x2, 0x6, 0x2, 0x2})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000280)={r3})

4.09706753s ago: executing program 6 (id=2018):
openat$kvm(0xffffffffffffff9c, &(0x7f00000011c0), 0x40400, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000011c0), 0x40400, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000001200)={0x1, 0x0, [{0xd, 0x4, 0x1, 0x2, 0xa8d9, 0x2, 0xb842}]})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f00000012c0), 0x0, 0x4040814, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000001240)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x4, 0x6}, @timestamp, @window={0x3, 0xfffe, 0x100}, @sack_perm, @sack_perm, @timestamp], 0xa)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
socket$packet(0x11, 0x3, 0x300)
sendmmsg$inet(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="ba51d4851b48b95f4c39c4431cfbb1c7b4be74c3e39c0f05a9ebcc7a10281d9ff85b290919d32c3ad2badad7397b402e805c6bbf85d4fd4f98387fb80980a68e11728f60a2c89dfdbe98d467849f8e5ebbdedb3f4272503252e43812b3f3275f1d6781fd08c702b4b2475c962e", 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="623c5c57500b4765c566adc44962ce7c3f51c2c4f06901a45efe3d5b4b692d097ec8bb93cfabc444a59ad0fc4389f93e000e964cdf339c009f61d9877d9fed8846ecc0cfdbbfca5a0b9e53d2b90b3d19d5434b4cc83726dafda8deaf2e21a244be4f917073a5cf06214e1e27d2a8ab78", 0x70}, {0x0}], 0x2}}], 0x2, 0x11) (async)
sendmmsg$inet(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="ba51d4851b48b95f4c39c4431cfbb1c7b4be74c3e39c0f05a9ebcc7a10281d9ff85b290919d32c3ad2badad7397b402e805c6bbf85d4fd4f98387fb80980a68e11728f60a2c89dfdbe98d467849f8e5ebbdedb3f4272503252e43812b3f3275f1d6781fd08c702b4b2475c962e", 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="623c5c57500b4765c566adc44962ce7c3f51c2c4f06901a45efe3d5b4b692d097ec8bb93cfabc444a59ad0fc4389f93e000e964cdf339c009f61d9877d9fed8846ecc0cfdbbfca5a0b9e53d2b90b3d19d5434b4cc83726dafda8deaf2e21a244be4f917073a5cf06214e1e27d2a8ab78", 0x70}, {0x0}], 0x2}}], 0x2, 0x11)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r4, 0x4b72, &(0x7f0000000000)={0x5a, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x8, 0x0) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x2) (async)
mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x2)
socket(0x2, 0x5, 0x0) (async)
r5 = socket(0x2, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x12, 0x0, 0x0, 0x2, 0x401, 0x1, 0x1}})
vmsplice(r1, &(0x7f0000001180)=[{&(0x7f0000000040)="8a6999c0eb7d3b645249243670b22381b423dcb279a8a003534c79a70cb1cfd36c9606ceeaa3441a85e5dd6ce95377d249bb434d9bf6cd69848f08b18b3ee35ed10819a8f02fb2cd41a4f35fc0630f674f6f3fced29b5f7811b7920b74c8f5b9dffb", 0x62}, {&(0x7f00000000c0)="bb1d1509455c8199f3970758a899f0cc246cbe52735f5d76c61d2cf9d8988b9a40c01ffe23b133c0b85a5476be1d7e571912d637a9a5db137164ed234392fba9fcdf38557091920e5aef72dc8a3c6c711e1d6698350f19ca8d3a42d6b262a50836b42a53047ae742f6df35c6a6f3a390db4c74c2a5d0ecca51130b8bbab72fbc9ca67dc0c0c5c7851e0769fcec76408f74a0", 0x92}, {&(0x7f0000000180)="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", 0x1000}], 0x3, 0x2) (async)
vmsplice(r1, &(0x7f0000001180)=[{&(0x7f0000000040)="8a6999c0eb7d3b645249243670b22381b423dcb279a8a003534c79a70cb1cfd36c9606ceeaa3441a85e5dd6ce95377d249bb434d9bf6cd69848f08b18b3ee35ed10819a8f02fb2cd41a4f35fc0630f674f6f3fced29b5f7811b7920b74c8f5b9dffb", 0x62}, {&(0x7f00000000c0)="bb1d1509455c8199f3970758a899f0cc246cbe52735f5d76c61d2cf9d8988b9a40c01ffe23b133c0b85a5476be1d7e571912d637a9a5db137164ed234392fba9fcdf38557091920e5aef72dc8a3c6c711e1d6698350f19ca8d3a42d6b262a50836b42a53047ae742f6df35c6a6f3a390db4c74c2a5d0ecca51130b8bbab72fbc9ca67dc0c0c5c7851e0769fcec76408f74a0", 0x92}, {&(0x7f0000000180)="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", 0x1000}], 0x3, 0x2)

2.898646515s ago: executing program 5 (id=2026):
setresuid(0x0, 0xee00, 0x0)
clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000001c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGMASK(r1, 0x60b, 0x0)
syz_usb_connect$uac1(0x2, 0xaf, &(0x7f0000000a00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x2, 0x8, 0x8, 0x3, 0x2], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0xe, 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x5, 0x1, 0xa, 0x9], 0x3}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x1, '\x00\x00\x00\x00\x00'}, @feature_unit={0x7, 0x24, 0x6, 0x5, 0x2}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x6, 0x9, "e7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x9, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x3, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x8, 0x60, 0xfc, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0xb, {{0x7, 0x24, 0x6, 0x0, 0x0, "32e8"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x1, 0x7, 0x3}, [@dmm={0x7, 0x24, 0x14, 0x101}, @acm={0x4}, @acm={0x4, 0x24, 0x2, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x8, 0x2, 0xc0}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x9, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x16, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb, 0x8, 0x80}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x9, 0x4, 0xc7, 0x10, 0x9}, 0xd3, &(0x7f00000000c0)={0x5, 0xf, 0xd3, 0x6, [@generic={0xa1, 0x10, 0x4, "404af4f888949d9fa0a83c83666174b7d872454f0543e8114823748e2f3c71edd8efaeacffb381ee3d0634df0ac92afb933fb3dd0e2824ef529dd8988843d3c5158bd61543b1925efc40a5cc865d197606b56bf8994d77e56cf7dd9a9570484134002e5bb5a4b6438ab099acad4626fa0cd2be8890de0c64a4ccb2ceb1e09d8c273b2d040a588ebed78c0a85cd40aa9ea1b4170fb725a4736bdbd1e8b347"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x6, 0x8}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0xbb, 0x0, 0x7, 0xf, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "891002ec8b216d1f059594f3d2b94adc"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x408}}, {0x10, &(0x7f0000000200)=@string={0x10, 0x3, "639fc1ea60e4805fd0bf42caa596"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x409}}, {0x5f, &(0x7f00000002c0)=ANY=[@ANYBLOB="02006b5ac7d200449afa6827dd43e601f4a67fa7d5fd95b2354a351f008d2b5be1ef98607392e46eb5010c9abec724f6e5f490beb514b87aa653cbd603e8caa826ef849ee46e222aa9278f8c57d46989fa671954a0"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3c0a}}]})

2.810430084s ago: executing program 6 (id=2027):
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) (async)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x20, 0x11}, 0x0, 0x0}) (async, rerun: 32)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz0\x00', 0x200002, 0x0) (rerun: 32)
r2 = openat$cgroup_ro(r1, &(0x7f00000009c0)='blkio.bfq.time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6002, 0x4, 0x3d0, 0xf0, 0x2e8, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x0, 0x0, 0x1}}}, {{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x0, 0x0, 0x0, 0x6171, 0x0, 0xffff, 'veth1_vlan\x00', 'nicvf0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @private, 0x0, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffff, 0xff, 0x6, 0x5, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0x1c3ae9812108cb68]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x8, 0x46b, 0x1bd, 0x4, 0xc703, 'team_slave_1\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) (async, rerun: 64)
r4 = syz_usb_connect$cdc_ncm(0x0, 0x8b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x2, 0x1, 0x2, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'T'}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0xafa, 0x2, 0x8001, 0x2}, {0x6, 0x24, 0x1a, 0xde, 0xd}, [@mdlm={0x15, 0x24, 0x12, 0xfc01}, @dmm={0x7, 0x24, 0x14, 0x7fff, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x6, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xc, 0x9, 0x2}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x8, 0x3, 0x7, 0x10}, 0x4a, &(0x7f0000000100)={0x5, 0xf, 0x4a, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x4, 0x4, 0x5, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "753d7e0a7ea3c0409ab05320eb0c85ad"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xf, 0x7, 0xb908}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "93c47432f0efbc3ff8f2a0468fe838c2"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x37, 0x9, 0x26, 0x8, 0x2}]}, 0x4, [{0x49, &(0x7f00000001c0)=@string={0x49, 0x3, "814b46ad8cd1e1da8d7307e9176f55cd4f97cec1131b131bf70c95b4888690b39315729a5693f71fd154931aa019b72cee8d729ae7351701c389435bc8c0fbd41a15ff1ad03584"}}, {0xa6, &(0x7f00000003c0)=@string={0xa6, 0x3, "30c26215980c6c3f2ba3a50974ff87f40cc93860c06c4d16d18c114331ec1a79648374ae4d5d3989f37e1eabe25f9b528ca407a325ccfedadcafefb5405ce22ba5f34bd6809b2a3e672f7d61018df52e75b1c00b97191ad29248fbc5c1bb469c0b3e119becdbbc0c838ad3692184d582408852fcf6545f33412744a9c15c62541db070c3189b54b70b9b31e0e1cb5ed50e10256da4ee52914a4cb2044f843ec0578fcfbe"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x402}}]}) (rerun: 64)
syz_usb_control_io$cdc_ncm(r4, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x0, 0x5, 0xda, {0xda, 0x5, "a8cd6bc8abf563b70b882e81957318f357f766e1150b0abeab58812a726df88e23921531854223a26a0f7903171471a66aa7d1dfbff8cb4dca76e9d33ad6d44cb754f4ba5b91e2eb599a29a7ddc0ea6c0973de6e406140abd8d510d4bd055409e70eef28cdc144809be88532998d7f4edb57b0c378833a7235604b4b266487319a69ffeec197a66a60c0c592b3cb9c97471e0ef3171cc62e8f00e5d55dde5ffe21ea578257e831116f25a5370046181c8fd3ed1d8521b6b9e7cd9590d36c92dd3ebfca04e95b0db57408bcf57138f1b8009f884739971b5a"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000600)={0x20, 0x17, 0x94, "44925d85407de48c147df587233c685f588962b7c995a70d5f52e9187077a36751dd8e6cda4f179ae7cdf76bd7a10db9cbd510ba652e596abbca76ad3b485c70d7797f3529cbee5b4b44de90cebd6a986b223de7befae951a260e74b317b4225873b2ae683bf55861c82d98936cf48ce98cc02c8eff6f6748eac802586fa654df6f4345e66c367d277ef5f7b050ffa21555f20b5"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0xa, 0x401, 0x10000, 0xb, 0x3, 0x5, 0x1, 0x4, 0x8, 0x0, 0x3, 0x8aea}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x1000}, &(0x7f00000007c0)={0x20, 0x83, 0x2}, &(0x7f0000000800)={0x20, 0x87, 0x2}, &(0x7f0000000840)={0x20, 0x89, 0x2}})

2.280445219s ago: executing program 5 (id=2034):
ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@local}, {@my=0x0, 0x800000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x418}) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "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"})
r0 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb100000000102000905"], 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x2000010)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xbc)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
open_tree(0xffffffffffffffff, 0x0, 0x89901) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async, rerun: 64)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async, rerun: 64)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) (async, rerun: 64)
syz_usb_connect(0x3, 0x8c6, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
socket$inet(0x2, 0x2, 0x1)
sendmsg$can_raw(r2, 0x0, 0x0) (async, rerun: 32)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04050400c9"], 0x7) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[<r4=>0x0], &(0x7f0000000340)=[<r5=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

2.172085676s ago: executing program 5 (id=2035):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001d002100000000000000000007"], 0x34}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

1.93690977s ago: executing program 6 (id=2037):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0)
r1 = signalfd4(r0, &(0x7f00000000c0)={[0xc]}, 0x8, 0x80800)
ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000000701030000000000000003000000010c00064000000000000080"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0)

1.773385977s ago: executing program 6 (id=2041):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x100)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=<r2=>0xffffffffffffffff)
ppoll(&(0x7f00000000c0)=[{r0, 0x280}, {r0, 0xe2c0}, {r2, 0x8000}, {r0, 0x2}, {r1, 0x4000}, {r0, 0x42}, {r0, 0x1002}, {r0, 0x8}], 0x8, &(0x7f0000000100), &(0x7f0000000140)={[0x19]}, 0x8)
r3 = accept$netrom(r2, &(0x7f0000000180)={{0x3, @rose}, [@netrom, @null, @null, @remote, @bcast, @remote, @remote, @rose]}, &(0x7f0000000200)=0x48)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000240)={0x10000000}) (async)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000280)=0x1, 0x4) (async)
getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async)
r4 = openat(r0, &(0x7f0000000340)='./file0\x00', 0x20200, 0x10)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc)
r5 = memfd_secret(0x80000)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000400)={0x4, 0x0, [{0xe7, 0x0, 0x80000001}, {0x398, 0x0, 0x3}, {0x2c8, 0x0, 0x7}, {0xb0b, 0x0, 0x4}]}) (async, rerun: 64)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (rerun: 64)
readahead(r6, 0x6, 0x3b1a)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) (async)
r7 = signalfd4(r3, &(0x7f00000004c0)={[0x7]}, 0x8, 0x800)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000500)={0x10}) (async)
ioctl$VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000540)={0x5485739c46381902, 0xff, 0x0, 0x80}) (async)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r5)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r8, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x20000000) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x3)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r7) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000740)={'syztnl1\x00', <r10=>0x0, 0x8000, 0x700, 0x0, 0x3, {{0x25, 0x4, 0x1, 0x0, 0x94, 0x66, 0x0, 0x3, 0x2f, 0x0, @private=0xa010100, @local, {[@end, @generic={0x110, 0xf, "67cb5fe826898708116e55d3c9"}, @timestamp={0x44, 0x10, 0xf6, 0x0, 0x2, [0x2, 0x8000, 0x1]}, @timestamp={0x44, 0x8, 0x69, 0x0, 0x1, [0x2]}, @timestamp={0x44, 0x8, 0x1b, 0x0, 0x4, [0x6]}, @timestamp_prespec={0x44, 0x3c, 0xab, 0x3, 0x7, [{@local, 0x7}, {@local, 0x6}, {@empty, 0x71e4}, {@loopback, 0x8}, {@loopback, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1}]}, @end, @generic={0x0, 0xc, "a01d003833812300042e"}, @ra={0x94, 0x4}]}}}}}) (async)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000840)={<r11=>0x0, @multicast1, @empty}, &(0x7f0000000880)=0xc)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r9, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x31c4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xff}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x800}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xa3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xf7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x35f2eb09}]}, 0x8c}, 0x1, 0x0, 0x0, 0x408d4}, 0x4000040) (async)
write(r3, &(0x7f0000000a00)="eac66361e66a0f3ab256ca026dab46f84eacfbd80eb622b63e158c667ad9739ccab4b391f4a404c71b2f46399690", 0x2e) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a40)={<r12=>0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x9, 0x8, 0x8, 0x9, 0x90, 0x7c, 0xab}, &(0x7f0000000b00)=0x9c)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000b40)={r12, @in={{0x2, 0x4e22, @empty}}}, 0x84) (async)
dup(r6) (async)
sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000814)

1.694292325s ago: executing program 6 (id=2042):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xdd, 0x4e, 0x54, 0x40, 0xdba, 0x5000, 0xa942, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x81, 0x0, 0x0, 0xcf, 0xf, 0xa7}}]}}]}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0xb, 0xab, {0xab, 0x21, "fe00af17ec1fdb1f22edb87f686445aeb20092939a301bf05b2d41554f87b87f02e93d8aab93de94250889184182150dccf5a3fcea82b68a06ccdf094e0dd36b5e3710a48ad61f1c063f1ed9e8afbb4c627b4fb5d2365695f4e154e8c5a94f5cf89d9a9e7848cbaff3534130edcec75643fac2262e238869fc9a67f52c46da6100b9dad3585cb9f14eae302a0187432c53eac20c89fc7935e26b5f3eeb6a7e0334bc4a98f539ee705e"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x20, 0xb, 0x6d, "0133d53a7cb0d2d31e0c2196d81b62953896f716790dcce8f639873a833112c4622c30a59fc3eac00d4cf76d064ad099d1acacdbedd11961dc0c825a4d5c2db0f0ede093cd53bec4e799db2f7826025f5629c91a3940cb0213f96ecfa3fc60ecfca76c311d78dae4c69c5b9a32"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x2678, 0xc, 0x9, 0x7, 0x0, 0x3, 0x200, 0x8, 0xf4c7, 0xe, 0x7ff, 0x66}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000440)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0xf9}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x6b9e}})
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x9, 0x307c, 0x4, 0x9, 0x1, 0x401, 0x8, 0x8000, r2}, &(0x7f0000000080)=0x20)
fchdir(r1)

1.561690249s ago: executing program 0 (id=2044):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$unix(r2, &(0x7f0000000c40)=@abs={0x1}, 0x6e)
sendto$unix(r2, &(0x7f0000000100)="db0db12f4e5608fe46959e121735ba88d943ac1c0027a5990533844037934cef834057fa8bda80c744f0941e5c47271db8d801a81fde80ecea1302e7432cdccdd30759f8cc76408fe1b02f731bd2d96a21dd1d4a60f076aad80133d5e9ad8d1b7bdc43d1db192d47aba940bfbbe4f28e38cd27bbfbf2f6981528344e41806681e2608fcb3f62345ab4bd5556774c50f427cca6a7ec6f4763376dea88157d3eb8513259e3dfd78209cb553d2f4545bd1928ead37a1815cb15f5a2c84dc9cda6c90b0af54a7928b80b", 0xc8, 0x4, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e)

1.561133014s ago: executing program 0 (id=2045):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x100, 0x40)
syz_fuse_handle_req(r0, &(0x7f0000008bc0)="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", 0x2000, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, r2, 0x8800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1}, 0x50)

1.539352024s ago: executing program 0 (id=2046):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000740))
r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x104, "06000000000020000acd00", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000280)={"e50d1af80100007ea25e0100ff00f6907ff16b7e00", r2})
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x0, {}, {0xee00}})
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8)
ioprio_get$pid(0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x6, 0x12, 0x0, 0x0, 0xfffffffe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}}, @sadb_address={0x3, 0x6, 0x32, 0x0, 0x0, @in={0x2, 0x4e20, @private=0xa010100}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e26, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, @in6={0xa, 0x4e20, 0xedcb, @private1}}, @sadb_x_sa2={0x2000000000000043, 0x13, 0x3}]}, 0x90}, 0x1, 0x7}, 0x10010000)

1.503176262s ago: executing program 0 (id=2047):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70023000000090507", @ANYRES32], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

925.399776ms ago: executing program 0 (id=2048):
r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0)
get_mempolicy(0x0, &(0x7f0000000080), 0xfc3a, &(0x7f0000f8d000/0x1000)=nil, 0x3)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x56, 0xd, 0x8d, 0x8, 0x1a72, 0x1002, 0x6021, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x3, 0xb0, 0x0, [{{0x9, 0x4, 0x28, 0x0, 0x2, 0x2a, 0xa4, 0xdd, 0x3, [], [{{0x9, 0x5, 0x4, 0x2, 0x20, 0xa, 0x6, 0x9}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x0, 0xf2, 0x4}}]}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0})
r1 = userfaultfd(0x81000)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000f8d000/0x1000)=nil, &(0x7f0000f8d000/0x1000)=nil, 0x1000, 0x1})
keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)="f56f3fa31c1d4910fb35edc4d9e02922a54620d156d062f97d0dbf2bf8e628dbe9ab974dd294701098ad8b78be0c56d35211e87d9669fc23f3c3a512aeebe7c95b", 0x41})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)

381.529761ms ago: executing program 0 (id=2052):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async)
socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) (async)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x44, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)='0\x00')
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000008c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="20071e0000008a1e026700010000000000003eea202592ca5a63e60f9e5c4c000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

280.589189ms ago: executing program 4 (id=2053):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x24, r2, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="a9"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4890}, 0x4010)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)
sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x18}}], 0x1, 0x44008004)
write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef)

156.310868ms ago: executing program 4 (id=2054):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000001400)={0x0, 0x38, &(0x7f0000003180)={&(0x7f0000001440)={0x28, 0x140b, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x7ffffffe}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}}, 0x48c0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='attr/prev\x00')
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r2, r2, 0x80000)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4063, 0xfdf}, {&(0x7f0000000780)=""/4137, 0x1029}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000000040)=""/205, 0xcd}], 0x5}, 0x120)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000400)=[@increfs_done={0x40106308, 0x0, 0xfc}], 0x0, 0x0, 0x0})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6)

65.446938ms ago: executing program 4 (id=2055):
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7d}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x34, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_a, @from_mac=@device_b, {0x5, 0x1}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x1e, @val={0x8c, 0x10, {0xd74, "d46c8bd9671d", @short="8deccb81f6366051"}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x72}]]}, 0x88}, 0x1, 0x0, 0x0, 0x8014}, 0x8000)
bind$isdn_base(0xffffffffffffffff, &(0x7f0000000240)={0x22, 0x1, 0xdb, 0x3, 0xfb}, 0x6)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', <r2=>0x0, 0x2f, 0xf7, 0x3, 0xa5, 0x4a, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x4, 0x9}})
lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0xffff, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x3b, r2, r3}, {0xfffffffffffffff7, 0x2, 0x7, 0x31db, 0x39f0, 0x337}, {0x1, 0x4be, 0x7, 0xfffffffffffffffe}, 0x6, 0x6e6bb7, 0x0, 0x0, 0x0, 0x2}, {{@in=@private=0xa010101, 0x4d3, 0x32}, 0x2, @in=@broadcast, 0x3501, 0x2, 0x3, 0x68, 0x8, 0x3, 0x6}}, 0xe8)
writev(r0, &(0x7f0000000540)=[{&(0x7f0000000500)}], 0x1)
r4 = signalfd4(r0, &(0x7f0000000580)={[0x8]}, 0x8, 0x800)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x92}, 0x80)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/profiling', 0x40, 0x135)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000740)={'veth1_vlan\x00', @link_local})
syz_emit_vhci(&(0x7f0000000780)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1c}, "b184fe8d976410e6abcebd5656e72a7c791a82fe9a819728db4b4398"}, 0x20)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x142)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000800)={0x6, 0x6, 0x2, 0x8, 0xabe}, 0x14)
getpeername$inet6(r6, &(0x7f0000000840), &(0x7f0000000880)=0x1c)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d5}, 0x4801)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000009c0)=@req3={0x1, 0x7, 0x2, 0x2b43, 0x80000001, 0x0, 0x80000001}, 0x1c)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, <r9=>0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000e40)={r9, 0x3, 0x0, [0xa, 0x3, 0x5e1, 0x10000, 0x100000001], [0x2, 0x6, 0x8, 0xa, 0x81, 0x9, 0x3, 0x58, 0x3, 0x1, 0x5b9b, 0x8, 0x5, 0x81, 0xffffffffffffffff, 0xbd, 0x6, 0x9, 0x2, 0x6, 0x3, 0x101, 0x6, 0x8, 0xe6, 0x8, 0x4, 0x0, 0x7, 0x2, 0xfffffffffffffff9, 0x0, 0x5, 0x9, 0xffffffff, 0x7, 0x7, 0x7, 0xf959, 0x3, 0x4, 0x18, 0x0, 0x10001, 0x4, 0x8, 0x4, 0xcb4, 0x4, 0x1, 0x3, 0x1, 0xfffffffffffffff7, 0x8000, 0x1, 0x8000000000000000, 0x110c, 0xfe6, 0x10, 0x8001, 0x9, 0x3ff, 0x3, 0x8, 0x6, 0x4, 0x8, 0x401, 0xffffffffffffff39, 0x8, 0xcf52, 0x9, 0x0, 0x957, 0x1, 0xca, 0x4, 0x5, 0x7fff, 0x4, 0x1, 0x5, 0x3, 0x6, 0x2482, 0x8, 0x42b, 0x5, 0x6, 0x8, 0x1, 0x1, 0x0, 0x0, 0xc4, 0x7f, 0x101, 0x7, 0x80000001, 0x7d, 0x1, 0x1, 0x3, 0xa41, 0x3, 0x7, 0xb, 0x1, 0x40, 0x6, 0x6, 0x7fffffff, 0x6, 0x8000000000000001, 0x0, 0x9, 0x8, 0x5, 0x1, 0x3f00000000000, 0x99]})
recvfrom(r6, &(0x7f0000001280)=""/12, 0xc, 0x2, &(0x7f00000012c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80)
r10 = syz_open_dev$sg(&(0x7f0000001340), 0xe76, 0x8800)
ioctl$SCSI_IOCTL_SYNC(r10, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001380)={'wg1\x00'})

64.78905ms ago: executing program 4 (id=2056):
r0 = syz_open_dev$media(&(0x7f0000000040), 0x6, 0x100)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
r2 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x80044942, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x800)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYRES8=r3, @ANYRESHEX=r1, @ANYRES32=r4], 0x280}, 0x1, 0x0, 0x0, 0x4c000}, 0xc845)
read$alg(r3, &(0x7f0000000540)=""/4104, 0x1008)
r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$update(0x2, r5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)=ANY=[@ANYBLOB="aae14105", @ANYRES16=r7, @ANYRES64=r1, @ANYRES32=r8, @ANYBLOB="040013000a000600080211000001000006001000a0"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10c41, 0x40)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30)
umount2(&(0x7f0000000380)='./file0\x00', 0x1)
r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}})
r11 = socket$inet6(0xa, 0x3, 0x8000000003c)
bind$inet6(r11, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @mcast1, 0x7}, 0x1c)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x31, 0xffffffffffffffff, 0xf983e000)
ioctl$SNDRV_TIMER_IOCTL_START(r10, 0x54a0)

35.015507ms ago: executing program 4 (id=2057):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'pcl818\x00', [0x3, 0x2, 0xdfd, 0x284e1, 0x2f, 0x2008, 0x7, 0x80008, 0x80ffe, 0x2, 0x1, 0x8500, 0xd6c, 0x3000005, 0x0, 0xffff, 0xffffffa8, 0x1, 0x1ff, 0x8, 0xcdc5, 0x40000, 0x8, 0x6, 0x746f, 0x8, 0x9, 0x8, 0x2f03, 0x4, 0x7fff]})

0s ago: executing program 4 (id=2058):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd)
listen(r2, 0x80)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f00000000c0)=0xe, 0x4)
bind$alg(r4, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r5 = accept$netrom(r2, 0x0, 0x0)
connect$netrom(r5, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12b41001ae6c774081173809437a010203010902240001000300100904b0fb02ce01ba050501080065050a09051a03ff030aae57"], 0x0)

kernel console output (not intermixed with test programs):

 has invalid maxpacket 120, setting to 8
[  285.802317][ T5921] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  285.816372][ T5921] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  285.825560][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.835618][ T5921] usb 1-1: config 0 descriptor??
[  285.841529][T15396] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  285.848953][T15396] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  285.860003][ T5921] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  285.963673][   T37] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  285.972088][   T37] usb 4-1: config 0 has no interface number 0
[  285.978248][   T37] usb 4-1: config 0 interface 41 has no altsetting 0
[  285.987453][   T37] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  285.997032][   T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.005198][   T37] usb 4-1: Product: syz
[  286.009399][   T37] usb 4-1: Manufacturer: syz
[  286.014150][   T37] usb 4-1: SerialNumber: syz
[  286.021102][   T37] usb 4-1: config 0 descriptor??
[  286.065630][ T5897] usb 1-1: USB disconnect, device number 119
[  286.079360][ T5897] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  286.229874][   T37] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  286.245746][   T37] usb 4-1: USB disconnect, device number 121
[  286.678869][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  286.689074][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  286.703028][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  286.714210][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  286.722194][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  286.987074][T15531] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1134'.
[  287.031251][T15531] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  287.066702][T15562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.072826][T15443] chnl_net:caif_netlink_parms(): no params data found
[  287.118644][T15531] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1134'.
[  287.128194][T15531] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  287.133176][   T30] audit: type=1326 audit(1766833678.173:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15572 comm="syz.3.1136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f792898f749 code=0x0
[  287.235796][T15594] fuse: Unknown parameter '�'
[  287.244135][T15594] overlay: Unknown parameter 'fowner'
[  287.372861][T15443] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.380196][T15638] binder: 15635:15638 ioctl c0306201 2000000003c0 returned -14
[  287.392239][T15443] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.410789][T15443] bridge_slave_0: entered allmulticast mode
[  287.431194][T15443] bridge_slave_0: entered promiscuous mode
[  287.440995][T15443] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.448531][T15443] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.464779][T15443] bridge_slave_1: entered allmulticast mode
[  287.473551][T15642] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1141'.
[  287.474313][T15443] bridge_slave_1: entered promiscuous mode
[  287.546342][T15443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.559818][ T5151] Bluetooth: hci1: unexpected event for opcode 0x0403
[  287.563508][T15443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.592247][ T5819] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  287.637887][T15443] team0: Port device team_slave_0 added
[  287.648348][T15443] team0: Port device team_slave_1 added
[  287.703890][T15443] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.711114][T15443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.739082][T15443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.756869][ T5819] usb 1-1: config 0 has an invalid interface number: 17 but max is 0
[  287.765443][ T5819] usb 1-1: config 0 has no interface number 0
[  287.776418][T15443] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.783681][T15443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.813145][T15443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.825819][ T5819] usb 1-1: New USB device found, idVendor=07ca, idProduct=a800, bcdDevice=98.f4
[  287.835041][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.843523][ T5819] usb 1-1: Product: syz
[  287.847743][ T5819] usb 1-1: Manufacturer: syz
[  287.852500][ T5819] usb 1-1: SerialNumber: syz
[  287.870477][ T5819] usb 1-1: config 0 descriptor??
[  287.883184][ T5819] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state.
[  287.901464][ T5819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  287.914954][ T5819] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800))
[  287.930927][ T5819] usb 1-1: media controller created
[  287.935844][T15443] hsr_slave_0: entered promiscuous mode
[  287.943620][T15443] hsr_slave_1: entered promiscuous mode
[  287.950218][T15443] debugfs: 'hsr0' already exists in 'hsr'
[  287.950636][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  287.957573][T15443] Cannot create hsr debugfs directory
[  288.019682][ T5819] dvb-usb: bulk message failed: -22 (6/0)
[  288.033923][ T5819] dvb-usb: bulk message failed: -22 (6/0)
[  288.048786][ T5819] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)'
[  288.094830][T15602] netlink: 7040 bytes leftover after parsing attributes in process `syz.0.1138'.
[  288.111811][T15602] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  288.151780][ T5819] rc_core: IR keymap rc-avermedia-m135a not found
[  288.158470][ T5819] Registered IR keymap rc-empty
[  288.170601][ T5819] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  288.198644][ T5819] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input37
[  288.223646][ T5819] dvb-usb: schedule remote query interval to 150 msecs.
[  288.235194][ T5819] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected.
[  288.271791][ T5819] usb 1-1: USB disconnect, device number 120
[  288.369000][ T5819] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected.
[  288.565009][T15443] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  288.584687][T15443] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  288.596105][T15443] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  288.606415][T15443] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  288.671898][ T5921] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[  288.699323][T15443] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.728372][T15875] batadv_slave_0: entered promiscuous mode
[  288.739352][T15443] 8021q: adding VLAN 0 to HW filter on device team0
[  288.755501][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'.
[  288.763588][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.772062][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.772458][ T5151] Bluetooth: hci4: command tx timeout
[  288.786323][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.793648][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.806863][T15874] batadv_slave_0: left promiscuous mode
[  288.833076][ T5921] usb 4-1: device descriptor read/64, error -71
[  289.044830][T15443] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.093613][ T5921] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  289.202162][ T5898] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  289.251999][ T5921] usb 4-1: device descriptor read/64, error -71
[  289.261347][T15443] veth0_vlan: entered promiscuous mode
[  289.273955][T15443] veth1_vlan: entered promiscuous mode
[  289.305808][T15443] veth0_macvtap: entered promiscuous mode
[  289.317147][T15443] veth1_macvtap: entered promiscuous mode
[  289.339490][T15443] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.355213][T15443] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.370308][   T61] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.380164][   T61] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.382631][ T5921] usb usb4-port1: attempt power cycle
[  289.396041][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.406958][ T5898] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  289.416800][   T61] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.427102][   T61] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.438364][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.453660][ T5898] usb 1-1: config 0 descriptor??
[  289.490331][ T5898] pwc: Askey VC010 type 2 USB webcam detected.
[  289.524209][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.545504][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.578033][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.587636][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.743720][ T5921] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  289.784132][ T5921] usb 4-1: device descriptor read/8, error -71
[  289.888814][ T5898] pwc: recv_control_msg error -32 req 02 val 2b00
[  289.897050][ T5898] pwc: recv_control_msg error -32 req 02 val 2700
[  289.904601][ T5898] pwc: recv_control_msg error -32 req 02 val 2c00
[  289.907294][T15885] overlayfs: failed to resolve '/	�

': -2
[  290.001821][   T37] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  290.022563][ T5921] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[  290.052594][ T5921] usb 4-1: device descriptor read/8, error -71
[  290.153457][   T37] usb 6-1: config 0 has an invalid interface number: 63 but max is 0
[  290.162423][ T5921] usb usb4-port1: unable to enumerate USB device
[  290.168867][   T37] usb 6-1: config 0 has no interface number 0
[  290.176529][   T37] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=b2.a1
[  290.185818][   T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.196319][   T37] usb 6-1: config 0 descriptor??
[  290.407402][T15915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.418754][T15927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.421632][T15915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.429315][T15927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.514045][   T37] usb 6-1: USB disconnect, device number 2
[  290.604040][ T5151] Bluetooth: hci4: unexpected event 0x03 length: 19 > 11
[  290.678561][ T5898] pwc: recv_control_msg error -71 req 04 val 1000
[  290.699633][ T5898] pwc: recv_control_msg error -71 req 04 val 1300
[  290.707979][ T5898] pwc: recv_control_msg error -71 req 04 val 1400
[  290.716205][ T5898] pwc: recv_control_msg error -71 req 02 val 2000
[  290.727037][ T5898] pwc: recv_control_msg error -71 req 02 val 2100
[  290.734238][ T5898] pwc: recv_control_msg error -71 req 04 val 1500
[  290.741302][ T5898] pwc: recv_control_msg error -71 req 02 val 2500
[  290.754087][ T5898] pwc: recv_control_msg error -71 req 02 val 2400
[  290.781578][ T5898] pwc: recv_control_msg error -71 req 02 val 2600
[  290.813446][ T5898] pwc: recv_control_msg error -71 req 02 val 2900
[  290.820552][ T5898] pwc: recv_control_msg error -71 req 02 val 2800
[  290.829655][ T5898] pwc: recv_control_msg error -71 req 04 val 1100
[  290.837069][ T5898] pwc: recv_control_msg error -71 req 04 val 1200
[  290.848916][ T5898] pwc: Registered as video103.
[  290.853881][ T5151] Bluetooth: hci4: command tx timeout
[  290.871251][T15967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1154'.
[  290.883446][ T5898] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38
[  290.897812][T15960] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1155'.
[  290.912831][ T5898] usb 1-1: USB disconnect, device number 121
[  290.943645][T15960] netlink: 'syz.5.1155': attribute type 5 has an invalid length.
[  290.980092][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1155'.
[  291.008148][T15960] netlink: 'syz.5.1155': attribute type 1 has an invalid length.
[  291.234882][  T796] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  291.235831][T16000] binder: BC_ATTEMPT_ACQUIRE not supported
[  291.250296][T16000] binder: 15999:16000 ioctl c0306201 2000000001c0 returned -22
[  291.391805][  T796] usb 6-1: Using ep0 maxpacket: 16
[  291.398738][  T796] usb 6-1: unable to get BOS descriptor or descriptor too short
[  291.409468][  T796] usb 6-1: config 13 has an invalid interface number: 50 but max is 0
[  291.418460][  T796] usb 6-1: config 13 has no interface number 0
[  291.425167][  T796] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16
[  291.435510][  T796] usb 6-1: config 13 interface 50 has no altsetting 0
[  291.444919][  T796] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  291.456639][  T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.465813][  T796] usb 6-1: Product: syz
[  291.470010][  T796] usb 6-1: Manufacturer: syz
[  291.479682][  T796] usb 6-1: SerialNumber: syz
[  291.497304][T15977] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  291.646188][T16029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.660260][T16029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.708546][T16037] team0: entered allmulticast mode
[  291.715384][T16037] team_slave_0: entered allmulticast mode
[  291.721139][T16037] team_slave_1: entered allmulticast mode
[  291.755093][  T796] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  291.762403][  T796] usb 6-1: MIDIStreaming interface descriptor not found
[  291.828794][  T796] usb 6-1: USB disconnect, device number 3
[  291.871787][ T5950] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  291.881302][   T37] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[  291.889657][ T6024] udevd[6024]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  291.989431][T16075] 9p: Bad value for 'wfdno'
[  291.999907][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1167'.
[  292.084201][   T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.109593][ T5950] usb 1-1: unable to get BOS descriptor or descriptor too short
[  292.132033][   T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.143657][   T37] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  292.156671][ T5950] usb 1-1: config 3 has an invalid interface number: 8 but max is 3
[  292.164813][ T5950] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  292.175238][   T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.186939][ T5950] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 4
[  292.196867][ T5950] usb 1-1: config 3 has no interface number 0
[  292.204409][   T37] usb 4-1: config 0 descriptor??
[  292.209644][ T5950] usb 1-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  292.220763][ T5950] usb 1-1: config 3 interface 8 altsetting 6 endpoint 0x82 has invalid wMaxPacketSize 0
[  292.233434][ T5950] usb 1-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  292.246617][ T5950] usb 1-1: config 3 interface 8 has no altsetting 0
[  292.256079][ T5950] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be
[  292.265699][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.274325][ T5950] usb 1-1: Product: syz
[  292.279253][ T5950] usb 1-1: Manufacturer: syz
[  292.283979][ T5950] usb 1-1: SerialNumber: syz
[  292.401800][ T5819] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  292.499505][ T5950] appledisplay 1-1:3.8: Submitting URB failed
[  292.506589][ T5950] appledisplay 1-1:3.8: probe with driver appledisplay failed with error -5
[  292.520118][ T5950] usb 1-1: USB disconnect, device number 122
[  292.564412][ T5819] usb 6-1: not running at top speed; connect to a high speed hub
[  292.576461][ T5819] usb 6-1: config 1 has an invalid interface number: 238 but max is 0
[  292.586005][ T5819] usb 6-1: config 1 has an invalid interface number: 124 but max is 0
[  292.594574][ T5819] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[  292.603939][ T5819] usb 6-1: config 1 has no interface number 0
[  292.611521][ T5819] usb 6-1: config 1 has no interface number 1
[  292.618745][ T5819] usb 6-1: config 1 interface 238 altsetting 175 has an invalid descriptor for endpoint zero, skipping
[  292.630365][ T5819] usb 6-1: config 1 interface 238 altsetting 175 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  292.641987][ T5819] usb 6-1: config 1 interface 238 altsetting 175 has a duplicate endpoint with address 0x3, skipping
[  292.646782][   T37] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0
[  292.652999][ T5819] usb 6-1: config 1 interface 238 altsetting 175 has a duplicate endpoint with address 0x8, skipping
[  292.665117][   T37] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0
[  292.671101][ T5819] usb 6-1: config 1 interface 238 altsetting 175 has a duplicate endpoint with address 0x1, skipping
[  292.678251][   T37] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0
[  292.688831][ T5819] usb 6-1: config 1 interface 238 altsetting 175 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  292.688879][ T5819] usb 6-1: config 1 interface 124 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  292.688905][ T5819] usb 6-1: config 1 interface 238 has no altsetting 0
[  292.688922][ T5819] usb 6-1: config 1 interface 124 has no altsetting 0
[  292.691454][ T5819] usb 6-1: New USB device found, idVendor=03f0, idProduct=a31d, bcdDevice=97.0e
[  292.704776][   T37] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0
[  292.708306][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.722477][   T37] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0
[  292.745043][ T5819] usb 6-1: Product: 䁻گ픯캽쯿묏뀪碦⑨䚿㖚㶂惒⡷斊ⴹ䦉︌
[  292.776398][   T37] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0
[  292.776431][   T37] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0
[  292.790616][ T5819] usb 6-1: Manufacturer: Ⰹ
[  292.792451][   T37] pyra 0003:1E7D:2CF6.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0
[  292.795667][ T5819] usb 6-1: SerialNumber: syz
[  292.823627][T16077] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  292.934827][ T5151] Bluetooth: hci4: command tx timeout
[  293.041339][ T5819] option 6-1:1.238: GSM modem (1-port) converter detected
[  293.102426][ T5819] usb 6-1: USB disconnect, device number 4
[  293.123108][T16119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1172'.
[  293.135512][ T5819] option 6-1:1.238: device disconnected
[  293.139827][T16119] netlink: 'syz.0.1172': attribute type 28 has an invalid length.
[  293.357789][T16130] netlink: 'syz.4.1173': attribute type 5 has an invalid length.
[  293.401778][ T5950] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  293.464188][T16133] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  293.474437][T16133] overlayfs: missing 'lowerdir'
[  293.551760][ T5950] usb 1-1: Using ep0 maxpacket: 16
[  293.560639][ T5950] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  293.570045][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.580030][ T5950] usb 1-1: Product: syz
[  293.585026][ T5950] usb 1-1: Manufacturer: syz
[  293.589695][ T5950] usb 1-1: SerialNumber: syz
[  293.613927][ T5950] usb 1-1: config 0 descriptor??
[  293.637389][T16139] 9p: Could not find request transport: tcp

[  293.673005][   T37] pyra 0003:1E7D:2CF6.0025: couldn't init struct pyra_device
[  293.682512][T16147] Bluetooth: MGMT ver 1.23
[  293.689666][   T37] pyra 0003:1E7D:2CF6.0025: couldn't install mouse
[  293.703590][   T37] pyra 0003:1E7D:2CF6.0025: probe with driver pyra failed with error -71
[  293.739704][   T37] usb 4-1: USB disconnect, device number 126
[  293.807198][  T178] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x23
[  293.853708][ T5921] usb 1-1: USB disconnect, device number 123
[  293.932242][T16176] tap0: tun_chr_ioctl cmd 1074025678
[  293.937708][T16176] tap0: group set to 21
[  294.214614][ T5921] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  294.327139][T16193] netlink: 57 bytes leftover after parsing attributes in process `syz.4.1182'.
[  294.384770][ T5921] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  294.431528][ T5921] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  294.436528][T16197] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  294.444667][ T5921] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  294.463487][ T5921] usb 6-1: config 0 interface 0 has no altsetting 0
[  294.480049][ T5921] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  294.491796][ T5898] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[  294.493708][ T5921] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  294.521120][ T5921] usb 6-1: config 0 interface 0 has no altsetting 0
[  294.535008][ T5921] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  294.562380][ T5921] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  294.582069][ T5921] usb 6-1: config 0 interface 0 has no altsetting 0
[  294.589809][ T5921] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  294.602628][ T5921] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  294.615569][ T5921] usb 6-1: config 0 interface 0 has no altsetting 0
[  294.623351][ T5921] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  294.634712][ T5921] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  294.642571][ T5898] usb 4-1: Using ep0 maxpacket: 16
[  294.646291][ T5921] usb 6-1: config 0 interface 0 has no altsetting 0
[  294.660321][ T5921] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  294.663352][ T5898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  294.670683][ T5921] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  294.699945][ T5921] usb 6-1: config 0 interface 0 has no altsetting 0
[  294.706780][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  294.709518][ T5898] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  294.726731][ T5921] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  294.746550][ T5921] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  294.746696][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.766741][ T5921] usb 6-1: config 0 interface 0 has no altsetting 0
[  294.778296][ T5921] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  294.791792][ T5921] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  294.801923][ T5898] usb 4-1: Product: syz
[  294.811786][ T5898] usb 4-1: Manufacturer: syz
[  294.811796][ T5921] usb 6-1: config 0 interface 0 has no altsetting 0
[  294.814167][ T5921] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  294.816410][ T5898] usb 4-1: SerialNumber: syz
[  294.825009][ T5921] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  294.887014][ T5921] usb 6-1: Product: syz
[  294.896730][ T5921] usb 6-1: Manufacturer: syz
[  294.911850][ T5921] usb 6-1: SerialNumber: syz
[  294.928207][ T5921] usb 6-1: config 0 descriptor??
[  294.955393][ T5921] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  295.022578][ T5151] Bluetooth: hci4: command tx timeout
[  295.099020][T16186] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1180'.
[  295.224290][ T5898] usb 4-1: 0:2 : does not exist
[  295.234105][ T5898] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  295.268435][    C1] usb 6-1: yurex_control_callback - control failed: -71
[  295.277793][ T5921] usb 6-1: USB disconnect, device number 5
[  295.291288][ T5921] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  295.297692][T16246] yurex 6-1:0.0: yurex_write - failed to send bulk msg, error -19
[  295.339490][ T5898] usb 4-1: USB disconnect, device number 127
[  295.452712][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  296.052010][ T5898] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  296.212872][ T5898] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  296.231816][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.239849][ T5898] usb 4-1: Product: syz
[  296.251860][ T5898] usb 4-1: Manufacturer: syz
[  296.256483][ T5898] usb 4-1: SerialNumber: syz
[  296.274797][ T5898] usb 4-1: config 0 descriptor??
[  296.283785][ T5898] gspca_main: sunplus-2.14.0 probing 055f:c230
[  296.619517][ T5920] usb 4-1: USB disconnect, device number 2
[  296.831926][   T37] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  297.012597][   T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  297.041778][ T5920] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  297.049417][   T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.071755][   T37] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00
[  297.080883][   T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.099853][   T37] usb 6-1: config 0 descriptor??
[  297.181864][ T5920] usb 4-1: device descriptor read/64, error -71
[  297.429673][ T5920] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  297.474167][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e27a800: rx timeout, send abort
[  297.491991][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807e27a800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  297.591905][ T5920] usb 4-1: device descriptor read/64, error -71
[  297.712426][ T5920] usb usb4-port1: attempt power cycle
[  297.719856][   T37] usbhid 6-1:0.0: can't add hid device: -71
[  297.738633][   T37] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  297.767608][   T37] usb 6-1: USB disconnect, device number 6
[  298.171874][ T5920] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  298.192450][ T5920] usb 4-1: device descriptor read/8, error -71
[  298.431912][ T5920] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  298.452720][ T5920] usb 4-1: device descriptor read/8, error -71
[  298.562200][ T5920] usb usb4-port1: unable to enumerate USB device
[  299.207063][T16404] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1208'.
[  299.491800][   T37] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  299.621816][   T37] usb 6-1: device descriptor read/64, error -71
[  299.817866][T16415] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1210'.
[  299.861846][   T37] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  300.001820][   T37] usb 6-1: device descriptor read/64, error -71
[  300.123818][   T37] usb usb6-port1: attempt power cycle
[  300.472102][   T37] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  300.492471][   T37] usb 6-1: device descriptor read/8, error -71
[  300.683034][ T5920] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  300.741868][   T37] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  300.762459][   T37] usb 6-1: device descriptor read/8, error -71
[  300.821761][ T5920] usb 4-1: device descriptor read/64, error -71
[  300.872005][   T37] usb usb6-port1: unable to enumerate USB device
[  301.061824][ T5920] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  301.201789][ T5920] usb 4-1: device descriptor read/64, error -71
[  301.312783][ T5920] usb usb4-port1: attempt power cycle
[  301.493660][   T30] audit: type=1326 audit(1766833692.543:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117318f749 code=0x7ffc0000
[  301.518884][   T30] audit: type=1326 audit(1766833692.543:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117318f749 code=0x7ffc0000
[  301.542755][   T30] audit: type=1326 audit(1766833692.553:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117318f749 code=0x7ffc0000
[  301.565356][   T30] audit: type=1326 audit(1766833692.553:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f117318df90 code=0x7ffc0000
[  301.588811][   T30] audit: type=1326 audit(1766833692.553:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117318f749 code=0x7ffc0000
[  301.611955][   T30] audit: type=1326 audit(1766833692.553:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117318f749 code=0x7ffc0000
[  301.636615][   T30] audit: type=1326 audit(1766833692.553:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117318f749 code=0x7ffc0000
[  301.659481][   T30] audit: type=1326 audit(1766833692.553:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117318f749 code=0x7ffc0000
[  301.671858][ T5920] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  301.682247][   T30] audit: type=1326 audit(1766833692.553:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f117318f749 code=0x7ffc0000
[  301.702400][ T5920] usb 4-1: device descriptor read/8, error -71
[  301.711928][   T30] audit: type=1326 audit(1766833692.553:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117318f749 code=0x7ffc0000
[  301.952970][ T5920] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  301.982497][ T5920] usb 4-1: device descriptor read/8, error -71
[  302.093628][ T5920] usb usb4-port1: unable to enumerate USB device
[  302.411197][T16456] netlink: 'syz.5.1222': attribute type 10 has an invalid length.
[  302.419520][T16456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.431093][T16456] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.444250][T16456] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  302.521640][T16459] Bluetooth: (null): Invalid header checksum
[  302.537459][   T13] Bluetooth: (null): Invalid header checksum
[  302.643672][T16466] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input40
[  302.652477][   T13] Bluetooth: (null): Invalid header checksum
[  302.879632][T16486] overlayfs: failed to clone upperpath
[  302.895228][T16486] ptrace attach of "./syz-executor exec"[5829] was attempted by "��ԓ�7�E\x09Ż    ������P�"[16486]
[  302.964709][ T5819] IPVS: starting estimator thread 0...
[  303.015663][T16493] tipc: Started in network mode
[  303.020638][T16493] tipc: Node identity ac1414aa, cluster identity 4711
[  303.031955][T16493] tipc: Enabled bearer <udp:s>, priority 10
[  303.061875][T16496] IPVS: using max 35 ests per chain, 84000 per kthread
[  303.440000][T16509] cgroup2: Unknown parameter ''
[  303.445502][T16508] cgroup2: Unknown parameter ''
[  303.451809][ T5819] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  303.613142][ T5819] usb 6-1: Using ep0 maxpacket: 32
[  303.621552][ T5819] usb 6-1: config 0 has an invalid interface number: 235 but max is 0
[  303.630158][ T5819] usb 6-1: config 0 has an invalid interface number: 10 but max is 0
[  303.638429][ T5819] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.650872][ T5819] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  303.666703][ T5819] usb 6-1: config 0 has no interface number 0
[  303.674731][ T5819] usb 6-1: config 0 has no interface number 1
[  303.680955][ T5819] usb 6-1: config 0 interface 235 altsetting 0 endpoint 0x1 has invalid maxpacket 9216, setting to 64
[  303.692465][ T5819] usb 6-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  303.709835][ T5819] usb 6-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47
[  303.724331][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.732534][ T5819] usb 6-1: Product: syz
[  303.736702][ T5819] usb 6-1: Manufacturer: syz
[  303.741288][ T5819] usb 6-1: SerialNumber: syz
[  303.749448][ T5819] usb 6-1: config 0 descriptor??
[  303.871831][ T5930] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  303.967353][ T5819] kaweth 6-1:0.235: Firmware present in device.
[  304.053864][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.065133][ T5930] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  304.074491][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.088219][ T5930] usb 4-1: config 0 descriptor??
[  304.151850][  T796] tipc: Node number set to 2886997162
[  304.303906][ T5930] usbhid 4-1:0.0: can't add hid device: -71
[  304.309970][ T5930] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  304.323930][ T5930] usb 4-1: USB disconnect, device number 11
[  304.751839][ T5930] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  304.903514][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.914673][ T5930] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  304.923859][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.934787][ T5930] usb 4-1: config 0 descriptor??
[  305.802609][T16549] netlink: 'syz.4.1237': attribute type 1 has an invalid length.
[  305.810642][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1237'.
[  306.146787][ T5819] kaweth 6-1:0.235: Error reading configuration (-71), no net device created
[  306.165677][ T5819] kaweth 6-1:0.235: probe with driver kaweth failed with error -5
[  306.190484][ T5819] kaweth 6-1:0.10: Firmware present in device.
[  306.198969][ T5819] kaweth 6-1:0.10: Error reading configuration (-71), no net device created
[  306.208910][ T5819] kaweth 6-1:0.10: probe with driver kaweth failed with error -5
[  306.240589][ T5819] usb 6-1: USB disconnect, device number 11
[  306.377093][T16567] fuse: Bad value for 'fd'
[  306.437847][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1240'.
[  306.447156][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1240'.
[  306.498160][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'.
[  306.508465][T16571] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  306.541798][ T5930] usbhid 4-1:0.0: can't add hid device: -71
[  306.547839][ T5930] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  306.586345][ T5930] usb 4-1: USB disconnect, device number 12
[  307.132822][   T37] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  307.293358][   T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  307.304851][   T37] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.319535][   T37] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.330603][   T37] usb 4-1: config 0 interface 0 has no altsetting 0
[  307.340705][   T37] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  307.361077][   T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.384750][   T37] usb 4-1: config 0 descriptor??
[  307.395815][ T5916] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  307.561774][ T5916] usb 6-1: Using ep0 maxpacket: 16
[  307.583057][ T5916] usb 6-1: config 251 has an invalid interface number: 194 but max is 0
[  307.602057][ T5916] usb 6-1: config 251 has no interface number 0
[  307.608455][ T5916] usb 6-1: config 251 interface 194 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16
[  307.631745][ T5916] usb 6-1: config 251 interface 194 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  307.643772][ T5916] usb 6-1: config 251 interface 194 altsetting 1 has an endpoint descriptor with address 0xE3, changing to 0x83
[  307.666924][ T5916] usb 6-1: config 251 interface 194 altsetting 1 endpoint 0x83 has invalid maxpacket 57151, setting to 1024
[  307.679152][ T5916] usb 6-1: config 251 interface 194 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024
[  307.689695][ T5916] usb 6-1: config 251 interface 194 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  307.703161][ T5916] usb 6-1: config 251 interface 194 has no altsetting 0
[  307.712557][ T5916] usb 6-1: New USB device found, idVendor=06cd, idProduct=0101, bcdDevice=f4.e6
[  307.721786][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.729893][ T5916] usb 6-1: Product: syz
[  307.734242][ T5916] usb 6-1: Manufacturer: syz
[  307.738884][ T5916] usb 6-1: SerialNumber: syz
[  307.753913][T16597] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  307.761590][T16597] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  307.858369][T16615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.868804][T16615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.130079][ T5916] keyspan 6-1:251.194: Keyspan - (without firmware) converter detected
[  308.144532][ T5916] usb 6-1: Direct firmware load for keyspan/usa28.fw failed with error -2
[  308.153222][ T5916] usb 6-1: Falling back to sysfs fallback for: keyspan/usa28.fw
[  308.417247][T16641] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1256'.
[  308.821559][T16650] syzkaller1: entered promiscuous mode
[  308.827156][T16650] syzkaller1: entered allmulticast mode
[  308.949819][   T30] kauditd_printk_skb: 104 callbacks suppressed
[  308.949837][   T30] audit: type=1800 audit(1766833699.993:131): pid=16656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1260" name="nullb0" dev="tmpfs" ino=1514 res=0 errno=0
[  308.996271][   T30] audit: type=1800 audit(1766833700.043:132): pid=16656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1260" name="nullb0" dev="tmpfs" ino=1514 res=0 errno=0
[  309.045484][T16661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  309.059020][T16661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1261'.
[  309.558142][T16678] netlink: 'syz.0.1267': attribute type 6 has an invalid length.
[  309.890609][T16592] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  309.916868][   T37] usbhid 4-1:0.0: can't add hid device: -71
[  309.924236][   T37] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  309.936993][   T37] usb 4-1: USB disconnect, device number 13
[  309.969816][T16696] netlink: 'syz.3.1271': attribute type 1 has an invalid length.
[  309.978575][T16696] netlink: 'syz.3.1271': attribute type 2 has an invalid length.
[  310.382023][   T37] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  310.542119][   T37] usb 4-1: Using ep0 maxpacket: 16
[  310.550760][   T37] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.573227][   T37] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  310.584600][   T37] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  310.594827][   T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.603027][   T37] usb 4-1: Product: syz
[  310.607199][   T37] usb 4-1: Manufacturer: syz
[  310.612912][   T37] usb 4-1: SerialNumber: syz
[  310.824966][T16701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1272'.
[  310.838940][T16701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.848902][T16701] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.966474][T16721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.976098][T16721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.369663][T16731] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  311.376561][T16731] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  311.893569][T16736] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.1280'.
[  311.904213][T16736] openvswitch: netlink: Key 9 has unexpected len 21752 expected 4
[  313.061141][ T5930] usb 4-1: USB disconnect, device number 14
[  313.481806][ T5930] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  313.645507][ T5930] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  313.654954][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.663083][ T5930] usb 4-1: Product: syz
[  313.667393][ T5930] usb 4-1: Manufacturer: syz
[  313.672088][ T5930] usb 4-1: SerialNumber: syz
[  313.683230][ T5930] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  313.699934][  T796] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  314.015515][ T5930] usb 4-1: USB disconnect, device number 15
[  314.509914][T16824] overlayfs: failed to clone upperpath
[  314.771819][  T796] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  314.778885][  T796] ath9k_htc: Failed to initialize the device
[  314.786485][ T5930] usb 4-1: ath9k_htc: USB layer deinitialized
[  315.114588][ T5930] usb 4-1: new low-speed USB device number 16 using dummy_hcd
[  315.143576][T16835] netlink: 'syz.4.1299': attribute type 21 has an invalid length.
[  315.151637][T16835] netlink: 14532 bytes leftover after parsing attributes in process `syz.4.1299'.
[  315.163070][T16832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'.
[  315.294606][ T5930] usb 4-1: Invalid ep0 maxpacket: 64
[  315.431820][ T5930] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[  315.552002][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  315.578770][T16870] binder: BC_ATTEMPT_ACQUIRE not supported
[  315.585270][T16870] binder: 16869:16870 ioctl c0306201 2000000001c0 returned -22
[  315.593542][ T5930] usb 4-1: Invalid ep0 maxpacket: 64
[  315.608237][ T5930] usb usb4-port1: attempt power cycle
[  315.629385][T16877] tmpfs: Bad value for 'mpol'
[  315.954081][ T5930] usb 4-1: new low-speed USB device number 18 using dummy_hcd
[  315.992745][ T5930] usb 4-1: Invalid ep0 maxpacket: 64
[  316.122877][ T5930] usb 4-1: new low-speed USB device number 19 using dummy_hcd
[  316.152449][ T5930] usb 4-1: Invalid ep0 maxpacket: 64
[  316.161418][ T5930] usb usb4-port1: unable to enumerate USB device
[  316.650331][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'.
[  317.259622][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.270993][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  317.901799][   T37] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  318.057184][   T37] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  318.066088][   T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.080286][   T37] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  318.090833][   T37] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  318.099008][   T37] usb 4-1: Manufacturer: syz
[  318.108923][   T37] usb 4-1: config 0 descriptor??
[  318.171121][T16954] 9p: Bad value for 'wfdno'
[  318.178866][   T37] rc_core: IR keymap rc-hauppauge not found
[  318.185026][   T37] Registered IR keymap rc-empty
[  318.190790][   T37] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  318.205494][   T37] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input41
[  318.340535][   T37] usb 4-1: USB disconnect, device number 20
[  318.674498][T16975] delete_channel: no stack
[  318.681907][T16975] delete_channel: no stack
[  318.805757][T16988] overlayfs: failed to clone upperpath
[  318.982075][T17008] sctp: [Deprecated]: syz.0.1337 (pid 17008) Use of int in maxseg socket option.
[  318.982075][T17008] Use struct sctp_assoc_value instead
[  319.201815][   T37] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  319.338980][T17038] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1347'.
[  319.354958][T17038] binder_alloc: 17037: binder_alloc_buf size 8 failed, no address space
[  319.364847][T17038] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0)
[  319.380028][   T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.397818][   T37] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  319.408324][   T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.418849][   T37] usb 4-1: config 0 descriptor??
[  319.649508][   T37] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor
[  319.682812][   T37] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0026/input/input42
[  319.895461][   T37] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  319.906600][   T30] audit: type=1326 audit(1766833710.953:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.5.1354" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31ab58f749 code=0x0
[  320.129121][T17100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.138501][T17099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.204244][T17107] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  320.573583][T17058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.583547][T17058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.037107][   T37] usb 4-1: USB disconnect, device number 21
[  322.190321][T17167] netlink: 'syz.0.1369': attribute type 83 has an invalid length.
[  322.250406][T17169] bad cache= option: none--�#�1���Ź*�?�
[  322.250406][T17169] ���ɽ��5�aP	��Ng�>�>�3�M�F�� ��Sw�g\���~w��h#��h�r�Bi�"(����X{�5������whk+���@�~P��E'��z�V{�X�.]tlz��3�#�J~� ���V��COu4}�>w�sm�I|�-p��O������qGEGe1
[  322.250406][T17169] 
[  322.280564][T17169] CIFS: VFS: bad cache= option: none--�#�1���Ź*�?�
[  322.280564][T17169] ���ɽ��5�aP	��Ng�>�>�3�M�F�� ��Sw�g\���~w��h#��h�r�Bi�"(����X{�5������whk+���@�~P��E'��z�V{�X�.]tlz��3�#�J~� ���V��COu4}�>w�sm�I|�-p��O������qGEGe1
[  322.312960][T17169] CIFS mount error: No usable UNC path provided in device string!
[  322.312960][T17169] 
[  322.323473][T17169] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  322.691840][   T37] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  322.841730][   T37] usb 4-1: Using ep0 maxpacket: 32
[  322.848497][   T37] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  322.857847][   T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.868832][   T37] usb 4-1: config 0 descriptor??
[  322.879165][   T37] as10x_usb: device has been detected
[  322.885560][   T37] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  322.900100][   T37] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  322.954320][   T37] as10x_usb: error during firmware upload part1
[  322.960990][   T37] Registered device nBox DVB-T Dongle
[  323.009378][T17199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1374'.
[  323.026064][T17199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1374'.
[  323.153546][   T37] usb 4-1: USB disconnect, device number 22
[  323.183370][   T37] Unregistered device nBox DVB-T Dongle
[  323.188874][   T37] as10x_usb: device has been disconnected
[  323.259514][T17218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1375'.
[  323.464185][T17233] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  324.090812][T17282] netlink: 'syz.4.1384': attribute type 1 has an invalid length.
[  324.128234][T17284] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1385'.
[  324.202074][ T5920] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  324.352200][ T5920] usb 4-1: Using ep0 maxpacket: 32
[  324.358803][ T5920] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  324.368330][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.388328][ T5920] gspca_main: nw80x-2.14.0 probing 055f:d001
[  324.678316][T17300] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  324.687274][T17300] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  324.701328][T17300] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  324.710679][T17300] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  324.991284][T17276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.000936][T17276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.173951][T17309] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1391'.
[  325.189915][T17309] overlayfs: failed to clone upperpath
[  325.203521][ T5920] gspca_nw80x: reg_r err -32
[  325.211807][ T5920] nw80x 4-1:3.0: probe with driver nw80x failed with error -32
[  325.227004][ T5920] usb 4-1: USB disconnect, device number 23
[  325.321210][T17323] vxcan0: tx address claim with dlc 0
[  325.330074][T17326] vxcan0: tx address claim with dlc 0
[  325.440082][T17334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.452486][T17334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.672513][ T5930] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  325.938453][T17348] fuse: Bad value for 'rootmode'
[  326.110721][T17358] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.1401'.
[  326.483710][T17373] 9p: Bad value for 'rfdno'
[  326.701322][T17388] netlink: 'syz.4.1408': attribute type 4 has an invalid length.
[  326.851912][ T5930] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  327.012064][ T5930] usb 4-1: Using ep0 maxpacket: 16
[  327.019893][ T5930] usb 4-1: config 1 has no interfaces?
[  327.026402][ T5930] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  327.035655][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.250412][ T5930] usb 4-1: string descriptor 0 read error: -71
[  327.261178][ T5930] usb 4-1: USB disconnect, device number 25
[  327.336352][T17405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1411'.
[  327.717127][   T30] audit: type=1326 audit(1766833718.763:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17427 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c93d8f749 code=0x7ffc0000
[  327.786656][   T30] audit: type=1326 audit(1766833718.783:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17427 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c93d2b829 code=0x7ffc0000
[  327.812304][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[  327.832615][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  327.857925][   T30] audit: type=1326 audit(1766833718.783:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17427 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c93d2b829 code=0x7ffc0000
[  327.912258][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  327.921897][   T30] audit: type=1326 audit(1766833718.793:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17427 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c93d8f749 code=0x7ffc0000
[  327.960063][   T30] audit: type=1326 audit(1766833718.793:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17427 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c93d8f749 code=0x7ffc0000
[  327.985210][   T30] audit: type=1326 audit(1766833718.793:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17427 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c93d2b829 code=0x7ffc0000
[  328.014087][   T30] audit: type=1326 audit(1766833718.793:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17427 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c93d8f749 code=0x7ffc0000
[  328.037056][   T30] audit: type=1326 audit(1766833718.793:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17427 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c93d2b829 code=0x7ffc0000
[  328.044487][T17434] syzkaller1: entered promiscuous mode
[  328.063141][   T30] audit: type=1326 audit(1766833718.793:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17427 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c93d8f749 code=0x7ffc0000
[  328.096291][T17434] syzkaller1: entered allmulticast mode
[  328.198833][   T30] audit: type=1326 audit(1766833718.793:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17427 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c93d2b829 code=0x7ffc0000
[  328.504617][T17454] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1423'.
[  328.657738][  T796] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  328.669127][T17454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.685094][T17454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  328.698941][T17454] bond0 (unregistering): Released all slaves
[  328.834145][  T796] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  328.843526][  T796] usb 4-1: can't read configurations, error -22
[  328.981935][  T796] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  329.133880][  T796] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  329.142121][  T796] usb 4-1: can't read configurations, error -22
[  329.148870][  T796] usb usb4-port1: attempt power cycle
[  329.491895][  T796] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  329.514096][  T796] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  329.522239][  T796] usb 4-1: can't read configurations, error -22
[  329.652192][  T796] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  329.685906][  T796] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  329.694026][  T796] usb 4-1: can't read configurations, error -22
[  329.700598][  T796] usb usb4-port1: unable to enumerate USB device
[  329.801197][T17520] openvswitch: netlink: Tunnel attr 140 out of range max 16
[  330.627045][T17544] fuse: Bad value for 'fd'
[  330.826852][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'.
[  331.502262][T17584] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1445'.
[  331.514471][T17584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1445'.
[  331.525966][T17584] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1445'.
[  331.535324][T17584] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1445'.
[  332.351818][T17595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.370156][T17595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.911779][   T37] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  333.065944][   T37] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  333.076640][   T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.088018][   T37] usb 4-1: Product: syz
[  333.096503][   T37] usb 4-1: Manufacturer: syz
[  333.101319][   T37] usb 4-1: SerialNumber: syz
[  333.520729][   T37] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  333.533012][   T37] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  333.638537][T17631] netlink: 'syz.0.1458': attribute type 3 has an invalid length.
[  333.646749][T17631] netlink: 'syz.0.1458': attribute type 3 has an invalid length.
[  335.023985][T17684] 9p: Could not find request transport: xen
[  335.101260][T17689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'.
[  335.127134][T17687] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  335.137594][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'.
[  335.712477][T17707] overlayfs: failed to clone upperpath
[  336.169654][   T37] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -EPROTO
[  336.183440][   T37] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[  336.195214][   T37] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  336.206172][   T37] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  336.216236][   T37] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  336.235208][   T37] usb 4-1: USB disconnect, device number 30
[  336.275534][T17728] netlink: 822 bytes leftover after parsing attributes in process `syz.0.1478'.
[  336.286781][T17729] netlink: 822 bytes leftover after parsing attributes in process `syz.0.1478'.
[  336.653534][T17738] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.758336][   T30] kauditd_printk_skb: 116 callbacks suppressed
[  336.758352][   T30] audit: type=1800 audit(1766833727.803:260): pid=17746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1482" name="nullb0" dev="tmpfs" ino=1514 res=0 errno=0
[  336.814927][T17746] hugetlbfs: syz.0.1482 (17746): Using mlock ulimits for SHM_HUGETLB is obsolete
[  336.815878][T17738] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.954515][T17738] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.026916][T17751] syzkaller1: entered promiscuous mode
[  337.042296][T17751] syzkaller1: entered allmulticast mode
[  337.078243][T17751] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1484'.
[  337.118139][T17738] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.298725][  T178] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.340699][  T178] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.395632][ T4368] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.418601][ T4368] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.478975][T17783] netdevsim netdevsim3: Direct firmware load for 0 failed with error -2
[  337.499592][T17783] netdevsim netdevsim3: Falling back to sysfs fallback for: 0
[  338.434671][T17812] overlayfs: failed to resolve './file1': -2
[  338.589026][T17827] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1498'.
[  338.727350][T17832] could not open pipe file descriptor
[  338.767406][T17834] x_tables: duplicate entry at hook 1
[  338.781558][T17834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1500'.
[  338.907769][T17842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1504'.
[  338.917770][T17842] netlink: 'syz.4.1504': attribute type 10 has an invalid length.
[  338.926257][T17842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  338.955661][T17843] netlink: 'syz.3.1502': attribute type 10 has an invalid length.
[  338.957938][T17842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  339.027375][T17843] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  340.011887][  T796] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  340.183438][  T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  340.193771][  T796] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  340.203317][  T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.215953][  T796] usb 4-1: config 0 descriptor??
[  340.226794][  T796] pwc: Askey VC010 type 2 USB webcam detected.
[  340.424152][  T796] pwc: send_video_command error -71
[  340.433888][  T796] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  340.441506][  T796] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  340.454500][  T796] usb 4-1: USB disconnect, device number 31
[  340.871818][ T5898] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  341.023383][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  341.033703][ T5898] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  341.044281][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.059117][ T5898] usb 4-1: config 0 descriptor??
[  341.067474][ T5898] pwc: Askey VC010 type 2 USB webcam detected.
[  341.466581][ T5898] pwc: recv_control_msg error -32 req 02 val 2b00
[  341.473912][ T5898] pwc: recv_control_msg error -32 req 02 val 2700
[  341.480999][ T5898] pwc: recv_control_msg error -32 req 02 val 2c00
[  341.488282][ T5898] pwc: recv_control_msg error -32 req 04 val 1000
[  341.495907][ T5898] pwc: recv_control_msg error -32 req 04 val 1300
[  341.503210][ T5898] pwc: recv_control_msg error -32 req 04 val 1400
[  341.510453][ T5898] pwc: recv_control_msg error -32 req 02 val 2000
[  341.518204][ T5898] pwc: recv_control_msg error -32 req 02 val 2100
[  341.525524][ T5898] pwc: recv_control_msg error -32 req 04 val 1500
[  341.549502][ T5898] pwc: recv_control_msg error -32 req 02 val 2500
[  341.963579][ T5898] pwc: recv_control_msg error -71 req 02 val 2900
[  341.976194][ T5898] pwc: recv_control_msg error -71 req 02 val 2800
[  341.977671][ T4368] wlan1: Trigger new scan to find an IBSS to join
[  341.984044][ T5898] pwc: recv_control_msg error -71 req 04 val 1100
[  341.999847][ T5898] pwc: recv_control_msg error -71 req 04 val 1200
[  342.001094][T17882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.011353][ T5898] pwc: Registered as video103.
[  342.024801][T17882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.044190][ T5898] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43
[  342.077072][ T5898] usb 4-1: USB disconnect, device number 32
[  342.264998][T17969] netlink: 'syz.3.1526': attribute type 6 has an invalid length.
[  342.571875][ T5898] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  342.733694][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short
[  342.742578][ T5898] usb 4-1: config 9 has an invalid interface number: 145 but max is 0
[  342.750790][ T5898] usb 4-1: config 9 has no interface number 0
[  342.756971][ T5898] usb 4-1: config 9 interface 145 has no altsetting 0
[  342.766022][ T5898] usb 4-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=66.17
[  342.775344][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.783488][ T5898] usb 4-1: Product: syz
[  342.788689][ T5898] usb 4-1: Manufacturer: syz
[  342.793589][ T5898] usb 4-1: SerialNumber: syz
[  343.004087][T17979] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1529'.
[  343.014621][T17982] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1529'.
[  343.559995][T17991] netlink: 'syz.0.1533': attribute type 2 has an invalid length.
[  343.568177][T17991] netlink: 'syz.0.1533': attribute type 2 has an invalid length.
[  343.578877][T17991] netlink: 'syz.0.1533': attribute type 1 has an invalid length.
[  343.588314][T17990] netlink: 'syz.0.1533': attribute type 2 has an invalid length.
[  343.599439][T17990] netlink: 'syz.0.1533': attribute type 2 has an invalid length.
[  343.608909][T17990] netlink: 'syz.0.1533': attribute type 1 has an invalid length.
[  343.743503][T18004] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1536'.
[  344.770876][T18037] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  344.778948][T18037] overlayfs: failed to set xattr on upper
[  344.785583][T18037] overlayfs: ...falling back to redirect_dir=nofollow.
[  344.793016][T18037] overlayfs: ...falling back to index=off.
[  344.798855][T18037] overlayfs: ...falling back to uuid=null.
[  344.806267][T18037] overlayfs: failed to clone lowerpath
[  345.015448][   T13] wlan1: Trigger new scan to find an IBSS to join
[  345.066083][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1551'.
[  345.145554][T18061] overlayfs: failed to clone lowerpath
[  345.154323][T18061] fuse: Bad value for 'user_id'
[  345.159342][T18061] fuse: Bad value for 'user_id'
[  345.258297][ T5898] quatech2 4-1:9.145: Quatech 2nd gen USB to Serial Driver converter detected
[  345.268823][ T5898] usb 4-1: qt2_attach - failed to power on unit: -71
[  345.277120][ T5898] quatech2 4-1:9.145: probe with driver quatech2 failed with error -71
[  345.291247][ T5898] usb 4-1: USB disconnect, device number 33
[  345.295694][T18074] netlink: 'syz.3.1555': attribute type 31 has an invalid length.
[  345.305537][T18074] netlink: 'syz.3.1555': attribute type 1 has an invalid length.
[  345.711923][ T5898] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  345.841921][ T5898] usb 4-1: device descriptor read/64, error -71
[  346.091898][ T5898] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  346.224293][ T5898] usb 4-1: device descriptor read/64, error -71
[  346.255964][ T5922] IPVS: starting estimator thread 0...
[  346.263745][T18101] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  346.332105][ T5898] usb usb4-port1: attempt power cycle
[  346.371901][T18102] IPVS: using max 35 ests per chain, 84000 per kthread
[  346.681877][ T5898] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  346.703202][ T5898] usb 4-1: device descriptor read/8, error -71
[  346.746230][T18104] tmpfs: Unknown parameter 'usrquota_inodg'
[  346.756114][T18104] overlayfs: failed to clone upperpath
[  346.765123][T18104] tmpfs: Unknown parameter 'grpquota_block_ha�dlimit'
[  346.806738][T18106] netlink: 'syz.4.1563': attribute type 10 has an invalid length.
[  346.829867][T18106] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  346.952134][ T5898] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  346.972808][ T5898] usb 4-1: device descriptor read/8, error -71
[  347.082951][ T5898] usb usb4-port1: unable to enumerate USB device
[  347.701872][T18123] netlink: 'syz.4.1570': attribute type 9 has an invalid length.
[  347.710828][T18123] netlink: 'syz.4.1570': attribute type 11 has an invalid length.
[  347.718802][T18123] netlink: 'syz.4.1570': attribute type 12 has an invalid length.
[  347.726815][T18123] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1570'.
[  347.737946][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1570'.
[  348.445976][   T30] audit: type=1800 audit(1766833739.493:261): pid=18152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1577" name="file1" dev="tmpfs" ino=1426 res=0 errno=0
[  349.329302][T18192] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1581'.
[  349.469026][ T5922] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  349.621886][ T5922] usb 4-1: Using ep0 maxpacket: 8
[  349.630716][ T5922] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  349.639876][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.648081][ T5922] usb 4-1: Product: syz
[  349.652438][ T5922] usb 4-1: Manufacturer: syz
[  349.657046][ T5922] usb 4-1: SerialNumber: syz
[  349.664031][ T5922] usb 4-1: config 0 descriptor??
[  349.672644][ T5922] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244)
[  349.938734][T18204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1584'.
[  350.087303][ T5922] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  350.108364][ T5922] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  350.125632][ T5922] usb 4-1: USB disconnect, device number 38
[  350.237652][T18233] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1589'.
[  350.344395][T18245] kAFS: No cell specified
[  350.641990][  T796] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  350.793648][  T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  350.803912][  T796] usb 4-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df
[  350.813420][  T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.825118][  T796] usb 4-1: config 0 descriptor??
[  350.834148][  T796] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected.
[  351.033966][  T796] pwc: recv_control_msg error -32 req 02 val 2b00
[  351.170984][T18267] team_slave_0: entered promiscuous mode
[  351.177141][T18267] team_slave_1: entered promiscuous mode
[  351.187390][T18266] team_slave_0: left promiscuous mode
[  351.193185][T18266] team_slave_1: left promiscuous mode
[  351.235192][  T796] pwc: recv_control_msg error -71 req 02 val 2700
[  351.257721][  T796] pwc: recv_control_msg error -71 req 04 val 1700
[  351.268093][  T796] pwc: recv_control_msg error -71 req 02 val 2c00
[  351.275996][  T796] pwc: recv_control_msg error -71 req 04 val 1000
[  351.285195][  T796] pwc: recv_control_msg error -71 req 04 val 1300
[  351.298701][  T796] pwc: recv_control_msg error -71 req 04 val 1400
[  351.306376][  T796] pwc: recv_control_msg error -71 req 02 val 2000
[  351.314982][  T796] pwc: recv_control_msg error -71 req 02 val 2100
[  351.322812][  T796] pwc: recv_control_msg error -71 req 02 val 2200
[  351.332301][  T796] pwc: recv_control_msg error -71 req 06 val 0600
[  351.339079][  T796] pwc: recv_control_msg error -71 req 04 val 1500
[  351.346529][  T796] pwc: recv_control_msg error -71 req 02 val 2500
[  351.354582][  T796] pwc: recv_control_msg error -71 req 02 val 2400
[  351.361485][  T796] pwc: recv_control_msg error -71 req 02 val 2600
[  351.368656][  T796] pwc: recv_control_msg error -71 req 02 val 2900
[  351.375680][  T796] pwc: recv_control_msg error -71 req 02 val 2800
[  351.383326][T18286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1603'.
[  351.383865][  T796] pwc: recv_control_msg error -71 req 04 val 1100
[  351.401031][  T796] pwc: recv_control_msg error -71 req 04 val 1200
[  351.409455][T18288] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  351.420381][  T796] pwc: Registered as video103.
[  351.452235][  T796] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44
[  351.606125][  T796] usb 4-1: USB disconnect, device number 39
[  351.803980][T18308] netlink: 'syz.0.1605': attribute type 2 has an invalid length.
[  351.833494][T18308] netlink: 'syz.0.1605': attribute type 2 has an invalid length.
[  352.080704][T18316] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1609'.
[  352.547500][T18327] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1612'.
[  353.339094][T18378] overlayfs: missing 'lowerdir'
[  353.719071][T18390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1630'.
[  353.795450][T18393] program syz.3.1631 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  354.222111][ T5897] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  354.381955][ T5897] usb 4-1: Using ep0 maxpacket: 8
[  354.389080][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short
[  354.399013][ T5897] usb 4-1: config 6 has an invalid interface number: 4 but max is 1
[  354.411806][ T5897] usb 4-1: config 6 has an invalid interface number: 107 but max is 1
[  354.419987][ T5897] usb 4-1: config 6 has no interface number 0
[  354.428650][ T5897] usb 4-1: config 6 has no interface number 1
[  354.436477][ T5897] usb 4-1: config 6 interface 4 altsetting 4 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  354.447851][ T5897] usb 4-1: config 6 interface 4 altsetting 4 endpoint 0x5 has invalid maxpacket 1032, setting to 1024
[  354.460714][ T5897] usb 4-1: config 6 interface 4 altsetting 4 bulk endpoint 0x5 has invalid maxpacket 1024
[  354.470961][ T5897] usb 4-1: config 6 interface 4 has no altsetting 0
[  354.480088][ T5897] usb 4-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 6.d0
[  354.490826][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.500229][ T5897] usb 4-1: Product: syz
[  354.504774][ T5897] usb 4-1: Manufacturer: syz
[  354.509455][ T5897] usb 4-1: SerialNumber: syz
[  354.729050][ T5897] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  354.813887][ T5897] usb 4-1: USB disconnect, device number 40
[  354.876004][ T6024] udevd[6024]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.4/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  355.070029][T18452] gfs2: path_lookup on c::: returned error -2
[  355.501801][ T5897] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  355.644997][T18471] netlink: 'syz.0.1642': attribute type 10 has an invalid length.
[  355.656852][T18471] team0: Cannot enslave team device to itself
[  355.663108][ T5897] usb 4-1: Using ep0 maxpacket: 32
[  355.671140][ T5897] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  355.683940][ T5897] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  355.698893][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0
[  355.705675][ T5897] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00
[  355.715272][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.726436][ T5897] usb 4-1: config 0 descriptor??
[  355.934141][T18462] x_tables: unsorted entry at hook 2
[  355.955422][ T5897] usbhid 4-1:0.0: can't add hid device: -71
[  355.964100][ T5897] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  355.979921][ T5897] usb 4-1: USB disconnect, device number 41
[  356.036678][T18488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1644'.
[  356.054094][T18488] netlink: 'syz.3.1644': attribute type 46 has an invalid length.
[  356.062683][T18488] netlink: 'syz.3.1644': attribute type 28 has an invalid length.
[  356.071511][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'.
[  356.213168][T18501] syzkaller1: entered promiscuous mode
[  356.218886][T18501] syzkaller1: entered allmulticast mode
[  356.230075][T18505] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1647'.
[  356.329240][T18507] overlayfs: failed to clone upperpath
[  356.424386][T18505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  356.437929][T18505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  356.454156][T18505] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  356.464999][T18505] bond0 (unregistering): Released all slaves
[  356.962872][ T5920] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  357.121911][ T5920] usb 4-1: Using ep0 maxpacket: 32
[  357.129299][ T5920] usb 4-1: config 1 has an invalid interface number: 249 but max is 0
[  357.137682][ T5920] usb 4-1: config 1 has no interface number 0
[  357.143866][ T5920] usb 4-1: config 1 interface 249 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  357.155067][ T5920] usb 4-1: config 1 interface 249 has no altsetting 0
[  357.164192][ T5920] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=16.fc
[  357.174095][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.183053][ T5920] usb 4-1: Product: syz
[  357.187986][ T5920] usb 4-1: Manufacturer: syz
[  357.192748][ T5920] usb 4-1: SerialNumber: syz
[  357.211343][T18568] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1655'.
[  357.417900][ T5920] usb 4-1: USB disconnect, device number 42
[  358.137657][T18590] 9p: Bad value for 'rfdno'
[  358.661805][ T5819] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  358.791779][ T5819] usb 4-1: device descriptor read/64, error -71
[  359.032580][ T5819] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  359.172080][ T5819] usb 4-1: device descriptor read/64, error -71
[  359.282233][ T5819] usb usb4-port1: attempt power cycle
[  359.636027][ T5819] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  359.683085][ T5819] usb 4-1: device descriptor read/8, error -71
[  359.710577][   T30] audit: type=1326 audit(1766833750.753:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18606 comm="syz.5.1662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31ab58f749 code=0x0
[  359.943029][ T5819] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  359.967501][T18610] netlink: 'syz.0.1663': attribute type 2 has an invalid length.
[  359.976872][T18610] netlink: 'syz.0.1663': attribute type 1 has an invalid length.
[  359.983323][ T5819] usb 4-1: device descriptor read/8, error -71
[  359.998480][T18610] C: renamed from team_slave_0 (while UP)
[  360.015631][T18610] netlink: 'syz.0.1663': attribute type 1 has an invalid length.
[  360.041872][T18610] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1663'.
[  360.115901][ T5819] usb usb4-port1: unable to enumerate USB device
[  360.613436][ T5151] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  360.623571][ T5151] Bluetooth: hci4: Injecting HCI hardware error event
[  360.632935][ T5838] Bluetooth: hci4: hardware error 0x00
[  361.080643][T18638] sctp: [Deprecated]: syz.0.1672 (pid 18638) Use of int in max_burst socket option.
[  361.080643][T18638] Use struct sctp_assoc_value instead
[  361.787849][T18665] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  362.691930][ T5838] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  363.612842][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1688'.
[  363.628931][T18697] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.1688'.
[  363.662779][T18697] openvswitch: netlink: Message has 6 unknown bytes.
[  363.979680][T18657] Set syz1 is full, maxelem 65536 reached
[  364.040100][T18713] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.961831][ T5920] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  365.111876][ T5920] usb 4-1: Using ep0 maxpacket: 8
[  365.118541][ T5920] usb 4-1: unable to get BOS descriptor or descriptor too short
[  365.127726][ T5920] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024
[  365.139550][ T5920] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024
[  365.149606][ T5920] usb 4-1: config 8 interface 0 has no altsetting 0
[  365.158279][ T5920] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  365.167470][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.175534][ T5920] usb 4-1: Product: syz
[  365.179692][ T5920] usb 4-1: Manufacturer: syz
[  365.184345][ T5920] usb 4-1: SerialNumber: syz
[  365.377480][T18746] overlayfs: failed to clone upperpath
[  365.397167][T18750] 9p: Bad value for 'timeout'
[  365.405547][T18750] 9p: Bad value for 'timeout'
[  365.410301][ T5920] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  365.411644][T18750] 9p: Bad value for 'timeout'
[  365.425228][T18750] 9p: Bad value for 'timeout'
[  365.432603][ T5920] usb 4-1: selecting invalid altsetting 0
[  365.433081][T18751] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.447838][T18751] batadv_slave_1: entered allmulticast mode
[  365.504543][ T5920] usb 4-1: USB disconnect, device number 47
[  365.550982][ T6024] udevd[6024]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  365.605783][T18785] overlayfs: failed to clone upperpath
[  365.937525][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'.
[  365.946705][T18803] openvswitch: netlink: Missing key (keys=40, expected=80)
[  366.027270][   T30] audit: type=1326 audit(1766833757.073:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792898f749 code=0x7fc00000
[  366.051644][   T30] audit: type=1326 audit(1766833757.073:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f792898f749 code=0x7fc00000
[  366.074385][   T30] audit: type=1326 audit(1766833757.073:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792898f749 code=0x7fc00000
[  366.096922][   T30] audit: type=1326 audit(1766833757.073:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792898f749 code=0x7fc00000
[  366.119439][   T30] audit: type=1326 audit(1766833757.073:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792898f749 code=0x7fc00000
[  366.147637][   T30] audit: type=1326 audit(1766833757.073:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792898f749 code=0x7fc00000
[  366.173369][   T30] audit: type=1326 audit(1766833757.073:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792898f749 code=0x7fc00000
[  366.196983][   T30] audit: type=1326 audit(1766833757.073:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792898f749 code=0x7fc00000
[  366.220807][   T30] audit: type=1326 audit(1766833757.073:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792898f749 code=0x7fc00000
[  366.245886][   T30] audit: type=1326 audit(1766833757.073:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792898f749 code=0x7fc00000
[  366.845121][T18835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1715'.
[  367.096730][T18844] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  367.136982][ T5838] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  367.180848][T18852] netlink: 'syz.0.1721': attribute type 63 has an invalid length.
[  367.196672][T18852] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1721'.
[  367.557447][T18854] kvm: kvm [18853]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xfffffffffffffeb6
[  368.299456][T18872] overlayfs: failed to clone upperpath
[  368.463363][ T5916] usb 6-1: ezusb_ihex_firmware_download - request "keyspan/usa28.fw" failed
[  368.481788][ T5916] usb 6-1: failed to load firmware "keyspan/usa28.fw"
[  368.495714][ T5916] keyspan 6-1:251.194: probe with driver keyspan failed with error -2
[  368.528626][ T5916] usb 6-1: USB disconnect, device number 12
[  368.555355][T18891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1732'.
[  368.831848][ T5916] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  368.981891][ T5916] usb 6-1: Using ep0 maxpacket: 16
[  368.988861][ T5916] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  368.999336][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  369.010356][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11
[  369.022033][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024
[  369.033170][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  369.047271][ T5916] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  369.056587][ T5916] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  369.064808][ T5916] usb 6-1: Manufacturer: syz
[  369.071408][ T5916] usb 6-1: config 0 descriptor??
[  369.441562][T18916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.466782][T18916] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.761856][ T5916] rc_core: IR keymap rc-hauppauge not found
[  370.767883][ T5916] Registered IR keymap rc-empty
[  370.774776][ T5916] mceusb 6-1:0.0: Error: mce write urb status = -71
[  370.779723][T18959] input: syz0 as /devices/virtual/input/input46
[  370.809238][ T5916] mceusb 6-1:0.0: Error: mce write urb status = -71
[  370.833225][ T5916] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  370.848877][ T5916] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input45
[  370.865671][ T5916] mceusb 6-1:0.0: Error: mce write urb status = -71
[  370.892964][ T5916] mceusb 6-1:0.0: Error: mce write urb status = -71
[  370.912427][ T5916] mceusb 6-1:0.0: Error: mce write urb status = -71
[  370.932306][ T5916] mceusb 6-1:0.0: Error: mce write urb status = -71
[  370.952241][ T5916] mceusb 6-1:0.0: Error: mce write urb status = -71
[  370.972220][ T5916] mceusb 6-1:0.0: Error: mce write urb status = -71
[  370.992703][ T5916] mceusb 6-1:0.0: Error: mce write urb status = -71
[  371.012298][ T5916] mceusb 6-1:0.0: Error: mce write urb status = -71
[  371.038706][T18973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1745'.
[  371.042111][ T5916] mceusb 6-1:0.0: Error: mce write urb status = -71
[  371.072196][ T5916] mceusb 6-1:0.0: Error: mce write urb status = -71
[  371.093965][ T5916] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  371.102485][ T5916] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  371.118875][ T5916] usb 6-1: USB disconnect, device number 13
[  371.461850][ T5916] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  371.611840][ T5916] usb 6-1: Using ep0 maxpacket: 8
[  371.619504][ T5916] usb 6-1: config 1 has an invalid interface number: 4 but max is 2
[  371.628113][ T5916] usb 6-1: config 1 has no interface number 1
[  371.635101][ T5916] usb 6-1: too many endpoints for config 1 interface 4 altsetting 16: 195, using maximum allowed: 30
[  371.646136][ T5916] usb 6-1: config 1 interface 4 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 195
[  371.660242][ T5916] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  371.672028][ T5916] usb 6-1: config 1 interface 4 has no altsetting 0
[  371.680742][ T5916] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  371.690159][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.698587][ T5916] usb 6-1: Product: syz
[  371.702873][ T5916] usb 6-1: Manufacturer: syz
[  371.707520][ T5916] usb 6-1: SerialNumber: syz
[  371.924354][T18959] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1744'.
[  371.935284][T18959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.945672][T18959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.959273][T18959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.969905][T18959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.807580][ T5916] usb 6-1: 2:1 : unsupported sample bitwidth 9 in 5 bytes
[  373.902417][ T5916] hub 6-1:1.4: Invalid hub with more than one config or interface
[  373.931279][ T5916] hub 6-1:1.4: probe with driver hub failed with error -22
[  373.960215][ T5916] usb 6-1: USB disconnect, device number 14
[  373.980243][T19045] netlink: 'syz.0.1752': attribute type 2 has an invalid length.
[  374.016415][T19045] netlink: 'syz.0.1752': attribute type 9 has an invalid length.
[  374.036127][T19045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1752'.
[  374.038026][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  374.079542][T19046] netlink: 'syz.0.1752': attribute type 4 has an invalid length.
[  374.105883][T19046] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1752'.
[  374.122145][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  374.123383][T19046] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  374.357617][T19065] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  374.941751][T19078] netlink: 'syz.4.1759': attribute type 10 has an invalid length.
[  374.949695][T19078] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1759'.
[  374.959191][T19078] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  374.966898][T19078] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  374.976907][T19078] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  375.471851][ T5916] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  375.622583][ T5916] usb 6-1: Using ep0 maxpacket: 16
[  375.629871][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  375.651113][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  375.665496][ T5916] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  375.675497][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.684067][ T5916] usb 6-1: Product: syz
[  375.688258][ T5916] usb 6-1: Manufacturer: syz
[  375.693581][ T5916] usb 6-1: SerialNumber: syz
[  375.701607][ T5916] usb 6-1: config 0 descriptor??
[  375.717626][ T5916] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  375.727075][ T5916] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  376.317876][ T5916] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  376.325028][ T5916] em28xx 6-1:0.0: Config register raw data: 0x2f
[  376.331491][ T5916] em28xx 6-1:0.0: I2S Audio (1 sample rate(s))
[  376.337916][ T5916] em28xx 6-1:0.0: No AC97 audio processor
[  376.740846][ T5916] usb 6-1: USB disconnect, device number 15
[  377.528499][T19133] netlink: zone id is out of range
[  377.549866][T19135] 9p: Bad value for 'rfdno'
[  377.562310][ T5819] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  377.576139][T19133] netlink: 8872 bytes leftover after parsing attributes in process `syz.0.1772'.
[  377.744889][ T5819] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  377.761124][ T5819] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.776411][ T5819] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  377.785985][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.794551][ T5819] usb 6-1: Product: syz
[  377.801981][ T5819] usb 6-1: Manufacturer: syz
[  377.816910][ T5819] usb 6-1: SerialNumber: syz
[  377.837485][ T5819] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing
[  377.855586][ T5819] cdc_ncm 6-1:1.0: bind() failure
[  378.052349][ T5819] usb 6-1: USB disconnect, device number 16
[  378.421179][T19182] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  378.421179][T19182] The task syz.0.1782 (19182) triggered the difference, watch for misbehavior.
[  378.697312][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.707112][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  378.861784][ T5819] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  379.031763][ T5819] usb 6-1: Using ep0 maxpacket: 32
[  379.039819][ T5819] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  379.062124][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.082782][ T5819] usb 6-1: config 0 descriptor??
[  379.291122][ T5819] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  379.302064][ T5819] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  379.310976][ T5819] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  381.460600][T19220] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1795'.
[  381.669648][ T5151] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  381.684181][ T5151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  381.695606][ T5151] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  381.706609][ T5151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  381.721975][ T5151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  381.812665][T19239] vxcan1: entered allmulticast mode
[  382.305559][T19229] chnl_net:caif_netlink_parms(): no params data found
[  382.517699][T19229] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.534612][T19229] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.553461][T19229] bridge_slave_0: entered allmulticast mode
[  382.560645][T19229] bridge_slave_0: entered promiscuous mode
[  382.584162][T19229] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.591285][T19229] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.599255][T19229] bridge_slave_1: entered allmulticast mode
[  382.607608][T19229] bridge_slave_1: entered promiscuous mode
[  382.693002][T19229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.727320][T19229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.838667][T19229] team0: Port device team_slave_0 added
[  382.865639][T19229] team0: Port device team_slave_1 added
[  382.954583][T19229] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.961565][T19229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.017885][T19229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.074172][T19229] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.115014][T19229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.155250][T19229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.276613][T19229] hsr_slave_0: entered promiscuous mode
[  383.290670][T19229] hsr_slave_1: entered promiscuous mode
[  383.298016][T19229] debugfs: 'hsr0' already exists in 'hsr'
[  383.304115][T19229] Cannot create hsr debugfs directory
[  383.756073][T19229] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  383.772654][T19229] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  383.784423][T19229] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  383.795961][T19229] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  383.812576][ T5151] Bluetooth: hci5: command tx timeout
[  383.965071][T19229] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.995322][T19229] 8021q: adding VLAN 0 to HW filter on device team0
[  384.015344][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.022590][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.044161][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.051455][ T4368] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.253481][T19229] 8021q: adding VLAN 0 to HW filter on device batadv0
[  384.449308][T19229] veth0_vlan: entered promiscuous mode
[  384.463925][T19229] veth1_vlan: entered promiscuous mode
[  384.492230][T19229] veth0_macvtap: entered promiscuous mode
[  384.501301][T19229] veth1_macvtap: entered promiscuous mode
[  384.521345][T19229] batman_adv: batadv0: Interface activated: batadv_slave_0
[  384.538055][T19229] batman_adv: batadv0: Interface activated: batadv_slave_1
[  384.554094][   T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.565917][   T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.576553][   T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.586933][   T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  384.667273][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.686750][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.737846][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.748829][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.045782][T19648] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.116185][T19648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1810'.
[  385.332002][ T5916] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  385.482085][ T5916] usb 7-1: Using ep0 maxpacket: 16
[  385.490932][ T5916] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  385.510914][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  385.524895][ T5916] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  385.535482][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.544705][ T5916] usb 7-1: Product: syz
[  385.548883][ T5916] usb 7-1: Manufacturer: syz
[  385.554790][ T5916] usb 7-1: SerialNumber: syz
[  385.566245][ T5916] usb 7-1: config 0 descriptor??
[  385.579838][ T5916] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  385.590355][ T5916] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  385.605317][T19665] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1814'.
[  385.817509][T19678] netlink: 'syz.4.1819': attribute type 4 has an invalid length.
[  385.892512][ T5151] Bluetooth: hci5: command tx timeout
[  386.196465][ T5916] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  386.204401][ T5916] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  386.458491][ T5916] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[  386.466832][ T5916] em28xx 7-1:0.0: No AC97 audio processor
[  386.486867][ T5916] usb 7-1: USB disconnect, device number 2
[  386.504695][ T5916] em28xx 7-1:0.0: Disconnecting em28xx
[  386.522750][ T5916] em28xx 7-1:0.0: Freeing device
[  386.585701][T19719] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1826'.
[  386.599292][T19719] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1826'.
[  386.608838][T19719] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1826'.
[  386.627850][T19719] futex_wake_op: syz.4.1826 tries to shift op by -1; fix this program
[  386.813887][T19736] netlink: 1048 bytes leftover after parsing attributes in process `syz.5.1829'.
[  386.922774][T19743] pimreg: entered allmulticast mode
[  386.942033][ T5916] IPVS: starting estimator thread 0...
[  387.031835][T19753] IPVS: using max 34 ests per chain, 81600 per kthread
[  387.371917][ T5916] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  387.536400][ T5916] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 160, changing to 11
[  387.547955][ T5916] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  387.557859][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0
[  387.564582][ T5916] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  387.577024][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.588436][ T5916] usb 7-1: config 0 descriptor??
[  387.789745][T19786] overlayfs: conflicting options: userxattr,redirect_dir=on
[  387.982268][ T5151] Bluetooth: hci5: command tx timeout
[  388.017822][ T5916] corsair-cpro 0003:1B1C:1D00.0027: unknown main item tag 0x0
[  388.031045][ T5916] corsair-cpro 0003:1B1C:1D00.0027: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.6-1/input0
[  388.116355][ T5916] corsair-cpro 0003:1B1C:1D00.0027: probe with driver corsair-cpro failed with error -38
[  388.220102][T19766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.230234][T19766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.240646][ T5898] usb 7-1: USB disconnect, device number 3
[  388.674700][   T30] kauditd_printk_skb: 66 callbacks suppressed
[  388.674718][   T30] audit: type=1326 audit(1766833779.723:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19827 comm="syz.4.1847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f117318f749 code=0x0
[  388.678379][T19836] ptrace attach of "./syz-executor exec"[5829] was attempted by ""[19836]
[  388.724120][   T30] audit: type=1326 audit(1766833779.773:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19827 comm="syz.4.1847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7f11731c2005 code=0x0
[  388.813931][T19842] input: syz0 as /devices/virtual/input/input47
[  389.252808][ T5920] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  389.401870][ T5920] usb 7-1: Using ep0 maxpacket: 16
[  389.408387][ T5920] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  389.423686][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  389.437500][ T5920] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  389.447600][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.455817][ T5920] usb 7-1: Product: syz
[  389.459987][ T5920] usb 7-1: Manufacturer: syz
[  389.465300][ T5920] usb 7-1: SerialNumber: syz
[  389.479074][ T5920] usb 7-1: config 0 descriptor??
[  389.487159][ T5920] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  389.497122][ T5920] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  390.051988][ T5151] Bluetooth: hci5: command tx timeout
[  390.104292][T19876] overlayfs: failed to clone upperpath
[  390.167106][ T5920] em28xx 7-1:0.0: unknown em28xx chip ID (224)
[  390.373706][ T5920] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  390.490133][T19892] netlink: 'syz.0.1863': attribute type 31 has an invalid length.
[  390.502065][T19892] netlink: 'syz.0.1863': attribute type 1 has an invalid length.
[  390.504494][T19893] overlayfs: failed to clone upperpath
[  390.795129][ T5920] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[  390.812024][ T5920] em28xx 7-1:0.0: No AC97 audio processor
[  390.835488][ T5920] usb 7-1: USB disconnect, device number 4
[  390.853844][ T5898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  390.857376][ T5920] em28xx 7-1:0.0: Disconnecting em28xx
[  390.881350][ T5920] em28xx 7-1:0.0: Freeing device
[  391.492180][T19944] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  391.498730][T19944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  391.508274][T19944] vhci_hcd vhci_hcd.0: Device attached
[  391.516612][T19945] vhci_hcd: connection closed
[  391.518343][ T1134] vhci_hcd vhci_hcd.6: stop threads
[  391.529423][ T1134] vhci_hcd vhci_hcd.6: release socket
[  391.535148][ T1134] vhci_hcd vhci_hcd.6: disconnect device
[  391.551076][   T30] audit: type=1326 audit(3533667563.583:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19938 comm="syz.0.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c93d8f749 code=0x7fc00000
[  391.597854][T19950] ceph: No source
[  392.391835][ T5950] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  392.521777][ T5950] usb 7-1: device descriptor read/64, error -71
[  392.747025][T19976] netlink: 'syz.4.1880': attribute type 58 has an invalid length.
[  392.762074][ T5950] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  392.913397][ T5950] usb 7-1: device descriptor read/64, error -71
[  392.988922][T19986] Process accounting resumed
[  393.022339][ T5950] usb usb7-port1: attempt power cycle
[  393.361839][ T5950] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  393.393099][ T5950] usb 7-1: device descriptor read/8, error -71
[  393.566014][   T30] audit: type=1326 audit(3533667565.613:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19898 comm="syz.5.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ab58f749 code=0x7fc00000
[  393.659634][ T5950] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  393.692585][ T5950] usb 7-1: device descriptor read/8, error -71
[  393.807094][ T5950] usb usb7-port1: unable to enumerate USB device
[  394.634075][ T3520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.730126][ T3520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.823571][ T3520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.907273][ T3520] bond0: (slave netdevsim0): Releasing backup interface
[  394.923282][ T3520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.218076][ T3520] bridge_slave_1: left allmulticast mode
[  395.237129][ T3520] bridge_slave_1: left promiscuous mode
[  395.262550][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.275266][ T3520] bridge_slave_0: left allmulticast mode
[  395.281604][ T3520] bridge_slave_0: left promiscuous mode
[  395.288090][ T3520] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.631879][ T3520] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  395.906843][T20059] sctp: [Deprecated]: syz.0.1895 (pid 20059) Use of int in maxseg socket option.
[  395.906843][T20059] Use struct sctp_assoc_value instead
[  395.927158][ T3520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  395.951058][ T3520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  395.963623][ T3520] bond0 (unregistering): Released all slaves
[  396.104455][ T3520] tipc: Left network mode
[  396.354176][ T5950] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  396.478936][ T3520] hsr_slave_0: left promiscuous mode
[  396.485380][ T3520] hsr_slave_1: left promiscuous mode
[  396.491644][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  396.501600][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0
[  396.510516][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_1
[  396.540375][ T3520] veth0_macvtap: left promiscuous mode
[  396.547123][ T3520] veth1_vlan: left promiscuous mode
[  396.555016][ T3520] veth0_vlan: left promiscuous mode
[  396.561010][ T5950] usb 7-1: config 6 has an invalid interface number: 14 but max is 0
[  396.574088][ T5950] usb 7-1: config 6 has no interface number 0
[  396.587009][ T5950] usb 7-1: config 6 interface 14 has no altsetting 0
[  396.603977][ T5950] usb 7-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[  396.631189][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.648318][ T5950] usb 7-1: Product: syz
[  396.659546][ T5950] usb 7-1: Manufacturer: syz
[  396.670549][ T5950] usb 7-1: SerialNumber: syz
[  397.021140][T20065] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1897'.
[  397.347666][ T3520] team0 (unregistering): Port device team_slave_1 removed
[  397.433324][ T3520] team0 (unregistering): Port device team_slave_0 removed
[  397.466944][T20116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1903'.
[  398.007529][T20109] netlink: 1072 bytes leftover after parsing attributes in process `syz.5.1902'.
[  398.017762][T20109] netlink: 280 bytes leftover after parsing attributes in process `syz.5.1902'.
[  398.187233][ T5950] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[  398.218875][ T5950] command write [95] error -22
[  398.266312][ T5950] usb 7-1: USB disconnect, device number 9
[  398.486290][T20147] netlink: 'syz.0.1907': attribute type 27 has an invalid length.
[  398.519335][T20147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1907'.
[  398.571453][T20150] overlayfs: failed to clone upperpath
[  399.041829][ T5916] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  399.202572][ T5916] usb 7-1: Using ep0 maxpacket: 8
[  399.224168][ T5916] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  399.233510][T20175] syz_tun: entered allmulticast mode
[  399.233994][T20175] netlink: 'syz.4.1912': attribute type 39 has an invalid length.
[  399.249809][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.258109][ T5916] usb 7-1: Product: syz
[  399.262564][ T5916] usb 7-1: Manufacturer: syz
[  399.267174][ T5916] usb 7-1: SerialNumber: syz
[  399.288674][ T5916] usb 7-1: config 0 descriptor??
[  399.300477][ T5916] gspca_main: sq905-2.14.0 probing 2770:9120
[  399.319075][T20175] syz_tun (unregistering): left allmulticast mode
[  399.729690][T20199] syzkaller1: entered promiscuous mode
[  399.746133][T20199] syzkaller1: entered allmulticast mode
[  399.886169][ T5916] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[  399.912291][ T5916] sq905 7-1:0.0: probe with driver sq905 failed with error -71
[  399.932947][ T5916] usb 7-1: USB disconnect, device number 10
[  400.139528][T20230] C: renamed from team_slave_0 (while UP)
[  400.157747][T20230] netlink: 'syz.6.1918': attribute type 1 has an invalid length.
[  400.191097][T20230] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1918'.
[  400.457501][ T5898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  400.472537][ T5930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  400.546376][T20259] kAFS: unable to lookup cell 'syz0'
[  400.555001][T20259] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1922'.
[  400.799198][T20272] netlink: 'syz.6.1925': attribute type 28 has an invalid length.
[  400.950328][T20278] kvm: pic: non byte read
[  400.954941][T20278] kvm: pic: non byte read
[  400.959334][T20278] kvm: pic: non byte read
[  400.965013][T20278] kvm: pic: non byte read
[  400.969422][T20278] kvm: pic: non byte read
[  400.974584][T20278] kvm: pic: non byte read
[  400.978984][T20278] kvm: pic: non byte read
[  400.983942][T20278] kvm: pic: non byte read
[  400.988333][T20278] kvm: pic: non byte read
[  400.993184][T20278] kvm: pic: non byte read
[  401.551793][ T5930] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  401.701938][ T5930] usb 7-1: Using ep0 maxpacket: 16
[  401.708797][ T5930] usb 7-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config
[  401.719716][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  401.730794][ T5930] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  401.741805][ T5930] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  401.755776][ T5930] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  401.764920][ T5930] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  401.773690][ T5930] usb 7-1: Manufacturer: syz
[  401.780255][ T5930] usb 7-1: config 0 descriptor??
[  402.985164][T20331] netlink: 'syz.4.1940': attribute type 21 has an invalid length.
[  402.993267][T20331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'.
[  404.324591][ T5930] usb 7-1: USB disconnect, device number 11
[  404.494383][T20369] trusted_key: syz.4.1949 sent an empty control message without MSG_MORE.
[  404.731837][ T5930] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  404.890966][T20382] netlink: 'syz.4.1955': attribute type 10 has an invalid length.
[  404.893543][ T5930] usb 7-1: config 0 has an invalid interface number: 168 but max is 0
[  404.902278][T20382] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1955'.
[  404.916592][ T5930] usb 7-1: config 0 has no interface number 0
[  404.932113][ T5930] usb 7-1: New USB device found, idVendor=05ab, idProduct=18e0, bcdDevice=11.06
[  404.951807][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.971084][ T5930] usb 7-1: config 0 descriptor??
[  405.100775][T20389] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001
[  405.122714][T20390] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0
[  405.122904][T20389] IPVS: stopping backup sync thread 20390 ...
[  405.284917][ T5930] usb 7-1: string descriptor 0 read error: -71
[  405.311210][ T5930] usb 7-1: USB disconnect, device number 12
[  406.405404][T20454] autofs: Unknown parameter 'do�zfaqXZ�W(@����J�5W�
���j�M�5��jO���Ѝ_KO�Ozd|�F��!n���u�
RЭ��(�yw��9�v�5_�m��Z�TCYx���g��_�?ٰd�-H�Y���'
[  406.647076][T20468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.665717][T20468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.680269][T20474] netlink: 'syz.6.1969': attribute type 10 has an invalid length.
[  406.694670][T20468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.705433][T20468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.719279][T20474] batman_adv: batadv0: Adding interface: netdevsim0
[  406.755596][T20474] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  406.795741][T20474] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  406.796350][T20487] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  406.856846][  T178] Bluetooth: hci1: Frame reassembly failed (-84)
[  406.864348][  T178] Bluetooth: hci1: Frame reassembly failed (-84)
[  407.421088][T20507] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1976'.
[  407.827168][T20537] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1979'.
[  408.003076][T20556] netlink: 'syz.4.1983': attribute type 10 has an invalid length.
[  408.011124][T20556] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1983'.
[  408.021423][T20556] veth0_vlan: entered allmulticast mode
[  408.028048][T20556] bridge0: port 3(veth0_vlan) entered blocking state
[  408.036274][T20556] bridge0: port 3(veth0_vlan) entered disabled state
[  408.047458][T20556] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  408.258477][T20561] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1984'.
[  408.574822][T20572] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1987'.
[  408.931932][ T5838] Bluetooth: hci1: command 0x1003 tx timeout
[  408.932243][ T5151] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  409.053545][T20579] netlink: 'syz.4.1990': attribute type 33 has an invalid length.
[  409.061974][T20579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1990'.
[  409.321795][ T5920] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  409.491877][ T5920] usb 7-1: Using ep0 maxpacket: 16
[  409.498567][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.509703][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.520308][ T5920] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  409.533672][ T5920] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  409.542823][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.553427][ T5920] usb 7-1: config 0 descriptor??
[  409.962227][T20581] No control pipe specified
[  410.007825][ T5920] microsoft 0003:045E:07DA.0028: ignoring exceeding usage max
[  410.025259][ T5920] microsoft 0003:045E:07DA.0028: unsupported Resolution Multiplier 0
[  410.036139][ T5920] microsoft 0003:045E:07DA.0028: implement() called with n (152) > 32! (kworker/1:5)
[  410.052329][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  410.207682][ T5920] microsoft 0003:045E:07DA.0028: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  410.227455][ T5920] microsoft 0003:045E:07DA.0028: no inputs found
[  410.235574][ T5920] microsoft 0003:045E:07DA.0028: could not initialize ff, continuing anyway
[  410.253981][ T5920] usb 7-1: USB disconnect, device number 13
[  410.290904][T20633] fido_id[20633]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  410.697105][T20667] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2004'.
[  410.859760][T20676] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  410.920504][T20680] 
@0�: renamed from bond_slave_1 (while UP)
[  411.720514][T20712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2012'.
[  411.730034][T20712] openvswitch: netlink: Flow actions attr not present in new flow.
[  411.962484][T20732] overlayfs: failed to resolve './file1/file0': -2
[  412.362170][ T5930] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  412.533473][ T5930] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  412.542021][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  412.553135][ T5930] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  412.562319][ T5930] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  412.570311][ T5930] usb 7-1: Manufacturer: syz
[  412.577741][ T5930] usb 7-1: config 0 descriptor??
[  412.636367][ T5930] rc_core: IR keymap rc-hauppauge not found
[  412.645097][ T5930] Registered IR keymap rc-empty
[  412.650908][ T5930] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  412.663668][ T5930] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input48
[  412.785191][    C0] igorplugusb 7-1:0.0: Error: urb status = -32
[  412.807045][ T5930] usb 7-1: USB disconnect, device number 14
[  412.897295][T20792] Invalid ELF header magic: != ELF
[  413.431453][T20814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.491457][T20822] 9p: Bad value for 'rfdno'
[  413.529629][T20826] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2030'.
[  413.671990][ T5950] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  413.715336][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'.
[  413.827962][ T5950] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  413.857024][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.867129][ T5950] usb 7-1: Product: syz
[  413.872551][ T5950] usb 7-1: Manufacturer: syz
[  413.877279][ T5950] usb 7-1: SerialNumber: syz
[  413.904230][ T5950] usb 7-1: config 0 descriptor??
[  413.927304][ T5950] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  414.123372][ T5950] gspca_sunplus: reg_r err -32
[  414.157930][    T9] usb 7-1: USB disconnect, device number 15
[  414.741922][ T5950] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  414.893383][ T5950] usb 7-1: config 0 has an invalid interface number: 129 but max is 0
[  414.901939][ T5950] usb 7-1: config 0 has no interface number 0
[  414.911256][ T5950] usb 7-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=a9.42
[  414.920579][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.928635][ T5950] usb 7-1: Product: syz
[  414.933418][ T5950] usb 7-1: Manufacturer: syz
[  414.938007][ T5950] usb 7-1: SerialNumber: syz
[  414.945005][ T5950] usb 7-1: config 0 descriptor??
[  414.953159][ T5950] usb 7-1: MBOX3: Invalid descriptor size=18.
[  415.279694][T20959] netlink: 'syz.4.2050': attribute type 11 has an invalid length.
[  415.732068][T20969] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2052'.
[  415.914467][T20969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  415.928619][T20969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  415.942548][T20969] bond0 (unregistering): Released all slaves
[  416.452380][   T31] INFO: task syz.1.1057:14927 blocked for more than 143 seconds.
[  416.460266][   T31]       Tainted: G             L      syzkaller #0
[  416.470096][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  416.478878][   T31] task:syz.1.1057      state:D stack:27112 pid:14927 tgid:14925 ppid:5830   task_flags:0x400740 flags:0x00080002
[  416.490972][   T31] Call Trace:
[  416.494295][   T31]  <TASK>
[  416.497242][   T31]  __schedule+0x150e/0x5070
[  416.501902][   T31]  ? lockdep_unlock+0x89/0x120
[  416.506693][   T31]  ? __pfx___schedule+0x10/0x10
[  416.511640][   T31]  ? schedule+0x91/0x360
[  416.516683][   T31]  schedule+0x165/0x360
[  416.520866][   T31]  schedule_timeout+0x9a/0x270
[  416.525935][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  416.531567][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  416.537315][   T31]  __wait_for_common+0x3da/0x710
[  416.542605][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  416.547842][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  416.553562][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  416.559050][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  416.568303][   T31]  wait_for_completion_state+0x1c/0x40
[  416.574470][   T31]  vfs_coredump+0x94b/0x3e60
[  416.579072][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[  416.584719][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[  416.589680][   T31]  ? __pfx_vfs_coredump+0x10/0x10
[  416.594763][   T31]  ? unwind_next_frame+0xa5/0x23d0
[  416.599884][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  416.605155][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[  416.610114][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[  416.616008][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[  416.620967][   T31]  ? unwind_next_frame+0xa5/0x23d0
[  416.626187][   T31]  ? unwind_next_frame+0xa5/0x23d0
[  416.631328][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  416.636613][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  416.641884][   T31]  ? is_bpf_text_address+0x292/0x2b0
[  416.647271][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  416.652589][   T31]  ? kernel_text_address+0xa5/0xe0
[  416.657713][   T31]  ? __kernel_text_address+0xd/0x40
[  416.662998][   T31]  ? unwind_get_return_address+0x4d/0x90
[  416.668643][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  416.674852][   T31]  ? arch_stack_walk+0xfc/0x150
[  416.679729][   T31]  ? stack_trace_save+0x9c/0xe0
[  416.686068][   T31]  ? stack_depot_save_flags+0x40/0x850
[  416.691535][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[  416.697390][   T31]  ? kasan_save_track+0x4f/0x80
[  416.702326][   T31]  ? kasan_save_track+0x3e/0x80
[  416.707195][   T31]  ? kasan_save_free_info+0x46/0x50
[  416.712460][   T31]  ? __kasan_slab_free+0x5c/0x80
[  416.718234][   T31]  ? kmem_cache_free+0x197/0x620
[  416.723285][   T31]  ? get_signal+0xa4b/0x1340
[  416.727892][   T31]  ? arch_do_signal_or_restart+0x9a/0x7a0
[  416.733711][   T31]  ? exit_to_user_mode_loop+0x87/0x4f0
[  416.739199][   T31]  ? do_syscall_64+0x2d0/0xf80
[  416.744079][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.750196][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  416.756378][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  416.761605][   T31]  get_signal+0x1108/0x1340
[  416.766284][   T31]  arch_do_signal_or_restart+0x9a/0x7a0
[  416.771959][   T31]  ? _raw_spin_unlock_irq+0x2e/0x50
[  416.777270][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  416.783490][   T31]  ? exit_to_user_mode_loop+0x55/0x4f0
[  416.788970][   T31]  exit_to_user_mode_loop+0x87/0x4f0
[  416.794529][   T31]  ? rcu_is_watching+0x15/0xb0
[  416.799316][   T31]  do_syscall_64+0x2d0/0xf80
[  416.805342][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.811520][   T31]  ? clear_bhb_loop+0x60/0xb0
[  416.816260][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.822783][   T31] RIP: 0033:0x7efed158f749
[  416.827209][   T31] RSP: 002b:00007efed24990e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  416.835665][   T31] RAX: 00000000000000ca RBX: 00007efed17e6098 RCX: 00007efed158f749
[  416.844046][   T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efed17e609c
[  416.853011][   T31] RBP: 00007efed17e6090 R08: 3fffffffffffffff R09: 0000000000000000
[  416.861338][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  416.869447][   T31] R13: 00007efed17e6128 R14: 00007ffc4ac6c4f0 R15: 00007ffc4ac6c5d8
[  416.877473][   T31]  </TASK>
[  416.880557][   T31] 
[  416.880557][   T31] Showing all locks held in the system:
[  416.888352][   T31] 1 lock held by khungtaskd/31:
[  416.893235][   T31]  #0: ffffffff8e33f2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  416.903927][   T31] 3 locks held by kworker/u8:6/178:
[  416.909133][   T31]  #0: ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  416.920574][   T31]  #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  416.930647][   T31]  #2: ffff8880b87260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30
[  416.939934][   T31] 1 lock held by syslogd/5183:
[  416.945005][   T31] 6 locks held by kworker/0:3/5819:
[  416.950212][   T31]  #0: ffff8881426f6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0
[  416.961159][   T31]  #1: ffffc900041bfb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0
[  416.972657][   T31]  #2: ffff888144354198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0
[  416.981562][   T31]  #3: ffff88814268d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430
[  416.990914][   T31]  #4: ffff888021aaf160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430
[  417.000205][   T31]  #5: ffffffff8e1e4070 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0
[  417.010810][   T31] 2 locks held by getty/10753:
[  417.016616][   T31]  #0: ffff8880301710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  417.027123][   T31]  #1: ffffc90004f2b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[  417.046628][   T31] 2 locks held by syz.5.2035/20897:
[  417.058081][   T31]  #0: ffff8880b863ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  417.068790][   T31]  #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  417.077812][   T31] 
[  417.080140][   T31] =============================================
[  417.080140][   T31] 
[  417.088879][   T31] NMI backtrace for cpu 0
[  417.088912][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  417.088936][   T31] Tainted: [L]=SOFTLOCKUP
[  417.088942][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  417.088952][   T31] Call Trace:
[  417.088960][   T31]  <TASK>
[  417.088966][   T31]  dump_stack_lvl+0x189/0x250
[  417.088991][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  417.089009][   T31]  ? __pfx__printk+0x10/0x10
[  417.089044][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  417.089071][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  417.089094][   T31]  ? __pfx__printk+0x10/0x10
[  417.089120][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  417.089145][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  417.089172][   T31]  sys_info+0x135/0x170
[  417.089192][   T31]  watchdog+0xe40/0xe90
[  417.089219][   T31]  ? watchdog+0x202/0xe90
[  417.089245][   T31]  kthread+0x711/0x8a0
[  417.089267][   T31]  ? __pfx_watchdog+0x10/0x10
[  417.089286][   T31]  ? __pfx_kthread+0x10/0x10
[  417.089306][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  417.089322][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  417.089339][   T31]  ? __pfx_kthread+0x10/0x10
[  417.089365][   T31]  ret_from_fork+0x599/0xb30
[  417.089392][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  417.089424][   T31]  ? __switch_to_asm+0x39/0x70
[  417.089443][   T31]  ? __switch_to_asm+0x33/0x70
[  417.089460][   T31]  ? __pfx_kthread+0x10/0x10
[  417.089480][   T31]  ret_from_fork_asm+0x1a/0x30
[  417.089515][   T31]  </TASK>
[  417.089522][   T31] Sending NMI from CPU 0 to CPUs 1:
[  417.246635][    C1] NMI backtrace for cpu 1
[  417.246656][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  417.246679][    C1] Tainted: [L]=SOFTLOCKUP
[  417.246685][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  417.246696][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  417.246720][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 0e 21 00 f3 0f 1e fa fb f4 <e9> 48 ee 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  417.246735][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
[  417.246750][    C1] RAX: 67fc5aad8a48b700 RBX: ffffffff8197c6ba RCX: 67fc5aad8a48b700
[  417.246763][    C1] RDX: 0000000000000001 RSI: ffffffff8daa9dc3 RDI: ffffffff8be247e0
[  417.246775][    C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db
[  417.246787][    C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fc3d070
[  417.246799][    C1] R13: 1ffff11003b5ab70 R14: 0000000000000001 R15: 0000000000000001
[  417.246816][    C1] FS:  0000000000000000(0000) GS:ffff888125adc000(0000) knlGS:0000000000000000
[  417.246830][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  417.246841][    C1] CR2: 00007f31ab7b6ad8 CR3: 0000000028d50000 CR4: 00000000003526f0
[  417.246856][    C1] Call Trace:
[  417.246863][    C1]  <TASK>
[  417.246870][    C1]  default_idle+0x13/0x20
[  417.246889][    C1]  default_idle_call+0x73/0xb0
[  417.246910][    C1]  do_idle+0x1ea/0x520
[  417.246924][    C1]  ? irqentry_exit+0x5ba/0x660
[  417.246943][    C1]  ? __pfx_do_idle+0x10/0x10
[  417.246965][    C1]  cpu_startup_entry+0x44/0x60
[  417.246979][    C1]  start_secondary+0x101/0x110
[  417.247000][    C1]  common_startup_64+0x13e/0x147
[  417.247025][    C1]  </TASK>
[  417.511121][ T5950] usb 7-1: USB disconnect, device number 16
[  419.663755][ T5930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  419.674750][ T5898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration