last executing test programs:

3.476328664s ago: executing program 1 (id=364):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x9, 0x68, 0x8000, 0x7}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x91, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e22, 0x7d, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x0, @void}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d68030697e95d9cff97f976b3ac6d8c10e10601a959b4bf18b7d52cd3b5a4c19759c5eb55c033fbf5a6b311de39eb228702b8bf55388a273db8f23105e37c7125"}}}}, 0x9f)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0)

3.292895773s ago: executing program 1 (id=366):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8)
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r1, &(0x7f0000000180))
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x4a58c000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.957379092s ago: executing program 0 (id=370):
write(0xffffffffffffffff, &(0x7f00000002c0)=')\x00', 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x8, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x3, 0x1, 0x8, 0x6, 0x9, 0x7, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x0, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x22], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1ff, 0x2a0, 0x5, 0x6, 0x8, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x3, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0)
ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000000040)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x20011, r4, 0x1a1c1000)
ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000080)=0x2)

2.83205001s ago: executing program 0 (id=372):
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xae0, 0x8}) (async)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = dup3(r0, r0, 0x80000) (async, rerun: 32)
r2 = creat(&(0x7f0000000080)='./file1\x00', 0x6) (rerun: 32)
setsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f00000000c0)=0x4b3, 0x4) (async)
bind$packet(r1, &(0x7f0000000100)={0x11, 0x2, 0x0, 0x1, 0x9, 0x6, @remote}, 0x14) (async, rerun: 64)
r3 = syz_open_dev$video(&(0x7f0000000140), 0xe0, 0x4100) (rerun: 64)
recvfrom$phonet(r0, &(0x7f0000000180)=""/84, 0x54, 0x40, &(0x7f0000000200)={0x23, 0x1, 0x6, 0xb}, 0x10) (async)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000240)={0x8}) (async)
r4 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x6, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f00000002c0)=0x2) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'gre0\x00', <r5=>0x0, 0x7, 0x40, 0x2, 0x400, {{0x24, 0x4, 0x2, 0x8, 0x90, 0x67, 0x0, 0x8, 0x29, 0x0, @local, @broadcast, {[@generic={0x88, 0x5, "4c51df"}, @timestamp_addr={0x44, 0xc, 0xde, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x7}]}, @end, @cipso={0x86, 0x20, 0x0, [{0x5, 0xf, "70ff0e1ca152e3c9ff1261c912"}, {0x1, 0xb, "033b74c4f1eda6d24c"}]}, @noop, @end, @rr={0x7, 0xb, 0x6a, [@local, @private=0xa010101]}, @cipso={0x86, 0x3c, 0x3, [{0x2, 0x6, "0255417d"}, {0x5, 0x12, "ef5141fc2cd942ea9d7f5f2a3a1b90bd"}, {0x0, 0xb, "bf705a1ab541a06381"}, {0x5, 0x2}, {0x0, 0x4, "e2a5"}, {0x5, 0xd, "9df0696537f40f05087caf"}]}, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000400)={'syztnl2\x00', r5, 0x700, 0x8000, 0x0, 0x9, {{0xf, 0x4, 0x2, 0x8, 0x3c, 0x65, 0x0, 0xed, 0x5e7ce0a9214abaae, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x1b, 0x77, [@empty, @local, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x34}, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x9b, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}]}}}}}) (async)
r6 = accept4$x25(r2, &(0x7f00000004c0)={0x9, @remote}, &(0x7f0000000500)=0x12, 0x400)
ppoll(&(0x7f0000000540)=[{r6, 0x4020}, {r2, 0xa400}, {r1, 0xc0}], 0x3, &(0x7f0000000580)={0x0, 0x989680}, &(0x7f00000005c0)={[0x7fff]}, 0x8) (async)
mount(&(0x7f0000000600)=@md0, &(0x7f0000000640)='./file1\x00', &(0x7f0000000680)='virtiofs\x00', 0x0, &(0x7f00000006c0)='/dev/video#\x00')
r7 = geteuid()
read$FUSE(r1, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
chown(&(0x7f0000000700)='./file1\x00', r7, r8)
sendmsg$NFT_BATCH(r2, &(0x7f0000002e80)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002e40)={&(0x7f00000027c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x1d8, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfbff}, [@NFTA_TABLE_USERDATA={0x61, 0x6, "d0c101d660eb1deb54277c4693964b3c3a37be902586485c7d398e378f38ea66382bde757ebcd6793336322c614196ebd770bc864d70aa967cbefa6696df3b8982075f60adadd45aabe584bf08fd4e8520802915152873bb0db8f15b0b"}, @NFTA_TABLE_USERDATA={0xcb, 0x6, "fc09db1a99f6f0143b8bed49dc7f795863482b139cc2ae47e1e273622e89b3d582e9f217372d19d6329573d35cc8a4b3d32401048377a323c23880f18a46b493b24888c114cff812e459090cb072186f55abc5014ac0dae28ec10c961e94da8e281596b405106e5a3652fe4476d34951386664d429d2d708b509659178b7b1b98ab94d3eb11fef5803cab5fcb68c1ecd516fdc06b129b24ac7049a60cc977cc01c545c286717d3eebd96e33d7dda607798a341d64c4b0a2218e34fb1e6e4035c808eec7f518d3f"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x86, 0x6, "c763c6001eb64bc074812346c293fab4db539d6ef94d3b411348e79c784a72f978efdf08d225792b82faee25832cb1f022c72d55bbdf02d08e559377f4d4d286368ce41da1aa058be2e8cfcd9854c55447234a5dc9405e9e272f3052a4becf1a7dd7df96d9e3e2ceadfcbc60fb2637de2d3741d912201647a859055349ef0d8c2137"}]}, @NFT_MSG_DELFLOWTABLE={0x88, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0xdc, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xaf, 0x6, "596ed6a9bb8926b5bb1618284ea6a3d478b67b04c587c0d8356abd5ea6496a6b12549b08a0e2366378904fd74e83ab0b7714b84a0cb4ef5aa10c543bfe01f5ab01569ddc65ed186cc642ec76696f3fd51bfc31e09e491a8fd4dc5768a0b1d98b389f6f96f87e89375d8100e0498a9a5313c63002d4a8b6b0e756d78132debffc42feac36e595481057024fb268092e1c33af6c900a66d8d640a109ddd95fc845593350c9eaf684598e90a7"}]}, @NFT_MSG_DELRULE={0xa0, 0x8, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x829a}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0xe4, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x9c, 0x6, "1a252dd897ca8b71441eb765b4a3bf2a1ed7ec8a8674163dee615b13e44cbd528490c4815766c617defdb2c8242aa654dab1b1ee6032274c748002d3af60c9b8a3de11aba8f346916f48362f87f4421b4e337a57c6955db0c7e4cdc3415f024f3ba1536a210a407092f73f507e7131236eb9f7740c2f6939606f14ae78aaafe10aceef6410548fd34f3b4f4edf4c27aa3e2869744838b6c8"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x7c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6017d99b}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x66eea6f9}]}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7d93ab1f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xad9c380}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2df3cf75}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}]}]}, @NFT_MSG_DELRULE={0xb8, 0x8, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x89, 0x7, 0x1, 0x0, "13f81f9a090b853635eafa49b4e51920b64795e1576aac24087a254aa69da02b518a01b6e97a44deee95f97eaf108d0956aa8d0356a08a89f556333f512dc40490b0f87101fdec7e2ad6e783b27cee4467b4f31c7d38730f5475a8d8d005e78ad9cbfe20140b89d43168efb1c1087c34ee3e3df08492f241f37810f629c93a408d0009952c"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x22f0}]}]}], {0x14}}, 0x658}, 0x1, 0x0, 0x0, 0x40834}, 0x8081)
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000002ec0)='ip6tnl0\x00') (async, rerun: 64)
read$FUSE(r1, &(0x7f0000002f00)={0x2020}, 0x2020) (async, rerun: 64)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000004f40)={0x0, @vbi={0x3ff, 0x4, 0x6, 0x4c47504a, [0x1, 0x7], [0xfff, 0x6], 0x1}})
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000005040)) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000005080)={0xdf, 0x0, 0x19000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000005100)={0x48, 0x2, 0x0, 0x0, <r10=>0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000005180)={0x8, r10}) (async, rerun: 64)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000055c0)={0x0, 0x8, 0x0, [0x6, 0xfec, 0x1, 0x2, 0x7fff], [0xd9c, 0x5, 0x1, 0xa7d3, 0x0, 0x3ff, 0xfff, 0x6, 0x81, 0x4, 0xd6, 0x401, 0x78, 0x1, 0x0, 0x7f, 0x8, 0x7, 0x0, 0x6, 0x7fff, 0x5, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffffffff5dd1, 0xd2, 0x967, 0x29, 0x2, 0x3, 0x72, 0x401, 0x9, 0x2, 0xfff, 0x7, 0x0, 0x4, 0x9, 0x4, 0xfffffffffffffffa, 0x8, 0x4, 0x3d, 0x2, 0x8, 0x2, 0xb, 0x1, 0x0, 0x55fe5cd2, 0x2, 0x2, 0x5, 0x2, 0x3, 0x1, 0x8a0b, 0x8, 0x60000, 0x0, 0x0, 0x43a2f157, 0x1800000, 0xb53, 0x2, 0x1, 0x0, 0x1, 0xfffffffffffff000, 0x8000000000000001, 0x9, 0x8a30, 0xc3e0, 0xffffffffffffffff, 0x3, 0x7, 0x2, 0x8, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x9, 0x0, 0x6, 0xb, 0x0, 0x0, 0x8, 0x2, 0x3345, 0x8, 0x4cf, 0x7, 0x1, 0x8, 0x7, 0x0, 0x7fff, 0x3, 0x46a, 0x0, 0x5, 0x100, 0x3, 0x8000000000000001, 0x9, 0x8, 0x0, 0x8cf, 0xffffffffffffea57, 0x0, 0x7, 0xffffffffffffffff, 0x1000, 0x1, 0x13]}) (rerun: 64)

2.831864706s ago: executing program 1 (id=373):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1930fc9f, 0x0) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 32)
r2 = socket$pptp(0x18, 0x1, 0x2) (rerun: 32)
connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async, rerun: 64)
mount(&(0x7f0000000040)=@filename='./cgroup/file0/file0\x00', &(0x7f0000000080)='./cgroup/file0/file0\x00', &(0x7f00000000c0)='ext4\x00', 0x2208082, 0x0) (rerun: 64)

2.756634428s ago: executing program 0 (id=374):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x28c})
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r1}}, 0x48)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x17, 0x10, 0x7, 0x3, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e23}]}, 0x18}}, 0x20004010)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0)

2.617826563s ago: executing program 0 (id=377):
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x8, 0x2})
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x3, 0x9, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x3}, {0x1, 0x92, 0xffff, 0xdfe6, 0x9, 0x7}], ['\x00', '\x00', '\x00', '\x00', '\x00']})
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x200000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r4=>r2, {0x4}}, './file0\x00'})
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r2)
sendmsg$FOU_CMD_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r5, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x54}, 0x1, 0x0, 0x0, 0x101}, 0x24008000)
sendmsg$FOU_CMD_GET(r4, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x11}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000740)={0x4120, r0}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000780), 0x6, 0x472800)
ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000007c0)={0x4, 0x1})
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x40000, 0x0, 0x21}, 0x18)
linkat(r7, &(0x7f0000000880)='./file0\x00', r2, &(0x7f00000008c0)='./file0\x00', 0x400)
ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000900))
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000940)={'pcl818\x00', [0x0, 0x7fff, 0x9, 0xffffffff, 0x1, 0x1, 0xffffffff, 0x0, 0x2, 0x1, 0x431, 0x928, 0x5, 0x7f, 0xa, 0x4, 0x92a, 0x1, 0x4, 0x6, 0x8001, 0x80000000, 0x6, 0x9, 0x7ff, 0x7, 0xf50, 0x5, 0x9, 0x7fffffff, 0x4, 0x2]})
r8 = syz_open_procfs(0x0, &(0x7f0000000a00)='attr/prev\x00')
ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000a40)={'ni_atmio16d\x00', [0x7, 0x4, 0x4, 0x8, 0x8, 0x400, 0xfffffffa, 0xe, 0x9, 0x496, 0x1, 0xe, 0x4, 0x1ff, 0x8001, 0xa4e, 0xfffffffd, 0x2, 0x574a, 0x4, 0x1000, 0x46, 0x6f1c, 0xec3c, 0x0, 0x101, 0x4, 0x87d1, 0x7fff, 0xf, 0x3, 0x4]})
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
r10 = syz_io_uring_complete(0x0)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r9, 0x2000000, 0x50, r10, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000b00), &(0x7f0000000b40)=0xc)
fcntl$notify(r10, 0x402, 0x80000013)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]}, 0x3c}}, 0xc8c0)
sendmsg$nl_generic(r2, &(0x7f0000003f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003f00)={&(0x7f0000002d40)={0x11b8, 0x1d, 0x8, 0x70bd25, 0x25dfdbfb, {0x2}, [@nested={0x10bb, 0x101, 0x0, 0x1, [@generic="5994fc423c97d24d42d63683ede6046feee314b1de2545db23c8cfe551ffb3d2d9d8ce88ab489358e955e559daef7322b5c4b283ac61d661aec934eda5a7e0e69e4afcbcda14bc54ce233827858b6be1c58bcc8e1d6a722eedd7231bcd377094dda47ffce293732774ecea21cd7f310d3b15ab4b9848850bcc9c1d8f1a1660", @generic="b4b22eaee1d8cb5ecfdd95c387ee254181a85dcd802a88a9ea239e494d8e0a8f92c173fc8f0300941835f9993eb46ce9", @nested={0x4, 0x125}, @generic="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", @nested={0x4, 0xcc}]}, @generic="23636db76741627dda64f31d94712923c087d5394a2f637faf7533ef80be2030f3396b22e5cea6a81f99d74331a95c422e3be5c7197bc7a1c1ff722e04fdc320ca89d175d249fce536961d1407439db12b44beeae6173dab06", @typed={0x8, 0x105, 0x0, 0x0, @pid}, @nested={0x84, 0xe, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x77, 0xc2, 0x0, 0x0, @binary="46ed46d9e87fd02c73d3363f52621ad9558b95f7030672e5925647eaceb29bae9de4a81325d018e6274fc68eeb3dc42b52240896ba99af918c4a5c4819b94f73b1490362bc825c3be135e17eb34db701af21260541e30e44e9a999cce79abf3cd651afeb6da4d4422812fad37b0be863775095"}]}]}, 0x11b8}, 0x1, 0x0, 0x0, 0x4c080}, 0x20040840)

2.578673695s ago: executing program 0 (id=379):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r1, &(0x7f0000001600)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="d4ad69c575dc9862", 0x8}, {&(0x7f00000003c0)="4b0f2bfca5e5f223fc038f963d9d95bfe8e492d0bdd12f62db4e579d4c2476b75d4c446a885db95c4488c4f5b452959378a1c6ff069241aa2951afeb9ebff1e9d633b791117b13a53e30f1d9b02a08f9cf098f0a7ac218ddb4ee4df39188d023eaf84bdc9eca248667ae783ca4f6b83ef137bb0d9d", 0x75}, {&(0x7f00000004c0)="c463793855bd17f88e54cf00078adfb9f7ba94f062504e76d2d25cd41beebdc9de3d5eeb8c94d288d4b3acded3e2132ff6b8f0ada4c14e7e58f18067145848757c8bede108e471da8baf396f85a9a0f6f107333e8403244a2243538ce8a8d0bfd02e976c8202dbe11e0021add57b4ad7311e5243bd8ccd1860788fa57a15027c03f62caed50b3eaf2be91f2cc4a6174bf0205e8b38ab0b5650ee81d5a65e12e2a02b2d4cc2b28e9c3fd789eb263f66dc", 0xb0}, {&(0x7f0000000580)="a8de2bc9837d3d4425dcdb5d0e9317d21be255ab8d40c9df0c0536797e86b68799349e27d47473ea96a28342b0e1eb9838ae619c4484985ed3975536d7fa544dc772f5e7e73ae5272a501359328e04ac49e345b0e0ed9357db2eb76217684aea60ab68e6bd3ab58c34270a1d91f9d01bab9819a037125155dec51a286d058c160de2c41216908d975d64c233a7ddb04652042cd5ce8c85b05153fc3c5507b7c73f178a10c37666cfdf93d112ebd7656e500618581666bf26e213246491fb60c64fd5da070565bacd", 0xc8}, {&(0x7f0000000680)="9364410e16ee3db74e71104a61ce31de3c48320a3aa4e213318642bfcdadad1b6c05a71f1f9a10317439dc147989fbc53333465b91ff4905ebbef9374bd7f5c8f85ef08d7e9876959fecc94444c5", 0x4e}, {&(0x7f0000000700)="c3072bb00c51c8d670ae3e71339a33c51fd85dc92a2ab91373e49f6f907b94a63fb47181d5d54420852917681ca4c6b8122552f299ece8ac44337f50b08809709ebb53f9619c78d82982b4925d6e6f628c691736891f9d52bdf0f1469eb03bb05bc2ebaaccd5a1126f41a15cd0a0def7dc5b5280a895", 0x76}], 0x6}}], 0x2, 0x81)
mmap(&(0x7f000040c000/0x2000)=nil, 0x2000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3e000)
r2 = socket$kcm(0x10, 0x2, 0x4)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r5, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xc}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x93d}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x8080)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001228000140073d2800020004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = socket$kcm(0xa, 0x3, 0x3a)
syz_usb_connect(0x0, 0x24, &(0x7f0000001c80)={{0x12, 0x1, 0x300, 0xc8, 0x5f, 0x62, 0x8, 0x423, 0xc, 0x2ebf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x0, 0x22, [{{0x9, 0x4, 0xff, 0x1, 0x0, 0x71, 0xc0, 0xd9, 0x8}}]}}]}}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x1ffffffffffffeae})
sendmsg$kcm(r7, &(0x7f0000003c40)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x6, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="81042d72825137dd", 0x8}], 0x1}, 0x0)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
read$nci(r8, &(0x7f0000000040)=""/53, 0x35)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
readahead(r1, 0x7, 0x7fffffff)
rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000080)={0x34, 0x1, 0x100})
setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000180)={0xa, &(0x7f0000000100)=[{0x3, 0x0, 0xc, 0x5}, {0x8, 0x7f, 0xf7, 0x7}, {0x0, 0x9, 0x7, 0x1000}, {0x8, 0x7, 0x5, 0x3ff}, {0x1, 0xfb, 0x6c, 0x4}, {0x0, 0x4, 0x2, 0x1}, {0x5, 0xc0, 0x4, 0x8179}, {0x800, 0x8, 0xd9, 0x2}, {0xfffc, 0x40, 0x7, 0x3}, {0x3, 0x6, 0x3f, 0x400}]}, 0x10)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$UI_SET_MSCBIT(r10, 0x40045568, 0x33)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.570055503s ago: executing program 1 (id=380):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x2a)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000)

2.445522367s ago: executing program 2 (id=382):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './cgroup\x00'})
r3 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000200)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0x20000014})
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0})
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000049"])
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x33, @multicast2, 0x15, 0x3, 'sh\x00', 0x7, 0x4, 0x6d}, 0x2c)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r12)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IP_VS_SO_SET_EDIT(r11, 0x0, 0x483, &(0x7f0000000280)={0x2c, @empty, 0x4e24, 0x3, 'nq\x00', 0x24, 0x10000, 0x67}, 0x2c)
sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r12, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x30, r13, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8004)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)

2.290526767s ago: executing program 1 (id=385):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) (async)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32)
unshare(0x400)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000d0a0108000000000000000007000002d55026b531d688a8c2de4dfcb8a95d9b8dfb308743a127d9ea5580e1bdf08993ff11428931b7c322c6a88afe5dd1964c"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40084)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1}) (async)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$getregset(0x4205, r7, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x80000000000, 0x40)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r9, 0x6, 0x1e, 0x0, &(0x7f0000000080)) (async)
r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400002, 0x0)
ioctl$COMEDI_SETWSUBD(r10, 0x6411) (async, rerun: 64)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) (async, rerun: 64)
r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x20010, r11, 0x5708e000)
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)

2.116627324s ago: executing program 1 (id=386):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) (async)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)={0x40, 0x30, 0xc, "008000010a01000000000080"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000380)={0x40, 0x18, 0x28, "fea454b6be399664cb5dc5694f0784caac4e942ab860a54146931560110d6c29c6c5cbda1cd0dc7d"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async)
r2 = socket$rxrpc(0x21, 0x2, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000f80)={<r3=>0x0, <r4=>0x0})
recvmmsg(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f0000000700)=""/211, 0xd3}, {&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000800)=""/209, 0xd1}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000900)=""/210, 0xd2}], 0xa, &(0x7f0000000480)}, 0xa}, {{&(0x7f0000000a00)=@caif=@dgm, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a80)=""/136, 0x88}, {&(0x7f0000000b40)=""/3, 0x3}, {&(0x7f0000000b80)=""/82, 0x52}, {&(0x7f0000000c00)=""/200, 0xc8}, {&(0x7f0000000dc0)=""/208, 0xd0}], 0x5, &(0x7f0000000ec0)=""/29, 0x1d}, 0x6}], 0x2, 0x0, &(0x7f0000000fc0)={r3, r4+10000000}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x0, 0x5, 0xc, "94d91422596fe634adc12c06"}, 0x0, 0x0, 0x0, 0x0}) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000001c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x2, 0x0, 0x1, 0x1, 0x8}, 0x20)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x43)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.372531299s ago: executing program 2 (id=391):
ioprio_set$pid(0x1, 0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xc, 0x40026, 0x6, 0x1101, 0x1})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r2=>0x0)
sched_getattr(r2, &(0x7f0000000040)={0x38}, 0x38, 0x0)

1.371794686s ago: executing program 2 (id=392):
r0 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0)
r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "d2834fbd0f2dfb112aa221771bfc091ad92f2fb0fae2721284acfe1c893b4cb98db2efbac205412835e199023716f5f50d2a5cc6c51bfdc6b9b997555d1ddc96", 0x27}, 0x48, 0xfffffffffffffffc)
keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) (async)
keyctl$link(0x8, r0, r2) (async)
r3 = add_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$unlink(0x9, r3, r1) (async, rerun: 64)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000300)={{0x8, 0x5, 0x20, 0x7, '\x00', 0x8001}, 0x1, 0x20000000, 0x1ff, 0xffffffffffffffff, 0x4, 0x81, 'syz0\x00', &(0x7f00000002c0)=['+&\x00', '\x00', '\\#\']{+.\x00', '\x00'], 0xd}) (async, rerun: 64)
add_key$fscrypt_provisioning(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)={0x0, 0x0, @b}, 0x48, r2) (async)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r2, r3}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001640)={&(0x7f0000001580)={'poly1305\x00'}, &(0x7f00000015c0)="8be446137dc6cf44cbf3a411f5c3d35ea405915cc7335626a2d1b9d96d105e56d128cf4b8a44f7b6a3b36613657a73f565d577572d66cbb860640fc617b38c5f595d9886307d77f94034ffc6b43cee733a1d129226470312f5ebb53600ce8940e1d294", 0x63}) (async)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001680), 0x218003, 0x0)
r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001780)={0x0, &(0x7f00000016c0)=[@cpuid={0x14, 0x18, {0x0, 0x6}}, @wrmsr={0x1e, 0x20, {0x36e}}, @wr_crn={0x46, 0x20, {0x4, 0x64}}, @rdmsr={0x32, 0x18, {0x28c}}, @rdmsr={0x32, 0x18, {0xbb3}}], 0x88})
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f00000017c0)="430f01f436440f48b9bf59000066baa10066b8006866ef400f01f866b87a000f00d02bcb400f01c9400f0766bad00466edc421d9dda1f8ffffff", 0x3a}], 0x1, 0x24, &(0x7f0000001840)=[@flags={0x3, 0x80000}, @flags={0x3, 0x200}], 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = add_key(&(0x7f0000001880)='rxrpc_s\x00', &(0x7f00000018c0)={'syz', 0x2}, &(0x7f0000001900)="0fec2af9927999707486bf0ba0c6be8a", 0x10, r2) (async, rerun: 32)
r7 = add_key$keyring(&(0x7f0000001a00), &(0x7f0000001a40)={'syz', 0x0}, 0x0, 0x0, 0x0) (rerun: 32)
add_key$fscrypt_provisioning(&(0x7f0000001940), &(0x7f0000001980)={'syz', 0x2}, &(0x7f00000019c0)={0x4, 0x0, @auto=[0x2d, 0x2e, 0x11, 0x1e, 0x32, 0x3e, 0x2c]}, 0xf, r7) (async)
r8 = add_key(&(0x7f0000001a80)='id_legacy\x00', &(0x7f0000001ac0)={'syz', 0x2}, &(0x7f0000001b00)="9da0b29d97844c906bd4b4884645c66efd8654d32930f0254f13ba4db9a9062a2b2ce77bf846d2a074834f3a0e4d5b39eeca107a822706768a1a54824cd3903c182279454d0e091c49f4bc845d46d596f3927bafa038bcce83f2c0f41187b6ec5f160577753190dffe2bbf56db027077c78c6dc1eed5e960c9b03a4fdb0361271bae534543f8b4518dc6df6ac107b7fc59adb0162c", 0x95, r6)
keyctl$KEYCTL_MOVE(0x1e, r8, r7, r0, 0x1)
r9 = add_key$keyring(&(0x7f0000001bc0), &(0x7f0000001c00)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$KEYCTL_MOVE(0x1e, r3, r6, r9, 0x1)
r10 = add_key$keyring(&(0x7f0000001d40), &(0x7f0000001d80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$fscrypt_v1(&(0x7f0000001c40), &(0x7f0000001c80)={'fscrypt:', @desc3}, &(0x7f0000001cc0)={0x0, "183c85ff0322e58a157129ed567188be25f4077be38fcaa715ba95eeb299f7abdb996fc1b168a8c855069626be06721d05c89b962b054fd5920f4865aa3e6771", 0x32}, 0x48, r10) (async)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001e40)=[@text64={0x40, &(0x7f0000001dc0)="420fc7b54d1d00003664400f780cb7440f4eec66ba2000b82abfffe7ef8f8aa8120a10687158b9800000c00f3235004000000f3026400f09c744240008010000c74424025b000000ff2c240f01cfc4a27959f1", 0x53}], 0x1, 0x40, &(0x7f0000001e80)=[@flags={0x3, 0x4401}, @dstype3={0x7, 0x7}], 0x2) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ec0))
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001f00)={<r11=>0x0, 0x6}, &(0x7f0000001f40)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000001f80)={0x8, 0x2, 0x3, 0xe, r11}, 0x10)
keyctl$restrict_keyring(0x1d, r8, &(0x7f0000001fc0)='big_key\x00', &(0x7f0000002000)='\x00') (async)
keyctl$reject(0x13, r2, 0x9, 0x20, r2)
keyctl$chown(0x4, r9, 0x0, 0x0)

1.369719995s ago: executing program 2 (id=393):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x234, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="38a03b799e1873c761fcba7e33640c1f924f387c6a1b7e17"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3443f924080a20b0df6790f93e312d7e43d9d8f2f5c8fc83dc83f133709941d5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "994c9fc354fe7696"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0xd8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8815c5f80d33bb6db10e03d2f902210ed6f3e7362a61a00f55d8993208603c57"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="665d06e093abb477d8de3c6a2f4d8ebcb50d2f465ae1be2c1c8918eb58ccde29"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ef438c196566f15cfd21ad317065b6d516d9e886561fbd37b2669f4a3c9c4671"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "14f8b937a88204f0"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="785f2a1a92b25505bc80e9adafa3f507"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="025289209760132cbee4963988cf6fc3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a2c6ee5fa4c91117deabac16d321286a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="065171cd66507d018f6443f516fd387e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c579f8d6ae858ed1"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b1d296d9fcecc47f1bcc74953fc600b1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2493d0914f7da161d277ae47412673af"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe}]}, @NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="fb476d5820c4b48d926b5f71578d79c3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "956d0d0040134ae4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "44546ddbe9ac1af3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f4d94329228b36531a567adc0040632ec88aa02f1913d285297256e58e892119"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f45ef7b4ab9124b1ce4c7fed794dd935891b65270f71097d28e5f1745df89e97"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7edc3a3c0f5816e0"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "35f2cd8da6f19832"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a77c63916b9e1081"}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x6e91e01fd4c0c3f}, 0x0)
bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc) (async)
bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000380)={0x0, 0x1, 0x64, 0x3}) (async)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000380)={0x0, 0x1, 0x64, 0x3})
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r2)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r2)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xe4, r1, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xcd, 0x2a, [@ht={0x2d, 0x1a, {0x66b1a9d4852b6c64, 0x1, 0x1, 0x0, {0xa3, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x10, 0x9}}, @chsw_timing={0x68, 0x4, {0x5, 0xc00}}, @channel_switch={0x25, 0x3, {0x0, 0x5, 0x29}}, @channel_switch={0x25, 0x3, {0x1, 0x28, 0x5}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @broadcast}}, @mesh_config={0x71, 0x7, {0x5, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x7f, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @prep={0x83, 0x1f, {{}, 0x2, 0x4, @broadcast, 0x6f, @void, 0x3, 0x3dcb0fd0, @device_a, 0x5}}, @random={0x9, 0x52, "81cfec2676d95634af2338635aaf7a78b1cc9875fc79f2b5fc45154ce7420f9de6ebcd7f77129c90dbeebbd869775ed95e6b7d24a45f1a7d791534545b58e32ee2ab451e5e06f1823f1813f5d7e8944c7694"}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2)
sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000844}, 0x8008)
openat$incfs(0xffffffffffffffff, &(0x7f0000000740)='.log\x00', 0x80000, 0x120) (async)
r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000740)='.log\x00', 0x80000, 0x120)
setsockopt$inet_opts(r7, 0x0, 0x9, &(0x7f0000000780)="6e097f39a2598b01f5cbfd7ddc1502488923ff7257911fbb07f1d5ee868f602be63f97d7a1485539d6f8f0ccf22996aa56a77502f5f026ff738d114a4f16b47903a0fd3da51636138b167999f92f83e690ba9e19ab1e7648e97e16cee4643e62db86cd053b73072b07c327dc5767728a9f79ffc7668eae7f5736d95a28083a8d39be8afcaa22a4c6fea653d59172768bfd345f53a857b9446f8c46fe60a919e2", 0xa0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000b80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000880)={0x2a4, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x1b4, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8bec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77b0e3fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaab7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6eed90ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68fe6eeb}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x611c8b21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d4a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x620c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1191}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43cd3889}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38e243b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff3}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfef9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfaf3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4461}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3208cb32}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b0e9af8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e7c44c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21d5e8d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f62}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dc5abf4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21eefee3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c4c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb582}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f427bb1}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdf0e259}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee18}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff1c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bdd7ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc905}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5a7}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f7d1fdb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x688c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21c54e6d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a65}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dea8b69}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74c67987}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3edf224a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a0de08f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb3be042}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8952}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd796}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ca8db2e}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xb8, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaad1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fd3a292}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7774}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe835}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3349b0f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e85ddc3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1af1efbe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1df5502e}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc24b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc04f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f59}]}, {0x4}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79c7f36f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f80d170}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7767}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b62995d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x429ac774}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x578c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d0f570d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x63f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3130}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4011}, 0x81)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r0)
getsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000c40)={@private0, <r10=>0x0}, &(0x7f0000000c80)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000cc0)={'wg2\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000cc0)={'wg2\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x9c, r9, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004001)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
pipe2(&(0x7f0000000e40)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x80080)
sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x88000}, 0x223fc29e631e709a)
sendmsg$NL80211_CMD_SET_KEY(r13, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000401}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xbd6, 0x6f}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "24e5467c3c"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async)
sendmsg$NL80211_CMD_SET_KEY(r13, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000401}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xbd6, 0x6f}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "24e5467c3c"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000001080)) (async)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000001080))
r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), r12)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x50, r14, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffeffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x20004802)
r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001280), r2)
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x48, r15, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0xacca4c4c66792b71)

863.920578ms ago: executing program 0 (id=394):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x30}, 0x40880)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, &(0x7f0000002980))
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x4800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a700000000040000000090a000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d04001280140000001000010000000000000000000400000a"], 0x88}}, 0x20050800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd})
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x4000)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r7, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r7, 0x1)
setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000500)={0x2, 0x14, 0x9, 0x5, 0x4, 0x6, 0xfc, 0x1, 0xf7, 0x9, 0x1, 0x5, 0x9, 0x2}, 0xe)
setresuid(r6, r6, 0x0)
setfsuid(0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r8, &(0x7f0000000600)=ANY=[@ANYBLOB="0300080001000000000014000000450000e014000000000190780a010100ac1414aa050090b32ad71ba73a014fa6943fa478ac1414aa4127fbfe006800020101000700000000ac1e00018923ffffffff7fffffff3eac1e01017f000001640101017f000001ac1414bbac14140f9404fcff860600000000831b6b64010102e2000001ac14141e010144045171444c9913ac1414bb00000004ac1414bb00000002ac14143900000005ac1414bb000000090000000000000003ac1414bb000000076401010100000401e000000100000008ac141412000120008608bee17e1a4bb644106b0050"], 0xee)
r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r10, 0x5708e000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x8, 0x4, 0xff, 0x8}, {0xfff8, 0x6, 0x0, 0x3ff}]})

751.241592ms ago: executing program 2 (id=395):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0) (async)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async)
sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './bus', [{0x20, '9p\x00'}, {0x20, '/dev/video2\x00'}, {0x20, '9p\x00'}, {0x20, '/dev/video2\x00'}], 0xa, "f532efcaa03cf120c9d36cf29e7ca5a7997119d1a33c4d8831f8929aef1e1947c1dc10ae408725c4d26efa17a425acfe1446266e59dc7451098bac06fcea01a9924817765c63a03d735a750c94c154e53633f993610bd2c64f7f6227247d7696e0bc52d4fcc5b8f00918b5"}, 0x96) (async)
setsockopt(0xffffffffffffffff, 0x3, 0x1, &(0x7f00000000c0)="e9b61b6255d2c0ad5bc8bf19059fbb0291d80adf7c39da42d017dca493817aa84407e88dca79ad1ceecb28019cf673c66020af498b1b4aa96afec84191b9b0358f72ac34a7db2e", 0x47) (async)
mount(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,')
ppoll(&(0x7f0000000140)=[{r4, 0x21}, {r5}, {r0, 0x220}, {}, {r3, 0x80}], 0x5, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0xa]}, 0x8)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0) (async)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\f\x00', @ANYRES16=0x0, @ANYBLOB="010200000000ffdbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000100)) (async)
sendto$inet(r0, 0x0, 0x0, 0x4004084, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x347b42, 0x0)

686.251924ms ago: executing program 2 (id=397):
ioprio_set$pid(0x1, 0x0, 0x2007)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
write$cgroup_devices(r5, &(0x7f00000000c0)={'a', ' *:* ', 'r\x00'}, 0x8)
sendfile(r0, r0, 0x0, 0x7ffff000)

516.838699ms ago: executing program 3 (id=400):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4de}]}, 0x1c}}, 0x20000080)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140)=0x4)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180))
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0)=0x8d7b, 0x4)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000280)="38d4f80159af3e5565efcc50d2b2babdff34430871b504e0630c96c9806316d68c591168df572e00bb32e7be32ef5ab2b0fe9641d996fd4183d9ca8a4b4c8b19705c2f77c14d67ddcf6353d855bd91ea762b63a1fcf4c8d36200c6b5a142d4cd2544daea21ddec86843d9f78055668b38ed9b26f4ba140b0fe979f95acc577ec2e538ad372c497d06b93414064966574ce780acb0883da1457b18e497de84e54c1529883a8e29653e98e4ac3cf74c6bae7de90f073a86b7453f9386e7184fc7d75cbce3586fc2658c010c84812b613b695", 0xd1}], 0x1, 0x9, 0xa)
write$khugepaged_scan(r0, &(0x7f00000003c0), 0x8)
ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000400))
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r3, 0x804, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008800)
flock(r1, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000005c0)={0x0, 0x1, 0x6, 0x2})
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = getuid()
r7 = syz_open_dev$amidi(&(0x7f0000000900), 0x2547d7eb, 0x70000)
r8 = syz_open_dev$media(&(0x7f0000000940), 0x7, 0x900)
r9 = socket$xdp(0x2c, 0x3, 0x0)
fcntl$getownex(r4, 0x10, &(0x7f0000000980)={0x0, <r10=>0x0})
r11 = getgid()
r12 = eventfd(0x7fff)
r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
r14 = openat(r0, &(0x7f0000000a00)='./file0\x00', 0x8000, 0x86)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000a40)=<r15=>0x0)
lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
sendmsg$netlink(r5, &(0x7f0000002d40)={&(0x7f0000000600)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc, &(0x7f00000008c0)=[{&(0x7f0000000640)={0x244, 0x23, 0x2, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xc7, 0x50, 0x0, 0x1, [@nested={0x4, 0xf7}, @typed={0x8, 0x95, 0x0, 0x0, @uid=r6}, @generic="ab562cbc783bfa1a55f5afee8b2d730994029196189fb9fc66aa36e87d7a9935b8775ae50a4ac87f4c89b2d27352793e7372ab8bf37acd67b0929e533a6e9ce549f5378a3a20927a2664296386daf5526768488e69c4d03dcb1d88866d842414c87c2589d6cd0852f9211414cf5eb5140642584d0058bdf918bcc8ecbee37597342f7d49cadbc0560fe3e92cb8a668d3007c254565afd7e6d0088d438d5b0c27b0406181474b7e6d38231bc6c7543b0f8a9b335ae3877e"]}, @nested={0xc0, 0x33, 0x0, 0x1, [@typed={0x4, 0x3}, @typed={0xa6, 0x33, 0x0, 0x0, @binary="f2c82597fcbb45ffeb28fce637f2e858d54a6aaed9858aaf318a7286c853f71c0d6c8fdbf75f6bd3ed0d7cc00fc76db4d1aeedcc40830cd068ab45a6789100b598b773246c203ad60f19d26429104cc026ae682cb29e322cef3ec48559c66f30750a669216c13e312b5bdf9ca112fade72f1f4beb9a716e89f687b26de07e45051c0fe83598ea6bd100957b28520412233773d91def1a370ef12760c0b3688fa2a4f"}, @nested={0x4, 0x141}, @typed={0x8, 0xfa, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0xb2}]}, @generic="e18aabc1986713fc034f681d69a459aaafe03a91fd84eae293", @generic="d0ba737196928967b802917cb520cce7ef35c02f3c8101023f59f1dfa9ecb1c1384cef64f20a93a06ea24cd5e4a1952d7b3270ced85b0ed77dcdf40cf2f1ef5bda9f34e8de440a450384b4d3bd1c750add95b6c6dffaf988a58fedc197a9b3847d24e6ed83bc0e11a2b941a49f4f4341463c2ae6ed0902b697752708ce67676c57c9578c65b1ce39209d728259bd500b2e69"]}, 0x244}], 0x1, &(0x7f0000002c00)=[@rights={{0x30, 0x1, 0x1, [r0, r1, r7, r1, r8, r9, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @rights={{0x20, 0x1, 0x1, [r4, r1, r0, r12]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r13, r14, r1, r4, r4, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15, r16}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}, @cred={{0x1c}}], 0x118, 0x8001}, 0x0)

451.644139ms ago: executing program 3 (id=401):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf, 0x5b}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3dad7fff3b0f2bcb6ed2459897"}]}, 0x34}}, 0x20004010) (async)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x80, 0x8080, 0x800, 0x3, {{0xc, 0x4, 0x0, 0x12, 0x30, 0x65, 0x0, 0x0, 0x3d, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x1b, 0x79, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000280)={0x658, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_PEERS={0x5d0, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1b2187b5ab0f744e822867e76dfcbffc485b53f39a197464ad5129a540387418"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @private1, 0x10000}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x4e0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @loopback, 0xd9}}, @WGPEER_A_ALLOWEDIPS={0x498, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x10000, @mcast2, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x658}, 0x1, 0x0, 0x0, 0xfcf0a693af75ff1f}, 0x8000) (async)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xffff}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async)
r5 = fsmount(0xffffffffffffffff, 0x0, 0x4) (async)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40), r4)
sendmsg$FOU_CMD_GET(r5, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, r6, 0xc10, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45}, 0x20004000) (async)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000c80), 0x80900, 0x0)
ioctl$BLKSECDISCARD(r7, 0x127d, &(0x7f0000000cc0)=0xfffffffffffffffe)
r8 = syz_open_dev$loop(&(0x7f0000000d00), 0x400, 0xc0004)
ioctl$BLKRRPART(r8, 0x125f, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) (async)
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000d80), r4)
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async)
ioctl$BLKOPENZONE(r4, 0x40101286, &(0x7f0000000e80)={0x5}) (async, rerun: 32)
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0xc007}, 0x10) (rerun: 32)
ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000001000)) (async)
r10 = fsopen(&(0x7f0000001100)='smb3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000001140)='}/$@$\x00', &(0x7f0000001180)='\x00', 0x0) (async, rerun: 64)
sendmsg$nl_generic(r0, &(0x7f0000001280)={&(0x7f00000011c0), 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, 0x24, 0x10, 0x70bd2b, 0x25dfdbfd, {0xc}, [@nested={0x8, 0x76, 0x0, 0x1, [@nested={0x4, 0xf6}]}, @nested={0x8, 0x1f, 0x0, 0x1, [@nested={0x4, 0xd2}]}]}, 0x24}}, 0x8010) (async, rerun: 64)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000001300), r0)
sendmsg$BATADV_CMD_GET_VLAN(r11, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1c6e155a009debf2}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r12, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000)
r13 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0xe4080, 0x0, 0x10}, 0x18)
symlinkat(&(0x7f0000001400)='./file0\x00', r13, &(0x7f00000014c0)='./file0\x00') (async)
ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000001500))

360.36827ms ago: executing program 3 (id=402):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901)
r1 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) (async)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r3, 0x0, 0x0) (async)
read$FUSE(r3, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={<r4=>0x0, 0x6}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x4f}, 0x8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)
fchdir(r0)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0) (async)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0)
rmdir(&(0x7f0000000200)='./cgroup\x00')

269.690654ms ago: executing program 3 (id=403):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c7200000002000000000000020000000a0001006f776e65720000000900010073797a30000000000900020073797a3200000000141000001100010000000000000000000000000a"], 0x98}}, 0x4048010)
r1 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc0405668, &(0x7f0000000000)={0x0, 0x0, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x2)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1b3100, 0x0)
r3 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffbf, 0x0, 0x0, 0x0, 0x4ef7}, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
splice(r1, &(0x7f00000000c0)=0x80000001, r2, &(0x7f0000000180)=0xfffffffffffffffd, 0xd, 0x1)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400))
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x590, 0x4)
sendto$inet6(r5, 0x0, 0xfc96, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c)
syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={<r6=>0x0, 0x7}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000340)={r6, 0x8001, 0x10}, 0xc)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="140100001e000100000000000000000007"], 0x114}], 0x1}, 0x0)
readv(r3, &(0x7f0000000440), 0x0)
sendfile(r2, r2, 0x0, 0x7ffff000)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="c776b154440506ff01000153e7fa730a046b817deb8f4d1abb8defe2661a2c82f6b289017d2ff0bf95ef3b8e69a70eb775b5"], 0x7)

90.218296ms ago: executing program 3 (id=404):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vxfs\x00', 0x20, 0x0)

0s ago: executing program 3 (id=405):
r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040}, 0x0) (async)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000011c0)={0x2, 0x0, [{0xd000, 0x1000, &(0x7f0000000140)=""/4096}, {0xeeee8000, 0x59, &(0x7f0000001140)=""/89}]})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r0)
bind$l2tp6(r0, &(0x7f0000001280)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5, 0x4}, 0x20) (async)
bind$l2tp6(r0, &(0x7f0000001280)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5, 0x4}, 0x20)
connect$l2tp6(r0, &(0x7f00000012c0)={0xa, 0x0, 0x281, @mcast2, 0xaba9, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001340)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x6c, r1, 0x401, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2c}, @void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xa}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x884) (async)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x6c, r1, 0x401, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2c}, @void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xa}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x884)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r4, &(0x7f0000001580)={&(0x7f0000001480), 0x10, &(0x7f0000001540)={&(0x7f00000014c0)=@canfd={{0x1}, 0x2, 0x3, 0x0, 0x0, "d50dcc0b339801013d48b973e70894d625797446c00c17ff4285ffd1545c0f959d0d1c95f6c0d31ca8ef3d7f9b90e38fff1fa0dff65df2b3a90b95560bb0b205"}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40055)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1b)
syz_usb_connect$uac1(0x0, 0xd8, &(0x7f00000015c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x2, 0xd0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x80}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0x6e, '\x00c'}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x3, 0x6, [0x0, 0x7, 0x9, 0x8, 0x5, 0xa], 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x3, 0x2, 0x7fff, 0xfd, 0xff}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x8, '='}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x201, 0x4, 0x5, 0x400, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x6, 0x9, "67f79b", "18f9"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1ff, 0x5af, 0x3, "0afce4ef5784f4db7f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5b, 0x2, 0x8, {0x7, 0x25, 0x1, 0x0, 0x40, 0x47}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x49, 0x1, 0x7f, 0x47, "be3d5b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x5, 0x8, {0x7, 0x25, 0x1, 0x2, 0x1, 0x800}}}}}}}]}}, &(0x7f0000001980)={0xa, &(0x7f00000016c0)={0xa, 0x6, 0x200, 0x8, 0x5, 0xf8, 0x8, 0x3}, 0x24, &(0x7f0000001700)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x6d, 0x5, 0x0, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "8184a933645c4deb97fa12c4694178b1"}]}, 0x5, [{0x4, &(0x7f0000001740)=@lang_id={0x4}}, {0x41, &(0x7f0000001780)=@string={0x41, 0x3, "1f651de8360f550eade486f3a67145137a7da14e87117309ffdbe92eee6b7435e092141790b61ccacf14f650d47393f1ac29eeee0deba979812a14bc63d9c3"}}, {0xe8, &(0x7f0000001800)=@string={0xe8, 0x3, "2a79e7c79c94826b70d1e914a1f6115e0859132337784c0b5227b0df0ee09b7555155c693fe6fbfb4261356f3d38e65373faba0e29a1e4104e1eedfa9fc64485ceb080711125db8789e0237a59e5d7b91d3ac37e648c50af8ce92ba8fda25b6d386639f9b557f282f196f9395ba65039e6485154014ecd0992c5c7177fe9ea4ca9f1b2691e79f2596482775069863952ba993822edadfdf1742a72201332a15cac55707ecefa244d5eb9999d12c411e2b1be34e4076204cb74f7c853c34f0759d6cc8623c3ef98f95e35ba3d83b9a13e510d9e9566f4c773f9c5b9c741571af774943cb2fef7"}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x414}}]}) (async)
r5 = syz_usb_connect$uac1(0x0, 0xd8, &(0x7f00000015c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x2, 0xd0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x80}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0x6e, '\x00c'}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x3, 0x6, [0x0, 0x7, 0x9, 0x8, 0x5, 0xa], 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x3, 0x2, 0x7fff, 0xfd, 0xff}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x8, '='}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x201, 0x4, 0x5, 0x400, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x6, 0x9, "67f79b", "18f9"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1ff, 0x5af, 0x3, "0afce4ef5784f4db7f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5b, 0x2, 0x8, {0x7, 0x25, 0x1, 0x0, 0x40, 0x47}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x49, 0x1, 0x7f, 0x47, "be3d5b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x5, 0x8, {0x7, 0x25, 0x1, 0x2, 0x1, 0x800}}}}}}}]}}, &(0x7f0000001980)={0xa, &(0x7f00000016c0)={0xa, 0x6, 0x200, 0x8, 0x5, 0xf8, 0x8, 0x3}, 0x24, &(0x7f0000001700)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x6d, 0x5, 0x0, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "8184a933645c4deb97fa12c4694178b1"}]}, 0x5, [{0x4, &(0x7f0000001740)=@lang_id={0x4}}, {0x41, &(0x7f0000001780)=@string={0x41, 0x3, "1f651de8360f550eade486f3a67145137a7da14e87117309ffdbe92eee6b7435e092141790b61ccacf14f650d47393f1ac29eeee0deba979812a14bc63d9c3"}}, {0xe8, &(0x7f0000001800)=@string={0xe8, 0x3, "2a79e7c79c94826b70d1e914a1f6115e0859132337784c0b5227b0df0ee09b7555155c693fe6fbfb4261356f3d38e65373faba0e29a1e4104e1eedfa9fc64485ceb080711125db8789e0237a59e5d7b91d3ac37e648c50af8ce92ba8fda25b6d386639f9b557f282f196f9395ba65039e6485154014ecd0992c5c7177fe9ea4ca9f1b2691e79f2596482775069863952ba993822edadfdf1742a72201332a15cac55707ecefa244d5eb9999d12c411e2b1be34e4076204cb74f7c853c34f0759d6cc8623c3ef98f95e35ba3d83b9a13e510d9e9566f4c773f9c5b9c741571af774943cb2fef7"}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x414}}]})
syz_usb_control_io$uac1(r5, &(0x7f0000001a80)={0x14, &(0x7f0000001a00)={0x93d38b1107914c1a, 0x0, 0x2b, {0x2b, 0x6, "e923d068edf5acfa8e047773b109bf4706c772425126f6b2e196b184447b9892468353710d4b89220e"}}, &(0x7f0000001a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}}, &(0x7f0000001cc0)={0x44, &(0x7f0000001ac0)={0x40, 0x3, 0x8, "195e95bcdb2ef370"}, &(0x7f0000001b00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001b80)={0x20, 0x81, 0x1, "15"}, &(0x7f0000001bc0)={0x20, 0x82, 0x3, "0fb248"}, &(0x7f0000001c00)={0x20, 0x83, 0x2, "5ee0"}, &(0x7f0000001c40)={0x20, 0x84, 0x1, '\\'}, &(0x7f0000001c80)={0x20, 0x85, 0x3, "a43a67"}})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000001d40)={0x8, 'ip6_vti0\x00', {'vlan0\x00'}, 0x6})
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000001d80)={0x5, 0x0, [{0x60d, 0x0, 0x7}, {0x396, 0x0, 0x9}, {0x4b564d00, 0x0, 0x5}, {0xac9, 0x0, 0x6}, {0x874, 0x0, 0x1f385f06}]})
getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000001e00), &(0x7f0000001e40)=0xc)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000001e80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1837, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0xfa, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x2, 0x3c, 0x1, {0x22, 0xf22}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x4, 0x6}}]}}}]}}]}}, &(0x7f0000002180)={0xa, &(0x7f0000001ec0)={0xa, 0x6, 0x200, 0x9, 0x1, 0x7, 0x8}, 0x32, &(0x7f0000001f00)={0x5, 0xf, 0x32, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x1, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x8, 0x3, 0xff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x100, 0xf, 0x0, 0x2, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x5, 0x1, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0xd8, 0x2}]}, 0x6, [{0xe, &(0x7f0000001f40)=@string={0xe, 0x3, "da28ff71e3e29a071f4580a6"}}, {0x4, &(0x7f0000001f80)=@lang_id={0x4, 0x3, 0x448}}, {0x3d, &(0x7f0000001fc0)=@string={0x3d, 0x3, "28ff606802039571221fce2261ad9ea7e40e1bb484f94dd9880c0993eaf1aee6c9b73f73ad2d3edb6b2e45c57e766c42cf39efd9f0ae750a47c573"}}, {0xff, &(0x7f0000002000)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000002100)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x100a}}]})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000002300)={&(0x7f0000002200), 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x44, r2, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xd99f, 0x71}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x80)
preadv(r0, &(0x7f0000002840)=[{&(0x7f0000002340)=""/127, 0x7f}, {&(0x7f00000023c0)=""/226, 0xe2}, {&(0x7f00000024c0)=""/63, 0x3f}, {&(0x7f0000002500)=""/160, 0xa0}, {&(0x7f00000025c0)=""/183, 0xb7}, {&(0x7f0000002680)=""/202, 0xca}, {&(0x7f0000002780)=""/160, 0xa0}], 0x7, 0x22881322, 0x7)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002900), r0)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000002a00)={&(0x7f00000028c0), 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x48, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x798}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) (async)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000002a00)={&(0x7f00000028c0), 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x48, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x798}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x810)
syz_usb_connect$cdc_ncm(0x0, 0x151, &(0x7f0000002a40)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13f, 0x2, 0x1, 0x55, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "618f0e64313a"}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x7, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0x8, 0x5}, [@network_terminal={0x7, 0x24, 0xa, 0x7f, 0x2, 0x82, 0x33}, @mdlm_detail={0xd6, 0x24, 0x13, 0x0, "9590cdf80f11a2be237a57c2bd27ded31edab4f7a07947498b0917e8b0cf10c636e1fddbf9042231bde9677a48fe0f2bb87c60ad01f55f988584585dfb5169897db6d224e0daee13ca4ccfa962234ad190b4ef657eca53765c6fa03212a27de43e8317827317ed278cb51bfc4fc64dc1e8f795500fea991cac15d4bcc3a6ecf3cc372393d326d18b170d6c2279aad0523e8caccca6c3b639b7a564001b96663f5a4f7eb4bf5684593f33cd9a31eb5e24f0c55f7e13c9e483c2adacddd6c63e311bb47e47e432a109ac8a720d7569a08e09d5"}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xf0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x9, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x7, 0x40}}}}}}}]}}, &(0x7f0000002f80)={0xa, &(0x7f0000002bc0)={0xa, 0x6, 0x250, 0xf5, 0x7, 0x0, 0xff, 0x5}, 0x4b, &(0x7f0000002c00)={0x5, 0xf, 0x4b, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x9, 0xf0f, 0x7ff, [0x804000, 0xa0c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "6d7fad0a0140f1365abd145cd256f801"}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0xb, 0xf00, 0x6, [0xff3ff0, 0xf, 0xf]}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000002c80)=@lang_id={0x4, 0x3, 0x402}}, {0x6d, &(0x7f0000002cc0)=@string={0x6d, 0x3, "ca54252cbae4111a2193fd1e7b9b6486fa8c05c92ae7a9afeb4e558bfa85b7f184265cb0f9156c326aa50bc56c09f0e78bb7f5184cc9651bc9c203b551661476d83994e1f6217a5b80e70de10f0359429a2a1a4b78d8b2289bb1c141141b62a62dd1ffa8e74d7877e9d1f8"}}, {0xfe, &(0x7f0000002d40)=@string={0xfe, 0x3, "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"}}, {0x9, &(0x7f0000002e40)=@string={0x9, 0x3, "8035869df06d9d"}}, {0x36, &(0x7f0000002e80)=@string={0x36, 0x3, "91991f2d2dbb83866a776ba667b2f08a8d81801ead31ba9cbabdf54e3b104a8dcdbfd36678aab85e28b6ff1a082476095af80cb7"}}, {0x4, &(0x7f0000002ec0)=@lang_id={0x4, 0x3, 0x402}}, {0x1a, &(0x7f0000002f00)=@string={0x1a, 0x3, "2c81d578b997af03ef723476b75e11d09a5bfbd48aa357b4"}}, {0x4, &(0x7f0000002f40)=@lang_id={0x4}}]}) (async)
syz_usb_connect$cdc_ncm(0x0, 0x151, &(0x7f0000002a40)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13f, 0x2, 0x1, 0x55, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "618f0e64313a"}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x7, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0x8, 0x5}, [@network_terminal={0x7, 0x24, 0xa, 0x7f, 0x2, 0x82, 0x33}, @mdlm_detail={0xd6, 0x24, 0x13, 0x0, "9590cdf80f11a2be237a57c2bd27ded31edab4f7a07947498b0917e8b0cf10c636e1fddbf9042231bde9677a48fe0f2bb87c60ad01f55f988584585dfb5169897db6d224e0daee13ca4ccfa962234ad190b4ef657eca53765c6fa03212a27de43e8317827317ed278cb51bfc4fc64dc1e8f795500fea991cac15d4bcc3a6ecf3cc372393d326d18b170d6c2279aad0523e8caccca6c3b639b7a564001b96663f5a4f7eb4bf5684593f33cd9a31eb5e24f0c55f7e13c9e483c2adacddd6c63e311bb47e47e432a109ac8a720d7569a08e09d5"}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xf0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x9, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x7, 0x40}}}}}}}]}}, &(0x7f0000002f80)={0xa, &(0x7f0000002bc0)={0xa, 0x6, 0x250, 0xf5, 0x7, 0x0, 0xff, 0x5}, 0x4b, &(0x7f0000002c00)={0x5, 0xf, 0x4b, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x9, 0xf0f, 0x7ff, [0x804000, 0xa0c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "6d7fad0a0140f1365abd145cd256f801"}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0xb, 0xf00, 0x6, [0xff3ff0, 0xf, 0xf]}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000002c80)=@lang_id={0x4, 0x3, 0x402}}, {0x6d, &(0x7f0000002cc0)=@string={0x6d, 0x3, "ca54252cbae4111a2193fd1e7b9b6486fa8c05c92ae7a9afeb4e558bfa85b7f184265cb0f9156c326aa50bc56c09f0e78bb7f5184cc9651bc9c203b551661476d83994e1f6217a5b80e70de10f0359429a2a1a4b78d8b2289bb1c141141b62a62dd1ffa8e74d7877e9d1f8"}}, {0xfe, &(0x7f0000002d40)=@string={0xfe, 0x3, "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"}}, {0x9, &(0x7f0000002e40)=@string={0x9, 0x3, "8035869df06d9d"}}, {0x36, &(0x7f0000002e80)=@string={0x36, 0x3, "91991f2d2dbb83866a776ba667b2f08a8d81801ead31ba9cbabdf54e3b104a8dcdbfd36678aab85e28b6ff1a082476095af80cb7"}}, {0x4, &(0x7f0000002ec0)=@lang_id={0x4, 0x3, 0x402}}, {0x1a, &(0x7f0000002f00)=@string={0x1a, 0x3, "2c81d578b997af03ef723476b75e11d09a5bfbd48aa357b4"}}, {0x4, &(0x7f0000002f40)=@lang_id={0x4}}]})
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000003000))
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000003040)={0x1, 0x0, [{0xc0010020, 0x0, 0x1}]})
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000003080), 0xffffffffffffffff) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000003080), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r0) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r0)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x28, r7, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x50)
ioctl$KVM_RUN(r0, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts.
[   48.050749][ T5848] cgroup: Unknown subsys name 'net'
[   48.157409][ T5848] cgroup: Unknown subsys name 'cpuset'
[   48.164591][ T5848] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.205474][ T5848] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   51.095399][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   51.103206][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   51.110481][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   51.113841][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   51.117779][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   51.132492][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   51.133382][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   51.146778][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   51.154533][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   51.156932][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   51.162143][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   51.169239][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   51.176402][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   51.183251][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   51.197646][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   51.205898][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   51.206490][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   51.213135][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   51.227883][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   51.236012][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   51.504057][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   51.552076][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   51.582697][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   51.628851][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   51.694641][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.701963][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.710033][ T5857] bridge_slave_0: entered allmulticast mode
[   51.716674][ T5857] bridge_slave_0: entered promiscuous mode
[   51.737406][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.744572][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.751913][ T5857] bridge_slave_1: entered allmulticast mode
[   51.758438][ T5857] bridge_slave_1: entered promiscuous mode
[   51.764742][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.772235][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.779438][ T5859] bridge_slave_0: entered allmulticast mode
[   51.786336][ T5859] bridge_slave_0: entered promiscuous mode
[   51.798306][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.805406][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.812670][ T5858] bridge_slave_0: entered allmulticast mode
[   51.819660][ T5858] bridge_slave_0: entered promiscuous mode
[   51.833466][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.840802][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.848066][ T5859] bridge_slave_1: entered allmulticast mode
[   51.854512][ T5859] bridge_slave_1: entered promiscuous mode
[   51.866821][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.873916][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.881269][ T5858] bridge_slave_1: entered allmulticast mode
[   51.888192][ T5858] bridge_slave_1: entered promiscuous mode
[   51.919188][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.934483][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.941784][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.949439][ T5860] bridge_slave_0: entered allmulticast mode
[   51.956256][ T5860] bridge_slave_0: entered promiscuous mode
[   51.969992][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.980488][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.989841][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.997040][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.004171][ T5860] bridge_slave_1: entered allmulticast mode
[   52.011398][ T5860] bridge_slave_1: entered promiscuous mode
[   52.026159][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.042004][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.063849][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.094705][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.105997][ T5859] team0: Port device team_slave_0 added
[   52.119393][ T5857] team0: Port device team_slave_0 added
[   52.126502][ T5858] team0: Port device team_slave_0 added
[   52.134078][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.150828][ T5859] team0: Port device team_slave_1 added
[   52.158060][ T5858] team0: Port device team_slave_1 added
[   52.172158][ T5857] team0: Port device team_slave_1 added
[   52.203199][ T5860] team0: Port device team_slave_0 added
[   52.215878][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.222843][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.249053][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.261348][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.268460][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.294475][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.311641][ T5860] team0: Port device team_slave_1 added
[   52.317919][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.324856][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.351014][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.366037][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.372980][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.399283][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.423846][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.430838][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.457039][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.479928][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.486968][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.512990][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.527289][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.534250][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.560464][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.589043][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.596141][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.622245][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.645550][ T5859] hsr_slave_0: entered promiscuous mode
[   52.651725][ T5859] hsr_slave_1: entered promiscuous mode
[   52.677272][ T5857] hsr_slave_0: entered promiscuous mode
[   52.683310][ T5857] hsr_slave_1: entered promiscuous mode
[   52.689326][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   52.695058][ T5857] Cannot create hsr debugfs directory
[   52.704069][ T5858] hsr_slave_0: entered promiscuous mode
[   52.710316][ T5858] hsr_slave_1: entered promiscuous mode
[   52.716415][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   52.722129][ T5858] Cannot create hsr debugfs directory
[   52.776837][ T5860] hsr_slave_0: entered promiscuous mode
[   52.783506][ T5860] hsr_slave_1: entered promiscuous mode
[   52.789672][ T5860] debugfs: 'hsr0' already exists in 'hsr'
[   52.795384][ T5860] Cannot create hsr debugfs directory
[   52.994277][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   53.003958][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   53.013100][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   53.026759][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   53.054673][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   53.072404][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   53.087918][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   53.098007][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   53.132693][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.150887][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.169678][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.178639][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.204072][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.214244][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.223358][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.232964][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   53.265097][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.285773][ T5864] Bluetooth: hci2: command tx timeout
[   53.291181][ T5864] Bluetooth: hci0: command tx timeout
[   53.298337][   T51] Bluetooth: hci1: command tx timeout
[   53.303823][ T5871] Bluetooth: hci3: command tx timeout
[   53.318455][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   53.348037][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.355147][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.375059][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.397000][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.404098][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.430250][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.450068][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   53.478339][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.485424][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.494037][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.501122][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.521851][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   53.544653][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.551810][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.568165][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.589660][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   53.603641][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.610808][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.634059][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   53.672047][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.679193][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.693600][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   53.712403][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.719554][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.784618][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.858030][ T5859] veth0_vlan: entered promiscuous mode
[   53.884639][ T5859] veth1_vlan: entered promiscuous mode
[   53.894230][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.939360][ T5859] veth0_macvtap: entered promiscuous mode
[   53.961688][ T5859] veth1_macvtap: entered promiscuous mode
[   53.973893][ T5858] veth0_vlan: entered promiscuous mode
[   53.992157][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.008216][ T5858] veth1_vlan: entered promiscuous mode
[   54.019303][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.029257][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.051944][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.061019][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.079270][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.089101][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.117805][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.142468][ T5860] veth0_vlan: entered promiscuous mode
[   54.153391][ T5858] veth0_macvtap: entered promiscuous mode
[   54.170852][ T5860] veth1_vlan: entered promiscuous mode
[   54.181568][ T5858] veth1_macvtap: entered promiscuous mode
[   54.200326][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.213148][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.230813][ T5857] veth0_vlan: entered promiscuous mode
[   54.253966][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.262543][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.272895][ T5860] veth0_macvtap: entered promiscuous mode
[   54.278968][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.284578][ T5857] veth1_vlan: entered promiscuous mode
[   54.299644][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.322058][ T5860] veth1_macvtap: entered promiscuous mode
[   54.330614][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.351122][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   54.353776][ T5857] veth0_macvtap: entered promiscuous mode
[   54.375024][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.384848][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.400325][ T5857] veth1_macvtap: entered promiscuous mode
[   54.417751][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.450987][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.469211][ T5945] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.484617][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.503232][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.523654][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.532772][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.542303][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.553956][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.563518][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.565978][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.578641][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.597795][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.615152][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.624947][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.634484][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.665044][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.679027][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.722175][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.735006][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.765448][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.774545][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.797499][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.807119][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.838216][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.857059][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.898217][ T5951] /dev/rnullb0: Can't open blockdev
[   55.064720][ T5957] syzkaller1: entered promiscuous mode
[   55.083994][ T5957] syzkaller1: entered allmulticast mode
[   55.385570][ T5864] Bluetooth: hci0: command tx timeout
[   55.391141][ T5864] Bluetooth: hci3: command tx timeout
[   55.396997][ T5864] Bluetooth: hci1: command tx timeout
[   55.402567][ T5864] Bluetooth: hci2: command tx timeout
[   55.631424][ T5971] /dev/rnullb0: Can't open blockdev
[   56.105589][ T1210] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   56.222387][ T5945] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.286637][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   56.296469][ T5993] netlink: 'syz.0.11': attribute type 21 has an invalid length.
[   56.304300][ T5993] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11'.
[   56.316875][ T5993] netlink: 'syz.0.11': attribute type 4 has an invalid length.
[   56.319569][ T1210] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b
[   56.324506][ T5993] netlink: 'syz.0.11': attribute type 5 has an invalid length.
[   56.343908][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.354404][ T5993] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11'.
[   56.364234][ T1210] usb 3-1: Product: syz
[   56.382364][ T1210] usb 3-1: Manufacturer: syz
[   56.393136][ T1210] usb 3-1: SerialNumber: syz
[   56.413214][ T1210] usb 3-1: config 0 descriptor??
[   56.728132][ T5943] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   56.845330][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.855039][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.909489][ T5943] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   56.918773][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.927248][ T5943] usb 1-1: Product: syz
[   56.931597][ T5943] usb 1-1: Manufacturer: syz
[   56.936260][ T5943] usb 1-1: SerialNumber: syz
[   56.981498][ T5906] usb 3-1: USB disconnect, device number 2
[   57.445918][ T5871] Bluetooth: hci2: command tx timeout
[   57.445966][ T5873] Bluetooth: hci3: command tx timeout
[   57.451399][ T5871] Bluetooth: hci0: command tx timeout
[   57.456832][ T5864] Bluetooth: hci1: command tx timeout
[   57.563730][ T6011] tmpfs: Unknown parameter 'nrev/rnullb0'
[   57.571334][ T5945] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.623843][ T5945] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.703472][   T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.715163][   T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.728272][   T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.740264][   T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.829083][ T6023] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.095133][ T6029] syzkaller1: entered promiscuous mode
[   58.101821][ T6029] syzkaller1: entered allmulticast mode
[   58.141868][ T6031] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.356608][ T5943] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[   58.411837][ T5943] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[   58.692599][ T6047] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   58.891204][ T6053] /dev/rnullb0: Can't open blockdev
[   59.125880][ T5943] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO
[   59.145874][ T5943] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[   59.168135][ T5943] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   59.204328][ T6059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.230614][ T5943] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[   59.266459][ T5943] usb 1-1: USB disconnect, device number 2
[   59.361912][ T6059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.472171][ T6059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.532820][ T5871] Bluetooth: hci3: command tx timeout
[   59.532906][ T5864] Bluetooth: hci1: command tx timeout
[   59.539309][ T5871] Bluetooth: hci2: command tx timeout
[   59.544260][ T5873] Bluetooth: hci0: command tx timeout
[   59.563195][ T6059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.674203][ T3021] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.691642][ T3021] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.782139][ T3021] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.817006][ T3021] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.264554][ T6108] =======================================================
[   60.264554][ T6108] WARNING: The mand mount option has been deprecated and
[   60.264554][ T6108]          and is ignored by this kernel. Remove the mand
[   60.264554][ T6108]          option from the mount to silence this warning.
[   60.264554][ T6108] =======================================================
[   60.299449][    C1] vkms_vblank_simulate: vblank timer overrun
[   60.366133][ T6109] syzkaller1: entered promiscuous mode
[   60.371637][ T6109] syzkaller1: entered allmulticast mode
[   60.430299][ T6118] kvm: user requested TSC rate below hardware speed
[   60.523455][ T6121] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.555648][ T1218] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   60.648226][ T6121] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.711063][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   60.731735][ T6121] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.753065][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.779536][ T1218] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[   60.792287][ T1218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.808887][ T1218] usb 1-1: config 0 descriptor??
[   60.869483][ T6121] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.938015][   T78] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.959345][   T78] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.994993][   T78] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.006271][   T78] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.845191][ T5906] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   63.016232][ T5906] usb 4-1: Using ep0 maxpacket: 8
[   63.027134][ T5906] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[   63.037338][ T6173] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[   63.058453][ T5906] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[   63.075633][ T5906] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[   63.083861][ T5906] usb 4-1: Product: syz
[   63.095587][ T5906] usb 4-1: Manufacturer: syz
[   63.097801][ T6175] BFS-fs: bfs_fill_super(): No BFS filesystem on rnullb0 (magic=00000000)
[   63.100228][ T5906] usb 4-1: SerialNumber: syz
[   63.129653][ T5906] usb 4-1: config 0 descriptor??
[   63.161442][ T5906] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[   63.273751][ T6184] netlink: 256 bytes leftover after parsing attributes in process `syz.1.49'.
[   63.292829][ T6184] /dev/rnullb0: Can't open blockdev
[   63.338336][ T5906] gspca_zc3xx: reg_w_i err -71
[   63.675686][ T5947] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   63.845755][ T5947] usb 2-1: Using ep0 maxpacket: 8
[   63.865761][ T5947] usb 2-1: unable to get BOS descriptor or descriptor too short
[   63.884862][ T5947] usb 2-1: config 1 has an invalid interface number: 172 but max is 0
[   63.894411][ T5947] usb 2-1: config 1 has no interface number 0
[   63.910791][ T5947] usb 2-1: config 1 interface 172 has no altsetting 0
[   63.928164][ T5947] usb 2-1: string descriptor 0 read error: -22
[   63.928764][ T6202] syz.2.55 uses obsolete (PF_INET,SOCK_PACKET)
[   63.935415][ T5947] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=b0.f3
[   63.945126][ T6202] syzkaller1: entered promiscuous mode
[   63.950230][ T5906] gspca_zc3xx: Unknown sensor - set to TAS5130C
[   63.957362][ T6202] syzkaller1: entered allmulticast mode
[   63.968982][ T5906] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[   63.990060][ T5906] usb 4-1: USB disconnect, device number 2
[   64.005576][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.028377][ T5947] peak_usb 2-1:1.172: probe with driver peak_usb failed with error 172
[   64.225001][ T6208] Zero length message leads to an empty skb
[   64.269610][ T5906] usb 2-1: USB disconnect, device number 2
[   64.555348][ T1218] usbhid 1-1:0.0: can't add hid device: -71
[   64.561509][ T1218] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   64.579184][ T1218] usb 1-1: USB disconnect, device number 3
[   65.555879][ T1218] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   65.715736][ T1218] usb 4-1: Using ep0 maxpacket: 8
[   65.738511][ T1218] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[   65.762316][ T1218] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   65.782353][ T1218] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   65.802757][ T1218] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   65.885605][ T1218] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   65.899069][ T1218] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   65.908415][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.145566][ T1218] usb 4-1: usb_control_msg returned -32
[   66.151178][ T1218] usbtmc 4-1:16.0: can't read capabilities
[   66.194464][ T1218] usb 4-1: USB disconnect, device number 3
[   66.215878][ T6110] syz.0.34 (6110) used greatest stack depth: 18456 bytes left
[   66.223646][ T6233] warning: `syz.2.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.350154][ T6245] netlink: 44 bytes leftover after parsing attributes in process `syz.2.69'.
[   66.369054][ T5873] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[   66.372952][ T6244] /dev/rnullb0: Can't open blockdev
[   66.379704][ T6245] netlink: 11 bytes leftover after parsing attributes in process `syz.2.69'.
[   66.394435][ T6245] netlink: 'syz.2.69': attribute type 6 has an invalid length.
[   66.402326][ T6245] netlink: 'syz.2.69': attribute type 5 has an invalid length.
[   66.410359][ T6245] netlink: 'syz.2.69': attribute type 4 has an invalid length.
[   66.418116][ T6245] netlink: 11 bytes leftover after parsing attributes in process `syz.2.69'.
[   66.765361][ T6276] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   66.786629][ T6277] capability: warning: `syz.2.81' uses 32-bit capabilities (legacy support in use)
[   66.987273][ T5925] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   67.045686][ T1210] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   67.100159][ T6293] fuseblk: Bad value for 'source'
[   67.135643][ T5925] usb 1-1: Using ep0 maxpacket: 32
[   67.142404][ T5925] usb 1-1: unable to read config index 0 descriptor/start: -61
[   67.150284][ T5925] usb 1-1: can't read configurations, error -61
[   67.175586][ T1210] usb 4-1: device descriptor read/64, error -71
[   67.286015][ T5925] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   67.304832][ T6297] trusted_key: encrypted_key: insufficient parameters specified
[   67.425584][ T1210] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   67.445578][ T5925] usb 1-1: Using ep0 maxpacket: 32
[   67.452381][ T5925] usb 1-1: unable to read config index 0 descriptor/start: -61
[   67.460194][ T5925] usb 1-1: can't read configurations, error -61
[   67.466767][ T5925] usb usb1-port1: attempt power cycle
[   67.555684][ T1210] usb 4-1: device descriptor read/64, error -71
[   67.565627][ T5867] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   67.665714][ T1210] usb usb4-port1: attempt power cycle
[   67.717628][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.729034][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   67.741212][ T5867] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   67.741237][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   67.741253][ T5867] usb 2-1: SerialNumber: syz
[   67.805793][ T5925] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   67.845910][ T5925] usb 1-1: Using ep0 maxpacket: 32
[   67.852915][ T5925] usb 1-1: unable to read config index 0 descriptor/start: -61
[   67.861327][ T5925] usb 1-1: can't read configurations, error -61
[   67.888924][ T6305] wlan1 speed is unknown, defaulting to 1000
[   67.895340][ T6305] wlan1 speed is unknown, defaulting to 1000
[   67.902234][ T6305] wlan1 speed is unknown, defaulting to 1000
[   67.949039][ T6297] /dev/rnullb0: Can't open blockdev
[   67.957694][ T5867] usb 2-1: 0:2 : does not exist
[   67.962812][ T5867] usb 2-1: usbmixer: too many channels (61) in unit 5
[   67.978591][ T5867] usb 2-1: USB disconnect, device number 3
[   67.992050][ T6305] infiniband syz0: set active
[   67.997139][   T10] wlan1 speed is unknown, defaulting to 1000
[   68.000322][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   68.004097][ T5925] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   68.026739][ T6305] infiniband syz0: added wlan1
[   68.031992][ T6305] syz0: rxe_create_cq: returned err = -12
[   68.038238][ T1210] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   68.039297][ T6305] infiniband syz0: Couldn't create ib_mad CQ
[   68.052317][ T6305] infiniband syz0: Couldn't open port 1
[   68.066948][ T1210] usb 4-1: device descriptor read/8, error -71
[   68.070496][ T6305] RDS/IB: syz0: added
[   68.078158][ T6305] smc: adding ib device syz0 with port count 1
[   68.078825][ T5925] usb 1-1: Using ep0 maxpacket: 32
[   68.084461][ T6305] smc:    ib device syz0 port 1 has pnetid 
[   68.094863][ T5925] usb 1-1: unable to read config index 0 descriptor/start: -61
[   68.095561][ T5947] wlan1 speed is unknown, defaulting to 1000
[   68.103544][ T5925] usb 1-1: can't read configurations, error -61
[   68.109697][ T6305] wlan1 speed is unknown, defaulting to 1000
[   68.117119][ T5925] usb usb1-port1: unable to enumerate USB device
[   68.173867][ T6305] wlan1 speed is unknown, defaulting to 1000
[   68.224940][ T6305] wlan1 speed is unknown, defaulting to 1000
[   68.282243][ T6305] wlan1 speed is unknown, defaulting to 1000
[   68.305592][ T1210] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   68.328002][ T1210] usb 4-1: device descriptor read/8, error -71
[   68.369890][ T6310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.92'.
[   68.436221][ T1210] usb usb4-port1: unable to enumerate USB device
[   68.498526][ T6312] netlink: 'syz.2.92': attribute type 11 has an invalid length.
[   69.483431][ T6335] netlink: 132 bytes leftover after parsing attributes in process `syz.2.100'.
[   69.536762][ T6337] /dev/rnullb0: Can't open blockdev
[   69.668079][ T6345] netlink: 32 bytes leftover after parsing attributes in process `syz.2.102'.
[   69.686982][ T5873] Bluetooth: hci1: ISO packet for unknown connection handle 0
[   69.705467][ T6342] block device autoloading is deprecated and will be removed.
[   69.859779][ T6359] wlan1 speed is unknown, defaulting to 1000
[   70.082976][ T6368] /dev/rnullb0: Can't open blockdev
[   70.207254][ T6370] /dev/rnullb0: Can't open blockdev
[   70.280228][ T5867] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   70.456853][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   70.476267][ T5867] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[   70.498613][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   70.527255][ T5867] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[   70.546520][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.554807][ T5867] usb 1-1: Product: syz
[   70.568989][ T5867] usb 1-1: Manufacturer: syz
[   70.573642][ T5867] usb 1-1: SerialNumber: syz
[   70.592693][ T5867] usb 1-1: config 0 descriptor??
[   70.609185][ T5867] usb 1-1: Found UVC 34.00 device syz (8086:0b5b)
[   70.615946][ T5867] usb 1-1: No valid video chain found.
[   70.819486][ T6366] /dev/rnullb0: Can't open blockdev
[   70.830281][ T5867] usb 1-1: USB disconnect, device number 8
[   71.142043][ T6395] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[   71.149106][ T6395] /dev/rnullb0: Can't open blockdev
[   71.240493][ T6400] trusted_key: encrypted_key: master key parameter 'default�N��;�eX�%��{X��:sy��' is invalid
[   71.448897][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[   71.455254][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[   71.615574][ T5867] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   71.775943][ T5867] usb 1-1: Using ep0 maxpacket: 32
[   71.783075][ T5867] usb 1-1: config 4 has an invalid interface number: 2 but max is 0
[   71.794279][ T5867] usb 1-1: config 4 has no interface number 0
[   71.800709][ T5867] usb 1-1: config 4 interface 2 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   71.811971][ T5867] usb 1-1: config 4 interface 2 altsetting 4 has a duplicate endpoint with address 0x82, skipping
[   71.826580][ T5867] usb 1-1: config 4 interface 2 has no altsetting 0
[   71.835363][ T5867] usb 1-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=81.ec
[   71.850822][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.859944][ T5867] usb 1-1: Product: syz
[   71.864248][ T5867] usb 1-1: Manufacturer: syz
[   71.869575][ T5867] usb 1-1: SerialNumber: syz
[   71.888856][ T5867] ftdi_sio 1-1:4.2: FTDI USB Serial Device converter detected
[   71.899788][ T5867] ftdi_sio ttyUSB0: unknown device type: 0x81ec
[   71.969902][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.125'.
[   72.234828][ T6423] /dev/rnullb0: Can't open blockdev
[   72.409691][ T6430] block nbd3: Attempted send on invalid socket
[   72.418835][ T6430] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.435941][ T6430] block nbd3: Attempted send on invalid socket
[   72.442230][ T6430] I/O error, dev nbd3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.454505][ T6430] Mount JFS Failure: -5
[   72.458974][ T6430] jfs_mount failed w/return code = -5
[   72.467884][ T6434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.492814][ T6434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.568588][ T6438] netlink: 60 bytes leftover after parsing attributes in process `syz.2.132'.
[   72.579381][ T6439] netlink: 60 bytes leftover after parsing attributes in process `syz.2.132'.
[   72.668266][ T6446] netlink: 'syz.2.134': attribute type 2 has an invalid length.
[   72.668549][ T6448] /dev/rnullb0: Can't open blockdev
[   72.680803][ T6446] netlink: 'syz.2.134': attribute type 6 has an invalid length.
[   72.689049][ T5867] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   72.691047][ T6448] /dev/rnullb0: Can't open blockdev
[   72.697357][ T6446] netlink: 'syz.2.134': attribute type 2 has an invalid length.
[   72.710946][ T6446] netlink: 'syz.2.134': attribute type 6 has an invalid length.
[   72.719732][ T6446] netlink: 'syz.2.134': attribute type 2 has an invalid length.
[   72.728932][ T6446] netlink: 'syz.2.134': attribute type 6 has an invalid length.
[   72.732843][ T6448] /dev/rnullb0: Can't open blockdev
[   72.737393][ T6446] netlink: 'syz.2.134': attribute type 2 has an invalid length.
[   72.751072][ T6448] /dev/rnullb0: Can't open blockdev
[   72.760295][ T6446] netlink: 'syz.2.134': attribute type 6 has an invalid length.
[   72.766088][ T6448] /dev/rnullb0: Can't open blockdev
[   72.775147][ T6446] netlink: 'syz.2.134': attribute type 2 has an invalid length.
[   72.795366][ T6446] netlink: 'syz.2.134': attribute type 6 has an invalid length.
[   72.811696][ T6448] /dev/rnullb0: Can't open blockdev
[   72.818746][ T6448] /dev/rnullb0: Can't open blockdev
[   72.824531][ T6448] /dev/rnullb0: Can't open blockdev
[   72.831453][ T6448] /dev/rnullb0: Can't open blockdev
[   72.838184][ T6448] /dev/rnullb0: Can't open blockdev
[   72.845200][ T6448] /dev/rnullb0: Can't open blockdev
[   72.852862][ T6448] /dev/rnullb0: Can't open blockdev
[   72.859042][ T6448] /dev/rnullb0: Can't open blockdev
[   72.864844][ T6448] /dev/rnullb0: Can't open blockdev
[   72.872606][ T6448] /dev/rnullb0: Can't open blockdev
[   72.878888][ T6448] /dev/rnullb0: Can't open blockdev
[   72.884860][ T6448] /dev/rnullb0: Can't open blockdev
[   72.892022][ T6448] /dev/rnullb0: Can't open blockdev
[   72.898165][ T6448] /dev/rnullb0: Can't open blockdev
[   72.903979][ T6448] /dev/rnullb0: Can't open blockdev
[   72.911356][ T6448] /dev/rnullb0: Can't open blockdev
[   72.917469][ T6448] /dev/rnullb0: Can't open blockdev
[   72.923394][ T6448] /dev/rnullb0: Can't open blockdev
[   72.930626][ T6448] /dev/rnullb0: Can't open blockdev
[   72.937034][ T6448] /dev/rnullb0: Can't open blockdev
[   72.943994][ T6448] /dev/rnullb0: Can't open blockdev
[   72.952111][ T6448] /dev/rnullb0: Can't open blockdev
[   72.958196][ T6448] /dev/rnullb0: Can't open blockdev
[   72.964162][ T6448] /dev/rnullb0: Can't open blockdev
[   72.971450][ T6448] /dev/rnullb0: Can't open blockdev
[   72.977750][ T6448] /dev/rnullb0: Can't open blockdev
[   73.401792][ T6461] netlink: 224 bytes leftover after parsing attributes in process `syz.2.138'.
[   73.425115][ T6461] team0: Port device macvlan1 added
[   73.445176][ T6461] /dev/rnullb0: Can't open blockdev
[   73.516822][ T6464] /dev/rnullb0: Can't open blockdev
[   73.705566][ T5867] usb 2-1: Using ep0 maxpacket: 16
[   73.716772][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024
[   73.727989][ T5867] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024
[   73.740501][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   73.750320][ T5867] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   73.762815][ T5867] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[   73.771956][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.785078][ T5867] usb 2-1: Product: syz
[   73.789373][ T5867] usb 2-1: Manufacturer: syz
[   73.794313][ T5867] usb 2-1: SerialNumber: syz
[   73.804117][ T5867] usb 2-1: config 0 descriptor??
[   73.810858][ T6432] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   73.826720][ T5867] port100 2-1:0.0: NFC: Could not get supported command types
[   74.070311][ T5925] usb 2-1: USB disconnect, device number 4
[   74.383238][ T5925] usb 1-1: USB disconnect, device number 9
[   74.407348][ T5925] ftdi_sio 1-1:4.2: device disconnected
[   74.779392][ T6495] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   75.055624][ T5925] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   75.211450][ T6526] XFS (rnullb0): Invalid superblock magic number
[   75.220690][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.262371][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.275636][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[   75.302747][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.322084][ T5925] usb 2-1: config 0 descriptor??
[   75.955251][ T5925] usbhid 2-1:0.0: can't add hid device: -71
[   75.977146][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   76.019634][ T5925] usb 2-1: USB disconnect, device number 5
[   76.501895][ T6570] wlan1 speed is unknown, defaulting to 1000
[   76.551067][ T6572] qnx4: no qnx4 filesystem (no root dir).
[   76.586027][   T24] cfg80211: failed to load regulatory.db
[   76.757245][ T6574] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.777338][ T6574] bond0: (slave rose0): Enslaving as an active interface with an up link
[   77.134210][ T6590] hpfs: Bad magic ... probably not HPFS
[   77.306534][ T6599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.173'.
[   77.373440][ T6599] /dev/rnullb0: Can't open blockdev
[   77.565590][ T1210] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   77.886795][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   77.896704][ T1210] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[   77.915791][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[   77.935647][ T1210] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[   77.945460][ T1210] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[   77.954689][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.975462][ T1210] usb 4-1: config 0 descriptor??
[   78.205821][ T1210] hdpvr 4-1:0.0: firmware version 0x51 dated 
[   78.211944][ T1210] hdpvr 4-1:0.0: untested firmware, the driver might not work.
[   78.666772][ T1210] hdpvr 4-1:0.0: Could not setup controls
[   78.683077][ T1210] hdpvr 4-1:0.0: registering videodev failed
[   78.711163][ T1210] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71
[   78.758666][ T1210] usb 4-1: USB disconnect, device number 8
[   79.201464][ T6676] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[   79.235893][ T6676] UDF-fs: Scanning with blocksize 4096 failed
[   79.247345][ T6678] hfs: can't find a HFS filesystem on dev rnullb0
[   79.378532][ T6683] validate_nla: 123 callbacks suppressed
[   79.378548][ T6683] netlink: 'syz.3.187': attribute type 4 has an invalid length.
[   79.435663][ T6683] netlink: 17 bytes leftover after parsing attributes in process `syz.3.187'.
[   81.015682][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   81.155698][   T24] usb 2-1: device descriptor read/64, error -71
[   81.395592][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   81.445591][ T5864] Bluetooth: hci4: command 0x1003 tx timeout
[   81.445622][ T5873] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   81.526960][   T24] usb 2-1: device descriptor read/64, error -71
[   81.538669][ T6701] wlan1 speed is unknown, defaulting to 1000
[   81.656283][   T24] usb usb2-port1: attempt power cycle
[   81.980112][ T6710] sctp: [Deprecated]: syz.0.194 (pid 6710) Use of int in max_burst socket option deprecated.
[   81.980112][ T6710] Use struct sctp_assoc_value instead
[   81.995671][   T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   82.049411][   T24] usb 2-1: device descriptor read/8, error -71
[   82.305604][   T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   82.337088][   T24] usb 2-1: device descriptor read/8, error -71
[   82.445788][   T24] usb usb2-port1: unable to enumerate USB device
[   82.493840][ T6720] erofs (device nullb0): cannot find valid erofs superblock
[   83.008770][ T6739] hfs: can't find a HFS filesystem on dev rnullb0
[   83.077347][   T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   83.246782][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.265840][   T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df
[   83.274906][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.315957][   T24] usb 1-1: config 0 descriptor??
[   83.323067][   T24] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected.
[   83.376006][ T1210] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[   83.551794][ T1210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.574252][ T1210] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   83.596087][ T1210] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   83.625571][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.640747][ T1210] usb 4-1: config 0 descriptor??
[   83.895879][ T1210] usb 4-1: USB disconnect, device number 9
[   84.535943][ T1210] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   84.727236][ T1210] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[   84.735775][ T1210] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   84.750430][ T1210] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   84.778658][ T6768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.785550][ T1210] usb 3-1: config 220 has no interface number 2
[   84.793239][ T6768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.805765][ T5947] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   84.832541][ T1210] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   84.862353][ T1210] usb 3-1: config 220 interface 0 has no altsetting 0
[   84.880288][ T1210] usb 3-1: config 220 interface 76 has no altsetting 0
[   84.904852][ T1210] usb 3-1: config 220 interface 1 has no altsetting 0
[   84.923630][ T1210] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   84.935615][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.946446][ T1210] usb 3-1: Product: syz
[   84.950676][ T1210] usb 3-1: Manufacturer: syz
[   84.965217][ T1210] usb 3-1: SerialNumber: syz
[   84.965932][ T5947] usb 4-1: Using ep0 maxpacket: 8
[   84.991345][ T5947] usb 4-1: config 0 has an invalid interface number: 48 but max is 0
[   85.004144][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'.
[   85.005703][ T5947] usb 4-1: config 0 has no interface number 0
[   85.027942][ T5947] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30
[   85.055718][ T5947] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[   85.069228][ T5947] usb 4-1: config 0 interface 48 has no altsetting 0
[   85.078027][ T5947] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[   85.088250][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.098655][ T5947] usb 4-1: Product: syz
[   85.102868][ T5947] usb 4-1: Manufacturer: syz
[   85.110620][ T5947] usb 4-1: SerialNumber: syz
[   85.118897][ T5947] usb 4-1: config 0 descriptor??
[   85.336934][ T5947] gspca_main: sonixj-2.14.0 probing 0c45:613a
[   85.372791][ T1210] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[   85.384411][ T1210] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[   85.534018][ T1210] usb 3-1: No valid video chain found.
[   85.540488][ T1210] usb 3-1: selecting invalid altsetting 0
[   85.547956][ T5947] gspca_sonixj: reg_r err -71
[   85.551957][ T1210] usb 3-1: selecting invalid altsetting 0
[   85.555126][ T5947] sonixj 4-1:0.48: probe with driver sonixj failed with error -71
[   85.560525][ T1210] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[   85.581215][ T5947] usb 4-1: USB disconnect, device number 10
[   85.600567][ T1210] usb 3-1: USB disconnect, device number 3
[   85.835452][   T24] pwc: recv_control_msg error -71 req 02 val 2700
[   85.855861][   T24] pwc: recv_control_msg error -71 req 04 val 1700
[   85.872532][   T24] pwc: recv_control_msg error -71 req 02 val 2c00
[   85.884332][   T24] pwc: recv_control_msg error -71 req 04 val 1000
[   85.915846][   T24] pwc: recv_control_msg error -71 req 04 val 1300
[   85.927797][   T24] pwc: recv_control_msg error -71 req 04 val 1400
[   85.943063][   T24] pwc: recv_control_msg error -71 req 02 val 2000
[   85.959289][   T24] pwc: recv_control_msg error -71 req 02 val 2100
[   85.979085][   T24] pwc: recv_control_msg error -71 req 02 val 2200
[   85.995830][   T24] pwc: recv_control_msg error -71 req 06 val 0600
[   86.010080][   T24] pwc: recv_control_msg error -71 req 04 val 1500
[   86.018164][ T6794] /dev/rnullb0: Can't open blockdev
[   86.027583][   T24] pwc: recv_control_msg error -71 req 02 val 2500
[   86.045852][   T24] pwc: recv_control_msg error -71 req 02 val 2400
[   86.057120][   T24] pwc: recv_control_msg error -71 req 02 val 2600
[   86.065815][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[   86.083872][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[   86.096909][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[   86.114238][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[   86.144098][   T24] pwc: Registered as video103.
[   86.153506][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5
[   86.203971][   T24] usb 1-1: USB disconnect, device number 10
[   86.471810][ T6809] netlink: 'syz.3.226': attribute type 46 has an invalid length.
[   86.734820][ T6822] comedi comedi4: comedi_config --init_data is deprecated
[   86.772059][ T6822] NILFS (rnullb0): couldn't find nilfs on the device
[   86.773708][ T6824] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[   86.825668][ T6824] Error validating options; rc = [-22]
[   86.888709][ T6829] kernel profiling enabled (shift: 63)
[   86.896697][ T6829] profiling shift: 63 too large
[   86.897732][ T5947] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   86.994969][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'.
[   87.045324][ T6838] exFAT-fs (rnullb0): invalid boot record signature
[   87.065665][ T6838] exFAT-fs (rnullb0): failed to read boot sector
[   87.072069][ T6838] exFAT-fs (rnullb0): failed to recognize exfat type
[   87.073953][ T5947] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   87.096032][ T5947] usb 4-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df
[   87.105258][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.126418][ T5947] usb 4-1: config 0 descriptor??
[   87.139733][ T5947] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected.
[   87.565628][ T5867] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   87.737529][ T5867] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   87.776627][ T5867] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.945584][ T5867] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[   87.954611][ T5867] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   87.999253][ T5867] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   88.017850][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   88.037253][ T5867] usb 1-1: Product: syz
[   88.041467][ T5867] usb 1-1: Manufacturer: syz
[   88.060844][ T5867] cdc_wdm 1-1:1.0: skipping garbage
[   88.075563][ T5867] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[   88.262895][ T5873] Bluetooth: hci3: Malformed LE Event: 0x0d
[   88.273362][ T1210] usb 1-1: USB disconnect, device number 11
[   89.185835][ T5867] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   89.347166][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.366409][ T5867] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[   89.390827][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.417093][ T5867] usb 1-1: config 0 descriptor??
[   89.700493][ T5947] pwc: recv_control_msg error -71 req 02 val 2700
[   89.731533][ T5947] pwc: recv_control_msg error -71 req 04 val 1700
[   89.754927][ T5947] pwc: recv_control_msg error -71 req 02 val 2c00
[   89.768486][ T5947] pwc: recv_control_msg error -71 req 04 val 1000
[   89.785216][ T5947] pwc: recv_control_msg error -71 req 04 val 1300
[   89.795645][ T5947] pwc: recv_control_msg error -71 req 04 val 1400
[   89.815895][ T5947] pwc: recv_control_msg error -71 req 02 val 2000
[   89.829493][ T5947] pwc: recv_control_msg error -71 req 02 val 2100
[   89.849786][ T5867] waltop 0003:172F:0500.0001: item fetching failed at offset 3/5
[   89.865378][ T5947] pwc: recv_control_msg error -71 req 02 val 2200
[   89.882834][ T5867] waltop 0003:172F:0500.0001: probe with driver waltop failed with error -22
[   89.892639][ T5947] pwc: recv_control_msg error -71 req 06 val 0600
[   89.905842][ T5947] pwc: recv_control_msg error -71 req 04 val 1500
[   89.918670][ T5947] pwc: recv_control_msg error -71 req 02 val 2500
[   89.948304][ T5947] pwc: recv_control_msg error -71 req 02 val 2400
[   89.958393][ T5947] pwc: recv_control_msg error -71 req 02 val 2600
[   89.965179][ T5947] pwc: recv_control_msg error -71 req 02 val 2900
[   89.972359][ T5947] pwc: recv_control_msg error -71 req 02 val 2800
[   89.982164][ T5947] pwc: recv_control_msg error -71 req 04 val 1100
[   89.989227][ T5947] pwc: recv_control_msg error -71 req 04 val 1200
[   90.004711][ T5947] pwc: Registered as video103.
[   90.016814][ T5947] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6
[   90.057781][ T5867] usb 1-1: USB disconnect, device number 12
[   90.064604][ T5947] usb 4-1: USB disconnect, device number 11
[   90.171456][ T6872] exFAT-fs (rnullb0): invalid boot record signature
[   90.179824][ T6872] exFAT-fs (rnullb0): failed to read boot sector
[   90.187916][ T6872] exFAT-fs (rnullb0): failed to recognize exfat type
[   90.600146][ T6887] hfs: can't find a HFS filesystem on dev rnullb0
[   91.025032][ T5947] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   91.198387][ T5947] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[   91.207648][ T5947] usb 4-1: config 0 has no interface number 0
[   91.220736][ T5947] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[   91.234277][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.252305][ T5947] usb 4-1: Product: syz
[   91.263389][ T5947] usb 4-1: Manufacturer: syz
[   91.274733][ T5947] usb 4-1: SerialNumber: syz
[   91.291024][ T5947] usb 4-1: config 0 descriptor??
[   91.455535][ T6914] netlink: 400 bytes leftover after parsing attributes in process `syz.0.259'.
[   92.237206][ T6942] /dev/rnullb0: Can't open blockdev
[   92.370888][ T6945] Set syz1 is full, maxelem 1038 reached
[   92.388798][ T6943] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   92.437484][ T6943] virtio-fs: tag </dev/rnullb0> not found
[   93.549709][ T5873] Bluetooth: hci3: command tx timeout
[   93.771374][ T6961] /dev/rnullb0: Can't open blockdev
[   93.854651][ T5947] usb 4-1: Found UVC 0.08 device syz (046d:0823)
[   93.871285][ T5947] usb 4-1: No valid video chain found.
[   93.902209][ T5947] usb 4-1: USB disconnect, device number 12
[   93.961776][ T6968] /dev/rnullb0: Can't open blockdev
[   94.052600][ T6969] /dev/rnullb0: Can't open blockdev
[   94.361848][ T5947] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   94.501666][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   94.522661][ T5947] usb 4-1: Using ep0 maxpacket: 32
[   94.529403][ T5947] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[   94.541395][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   94.555568][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[   94.565817][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[   94.579919][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[   94.595394][ T5947] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[   94.604968][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.614260][ T5947] usb 4-1: Product: syz
[   94.618660][ T5947] usb 4-1: Manufacturer: syz
[   94.625680][ T5947] usb 4-1: SerialNumber: syz
[   94.631580][   T24] usb 3-1: device descriptor read/64, error -71
[   94.639710][ T5947] usb 4-1: config 0 descriptor??
[   94.863118][ T6984] FAT-fs (rnullb0): bogus number of reserved sectors
[   94.869862][ T6984] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   94.880371][   T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   95.021256][ T1210] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[   95.021306][   T24] usb 3-1: device descriptor read/64, error -71
[   95.141751][   T24] usb usb3-port1: attempt power cycle
[   95.172352][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   95.184549][ T1210] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   95.193648][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.203055][ T1210] usb 1-1: config 0 descriptor??
[   95.208599][ T6982] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   95.230902][ T5943] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   95.336952][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.344259][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.350652][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.357019][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.360855][ T5943] usb 2-1: device descriptor read/64, error -71
[   95.366041][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.377149][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.383490][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.389765][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.396212][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.402528][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.408775][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.415336][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.421849][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.428116][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.434426][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.440707][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.446967][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.453324][ T5947] iforce 4-1:0.0: usb_submit_urb failed: -71
[   95.459353][ T5947] input input7: Timeout waiting for response from device.
[   95.470403][ T5947] usb 4-1: USB disconnect, device number 13
[   95.490664][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   95.513418][   T24] usb 3-1: device descriptor read/8, error -71
[   95.600532][ T5943] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   95.618988][ T1210] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[   95.625897][ T1210] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[   95.632769][ T1210] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[   95.639551][ T1210] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[   95.646506][ T1210] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[   95.654508][ T1210] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[   95.730450][ T5943] usb 2-1: device descriptor read/64, error -71
[   95.770687][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   95.800751][   T24] usb 3-1: device descriptor read/8, error -71
[   95.826823][ T1210] usb 1-1: USB disconnect, device number 13
[   95.840988][ T5943] usb usb2-port1: attempt power cycle
[   95.894054][ T6997] tmpfs: Group quota inode hardlimit too large.
[   95.911985][   T24] usb usb3-port1: unable to enumerate USB device
[   95.957777][ T7002] Set syz1 is full, maxelem 1038 reached
[   96.199955][ T5943] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   96.220423][ T5943] usb 2-1: device descriptor read/8, error -71
[   96.459720][ T5943] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   96.480058][ T5943] usb 2-1: device descriptor read/8, error -71
[   96.590923][ T5943] usb usb2-port1: unable to enumerate USB device
[   97.338751][ T7013] netlink: 'syz.3.288': attribute type 4 has an invalid length.
[   97.459947][ T7021] kvm: kvm [7020]: vcpu0, guest rIP: 0x8000000 Unhandled WRMSR(0x4000003a) = 0x0
[   97.531827][ T7027] netlink: 36 bytes leftover after parsing attributes in process `syz.3.292'.
[   97.658770][   T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   97.682676][ T7033] cgroup: Unknown subsys name 'cpuset'
[   97.689209][ T7033] process 'syz.3.294' launched '/dev/fd/6' with NULL argv: empty string added
[   97.700636][ T5925] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   97.812559][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.815854][ T7037] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   97.823954][   T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df
[   97.842626][ T5925] usb 1-1: device descriptor read/64, error -71
[   97.842904][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.865812][   T24] usb 3-1: config 0 descriptor??
[   97.873745][   T24] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected.
[   98.089363][ T5925] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   98.228069][ T5925] usb 1-1: device descriptor read/64, error -71
[   98.318059][ T5943] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[   98.338198][ T5925] usb usb1-port1: attempt power cycle
[   98.477774][ T5943] usb 4-1: Using ep0 maxpacket: 8
[   98.485182][ T5943] usb 4-1: unable to get BOS descriptor or descriptor too short
[   98.497101][ T5943] usb 4-1: string descriptor 0 read error: -22
[   98.503620][ T5943] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe
[   98.513753][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.587723][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   98.677606][ T5925] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   98.699856][ T5925] usb 1-1: device descriptor read/8, error -71
[   98.747632][   T10] usb 2-1: Using ep0 maxpacket: 16
[   98.756354][   T10] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[   98.765591][   T10] usb 2-1: config 0 has no interface number 0
[   98.773252][   T10] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[   98.786347][   T10] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 9.f5
[   98.797187][   T10] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   98.805644][   T10] usb 2-1: Product: syz
[   98.811824][   T10] usb 2-1: SerialNumber: syz
[   98.820306][   T10] usb 2-1: config 0 descriptor??
[   98.937630][ T5925] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   98.969752][ T5925] usb 1-1: device descriptor read/8, error -71
[   99.078136][ T5925] usb usb1-port1: unable to enumerate USB device
[   99.153198][ T5943] asix 4-1:7.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   99.167370][ T5943] asix 4-1:7.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   99.233433][   T10] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71
[   99.254648][   T10] usb 2-1: USB disconnect, device number 14
[   99.339664][ T5943] asix 4-1:7.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   99.349958][ T5943] asix 4-1:7.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   99.530208][ T5943] asix 4-1:7.0 eth1: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, a6:60:04:f7:8a:d5
[   99.565976][ T5943] usb 4-1: USB disconnect, device number 14
[   99.573462][ T5943] asix 4-1:7.0 eth1: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet
[  100.345520][   T24] pwc: recv_control_msg error -71 req 02 val 2700
[  100.368293][   T24] pwc: recv_control_msg error -71 req 04 val 1700
[  100.382506][   T24] pwc: recv_control_msg error -71 req 02 val 2c00
[  100.398661][   T24] pwc: recv_control_msg error -71 req 04 val 1000
[  100.412694][   T24] pwc: recv_control_msg error -71 req 04 val 1300
[  100.427394][   T24] pwc: recv_control_msg error -71 req 04 val 1400
[  100.440822][   T24] pwc: recv_control_msg error -71 req 02 val 2000
[  100.458343][   T24] pwc: recv_control_msg error -71 req 02 val 2100
[  100.473782][   T24] pwc: recv_control_msg error -71 req 02 val 2200
[  100.489310][   T24] pwc: recv_control_msg error -71 req 06 val 0600
[  100.508294][   T24] pwc: recv_control_msg error -71 req 04 val 1500
[  100.527670][   T24] pwc: recv_control_msg error -71 req 02 val 2500
[  100.544231][   T24] pwc: recv_control_msg error -71 req 02 val 2400
[  100.558272][   T24] pwc: recv_control_msg error -71 req 02 val 2600
[  100.571729][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  100.589170][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  100.604159][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  100.633652][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  100.645924][   T24] pwc: Registered as video103.
[  100.672125][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9
[  100.682698][ T5867] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  100.728228][   T24] usb 3-1: USB disconnect, device number 8
[  100.855316][ T7123] netlink: 'syz.0.315': attribute type 10 has an invalid length.
[  100.868948][ T7123] team0: Port device macvlan1 added
[  100.877096][ T5867] usb 4-1: Using ep0 maxpacket: 16
[  100.896566][ T5867] usb 4-1: unable to get BOS descriptor or descriptor too short
[  100.907135][ T7123] /dev/rnullb0: Can't open blockdev
[  100.912633][ T5867] usb 4-1: config 9 has an invalid interface number: 48 but max is 0
[  100.913003][ T7123] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  100.921974][ T5867] usb 4-1: config 9 has no interface number 0
[  100.945565][ T5867] usb 4-1: config 9 interface 48 has no altsetting 0
[  100.954319][ T5867] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b
[  100.967875][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.975967][ T5867] usb 4-1: Product: syz
[  100.980224][ T5867] usb 4-1: Manufacturer: syz
[  100.984820][ T5867] usb 4-1: SerialNumber: syz
[  101.198564][ T5867] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  101.606886][ T5867] gspca_vc032x: reg_w err -71
[  101.611658][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.619637][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.625127][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.630527][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.635909][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.641266][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.646598][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.651888][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.657259][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.662571][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.667915][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.673208][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.678741][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.684062][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.689494][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.694831][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.700126][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.706673][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.711960][ T5867] gspca_vc032x: I2c Bus Busy Wait 00
[  101.717975][ T5867] gspca_vc032x: Unknown sensor...
[  101.723026][ T5867] vc032x 4-1:9.48: probe with driver vc032x failed with error -22
[  101.732947][ T5867] usb 4-1: USB disconnect, device number 15
[  102.140884][ T7154] block nbd3: Attempted send on invalid socket
[  102.147589][ T7154] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  102.157746][ T7154] block nbd3: Attempted send on invalid socket
[  102.163916][ T7154] I/O error, dev nbd3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  102.173534][ T7154] Mount JFS Failure: -5
[  102.254234][ T5943] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  102.403984][ T5943] usb 3-1: Using ep0 maxpacket: 8
[  102.410333][ T5943] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15
[  102.420126][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  102.432123][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  102.443232][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  102.462435][ T5943] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  102.472782][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.480943][ T5943] usb 3-1: Product: syz
[  102.485160][ T5943] usb 3-1: Manufacturer: syz
[  102.489792][ T5943] usb 3-1: SerialNumber: syz
[  102.504271][ T5943] usb 3-1: config 0 descriptor??
[  102.513461][ T7152] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  102.534077][ T5867] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  102.693761][ T5867] usb 4-1: Using ep0 maxpacket: 16
[  102.702703][ T5867] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  102.712212][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.724119][ T5867] usb 4-1: Product: syz
[  102.730665][ T5867] usb 4-1: Manufacturer: syz
[  102.731561][ T5943] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  102.740045][ T5867] usb 4-1: SerialNumber: syz
[  102.754891][ T5867] usb 4-1: config 0 descriptor??
[  102.755466][ T5943] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10
[  102.762754][ T5867] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  102.783344][    C0] powermate: config urb returned -71
[  102.788928][    C0] powermate: config urb returned -71
[  102.794412][    C0] powermate: config urb returned -71
[  102.799801][    C0] powermate: config urb returned -71
[  102.810641][    C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  102.821670][ T5943] usb 3-1: USB disconnect, device number 9
[  103.042627][ T7186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.333'.
[  103.052443][ T7186] /dev/rnullb0: Can't open blockdev
[  103.233222][ T5943] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  103.260711][ T7199] netlink: 48 bytes leftover after parsing attributes in process `syz.2.336'.
[  103.270727][ T7199] netlink: 48 bytes leftover after parsing attributes in process `syz.2.336'.
[  103.383159][   T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  103.393053][ T5943] usb 2-1: Using ep0 maxpacket: 8
[  103.401330][ T5943] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  103.410586][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.418634][ T5943] usb 2-1: Product: syz
[  103.422807][ T5943] usb 2-1: Manufacturer: syz
[  103.427529][ T5943] usb 2-1: SerialNumber: syz
[  103.433521][ T5943] usb 2-1: config 0 descriptor??
[  103.440397][ T5943] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  103.512929][   T24] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  103.512993][   T10] usb 1-1: device descriptor read/64, error -71
[  103.567125][ T5867] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71
[  103.581052][ T5867] usb 4-1: USB disconnect, device number 16
[  103.652814][   T24] usb 3-1: device descriptor read/64, error -71
[  103.762770][   T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  103.892618][   T10] usb 1-1: device descriptor read/64, error -71
[  103.892620][   T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  104.003249][   T10] usb usb1-port1: attempt power cycle
[  104.032465][   T24] usb 3-1: device descriptor read/64, error -71
[  104.142642][   T24] usb usb3-port1: attempt power cycle
[  104.342126][   T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  104.349836][ T5925] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  104.372711][   T10] usb 1-1: device descriptor read/8, error -71
[  104.482896][   T24] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  104.502495][   T24] usb 3-1: device descriptor read/8, error -71
[  104.503031][ T5925] usb 4-1: Using ep0 maxpacket: 16
[  104.523200][ T5925] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.536133][ T5925] usb 4-1: config 1 interface 0 has no altsetting 0
[  104.536699][ T5867] kernel write not supported for file 206/net/vlan/vlan1 (pid: 5867 comm: kworker/1:4)
[  104.545537][ T5925] usb 4-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.40
[  104.562033][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.570412][ T5925] usb 4-1: Product: й
[  104.574666][ T5925] usb 4-1: Manufacturer: ࠓ
[  104.579291][ T5925] usb 4-1: SerialNumber: δ粮⮢乜ាﱟ띦㺑뚓걺ꎼ靎跕루ᵺ앦푨쒗ꀴ缤듡წ욁獮Ჸꋴ䐾❵벦▻錹䎙劉割葅쪬劇䆮ᚒㄤ聓长ਉ芔㫸ⰱ莡颰樚햯衋扅랋쐻熴嘙㓃춅䠯镏璹檮쏞펡廻과矓黕셿잙ᩨ馍㳧
[  104.606243][    C0] vkms_vblank_simulate: vblank timer overrun
[  104.621970][   T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  104.642733][   T10] usb 1-1: device descriptor read/8, error -71
[  104.686643][ T5943] gspca_sonixj: reg_w1 err -71
[  104.722254][ T5943] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  104.732032][ T5943] usb 2-1: USB disconnect, device number 15
[  104.751828][   T24] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  104.752010][   T10] usb usb1-port1: unable to enumerate USB device
[  104.772489][   T24] usb 3-1: device descriptor read/8, error -71
[  104.859677][ T5925] usbhid 4-1:1.0: can't add hid device: -71
[  104.867298][ T5925] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  104.880748][ T5925] usb 4-1: USB disconnect, device number 17
[  104.892001][   T24] usb usb3-port1: unable to enumerate USB device
[  105.388082][ T7211] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[  105.395913][ T7211] UDF-fs: Scanning with blocksize 4096 failed
[  105.481130][   T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  105.489712][ T7215] /dev/rnullb0: Can't open blockdev
[  105.498819][ T7216] /dev/rnullb0: Can't open blockdev
[  105.620940][   T24] usb 2-1: device descriptor read/64, error -71
[  105.860713][   T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  106.003476][   T24] usb 2-1: device descriptor read/64, error -71
[  106.111705][   T24] usb usb2-port1: attempt power cycle
[  106.450193][   T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  106.481590][   T24] usb 2-1: device descriptor read/8, error -71
[  106.524775][ T7236] /dev/rnullb0: Can't open blockdev
[  106.719899][   T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  106.740869][   T24] usb 2-1: device descriptor read/8, error -71
[  106.777239][   T30] audit: type=1326 audit(2000002612.377:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.349" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1908d8ebe9 code=0x0
[  106.850458][   T24] usb usb2-port1: unable to enumerate USB device
[  106.984127][ T7249] /dev/rnullb0: Can't open blockdev
[  107.259387][ T7205] usb 1-1: new low-speed USB device number 22 using dummy_hcd
[  107.410604][ T7205] usb 1-1: No LPM exit latency info found, disabling LPM.
[  107.418599][ T7205] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  107.431117][ T7205] usb 1-1: string descriptor 0 read error: -22
[  107.437696][ T7205] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d
[  107.446808][ T7205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.455812][ T7205] usb 1-1: config 0 descriptor??
[  107.565967][ T7253] fuseblk: Unknown parameter 'group+�k'
[  107.608931][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.354'.
[  107.626683][ T7257] /dev/rnullb0: Can't open blockdev
[  107.656382][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'.
[  107.810562][ T7205] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  107.994761][ T7205] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.007611][ T7205] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  108.017041][ T7205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.025245][ T7205] usb 3-1: Product: syz
[  108.029676][ T7205] usb 3-1: Manufacturer: syz
[  108.034309][ T7205] usb 3-1: SerialNumber: syz
[  108.049194][ T7205] usb 3-1: config 0 descriptor??
[  108.059985][ T7205] powermate 3-1:0.0: probe with driver powermate failed with error -22
[  108.299013][ T7267] /dev/rnullb0: Can't open blockdev
[  108.434156][ T7272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.450244][ T7272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.461499][ T5947] usb 3-1: USB disconnect, device number 14
[  108.516033][ T7280] /dev/rnullb0: Can't open blockdev
[  108.658231][   T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  108.838160][   T24] usb 2-1: Using ep0 maxpacket: 16
[  108.868216][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.879682][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.889479][   T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  108.898557][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.919863][   T24] usb 2-1: config 0 descriptor??
[  109.140401][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  109.146408][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  109.163573][   T24] usb 2-1: USB disconnect, device number 20
[  109.537016][   T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  109.558608][   T24] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  109.585347][ T7295] capability: warning: `syz.2.363' uses deprecated v2 capabilities in a way that may be insecure
[  109.609231][ T7293] fido_id[7293]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  109.716782][ T7298] syzkaller1: entered promiscuous mode
[  109.733849][ T7298] syzkaller1: entered allmulticast mode
[  109.754887][ T7298] /dev/rnullb0: Can't open blockdev
[  110.133094][ T7315] netlink: 164 bytes leftover after parsing attributes in process `syz.3.369'.
[  110.222107][   T24] usb 1-1: USB disconnect, device number 22
[  110.421407][ T7322] virtiofs: Unknown parameter '/dev/video#'
[  110.488520][ T7332] /dev/rnullb0: Can't open blockdev
[  110.980167][   T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  111.008045][ T7362] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:21
[  111.018171][ T7362] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004
[  111.156758][   T24] usb 1-1: Using ep0 maxpacket: 32
[  111.163308][   T24] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  111.176650][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.196773][   T24] usb 1-1: config 0 descriptor??
[  111.212259][   T24] as10x_usb: device has been detected
[  111.222041][   T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  111.263426][   T24] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  111.280935][   T24] as10x_usb: error during firmware upload part1
[  111.287810][   T24] Registered device nBox DVB-T Dongle
[  111.351478][ T7368] /dev/rnullb0: Can't open blockdev
[  111.362342][ T5867] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  111.417448][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'.
[  111.444164][ T5906] usb 1-1: USB disconnect, device number 23
[  111.470855][ T5906] Unregistered device nBox DVB-T Dongle
[  111.472896][ T5906] as10x_usb: device has been disconnected
[  111.495398][ T5867] usb 2-1: device descriptor read/64, error -71
[  111.735401][ T5867] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  111.835154][ T5906] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  111.875038][ T5867] usb 2-1: device descriptor read/64, error -71
[  111.985065][ T5906] usb 1-1: Using ep0 maxpacket: 8
[  111.990374][ T5867] usb usb2-port1: attempt power cycle
[  111.997367][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short
[  112.006216][ T5906] usb 1-1: config 8 has an invalid interface number: 255 but max is 0
[  112.014562][ T5906] usb 1-1: config 8 has no interface number 0
[  112.020889][ T5906] usb 1-1: config 8 interface 255 has no altsetting 0
[  112.029998][ T5906] usb 1-1: string descriptor 0 read error: -22
[  112.036289][ T5906] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[  112.046330][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.323907][ T5906] catc 1-1:8.255: Can't set altsetting 1.
[  112.330002][ T5906] catc 1-1:8.255: probe with driver catc failed with error -5
[  112.338320][ T5867] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  112.349781][ T5906] usb 1-1: USB disconnect, device number 24
[  112.392341][ T5867] usb 2-1: device descriptor read/8, error -71
[  112.552620][ T7400] syzkaller1: entered promiscuous mode
[  112.574817][ T7400] syzkaller1: entered allmulticast mode
[  112.576369][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'.
[  112.592364][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'.
[  112.644387][ T5867] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  112.658832][ T5873] Bluetooth: hci0: unexpected event 0x03 length: 218 > 11
[  112.675335][ T5867] usb 2-1: device descriptor read/8, error -71
[  112.824470][ T5867] usb usb2-port1: unable to enumerate USB device
[  113.053432][ T7430] netlink: 256 bytes leftover after parsing attributes in process `syz.3.403'.
[  113.201025][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.225601][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.427373][    C1] ------------[ cut here ]------------
[  113.432913][    C1] WARNING: ./include/linux/skbuff.h:1165 at nf_send_unreach6+0x828/0xa20, CPU#1: kworker/1:4/5867
[  113.433734][   T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  113.443571][    C1] Modules linked in:
[  113.443598][    C1] CPU: 1 UID: 0 PID: 5867 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) 
[  113.443617][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  113.443629][    C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[  113.443654][    C1] RIP: 0010:nf_send_unreach6+0x828/0xa20
[  113.443678][    C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20
[  113.505888][    C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246
[  113.511986][    C1] RAX: ffffffff8a51b3b7 RBX: ffff88802723f000 RCX: ffff888076639e00
[  113.519997][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  113.528005][    C1] RBP: ffffc90000a08568 R08: ffff8880272fe403 R09: 1ffff11004e5fc80
[  113.536016][    C1] R10: dffffc0000000000 R11: ffffed1004e5fc81 R12: ffff8880765f4101
[  113.544021][    C1] R13: dffffc0000000001 R14: 1ffff11004e47e0b R15: 0000000000000000
[  113.552013][    C1] FS:  0000000000000000(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000
[  113.560990][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  113.567612][    C1] CR2: 000000110c3d0294 CR3: 00000000254ec000 CR4: 00000000003526f0
[  113.575631][    C1] Call Trace:
[  113.578920][    C1]  <IRQ>
[  113.581772][    C1]  ? __pfx_nf_send_unreach6+0x10/0x10
[  113.587201][    C1]  ? lock_release+0x4b/0x3e0
[  113.591809][    C1]  nft_reject_inet_eval+0x441/0x690
[  113.597055][    C1]  nft_do_chain+0x40c/0x1920
[  113.601659][    C1]  ? __pfx_wg_receive+0x10/0x10
[  113.603479][   T10] usb 4-1: Using ep0 maxpacket: 32
[  113.606544][    C1]  ? __pfx_udpv6_queue_rcv_one_skb+0x10/0x10
[  113.617637][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  113.622683][    C1]  ? ipv6_find_hdr+0xc78/0x1050
[  113.625529][   T10] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  113.627584][    C1]  nft_do_chain_inet+0x25d/0x340
[  113.642739][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  113.648182][   T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  113.648234][    C1]  ? NF_HOOK+0x9a/0x3a0
[  113.661287][    C1]  ? rcu_is_watching+0x15/0xb0
[  113.666088][    C1]  ? lock_acquire+0x5f/0x360
[  113.670688][    C1]  ? ip_sabotage_in+0x57/0x270
[  113.675499][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  113.680974][    C1]  nf_hook_slow+0xc5/0x220
[  113.685421][    C1]  NF_HOOK+0x206/0x3a0
[  113.689501][    C1]  ? skb_orphan+0xaf/0xd0
[  113.689690][   T10] usb 4-1: config 1 has no interface number 1
[  113.693878][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  113.693912][    C1]  ? NF_HOOK+0x9a/0x3a0
[  113.693929][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  113.693948][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  113.693970][    C1]  __netif_receive_skb+0xd3/0x380
[  113.712539][   T10] usb 4-1: config 1 interface 2 has no altsetting 0
[  113.713972][    C1]  ? process_backlog+0x2d5/0x14f0
[  113.714002][    C1]  process_backlog+0x60e/0x14f0
[  113.714027][    C1]  ? __pfx_process_backlog+0x10/0x10
[  113.722280][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  113.724246][    C1]  ? xdp_do_check_flushed+0x21b/0x240
[  113.724278][    C1]  __napi_poll+0xc4/0x360
[  113.724297][    C1]  ? rcu_is_watching+0x15/0xb0
[  113.724319][    C1]  net_rx_action+0x707/0xe30
[  113.724347][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  113.734406][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.735946][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  113.741915][   T10] usb 4-1: Product: 礪쟧钜殂텰ᓩ帑夈⌓砷ୌ❒疛ᕕ楜ﯻ慂漵㠽另侀຺ꄩფṎ﫭욟蕄냎熀┑蟛稣맗㨝练豤꽐꠫ꋽ浛昸魯垵苲雱㧹ꙛ㥐䣦呑丁্얒ះ䳪榲礞姲艤偷虩刹馺∸귭⩴⁲㈓岡喬繰龜䴤륞鶙쐒뺱戇쬄又促备쳖⎆輦㕞㶺릃㺡൑閞珇엹잹坁鑴눼
[  113.746070][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  113.746103][    C1]  handle_softirqs+0x283/0x870
[  113.746123][    C1]  ? do_softirq+0xec/0x180
[  113.746141][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  113.746163][    C1]  ? wg_socket_send_skb_to_peer+0x16b/0x1d0
[  113.746185][    C1]  do_softirq+0xec/0x180
[  113.746204][    C1]  </IRQ>
[  113.770772][   T10] usb 4-1: Manufacturer: 攟༶๕熦ፅ絺亡ᆇॳ⻩毮㕴鋠᜔뚐쨜ᓏ僶珔⦬禩⪁바
[  113.774314][    C1]  <TASK>
[  113.774325][    C1]  ? __pfx_do_softirq+0x10/0x10
[  113.774350][    C1]  ? rcu_is_watching+0x15/0xb0
[  113.774371][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  113.774392][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  113.774412][    C1]  ? do_raw_read_unlock+0x3d/0x80
[  113.774436][    C1]  wg_socket_send_skb_to_peer+0x16b/0x1d0
[  113.774459][    C1]  wg_packet_tx_worker+0x1c8/0x7c0
[  113.774476][    C1]  ? rcu_is_watching+0x15/0xb0
[  113.774496][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  113.790198][   T10] usb 4-1: SerialNumber: ࠾
[  113.792770][    C1]  process_scheduled_works+0xae1/0x17b0
[  113.792810][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  113.826421][    C0] vkms_vblank_simulate: vblank timer overrun
[  113.831680][    C1]  worker_thread+0x8a0/0xda0
[  113.947492][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  113.953864][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  113.959782][    C1]  ? __kthread_parkme+0x7b/0x200
[  113.964769][    C1]  kthread+0x711/0x8a0
[  113.968857][    C1]  ? __pfx_worker_thread+0x10/0x10
[  113.973994][    C1]  ? __pfx_kthread+0x10/0x10
[  113.978592][    C1]  ? rcu_is_watching+0x15/0xb0
[  113.983384][    C1]  ? __pfx_kthread+0x10/0x10
[  113.987995][    C1]  ret_from_fork+0x47c/0x820
[  113.992602][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  113.997778][    C1]  ? __switch_to_asm+0x39/0x70
[  114.002554][    C1]  ? __switch_to_asm+0x33/0x70
[  114.007348][    C1]  ? __pfx_kthread+0x10/0x10
[  114.011959][    C1]  ret_from_fork_asm+0x1a/0x30
[  114.016772][    C1]  </TASK>
[  114.019800][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  114.027087][    C1] CPU: 1 UID: 0 PID: 5867 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) 
[  114.036467][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  114.046539][    C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[  114.052648][    C1] Call Trace:
[  114.055937][    C1]  <IRQ>
[  114.058790][    C1]  dump_stack_lvl+0x99/0x250
[  114.063396][    C1]  ? __asan_memcpy+0x40/0x70
[  114.068010][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.073230][    C1]  ? __pfx__printk+0x10/0x10
[  114.077840][    C1]  vpanic+0x281/0x750
[  114.081858][    C1]  ? __pfx_vpanic+0x10/0x10
[  114.086373][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  114.091657][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  114.096850][    C1]  panic+0xb9/0xc0
[  114.100568][    C1]  ? __pfx_panic+0x10/0x10
[  114.104978][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  114.109910][    C1]  __warn+0x334/0x4c0
[  114.113887][    C1]  ? nf_send_unreach6+0x828/0xa20
[  114.118902][    C1]  ? nf_send_unreach6+0x828/0xa20
[  114.123916][    C1]  report_bug+0x2be/0x4f0
[  114.128233][    C1]  ? nf_send_unreach6+0x828/0xa20
[  114.133247][    C1]  ? nf_send_unreach6+0x828/0xa20
[  114.138277][    C1]  ? nf_send_unreach6+0x82a/0xa20
[  114.143291][    C1]  handle_bug+0x84/0x160
[  114.147523][    C1]  exc_invalid_op+0x1a/0x50
[  114.152009][    C1]  asm_exc_invalid_op+0x1a/0x20
[  114.156849][    C1] RIP: 0010:nf_send_unreach6+0x828/0xa20
[  114.162492][    C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20
[  114.182102][    C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246
[  114.188162][    C1] RAX: ffffffff8a51b3b7 RBX: ffff88802723f000 RCX: ffff888076639e00
[  114.196122][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  114.204108][    C1] RBP: ffffc90000a08568 R08: ffff8880272fe403 R09: 1ffff11004e5fc80
[  114.212064][    C1] R10: dffffc0000000000 R11: ffffed1004e5fc81 R12: ffff8880765f4101
[  114.220024][    C1] R13: dffffc0000000001 R14: 1ffff11004e47e0b R15: 0000000000000000
[  114.227989][    C1]  ? nf_send_unreach6+0x827/0xa20
[  114.233011][    C1]  ? __pfx_nf_send_unreach6+0x10/0x10
[  114.238378][    C1]  ? lock_release+0x4b/0x3e0
[  114.242957][    C1]  nft_reject_inet_eval+0x441/0x690
[  114.248149][    C1]  nft_do_chain+0x40c/0x1920
[  114.252723][    C1]  ? __pfx_wg_receive+0x10/0x10
[  114.257569][    C1]  ? __pfx_udpv6_queue_rcv_one_skb+0x10/0x10
[  114.263544][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  114.268556][    C1]  ? ipv6_find_hdr+0xc78/0x1050
[  114.273494][    C1]  nft_do_chain_inet+0x25d/0x340
[  114.278419][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  114.283868][    C1]  ? NF_HOOK+0x9a/0x3a0
[  114.288101][    C1]  ? rcu_is_watching+0x15/0xb0
[  114.292865][    C1]  ? lock_acquire+0x5f/0x360
[  114.297446][    C1]  ? ip_sabotage_in+0x57/0x270
[  114.302213][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  114.307676][    C1]  nf_hook_slow+0xc5/0x220
[  114.312094][    C1]  NF_HOOK+0x206/0x3a0
[  114.316168][    C1]  ? skb_orphan+0xaf/0xd0
[  114.320488][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  114.325675][    C1]  ? NF_HOOK+0x9a/0x3a0
[  114.329823][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  114.334664][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  114.340027][    C1]  __netif_receive_skb+0xd3/0x380
[  114.345062][    C1]  ? process_backlog+0x2d5/0x14f0
[  114.350104][    C1]  process_backlog+0x60e/0x14f0
[  114.355052][    C1]  ? __pfx_process_backlog+0x10/0x10
[  114.360335][    C1]  ? xdp_do_check_flushed+0x21b/0x240
[  114.365715][    C1]  __napi_poll+0xc4/0x360
[  114.370030][    C1]  ? rcu_is_watching+0x15/0xb0
[  114.374805][    C1]  net_rx_action+0x707/0xe30
[  114.379397][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  114.384499][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  114.389694][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  114.394977][    C1]  handle_softirqs+0x283/0x870
[  114.399735][    C1]  ? do_softirq+0xec/0x180
[  114.404140][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  114.409416][    C1]  ? wg_socket_send_skb_to_peer+0x16b/0x1d0
[  114.415310][    C1]  do_softirq+0xec/0x180
[  114.419545][    C1]  </IRQ>
[  114.422472][    C1]  <TASK>
[  114.425392][    C1]  ? __pfx_do_softirq+0x10/0x10
[  114.430232][    C1]  ? rcu_is_watching+0x15/0xb0
[  114.434987][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  114.440175][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  114.445885][    C1]  ? do_raw_read_unlock+0x3d/0x80
[  114.450912][    C1]  wg_socket_send_skb_to_peer+0x16b/0x1d0
[  114.456623][    C1]  wg_packet_tx_worker+0x1c8/0x7c0
[  114.461726][    C1]  ? rcu_is_watching+0x15/0xb0
[  114.466482][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  114.472191][    C1]  process_scheduled_works+0xae1/0x17b0
[  114.477741][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  114.483714][    C1]  worker_thread+0x8a0/0xda0
[  114.488294][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.494620][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  114.500502][    C1]  ? __kthread_parkme+0x7b/0x200
[  114.505432][    C1]  kthread+0x711/0x8a0
[  114.509495][    C1]  ? __pfx_worker_thread+0x10/0x10
[  114.514594][    C1]  ? __pfx_kthread+0x10/0x10
[  114.519178][    C1]  ? rcu_is_watching+0x15/0xb0
[  114.523931][    C1]  ? __pfx_kthread+0x10/0x10
[  114.528517][    C1]  ret_from_fork+0x47c/0x820
[  114.533107][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  114.538226][    C1]  ? __switch_to_asm+0x39/0x70
[  114.542991][    C1]  ? __switch_to_asm+0x33/0x70
[  114.547744][    C1]  ? __pfx_kthread+0x10/0x10
[  114.552350][    C1]  ret_from_fork_asm+0x1a/0x30
[  114.557643][    C1]  </TASK>
[  114.560947][    C1] Kernel Offset: disabled
[  114.565254][    C1] Rebooting in 86400 seconds..