last executing test programs:

4m55.565650438s ago: executing program 1 (id=391):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
poll(&(0x7f0000000180)=[{r1, 0x80}], 0x1, 0x8)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x11)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r0, 0x0, 0x0)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r6, 0x0, 0x1)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
timer_create(0x3, 0x0, &(0x7f00000001c0)=<r7=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
socket$packet(0x11, 0xa, 0x300)
timer_gettime(r7, &(0x7f0000000100))
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]})

4m54.580487744s ago: executing program 1 (id=395):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0xada, 0x1, 0x0, "b49e1b6225be4279fa07fbde4749573e7c17e6e724ae09b9424f5ab23870ecd4"})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x4e22, @local}})
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}})
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000008000340"], 0x80}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$unix(0x1, 0x1, 0x0) (async)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0xada, 0x1, 0x0, "b49e1b6225be4279fa07fbde4749573e7c17e6e724ae09b9424f5ab23870ecd4"}) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x4e22, @local}}) (async)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}}) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000008000340"], 0x80}}, 0x0) (async)

4m54.345436663s ago: executing program 1 (id=397):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x314, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0xfe, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3f7, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x20, 0xf, 0x5, {0x5, 0x11, "409187"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

4m53.705770331s ago: executing program 1 (id=399):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents(r0, &(0x7f0000000140)=""/69, 0x45)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0xfffffffffffffffe)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000002c0)={0x0, 0x14, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x10000, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000300), &(0x7f00000003c0)={0x0, 0xfb, 0xfb, 0x6, 0x0, "1195e51316cc72abe5b2905ec401d089", "fe46c00ca04ee2f725a701ee2fa590c34b5d1ab0ad33a101467fba7f2741768d49f7531fcca726b6f8a51d58eaed740966dbf2e30fd7616995c945fab48e0bd87bffde941f050e4d0c77ebf9db4c336d22cc483e24dee6d2c82c4640492defba0ce29521a0cfbc5105974e6ebd970949fbd10189d3e95ffd93a20af41bd4fad0e42f3a89a89ba37547ca1b61a84591407797188cf7545aa85ff960c92e652472038d484e1aec73eeb05e3ca4d7b56bea3606bb8ed3a3f66bf8fe0e08d15884b72313355e62a643e3a84a96c7ee5157ab238d4589a49a1b4110c91ba26e211a3def76ccacedba"}, 0xfb, 0x1)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r0], 0x0)

4m52.990752688s ago: executing program 1 (id=401):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010000000200ffdbdf2507000000080000000400001e0a0002", @ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

4m52.111783892s ago: executing program 1 (id=404):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {<r1=>0xee01, 0xee01}}, './file3\x00'})
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x178, 0x42, 0xb, 0x70bd26, 0x4000, {0x14}, [@nested={0x162, 0xa0, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid=r1}, @nested={0xb4, 0xc6, 0x0, 0x1, [@generic="04aa73c800dcab4178f33c165be68b9777d4ce6a13537a73b6c995c16c02a1a1873bcc5d060406a444511dc79f4a709307562ba07befcd4f22254d313003f05d16f7d9bcd01a633829a84472de5ce630902847079e294c", @generic="661b84ed014cc7c1f1d1156612cc1282611c1cd6086070029fcd7d49ec9fb6e943aca3e3cad28749212172b6f979472bb371647f8423941c9e2f4891d6e7c85cb826b128afe130699052a7d8a8e4dadefe", @nested={0x4, 0xe6}, @nested={0x4, 0x94}]}, @generic="be7fc5474d8bc0baea55621693d8a799c9a715ff7c7e86ed8b898dde01afca4a45d16f9ef855f61eda92fd51ae35f9fd4d1afa627173f3e4bee2a72ae02ef23732d66a9b1b15ff5cf2c0e71c716591f7e375acd81c9b3223c95e75ded72a82da2b67903f822d3a527a573b53a68ac928996f1c4706330466c01f28991797af6d10", @generic="ab7ef7ac9d2b29afb01eb373e71ae24da29becfdda591c6490fd929e0fbb3e22b8"]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40080c4}, 0x404c000)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) (async)
mount$tmpfs(0x0, &(0x7f000000b8c0)='./file3\x00', &(0x7f000000b900), 0x8001, &(0x7f000000b940)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201100181483b100a1a0201c971010203010902120001000040000904"], 0x0)

4m51.735266435s ago: executing program 32 (id=404):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {<r1=>0xee01, 0xee01}}, './file3\x00'})
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x178, 0x42, 0xb, 0x70bd26, 0x4000, {0x14}, [@nested={0x162, 0xa0, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid=r1}, @nested={0xb4, 0xc6, 0x0, 0x1, [@generic="04aa73c800dcab4178f33c165be68b9777d4ce6a13537a73b6c995c16c02a1a1873bcc5d060406a444511dc79f4a709307562ba07befcd4f22254d313003f05d16f7d9bcd01a633829a84472de5ce630902847079e294c", @generic="661b84ed014cc7c1f1d1156612cc1282611c1cd6086070029fcd7d49ec9fb6e943aca3e3cad28749212172b6f979472bb371647f8423941c9e2f4891d6e7c85cb826b128afe130699052a7d8a8e4dadefe", @nested={0x4, 0xe6}, @nested={0x4, 0x94}]}, @generic="be7fc5474d8bc0baea55621693d8a799c9a715ff7c7e86ed8b898dde01afca4a45d16f9ef855f61eda92fd51ae35f9fd4d1afa627173f3e4bee2a72ae02ef23732d66a9b1b15ff5cf2c0e71c716591f7e375acd81c9b3223c95e75ded72a82da2b67903f822d3a527a573b53a68ac928996f1c4706330466c01f28991797af6d10", @generic="ab7ef7ac9d2b29afb01eb373e71ae24da29becfdda591c6490fd929e0fbb3e22b8"]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40080c4}, 0x404c000)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) (async)
mount$tmpfs(0x0, &(0x7f000000b8c0)='./file3\x00', &(0x7f000000b900), 0x8001, &(0x7f000000b940)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201100181483b100a1a0201c971010203010902120001000040000904"], 0x0)

4m24.257232987s ago: executing program 4 (id=511):
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="4000dbcacd1b3cc2cfccc03e507cddd25ab2c479b4d4c8f54658d559112300523d5c7fa2fac6fd5d62cb4d1676ac5406d53525d80006762916ffde4b6da48ac865d17e0f7b7e6410e87e", 0x4a}], 0x1)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x1})
r1 = userfaultfd(0x80800)
ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}})
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x14, 0xc, 0x0)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040504f3c8000164"], 0x7)
sendmmsg$inet6(r3, &(0x7f0000006140)=[{{&(0x7f0000001300)={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, 0x0}}], 0x1, 0x4000880)
ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000040)={0xc6f2, 0xd, 0x4, 0x0, 0x24})

4m24.205739753s ago: executing program 4 (id=512):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}})
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e)
setresuid(0xee00, 0xee00, 0x0)
r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(r2, 0xd, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})

4m23.762231242s ago: executing program 4 (id=514):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988a8fbe8", 0x10}, {&(0x7f00000002c0)="9c74ff8bf8", 0x5}], 0x2)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000ff1400020076657468315f746f5f626174616476001c0003801800038014000180050002000000000008000100040000000000000000000000000000a280881024a519bf0e6b924802b818b7117c99e85bd490a935232a201d1a3e40df460ac18542f04da67138"], 0x48}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0xfffffffe, &(0x7f0000000080)})
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e00280010000000028000001294", 0x2e}], 0x1}, 0x0)
connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r9, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r10, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r10, 0x80)
accept$netrom(r10, &(0x7f0000000200)={{0x3, @bcast}, [@remote, @remote, @null, @null, @default, @default, @rose, @netrom]}, 0x0)
recvmmsg(r7, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)
sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

4m22.825548303s ago: executing program 4 (id=516):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

4m22.706984171s ago: executing program 4 (id=517):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x61, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400007e4bd2aa19947f3a3ccc1640f7a30ca3001000010000000000000000000700000a38000000090a010400000000000000000a000008080007400000003008000540000000240900020073797a310b00000008000a4000000001140000001100010000000000000000000100000a"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x24000000)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400061e60b2c00128014000180090001006c6173740000000004000280140001800c000100636f756e74657200040002800800034000000130f90000001100010000000000000000000100000adff365bf8300278b60afc47be177f85fa23e9188d3251999bcb250d72f6c91e20e7faf4f5b8a0bc50047c441dd1e419c2740e0488997c69af0efed4f0c70b75d15400bf1c373e40ccfdb322ad72407017519525cca21093e3a"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef660f38824b0066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f070f01d9c4033921820f47a753fd", 0x46}], 0x1, 0x43, 0x0, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4090, 0xffa}, {&(0x7f00000004c0)=""/191, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/76, 0x46f38aba92ace706}, {&(0x7f00000001c0)=""/250, 0xfa}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}], 0x3, 0x2140, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000002c0)=0x2000)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202"], 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

4m22.379789691s ago: executing program 4 (id=518):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x8004) (async)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) (async)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) (async)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') (async)
r2 = syz_usb_connect(0x6, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async, rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000004000140000000051400030076657468305f746f5f626174616476000900010073797a3100"], 0xe8}}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async)
syz_open_dev$sndctrl(&(0x7f0000002380), 0x1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0xa, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x1, 0x400, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x805, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x7fffffff, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb5, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) (async, rerun: 64)
ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000000)={0x3, 0x1, 0xfffff8eb, 0x1, 0x4, "9a98bc6131c38db6f99789e2c68763ccca7a23", 0x8c6, 0xffff}) (async, rerun: 64)
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
read$FUSE(r6, &(0x7f0000003f80)={0x2020}, 0x2020) (async)
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x1000) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000000)

4m22.149464446s ago: executing program 33 (id=518):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x8004) (async)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) (async)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) (async)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') (async)
r2 = syz_usb_connect(0x6, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async, rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000004000140000000051400030076657468305f746f5f626174616476000900010073797a3100"], 0xe8}}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async)
syz_open_dev$sndctrl(&(0x7f0000002380), 0x1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0xa, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x1, 0x400, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x805, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x7fffffff, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb5, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) (async, rerun: 64)
ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000000)={0x3, 0x1, 0xfffff8eb, 0x1, 0x4, "9a98bc6131c38db6f99789e2c68763ccca7a23", 0x8c6, 0xffff}) (async, rerun: 64)
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
read$FUSE(r6, &(0x7f0000003f80)={0x2020}, 0x2020) (async)
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x1000) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000000)

6.957356009s ago: executing program 2 (id=1810):
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x7fffffff, 0x0, 'client1\x00', 0x0, "f8ee6e5e2b38b5cc", "b8c5126deca3c384693ba0e2b53b908612ca856de6ac921b579ddca05c6d32b9"})
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x84000)
r2 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='\b\x00', 0x2}, {&(0x7f0000000040)="96b414bbbcc9", 0x6}], 0x2}, 0x24048004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2)
syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
close(r5)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000800)={0x54, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140))
r9 = socket$inet6(0xa, 0x805, 0x0)
r10 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000080)={r11, 0x0, 0x0}, 0x0)
getsockopt$bt_hci(r9, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)
ioctl$sock_bt_hci(r8, 0x400448ca, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="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"/328])
syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102)

6.915935685s ago: executing program 2 (id=1811):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e3", 0x24}, {&(0x7f0000000100)="6312b6c5e1e6b4ffae8511d7037c7115ce187ffdcdbda96a172f2baad706cffb0b7e1a6c681fd7840501ced4742c8663f8e5adc15902aa1a7804273a07fe80b6c584d94f53193f1635b3830bd7028a91faeaa4fdc392c3d6e0ed41a59f63494a9137"}], 0x1, 0x0, 0x2d, 0xc9e}, 0x48084)
syz_usb_connect(0x2, 0x24, &(0x7f0000000ec0)={{0x12, 0x1, 0x0, 0x18, 0x22, 0x1d, 0x10, 0x2639, 0x2, 0x3b1d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x9d, 0x3, 0x0, 0xba, 0xe5, 0xc8}}]}}]}}, 0x0)

3.997169487s ago: executing program 3 (id=1826):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000008ff11313300000000000109022400010000b000090400faff030001000921f60b0101220500090581030800070009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "1a29b98c"}]}}, 0x0}, 0x0)

3.847838987s ago: executing program 2 (id=1827):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x4})
r1 = socket(0x1, 0x2, 0x1)
ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x5e4b0422, 0x3, 0xffff, 0x5, 0x9, 0x0, 0x0, 0x80, 0x80000001}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0xfffffffd}, 0x20)
connect$l2tp6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x6, 0x4}, 0x20)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000)
ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r6, 0x89e2)

3.749471244s ago: executing program 5 (id=1828):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, <r1=>0x0})
syz_clone3(&(0x7f0000000140)={0x3089a2900, &(0x7f0000000040)=<r2=>0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000100), {0xa}, &(0x7f0000000400)=""/244, 0xf4, &(0x7f0000000240)=""/81, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1], 0x3}, 0x58)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000355000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r3, 0x8df15000)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r4=>r2, {0x6}}, './file0\x00'}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) (async)
r5 = landlock_create_ruleset(&(0x7f0000000200)={0x2081, 0x1, 0x2}, 0x18, 0xdbb3707aaad72a1)
landlock_restrict_self(r5, 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0xe140, 0x0) (async)
r6 = socket$packet(0x11, 0x3, 0x300) (async)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendto$packet(r6, &(0x7f0000000240)="f257", 0x22, 0x20008814, &(0x7f0000000200)={0x11, 0x88f7, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async)
r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x2}, 0x18, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000540)={0x2, 0x6, 0x4, 0xfff, '\x00', 0x8aa})
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000340)={0x2000, r10}, 0x0)
landlock_restrict_self(r9, 0x0) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
ioctl$int_out(r4, 0x5460, &(0x7f0000000080)) (async)
syz_usb_connect(0x5, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="1d72120100026fb0891000000000024901020301865873587de7b94a05"], 0x0)

3.730942148s ago: executing program 5 (id=1829):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040), 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
read(r0, &(0x7f0000000580)=""/130, 0x82)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)='A', 0x1}], 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e62, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r3 = fcntl$dupfd(r0, 0x0, r0)
write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '/@^\xc2'}, {0x20, 'Q'}, {0x20, '$%'}, {0x20, '*)+-\''}, {0x20, '\'-\\s+.('}, {0x20, '+'}, {0x20, '\xd3-j\xfd\x94{q\xacV\x9a\xcbI\xc4\xe9\xfa\x17\x13\xad\xd0p\xd8\x9b\x9aE`\x19\xcb>}6\xed[~\xd6\x06\xa8l>\xe0\\,\x04<\xc7\x12l\xa9\xcd\x00\\\x15\xab\f\xcf\xf2\xf5\xc5\x8fXiz\xb7\xb2S\xe2\xad\xbdPq\xc7\xc3\xbe\x8a]\xf0\xcc\xe3m(\x94\x971XWF\xf7\xa0\xc3.\x81\xc6;\xcf\x1e\xf9\xe9!\xbe\x8dS1Jx\x1cW\xfcS\xc3\x9csxS\x8d\x03U\x95&\x90xO\x02\xe0O\xc6\xbc\xb1b\r\x86\x9e\xfc\x0e\xc2\xba\b\xc4\xc2\xab\xf9\x1c\x15\xb8(\x17\x90%\x04\x10\x1a\xbab\x1c\xcdV\x16\xb9\x020aa\xb4\xa8\xb4\reWw`X\x04\x00\x82\x8a\xd4O<\x04\xd3\xd2\"\xb7\x98\xcc-\xdf\x0eB5\xe8\xa6|\xf7.\xfe\x00\x00\x00\x00\x00\x000\xaf\xb4P\x0e\x11\x94\xaf\x1f{\xb9@v-\xe6\xdb\xc6C\x95\xdd\xf7)\xadd\xa2\xc1\x18^\x88'}, {0x20, '\x00'}], 0xa, "c759faefee"}, 0x112)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280))
shutdown(0xffffffffffffffff, 0x1)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x37, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0xffffffbe, 0x0, 0xfffffffe, 0x3ffffd, 0xe, "3eaad8003f00000000f2ff10000000040100"})
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0xff)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x28)
mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x7)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x5)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0x2)

3.720446708s ago: executing program 2 (id=1830):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000920000/0x2000)=nil, 0x2000, 0x13)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x11)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000040), 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
write$binfmt_format(r2, &(0x7f0000000040)='-1\x00', 0x3)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800c1, 0x0)
syz_extract_tcp_res(&(0x7f0000000080)={<r4=>0x41424344}, 0x4, 0xe15)
syz_extract_tcp_res(&(0x7f00000000c0)={<r5=>0x41424344}, 0x9, 0xf7)
write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="611a288000d206fffc000000000000000000000000000001000000000000000000000000000000013312040902400400fe8000000000000000000000000000bbfe880000000000000000000000000101fe80000000000000000000000000003400000000000000000000000000000000fc0000000000000000000000000000000000000000000000000000000000000100000000000000000000ffff0a010102fe8000000000000000000000000000bbfe8800000000000000000000000001014e204e24", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="d12007ff9078000904020303022208ee4994d7aa642210e4bab38a25b3987818a9478e6aef0000000a979608783c"], 0xfa)
sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x200}, 0x2, &(0x7f0000005cc0)=[{&(0x7f0000000180)=ANY=[], 0x28}, {&(0x7f0000004540)=ANY=[@ANYBLOB="10d4df25"], 0x10}], 0x2, 0x0, 0x0, 0x44011}, 0x40830)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000)

3.541528543s ago: executing program 5 (id=1831):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
connect$can_j1939(r0, &(0x7f0000000600)={0x1d, r1, 0x0, {0x2, 0xff, 0x3}, 0xff}, 0x18)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xcd, 0x52, 0x1d, 0x8, 0x1ae7, 0x525, 0xbae6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x1, 0x20, 0xd, [{{0x9, 0x4, 0x14, 0x40, 0x2, 0xf8, 0xe0, 0x35, 0x2, [], [{{0x9, 0x5, 0x6, 0x8, 0x200, 0x2, 0xff, 0x6}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x9, 0xff}}]}}]}}]}}, 0x0)

3.099034251s ago: executing program 2 (id=1833):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
socket$netlink(0x10, 0x3, 0x8000000004) (async)

2.845678837s ago: executing program 2 (id=1834):
r0 = socket$packet(0x11, 0x2, 0x300)
sendmmsg$sock(r0, &(0x7f00000000c0)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x3, {{0x2, 0x3}, 0x80000000}}, 0xb1, 0x0, 0x0, &(0x7f0000000a80)=[@timestamping={{0x14}}], 0x18}}], 0x1, 0x20040110)
syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0904010000000000000000010101010200000c2402ec79030420be11d1d109050109758b0620010725010006efff0904020000010200000904020101010200001124020306040803000c0000000000000007240116050210090506090002"], 0x0)

2.374440705s ago: executing program 0 (id=1835):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@subsystem='cpuacct'}, {@subsystem='cpuset'}, {@subsystem='memory'}, {@xattr}]})
open(&(0x7f00000007c0)='./file0\x00', 0xcd0496055b8c58aa, 0x12)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x20, 0xe, 0x82, {0x82, 0xd, "5c2f0794381c1872f148e9752308ed0237ef0439f940b64167fb86df88eeb115ebe397accdc2663adb67c4ec5337ffd877bc9f7d3b5b782cfb100044dfd0590fe3928cbd5ad5c4db4d89414804661099a8c427e022d6707b1005107f015e3b57e72d84b097e91c27767cc6647a787a6948448201c43c32e489c6eb7657551069"}}, &(0x7f0000000800)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "aa9b7bc68e65d110da32bb39ad0974c72e413deaea720bd1a536d35de8f01545016ec0bea35f73e13a4cb9fe4dbcc049fb9524b923caa0e28c863e3ff31d5cd3d5848158f7b6b445fbecf82709a703379f6ba0f6fb9ab065a1ef0a26b5df36c0e37cb27bc8e3774b3d2f74"}}}, &(0x7f0000000780)={0x1c, &(0x7f00000002c0)={0x40, 0xa, 0x66, "ff2e146b7321f89093d82ac6a633f631deef1d8a056523581bc628a47605e1b6efe378b20a6712f35e1603b686386c559f68e5f5b57575082e65951af4e98a11950f58a6c741ac4345080135f65723480b862b819e73fa1b3cf3a942a610986e4807d32d0a04"}, &(0x7f0000000340)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000240)={0x21, 0x0, 0x3, "d51273"}})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000e00)={0x34, &(0x7f0000000100)={0x20, 0xf, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0})

1.918512061s ago: executing program 3 (id=1836):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
shutdown(r2, 0x1)
ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000140))

1.809256043s ago: executing program 3 (id=1837):
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f00000004c0)='net/rt_acct\x00')
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="ad43000000000100000006"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x2a0, r2, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x70}}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x8, 0x9, 0x6, 0x8001, 0xfffa, 0xfc7e]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x3}, {0x0, 0x9}, {0x7, 0x8}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x7}, {0x1, 0x4}, {0x7, 0x3}, {0x4, 0x1}, {0x6, 0x8}, {0x4, 0x5}, {0x7, 0x8}, {0x4, 0x3}, {0x2, 0x8}, {0x7, 0x9}, {0x5, 0x1}, {0x7, 0x5}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x4}, {0x2, 0x5}, {0x5, 0x5}, {0x6, 0x1}, {0x6, 0x8}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x5, 0x5}, {0x6, 0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x6, 0x9}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x2}, {0x2, 0x9}, {0x3, 0x6}, {0x5, 0x4}, {0x6, 0x9}, {0x2, 0x3}, {0x3}, {}, {0x4, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0x8}, {0x5, 0xa}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0xa}, {0x2, 0x9}, {0x3, 0x6}, {0x5}, {0x7, 0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x6}, {0x4, 0x3}, {0x3, 0x5}, {0x2, 0x6}, {0x0, 0x5}, {0x1, 0x7}, {0x3, 0x8}, {0x2, 0x1}, {0x5, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x3, 0xa}, {0x2, 0x3}, {0x5, 0x8}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x4, 0x4}, {0x6, 0x9}, {0x3, 0x6}, {0x2, 0x9}, {}, {0x2, 0x7}, {0x1, 0x8}, {0x5, 0x6}, {0x5}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x6}, {0x2, 0x2}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x1b, 0x9, 0x48, 0x1b, 0x24, 0xc, 0x60, 0x48, 0x1d, 0xb, 0x6, 0x6, 0x6c, 0x4, 0x1b, 0x99d80d84ee7a536a, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xb, 0x4, 0x9, 0x0, 0x9, 0x3808, 0x401]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x16, 0x9, 0x6c, 0xc, 0x18, 0x6c, 0x5, 0x5c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xe, 0x6, 0xa426, 0x3, 0x0, 0x4, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfb73, 0x5, 0x0, 0x2, 0xe0b8, 0x3, 0x2, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x4, 0xffff, 0x1, 0xa5, 0x0, 0x808]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x6c, 0x48, 0x1b, 0x4, 0x16, 0x36, 0x4, 0x30, 0x1b, 0x9, 0x6c]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x631, 0x0, 0x8, 0x97c, 0x0, 0x3, 0xffff, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x124, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x40, 0x5, 0x6, 0x2, 0x0, 0x8]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x6}, {0x5, 0xa}, {0x7, 0x3}, {0x3, 0x7}, {0x3, 0x6}, {0x7, 0xa}, {0x4, 0xc}, {0x6, 0x8}, {0x2, 0x3}, {0x4, 0x5}, {0x4, 0x8}, {0x6, 0x1}, {0x3, 0x4}, {0x4, 0x5}, {0x3, 0x6}, {0x2, 0x9}, {0x1, 0x3}, {0x3, 0x8}, {0x6, 0x8}, {0x1, 0x9}, {0x1, 0x8}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x6, 0x4}, {0x0, 0x3}, {0x1, 0x3}, {0x2, 0x2}, {0x5, 0xa}, {0x1, 0x1}, {0x3, 0x7}, {0x1, 0x9}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x7, 0x1}, {0x6}, {0x0, 0xa}, {0x2, 0x4}, {0x3, 0x6}, {0x4, 0x8}, {0x2, 0x2}, {0x6}, {0x5, 0x2}, {0x7, 0x4}, {0x3, 0x4}, {0x6}, {0x7, 0x7}, {0x1, 0x2}, {0x3, 0x9}, {0x7, 0xa}, {0x1, 0x4}, {0x4, 0x8}, {0x3, 0x8}, {0x1, 0x6}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xd506, 0x4, 0x1, 0x5, 0x0, 0xc, 0x792e]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x7, 0x0, 0x8, 0xa63b, 0x7, 0x410]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff3d, 0xae, 0xd2cb, 0x9, 0x40, 0x81, 0x8c4, 0x13]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xd6, 0x9, 0xff01, 0xe, 0xe31, 0x8001, 0x2]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x2, 0x9}, {0x0, 0x3}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0x8}, {0x7, 0x5}, {0x3, 0x1}, {0x7, 0x2}, {0x5, 0x6}, {0x7, 0x9}, {0x2}, {0x7, 0x1}, {0x7, 0x5}, {0x1, 0x2}, {0x2, 0x8}, {0x5, 0xa}, {0x3, 0x1}, {0x1, 0x2}, {0x3, 0x1}, {0x4, 0x9}, {0x3, 0x5}, {0x1, 0x7}, {0x1, 0x7}, {0x7, 0x8}, {0x4, 0x3}, {}, {0x0, 0x8}, {0x3, 0x2}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x7, 0x3}, {0x1, 0xa}, {0x1, 0x1}, {0x1, 0x2}, {0x4, 0x9}, {0x2, 0xa}, {0x1, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x6, 0x1}, {0x6, 0x6}, {0x3, 0x1}, {0x6, 0x1}, {0x1, 0x4}, {0x7, 0x8}, {0x4}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x5}, {0x5, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x4, 0x8001, 0xfffe, 0x1, 0x7, 0x60]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x2a0}}, 0x20000081)
r9 = socket(0x18, 0x4, 0x0)
sendfile(r9, r1, 0x0, 0x8)

1.778517001s ago: executing program 3 (id=1838):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
fcntl$setlease(r0, 0x400, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r2, 0x89e2)

1.73491765s ago: executing program 0 (id=1839):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x184, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0xce, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x61, 0x0, 0x1, [@nested={0x10c, 0x9d, 0x0, 0x1, [@nested={0x106, 0x63, 0x0, 0x1, [@nested={0x99, 0x16, 0x0, 0x1, [@generic="0a5885771e643bb4f2cf1399f9a35aa759241f4897111a3edd19eff75dae07a7d5a8aec4d35c0818e64ae6e0b002c255a038d6d5057a5a1846938cc35a2053d20919e7b90c89c3d96fc6cb3734235e166bb3227b9a6b5efa0722164bb8a588d19ddb8d2b6eb882309a9b59b69868083f6b112f53025eb7ff7c795b4961aceafd71b035e13908fb2abbe10f7b2ba21e759cd4478afd"]}, @typed={0x4, 0xa5}, @nested={0x10, 0x90, 0x0, 0x1, [@nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @fd=r0}]}]}, @nested={0x4, 0x70}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x12e, 0x0, 0x0, @uid}, @nested={0x28, 0xde, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @fd=r0}, @nested={0x1c, 0x132, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0xfffffff7}, @nested={0x4, 0x88}, @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0x14}]}]}, @generic="67bc0ca816bfd690a5b2bc965f642f86fcba"]}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000340)=""/187, 0xbb}], 0x8}, 0x80000000}], 0x4, 0x20, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req={0x100000, 0x9, 0x0, 0x53}, 0x10)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
chdir(&(0x7f0000000480)='./cgroup\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000fe0001009a"], 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x2, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)
setsockopt(r5, 0x5, 0x6, &(0x7f00000007c0)="2ca4778121372838e84866e258790f78947e3c91608ecdfe3b9191f91c806095d898b7b82c860092e4c1edbcb1a84a974ef4e2935891d928dbf06eea517988a566420c5a44", 0x45)
connect$phonet_pipe(r3, &(0x7f0000000040), 0x10)
writev(r3, &(0x7f0000000780)=[{&(0x7f0000000200)="0e", 0x1}], 0x1)
write$binfmt_register(0xffffffffffffffff, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xd, 0x3a, 'debugfs\x00\x9c\xf52X\x8b\xf2\xee^\x9e\a\xd7\xad+\xad~\xc4Q\x8d\xf1GWh\xa4\'\x0e:\b+\xb9U/\xc5<8o\x8d\x0f\xa6\x8094\xb2\xe2\x17I0\v\x8a\xbb\xbei\xf4\x1d\xf6q\xa5\xb3W\x96]\x9e\x82\xfaA\x0e\xe4\xbd\xffxg\xb6_\xeav\xcf\xa0', 0x3a, 'D,>\xfb\xf1\xa3cn\t\xb2\xf8\x80\xd0=\xae\x00C\x82zb\xf0\xebs\x80\xf0\x1ep:\xed\xdb\x1db\x0f\xe6Ow\x85s\xf0`N\xe1s\x1cm\x0e\xea\xfb\xeaUy\xaaz`\'\xf4\xed\x90T\a\xeb\xb7\x8em\xd0\x92b\x0e\xce\x8e\x96f\x1e\x89\xa2\xa2\xba\x8a\xa1\xce\xc5\xec5((u\x12\x1d\x119B\ftG\xfa\xe3!\x01c\x9a\xd68\x86\xeay\x89\xaeX\x90IO\x8c;\x0e&\xa7\xf9K\xf5\v3M\x91\xdfy;3\xb8<\xe7\xa0F\xe9\xf4\xb4\x80\x15\xacu1\x1f[\xb8\x12\xad\x06{\xf5OA\xda\x83\xa1\x01\x80\x19\xd3\xc5\xb2cI\xba\x12\xae1\xb6\x043\x8f\xfb=\xc2\xb1\xa0\\\xabg\xcf\xa6\x95\x9cV+z\"\x89\x06\xa9\x8f)\x14\xf4\x1d,%\xca|\xcf\x18<\x8a\xce\xbbL\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8bL\xad\x13}\xf4\xc2y\x06\xb4\xaf\xac\b\xc9\x14\x1b\x89IRJ\xa1\x80h\x10\x1f\x1c\xc1\a\x98\xcc\x01\xf8 \xbcQ\x89\x139\x0e\x87\x87l\x03W\x15\xb0Q\xc5\xe5\xdb\x89\x1d\x1b:\x9d\xd7\x0e#\xfd\x0e\x12\x90MvE\xa2x\xb4\x1b\x9a\xb1\xf9\b\x00\x00\x00\x00\x00\x00\x00V\x84\x81\xf7\xbf\xe9\xdc\xab\xba\xea\x87\xff', 0x3a, './file0'}, 0x1bc)
syz_io_uring_setup(0x149d, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x3, 0x36b}, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000140)={@val={0x800e, 0x2}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x14, 0x0, @opaque="0000001000003852d60d0000"}}}}}}, 0x3a)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r9=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.635505994s ago: executing program 3 (id=1840):
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@private2, @in=@rand_addr=0x64010100, 0x4e20, 0x1ff, 0x4e23, 0xed5e, 0x2, 0x20, 0x80, 0x5c, 0x0, 0xee00}, {0x3, 0x8, 0x80000001, 0xfffffffffffffff9, 0x65d4, 0x8, 0x8, 0x3}, {0x2, 0x2, 0x6, 0xfffffffffffffff5}, 0xa84, 0x6e6bbf, 0x2, 0x1, 0x3}, {{@in=@multicast2, 0x4d6, 0x33}, 0x0, @in6=@private1, 0x3502, 0x0, 0x3, 0x2, 0x7f, 0x81}}, 0xe8)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffd}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x4f)
r3 = dup(r1)
write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r6, 0xffff)
fcntl$addseals(r6, 0x409, 0x7)
r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x1000, 0x8000})
lseek(r7, 0x5, 0x0)
write$FUSE_GETXATTR(r3, &(0x7f00000004c0)={0x18}, 0x18)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
add_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="ab61c4", 0x3, 0xfffffffffffffffb)
read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}})
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mount$9p_unix(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x200000, &(0x7f0000000540))
r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r9, &(0x7f00000000c0), 0x0)

1.564890123s ago: executing program 0 (id=1841):
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x3}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x8}}}}}]}}]}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {0x1e}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x34}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x15e, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14c, 0x2, 0x1, 0x5, 0x90, 0xf5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "b506aa0000f3"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xed6, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0xfffe}, [@acm={0x4, 0x24, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x4, 0xffff, 0x9, 0x7, 0x98, 0x5}, @mdlm_detail={0xd2, 0x24, 0x13, 0x8, "5928e88bc099186301670d243c33a07b4f8de8071688707bbc8185f88981cc414b4fbe7aa5dbc0d81b050be347d04fbd69c04918aef154600d57df6a2b75b86dc1c088bdd2342072145ff2df7514b7654ef44b7e3cfba0ae42fd6580e62ab79e4a7e841bac60b55397823e15eb8de31161a7f188673d2e12ef21745f09abf95669bd8b99266354cbff4571814e1116c8ae2c6db3f15c45b239480aa13ef7e078e0df1cecb4295f9d804c9e0f3ecca2aacac1b40fc8f260bd3e8bf3c8b89084871306e260718e9f246e970cbbecc5"}, @mbim_extended={0x8, 0x24, 0x1c, 0xbb89, 0x81, 0x200}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x3, 0xf5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6d, 0xdd, 0xf3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x8, 0x63}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x2, 0xff, 0x70, 0x20, 0x3}, 0x16, &(0x7f0000000240)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x8, 0xfff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x2, 0x3}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44f}}, {0xe8, &(0x7f0000000300)=@string={0xe8, 0x3, "63f1fd34fa625a60e40c456150ada8d900953627e089b84d26d8fbd00ddec0b8350d088d4e657e48a6ffd0be268fd0086e47662a4884a9eb33098ac868bdb39015846bfe65fa1867a9ca116e6a6ea0e04408f0a92155297a1bae31b4e68a8d635234a7f921e18245239f4fb776541e9ac787422cd171251dda6c431825862bd26c87cb3f005f465e06b0166aa154f09c0acfd7ba0e437f07c37bd7ba0f5f530283b4d473938074db35d4fc7e6e590bc0138ea6fd4ea39ed44603a7cb0a9dc8dfd3eaa604e6f47b01d0da20b5b895f26d4e5d1f93e8ee8a18120252e07b44a063c5f46c5ac8f0"}}, {0x35, &(0x7f0000000400)=@string={0x35, 0x3, "3913fbccf46cefe94d9c408fc1cfd952d41badb14e68421ef1b2e2cf99c2f3016731ebad8c2503a03f325fe2408a9caa8fe0d5"}}]})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r4=>r0, {0xffffffffffffffff, 0xffffffffffffffff}}, '\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x5f8, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x4}, {0x2}, {0x3, 0x9}, {0x2, 0x4}, {0x1, 0x5}, {0x5, 0x9}, {0x1, 0x7}, {0x2, 0x6}, {0x4, 0x9}, {0x0, 0x9}, {0x2, 0x8}, {0x1, 0x1}, {0x5}, {0x2, 0x6}, {0x2, 0x4}, {0x5, 0x8}, {0x1, 0x8}, {0x2, 0x2}, {0x5, 0x2}, {0x2, 0x2}, {0x2, 0x4}, {0x2, 0x3}, {0x7, 0xa}, {0x5, 0x4}, {0x4, 0x4}, {0x4, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0x6}, {0x7}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0xa}, {0x1, 0x3}, {0x6, 0xa}, {0x4, 0x8}, {0x7, 0x6}, {0x1, 0x9}, {0x4, 0x5}, {0x7, 0x1}, {0x5, 0x3}, {0x7}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x48, 0x0, 0x9, 0x5, 0x1b, 0x36, 0x6c, 0x30, 0x5, 0x6, 0xb, 0x60, 0x16, 0x12, 0x12, 0x5, 0x12, 0x16, 0x16, 0x30, 0x12, 0xb69a6549c183e3cc, 0x1, 0x9, 0x16, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x5, 0x7, 0x7ff, 0x89, 0x3, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc33, 0xe40, 0x763, 0x6000, 0x9b3b, 0x8, 0x8, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x3}, {0x2, 0x5}, {0x6, 0x1}, {0x2, 0x2}, {0x5, 0x4}, {0x3}, {0x3, 0x6}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x1, 0x4}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0xa}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0x9}, {0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x80, 0xfff7, 0xfffc, 0xfff, 0x66, 0x3f6, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x400, 0x2, 0x2, 0x5, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x3}, {0x0, 0x5}, {0x4, 0x3}, {}, {0x1, 0x7}, {0x1, 0x7}, {0x2, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2000, 0x810, 0x5, 0x3, 0x5, 0xdf5, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x6, 0x2, 0xc, 0x16, 0xc, 0x1b, 0x18, 0x6, 0x0, 0x3, 0x1b, 0x6c, 0x3, 0x5, 0x48, 0x3, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xd, 0x8, 0x8, 0x4, 0x7fff, 0x1, 0xff7d]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x4}, {0x1, 0x3}, {0x5, 0xa}, {0x4, 0x7}, {0x2}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x4, 0x3, 0x1, 0xc, 0x48, 0x10, 0x1b, 0x6c, 0x27, 0x16, 0x2, 0x6c, 0x48, 0x2, 0x48, 0x60, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x456, 0xb, 0x8, 0xc, 0x5, 0x29, 0x8, 0x5]}}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x3, 0x24, 0x1b, 0x16, 0x12, 0x6c, 0x24, 0x18, 0xb, 0xc, 0x18, 0x2, 0xb]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x7}, {0x5, 0x2}, {0x4, 0x2}, {0x6, 0x2}, {0x3, 0xa}, {0x3, 0x3}, {0x5, 0x1}, {0x5}, {0x2, 0x8}, {0x2}, {0x6, 0x3}, {0x5, 0x6}, {0x2, 0x3}, {0x0, 0xa}, {0x4}, {0x3, 0x6}, {0x6, 0x2}, {0x0, 0x8}, {0x7, 0x9}, {0x4, 0x9}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x4}, {0x5, 0x1}, {0x6, 0x4}, {0x2, 0xa}, {0x4, 0x9}, {0x3, 0x2}, {0x5, 0x2}, {0x1, 0x6}, {0x4, 0x9}, {0x5, 0x8}, {0x0, 0x2}, {0x7, 0x8}, {0x6, 0x8}, {0x3, 0x5}, {0x6, 0x9}, {0x2, 0x9}, {0x5}, {0x1, 0x1}, {0x3, 0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x1, 0x2, 0x48, 0xc, 0xb, 0xb, 0x6, 0x9, 0x18, 0x5, 0x9, 0xc, 0x24, 0x3, 0x30, 0x4, 0xb, 0x6c, 0x5, 0x36, 0xb, 0x30, 0x30, 0x18, 0x4d, 0xc, 0x16, 0x3, 0x36, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x264, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x36, 0x2, 0x11, 0x16fb, 0x5, 0x3, 0xfffb]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x30, 0x30, 0x4, 0x36, 0x1b, 0xc, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa4f4, 0x7, 0x6, 0x7, 0x2, 0x5, 0x81, 0x10]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x5, 0x4, 0x3, 0x3, 0x48, 0xc, 0x2, 0x9, 0x2, 0x2, 0x24, 0x2, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x800, 0x0, 0xbe7, 0x7fff, 0x4, 0x1d, 0xfa20]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6c3, 0x1, 0x100, 0x40, 0x7, 0x8, 0x0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x83cb, 0x7ff, 0xa, 0x7, 0x3, 0x4, 0x4fca]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x4780, 0x62a, 0x7, 0x9, 0x7, 0xfff7]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb5bd, 0x2, 0xd935, 0x2, 0x8, 0x3ea, 0x7, 0xff]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x3}, {0x3, 0x8}, {0x0, 0x2}, {0x7, 0xa}, {0x3, 0x6}, {0x2, 0x8}, {0x6}, {0x6, 0x3}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0x5}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0x3}, {0x6, 0x6}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x4}, {0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x4, 0x7}, {0x4, 0x4}, {0x6, 0x3}, {0x2, 0x3}, {0x1, 0x7}, {0x1, 0x6}, {0x6, 0x3}, {0x2, 0x5}, {0x1, 0xa}, {0x6, 0x5}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x3, 0x5}]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x2, 0x8}, {0x5, 0x9}, {0x5, 0x7}, {0x2, 0x3}, {0x5, 0xa}, {0x7, 0xa}, {0x5, 0x9}, {0x7, 0x4}, {0x6, 0x5}, {0x0, 0x8}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x7, 0x7}, {0x5, 0x1}, {0x3, 0x8}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x1, 0x5, 0x4, 0x7, 0x5, 0x3]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x48, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8f, 0x120, 0x40, 0xffff, 0x5, 0xf7, 0x7, 0x8001]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x2, 0x16, 0x18, 0x9, 0xb, 0x5, 0x4, 0x5e, 0x3, 0x1, 0x5, 0xc, 0x18, 0x35cdb4c54389a36c, 0x2, 0x12, 0x6, 0x18, 0x9, 0x1, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x3ff, 0x57b0, 0x7ff, 0x9, 0x5, 0x0, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x3c, 0xc, 0x9, 0x7, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xb1a8, 0xfd43, 0xffff, 0x2, 0xc0ba, 0xdbb, 0x4]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0x5}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0xa}, {0x7, 0x6}, {0x1}, {0x5, 0x2}, {0x5, 0x1}, {0x4, 0x7}, {0x3, 0x1}, {0x3, 0x9}, {0x6}, {0x5, 0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0xa}, {0x7, 0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0xa}, {0x6, 0xa}, {0x2, 0x8}, {0x3}, {0x4}, {}, {0x4, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x2, 0x2, 0x4, 0x12, 0x6, 0x4, 0x4, 0x60, 0x40, 0x24, 0x60, 0x3, 0x7f, 0x9, 0x6c, 0x12, 0xc, 0x4, 0x16, 0x1, 0x9, 0x9, 0x24]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x5}, {0x6, 0x5}, {0x5, 0x8}, {0x7, 0x4}, {0x3, 0x6}, {0x3, 0x1}, {0x6, 0x2}, {0x2, 0x8}, {0x4, 0x4}, {0x3, 0x9}, {0x1, 0xa}, {0x4, 0x6}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x6}, {0x5, 0x1}, {0x0, 0x7}, {}, {0x2, 0x9}, {0x0, 0x6}, {0x1, 0x9}, {0x3, 0xa}, {0x1, 0x8}, {0x7, 0x1}, {0x3}, {0x3, 0x6}, {0x2, 0x9}, {0x4, 0x2}, {0x6, 0x2}, {0x2, 0x6}, {0x3, 0x4}, {0x7, 0x3}, {0x2, 0xa}, {0x0, 0x5}, {0x0, 0x9}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0x1}, {0x2, 0x5}, {0x3, 0x9}, {0x7}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x178, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x16, 0x24, 0x5, 0x16, 0x36, 0x18, 0x2, 0x6c, 0x5, 0x6, 0x5, 0x44, 0x60, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x2a, 0xc, 0x5, 0x24, 0x12, 0x2, 0x1, 0x28, 0x18, 0x30, 0x48, 0x3, 0x3, 0xb, 0x9, 0x58, 0x5, 0x30, 0xc, 0x36, 0x2b, 0x1, 0x18, 0x4, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x7}, {0x1, 0xa}, {0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x9}, {0x7, 0x5}, {0x1, 0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x8}, {0x7, 0x9}]}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0xa}, {0x4, 0x2}, {0x5, 0x9}, {0x4, 0x4}, {0x3, 0x7}, {0x2, 0x6}, {0x3, 0x6}, {0x6, 0x3}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0xa}, {0x6, 0x5}, {0x6, 0x7}, {0x6, 0x9}, {0x1, 0x8}, {0x6, 0x3}, {0x0, 0x3}, {0x0, 0x8}, {0x4, 0x8}, {0x4, 0x8}, {0x0, 0x6}, {0x7, 0x9}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x5, 0x1}, {0x1, 0x5}, {}, {0x3, 0x5}, {0x1, 0x5}, {0x1}, {0x0, 0x1}, {0x5, 0x7}, {0x4, 0x6}, {0x2, 0x9}, {0x2, 0x4}, {0x1, 0x3}, {0x2, 0x1}, {0x5}, {0x5, 0x2}, {0x0, 0x7}, {0x6}, {0x7, 0x4}, {0x4, 0x8}, {0x5, 0x3}, {0x5, 0x7}, {0x5, 0x4}, {0x4, 0x6}, {0x1, 0x2}, {0x6, 0x1}, {0x6, 0x6}, {0x4, 0x4}, {0x6}, {0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x9}, {0x5, 0x1}, {0x2, 0x9}, {0x2}, {0x1}, {0x3, 0x4}, {0x0, 0xa}, {0x2, 0x2}, {0x2, 0x3}, {0x4, 0x3}, {0x4, 0x4}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x7}, {0x6}, {0x4, 0x4}, {}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x5, 0x30, 0x4, 0x1, 0x48, 0x1, 0x9, 0x4, 0x1b, 0x6, 0x1b, 0x12, 0x24, 0x9, 0x48, 0x1b, 0x12, 0xc, 0x5, 0x48, 0xc, 0x2, 0x12, 0x16, 0x4, 0x3, 0x1b, 0x24, 0x31]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x5, 0x1}, {0x0, 0x9}, {0x5, 0x9}, {0x2, 0x6}, {0x2, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x0, 0x8}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x5}, {0x3, 0x4}, {0x7, 0x4}, {0x1}, {0x4}, {0x7, 0x5}, {0x3, 0x7}, {0x5, 0x5}, {0x4, 0x6}, {0x2, 0x1}, {0x3, 0x3}, {0x4}, {0x6, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x8}, {0x2, 0x7}, {0x7, 0x1}, {0x4, 0x1}, {0x4, 0x5}, {0x2}, {0x0, 0x3}, {0x5, 0x7}, {0x0, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x3, 0x2}, {0x3, 0x6}, {0x2}, {0x3, 0x6}, {0x4, 0x1}, {0x1}, {0x0, 0xa}, {0x5, 0x6}, {0x5, 0x6}, {0x0, 0x1}, {0x6, 0x5}, {0x1, 0x5}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x0, 0xc, 0x36, 0x5, 0x36]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x2}, {0x3, 0x8}, {0x2, 0x2}, {0x1, 0x2}, {0x2, 0x7}, {0x6, 0x4}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0x9}, {0x5, 0x1}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0x5}, {0x5}, {0x0, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x800, 0x1, 0x6cb0, 0x400, 0x1000, 0x6]}}]}]}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000801}, 0x1)

1.483226794s ago: executing program 5 (id=1842):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x20000, 0xf3)
read$FUSE(r2, &(0x7f0000001540)={0x2020}, 0x2020)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x2f7e3d2, &(0x7f0000000200)=""/4096)
setuid(0xee01)
tkill(r3, 0x12)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r4, 0x0, r1})
r5 = fsmount(0xffffffffffffffff, 0x1, 0xfe)
ioctl$BLKDISCARDZEROES(r5, 0x127c, &(0x7f0000000040))
bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x20000, 0xf3) (async)
read$FUSE(r2, &(0x7f0000001540)={0x2020}, 0x2020) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x2f7e3d2, &(0x7f0000000200)=""/4096) (async)
setuid(0xee01) (async)
tkill(r3, 0x12) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r4, 0x0, r1}) (async)
fsmount(0xffffffffffffffff, 0x1, 0xfe) (async)
ioctl$BLKDISCARDZEROES(r5, 0x127c, &(0x7f0000000040)) (async)
bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc) (async)

1.373576281s ago: executing program 5 (id=1843):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@hyper, 0x2}, @local, 0x0, 0x0, 0x100, 0x6, 0x10, 0x3})
r2 = syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c0102030109022400010100000009010002ff5aa30009050400"], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)

988.635337ms ago: executing program 0 (id=1844):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x10100, 0x49)
r1 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x101000, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000240)={0x28, 0x5, r4, 0x0, &(0x7f00000002c0)="ee", 0x1, 0x20000800})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1})
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r5, &(0x7f00000004c0)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
listen(r5, 0x80)
r6 = socket$inet(0x2, 0x2, 0x0)
readv(r6, &(0x7f00000000c0)=[{&(0x7f00000006c0)=""/204, 0xcc}], 0x1)
accept$netrom(r5, 0x0, 0x0)
write$tcp_congestion(r1, 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1})
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_int(r7, 0x6, 0x18, &(0x7f0000000080)=0xfffffff7, 0x4)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20071026, r8}, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)

877.145335ms ago: executing program 5 (id=1845):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003900010324bd7002fae88a8107"], 0x14}}, 0x100c0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
keyctl$search(0xa, 0x0, &(0x7f00000003c0)='asymmetric\x00', 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)={'U+', 0x1}, 0x16, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x80000006, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xefce}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
r5 = socket$netlink(0x10, 0x3, 0xb)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)
bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc)
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff81050000ffff000058000b480400945f64009400050028925a01000000000000008000f0fffeff60a461e700fff5dd0000001000014001080800418e00000008fcff", 0x58}], 0x1)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none')
close(0xffffffffffffffff)

741.368146ms ago: executing program 3 (id=1846):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x210)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x82})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
socket$can_j1939(0x1d, 0x2, 0x7)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r6, &(0x7f00000004c0)={0x18}, 0x18)
write$FUSE_INIT(r6, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}})
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2203f, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r7=>0x0})
bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x20000800)
open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\"'], 0x922c3)
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x40, 0x15, 0x6, "f63e12d474b3"}, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x7, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x4, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x3b2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x800, 0x8, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x4, 0x10, 0x7}, @mbim={0xc, 0x24, 0x1b, 0xaf, 0xb85a, 0x68, 0xf, 0xffff, 0x7f}, @obex={0x5, 0x24, 0x15, 0x3ff}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x2, [0x1]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0x3, 0x41}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xd6, 0x8, 0x2}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xea, 0x5, 0x9, 0xff, 0xe0}, 0x1a, &(0x7f0000000100)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x5, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0xce, 0x4d, 0x2, 0x2, 0x8}]}, 0x6, [{0xcc, &(0x7f0000000140)=@string={0xcc, 0x3, "5b935c75e4a0a9d1527936c1fa33053177d975425f73ea555a26931dbf794aaf5c32fd12acd299a80fac2b270f5c36075716d16f0a986463a2d06210c3455f26fca1f4f84abeee2c1a89dc49f3c7d164717440d1590c4edc65950412df394de1b689e9905140f8d09f3e05fd189572c6a0faca57818aa5b2d892c20f54526525d77b01ffb4b2bab49f67e35ab3928880d55ab61b1855a6d797f7a6c2404d722b1b23399581c1ae09ee65b1607da988432b037c96ed403bb733b0fb1204132fc959879277210bbc5b7b10"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x2d, &(0x7f0000000280)=@string={0x2d, 0x3, "7c3561d566befb71dee54d55caff7506500c42ab54a5ed733c9813b08249086650f0bda08fa23fdfe54647"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2809}}, {0xd6, &(0x7f00000003c0)=@string={0xd6, 0x3, "550af8482b3dddf2ae58d36cb13a130077727133e59878315422a8144c898294fe5f5ced3116e4868124d86d774357c811866c53d1284a3eec35cbdb7c764ef937e0cb140b7dfdd13db9347492888d22d00b0e01cb22b1e0fa96741443f9e68d51f048b7a92b228f0e6be530a2f5d5889710957514176cddbd1f7537537f548861a4ef50bc1a7509124bc24991907ac7536f44f91206cd409fcc8ebb56c709c3a791092fe9b731527944a9e222dd931b0460c3ac1025af507047741dd42983c741576cfe16c80ce99bec84a9f84b12b73f8779ca"}}, {0x55, &(0x7f00000004c0)=@string={0x55, 0x3, "5625af44e0713a93ef96c6ad65c9f754f5337237eb736bf22ecf3782aef74029133fe9aa2f49a311c8920bd536000f4081543cc83ed55bff6bb6be2d672db078c2f3cefc9a3583094ef0d9d340d55039bba5a3"}}]})

50.126199ms ago: executing program 0 (id=1847):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
close(r0) (async)
mount(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000380)='acl')

0s ago: executing program 0 (id=1848):
r0 = socket$kcm(0x2, 0x3, 0x84) (async)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) (async)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x39, 0x1a, r1, 0x0) (async)
fanotify_mark(r2, 0x80, 0x4800003e, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @loopback}}}], 0x20}, 0x0)

0s ago: executing program 0 (id=1849):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$char_usb(r1, &(0x7f00000008c0)='-0', 0x2)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000700)={'bond0\x00', 0x500})
ioctl$SIOCNRDECOBS(r0, 0x89e2)

kernel console output (not intermixed with test programs):

 364.505763][ T6011] usb 4-1: SerialNumber: syz
[  364.516527][ T6011] usb 4-1: config 0 descriptor??
[  364.723210][ T1211] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[  364.731541][T11041] binder: 11038:11041 unknown command 0
[  364.732413][T11053] binder: 11038:11053 unknown command 0
[  364.741695][T11041] binder: 11038:11041 ioctl c0306201 200000000080 returned -22
[  364.743594][T11053] binder: 11038:11053 ioctl c0306201 200000000080 returned -22
[  364.772862][ T6011] usb 4-1: USB disconnect, device number 32
[  364.887787][ T1211] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  364.897561][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.905755][ T1211] usb 6-1: Product: syz
[  364.910877][ T1211] usb 6-1: Manufacturer: syz
[  364.915965][ T1211] usb 6-1: SerialNumber: syz
[  364.927243][ T1211] r8152-cfgselector 6-1: Unknown version 0x0000
[  364.934192][ T1211] r8152-cfgselector 6-1: config 0 descriptor??
[  364.953265][ T5948] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  365.115280][ T5948] usb 1-1: config 156 has an invalid descriptor of length 0, skipping remainder of the config
[  365.128214][ T5948] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a
[  365.137759][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.145945][ T5948] usb 1-1: Product: syz
[  365.150647][ T5948] usb 1-1: Manufacturer: syz
[  365.157474][ T5948] usb 1-1: SerialNumber: syz
[  365.359144][ T5920] r8152-cfgselector 6-1: USB disconnect, device number 100
[  365.379751][ T5948] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  365.389321][ T5948] dvb_usb_af9035 1-1:156.0: probe with driver dvb_usb_af9035 failed with error -22
[  365.436751][ T5948] usb 1-1: USB disconnect, device number 27
[  365.783184][ T6011] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  365.895756][T11065] 9pnet_rdma: rdma_create_trans (11065): problem binding to privport: 13
[  365.933296][ T6011] usb 4-1: Using ep0 maxpacket: 16
[  365.958756][ T6011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.975801][ T6011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  365.986231][ T6011] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  365.997613][T11071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.006345][ T6011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.009334][T11071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.018518][ T6011] usb 4-1: config 0 descriptor??
[  366.298624][ T6011] usbhid 4-1:0.0: can't add hid device: -71
[  366.305235][ T6011] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  366.323419][ T6011] usb 4-1: USB disconnect, device number 33
[  366.453193][ T5948] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[  366.614757][ T5948] usb 6-1: Using ep0 maxpacket: 32
[  366.634635][ T5948] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  366.646881][ T5948] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  366.657518][ T5948] usb 6-1: config 0 interface 0 has no altsetting 0
[  366.664159][T11093] autofs4:pid:11093:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371)
[  366.678182][T11093] netlink: 'syz.0.1403': attribute type 2 has an invalid length.
[  366.678202][T11093] netlink: 'syz.0.1403': attribute type 8 has an invalid length.
[  366.678214][T11093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1403'.
[  366.678634][ T5948] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  366.678660][ T5948] usb 6-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  366.678680][ T5948] usb 6-1: Product: syz
[  366.678694][ T5948] usb 6-1: Manufacturer: syz
[  366.678707][ T5948] usb 6-1: SerialNumber: syz
[  366.681224][ T5948] usb 6-1: config 0 descriptor??
[  366.853102][ T1211] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  367.003112][ T1211] usb 4-1: Using ep0 maxpacket: 8
[  367.016337][ T1211] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  367.027114][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.040502][ T1211] usb 4-1: Product: syz
[  367.057547][ T1211] usb 4-1: Manufacturer: syz
[  367.062439][ T1211] usb 4-1: SerialNumber: syz
[  367.096248][ T5948] gs_usb 6-1:0.0: Configuring for 1 interfaces
[  367.112813][ T1211] usb 4-1: config 0 descriptor??
[  367.345377][ T1211] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  367.550802][T11118] program syz.0.1410 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  367.583280][ T5948] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  367.592545][ T5948] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71
[  367.627078][ T5948] usb 6-1: USB disconnect, device number 101
[  367.748419][T11081] gfs2: not a GFS2 filesystem
[  367.768124][ T1211] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  367.785140][ T1211] usb 4-1: USB disconnect, device number 34
[  368.064831][ T6011] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  368.203135][ T6011] usb 1-1: device descriptor read/64, error -71
[  368.443130][ T6011] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  368.474855][ T5920] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[  368.573152][ T6011] usb 1-1: device descriptor read/64, error -71
[  368.633241][ T5920] usb 6-1: Using ep0 maxpacket: 16
[  368.640218][ T5920] usb 6-1: config 252 has an invalid interface number: 165 but max is 0
[  368.648874][ T5920] usb 6-1: config 252 has no interface number 0
[  368.655343][ T5920] usb 6-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd
[  368.664471][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.682677][ T5920] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware
[  368.694578][ T5920] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  368.709012][ T6011] usb usb1-port1: attempt power cycle
[  368.878836][ T5920] usb 6-1: USB disconnect, device number 102
[  369.053295][ T6011] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  369.073806][ T6011] usb 1-1: device descriptor read/8, error -71
[  369.251197][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1420'.
[  369.315304][ T6011] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  369.338117][T11156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.343845][ T6011] usb 1-1: device descriptor read/8, error -71
[  369.349522][T11156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.364679][T11156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.375190][T11156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.466650][ T6011] usb usb1-port1: unable to enumerate USB device
[  369.573459][ T5948] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  369.735194][ T5948] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  369.748302][ T5948] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  369.758009][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.766154][ T5948] usb 4-1: Product: syz
[  369.770431][ T5948] usb 4-1: Manufacturer: syz
[  369.775196][ T5948] usb 4-1: SerialNumber: syz
[  369.782792][ T5948] usb 4-1: config 0 descriptor??
[  369.790997][ T5948] ims_pcu 4-1:0.0: Missing CDC union descriptor
[  369.797418][ T5948] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22
[  369.943058][ T1211] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[  369.992420][ T5948] usb 4-1: USB disconnect, device number 35
[  370.103084][ T1211] usb 6-1: Using ep0 maxpacket: 32
[  370.110642][ T1211] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  370.119411][ T1211] usb 6-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config
[  370.130165][ T1211] usb 6-1: config 0 has no interface number 0
[  370.136591][ T1211] usb 6-1: config 0 interface 196 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  370.149997][ T1211] usb 6-1: config 0 interface 196 has no altsetting 0
[  370.159843][ T1211] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  370.169595][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.178466][ T1211] usb 6-1: Product: syz
[  370.182643][ T1211] usb 6-1: Manufacturer: syz
[  370.187268][ T1211] usb 6-1: SerialNumber: syz
[  370.197922][ T1211] usb 6-1: config 0 descriptor??
[  370.414183][T11174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.423529][T11174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.440950][ T1211] ipheth 6-1:0.196: Unable to find alternate settings interface
[  370.452533][ T1211] usb 6-1: USB disconnect, device number 103
[  370.557575][T11186] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1432'.
[  370.893289][   T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  371.045974][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  371.056478][   T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  371.066330][   T24] usb 4-1: config 1 has no interface number 1
[  371.072828][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  371.087162][   T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  371.106401][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  371.116016][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.125028][   T24] usb 4-1: Product: syz
[  371.129322][   T24] usb 4-1: Manufacturer: syz
[  371.134427][   T24] usb 4-1: SerialNumber: syz
[  371.141852][T11193] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  371.214920][ T1211] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[  371.253369][ T6011] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  371.359542][   T24] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  371.368052][   T24] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  371.386717][ T1211] usb 6-1: Using ep0 maxpacket: 16
[  371.396657][ T1211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.400727][   T24] usb 4-1: USB disconnect, device number 36
[  371.411221][ T1211] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  371.425321][ T1211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.428691][ T6011] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.450684][ T6011] usb 1-1: config 0 interface 0 has no altsetting 0
[  371.457928][ T6011] usb 1-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00
[  371.468679][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.477279][ T1211] usb 6-1: config 0 descriptor??
[  371.511244][ T6011] usb 1-1: config 0 descriptor??
[  371.526144][ T7950] udevd[7950]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  371.902914][ T1211] mcp2221 0003:04D8:00DD.0027: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  372.301069][T11197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  372.310102][T11197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  372.387447][   T24] usb 6-1: USB disconnect, device number 104
[  372.796412][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1440'.
[  373.020313][T11215] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  373.037855][T11215] exFAT-fs (nullb0): invalid boot record signature
[  373.045368][T11215] exFAT-fs (nullb0): failed to read boot sector
[  373.051876][T11215] exFAT-fs (nullb0): failed to recognize exfat type
[  373.093328][   T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  373.223224][   T24] usb 4-1: device descriptor read/64, error -71
[  373.403318][ T1211] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[  373.463147][   T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  373.543057][ T1211] usb 6-1: device descriptor read/64, error -71
[  373.613253][   T24] usb 4-1: device descriptor read/64, error -71
[  373.723441][   T24] usb usb4-port1: attempt power cycle
[  373.793190][ T1211] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[  373.875072][ T6011] usb 1-1: USB disconnect, device number 32
[  373.924623][ T1211] usb 6-1: device descriptor read/64, error -71
[  374.043634][ T1211] usb usb6-port1: attempt power cycle
[  374.063280][   T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  374.083705][   T24] usb 4-1: device descriptor read/8, error -71
[  374.224445][ T6011] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  374.323172][   T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  374.343670][   T24] usb 4-1: device descriptor read/8, error -71
[  374.383138][ T6011] usb 1-1: Using ep0 maxpacket: 8
[  374.388782][ T6011] usb 1-1: too many configurations: 125, using maximum allowed: 8
[  374.398779][ T6011] usb 1-1: unable to read config index 0 descriptor/start: -61
[  374.403178][ T1211] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[  374.406706][ T6011] usb 1-1: can't read configurations, error -61
[  374.433944][ T1211] usb 6-1: device descriptor read/8, error -71
[  374.458979][   T24] usb usb4-port1: unable to enumerate USB device
[  374.543116][ T6011] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  374.683205][ T1211] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[  374.693361][ T6011] usb 1-1: Using ep0 maxpacket: 8
[  374.700118][ T6011] usb 1-1: too many configurations: 125, using maximum allowed: 8
[  374.711582][ T6011] usb 1-1: unable to read config index 0 descriptor/start: -61
[  374.713614][ T1211] usb 6-1: device descriptor read/8, error -71
[  374.719424][ T6011] usb 1-1: can't read configurations, error -61
[  374.732182][ T6011] usb usb1-port1: attempt power cycle
[  374.834959][ T1211] usb usb6-port1: unable to enumerate USB device
[  375.083144][ T6011] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  375.104871][ T6011] usb 1-1: Using ep0 maxpacket: 8
[  375.111564][ T6011] usb 1-1: too many configurations: 125, using maximum allowed: 8
[  375.122515][ T6011] usb 1-1: unable to read config index 0 descriptor/start: -61
[  375.131943][ T6011] usb 1-1: can't read configurations, error -61
[  375.263294][ T6011] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  375.283833][ T6011] usb 1-1: Using ep0 maxpacket: 8
[  375.289973][ T6011] usb 1-1: too many configurations: 125, using maximum allowed: 8
[  375.299845][ T6011] usb 1-1: unable to read config index 0 descriptor/start: -61
[  375.307734][ T6011] usb 1-1: can't read configurations, error -61
[  375.314436][ T6011] usb usb1-port1: unable to enumerate USB device
[  375.929478][T11246] netlink: 'syz.3.1452': attribute type 10 has an invalid length.
[  376.503154][   T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  376.586695][    T9] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[  376.643271][   T24] usb 4-1: device descriptor read/64, error -71
[  376.757225][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.768426][    T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  376.777811][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.789811][    T9] usb 6-1: config 0 descriptor??
[  376.883192][   T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  377.013293][   T24] usb 4-1: device descriptor read/64, error -71
[  377.126109][   T24] usb usb4-port1: attempt power cycle
[  377.201881][    T9] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor
[  377.217174][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0028/input/input41
[  377.329369][    T9] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  377.483455][   T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  377.503886][   T24] usb 4-1: device descriptor read/8, error -71
[  377.736528][ T6011] usb 6-1: USB disconnect, device number 109
[  377.743899][   T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  377.774719][   T24] usb 4-1: device descriptor read/8, error -71
[  377.887148][   T24] usb usb4-port1: unable to enumerate USB device
[  378.263051][ T5920] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  378.414408][ T5920] usb 1-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config
[  378.424868][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  378.436725][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  378.447872][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64
[  378.458986][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 60465, setting to 64
[  378.470435][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  378.485883][ T5920] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  378.494991][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.503163][ T5920] usb 1-1: Product: syz
[  378.507412][ T5920] usb 1-1: Manufacturer: syz
[  378.512115][ T5920] usb 1-1: SerialNumber: syz
[  378.518622][ T5920] usb 1-1: config 0 descriptor??
[  378.524574][T11267] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  378.531925][T11267] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  378.593181][ T1211] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[  378.744935][ T1211] usb 6-1: Using ep0 maxpacket: 16
[  378.751399][ T1211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10
[  378.762548][ T1211] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  378.772658][ T1211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.784354][ T1211] usb 6-1: config 0 descriptor??
[  378.866278][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  378.873168][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  379.199406][T11274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.208964][T11274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.228367][ T1211] uclogic 0003:5543:0781.0029: item fetching failed at offset 1/5
[  379.236746][ T1211] uclogic 0003:5543:0781.0029: parse failed
[  379.242743][ T1211] uclogic 0003:5543:0781.0029: probe with driver uclogic failed with error -22
[  379.439073][T11274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.453734][T11286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1463'.
[  379.456251][T11274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.485309][ T6011] usb 6-1: USB disconnect, device number 110
[  379.633855][ T5920] rc_core: IR keymap rc-snapstream-firefly not found
[  379.640758][ T5920] Registered IR keymap rc-empty
[  379.651157][ T5920] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  379.659258][T11289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1464'.
[  379.669048][ T5920] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input42
[  379.699230][ T5920] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input43
[  379.744473][ T5920] usb 1-1: USB disconnect, device number 37
[  379.744532][    C1] ati_remote 1-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  379.762164][T11291] netlink: 'syz.2.1465': attribute type 1 has an invalid length.
[  380.042293][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1467'.
[  380.124677][ T5920] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  380.263130][ T5920] usb 1-1: device descriptor read/64, error -71
[  380.313102][ T1211] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  380.487789][ T1211] usb 4-1: unable to read config index 0 descriptor/start: -71
[  380.495687][ T1211] usb 4-1: can't read configurations, error -71
[  380.503101][ T5920] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  380.633157][ T5920] usb 1-1: device descriptor read/64, error -71
[  380.743302][ T5920] usb usb1-port1: attempt power cycle
[  381.083348][ T5920] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  381.103717][ T5920] usb 1-1: device descriptor read/8, error -71
[  381.203233][    T9] usb 6-1: new full-speed USB device number 111 using dummy_hcd
[  381.333103][ T1211] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  381.344341][ T5920] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  381.355264][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  381.363928][    T9] usb 6-1: not running at top speed; connect to a high speed hub
[  381.366536][ T5920] usb 1-1: device descriptor read/8, error -71
[  381.373090][    T9] usb 6-1: config 2 has an invalid interface number: 212 but max is 1
[  381.386094][    T9] usb 6-1: config 2 has an invalid interface number: 226 but max is 1
[  381.394832][    T9] usb 6-1: config 2 has no interface number 0
[  381.400927][    T9] usb 6-1: config 2 has no interface number 1
[  381.408003][    T9] usb 6-1: too many endpoints for config 2 interface 212 altsetting 9: 167, using maximum allowed: 30
[  381.420336][    T9] usb 6-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  381.432527][    T9] usb 6-1: config 2 interface 212 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 167
[  381.446860][    T9] usb 6-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  381.457769][    T9] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  381.469118][    T9] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  381.479202][    T9] usb 6-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  381.492372][    T9] usb 6-1: config 2 interface 212 has no altsetting 0
[  381.493479][ T5920] usb usb1-port1: unable to enumerate USB device
[  381.499524][ T1211] usb 4-1: Using ep0 maxpacket: 32
[  381.512741][    T9] usb 6-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice= 0.00
[  381.523417][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  381.532055][    T9] usb 6-1: SerialNumber: syz
[  381.539090][ T1211] usb 4-1: config 174 has an invalid interface number: 66 but max is 2
[  381.548101][ T1211] usb 4-1: config 174 has an invalid interface number: 71 but max is 2
[  381.557955][ T1211] usb 4-1: config 174 contains an unexpected descriptor of type 0x2, skipping
[  381.566990][ T1211] usb 4-1: config 174 has an invalid interface number: 61 but max is 2
[  381.575652][ T1211] usb 4-1: config 174 contains an unexpected descriptor of type 0x2, skipping
[  381.584930][ T1211] usb 4-1: config 174 has an invalid descriptor of length 250, skipping remainder of the config
[  381.595505][ T1211] usb 4-1: config 174 has no interface number 0
[  381.601960][ T1211] usb 4-1: config 174 has no interface number 1
[  381.608387][ T1211] usb 4-1: config 174 has no interface number 2
[  381.614925][ T1211] usb 4-1: config 174 interface 66 altsetting 8 endpoint 0xF has an invalid bInterval 119, changing to 7
[  381.627194][ T1211] usb 4-1: config 174 interface 66 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  381.639151][ T1211] usb 4-1: config 174 interface 66 altsetting 8 endpoint 0x3 has invalid maxpacket 23577, setting to 64
[  381.650400][ T1211] usb 4-1: config 174 interface 66 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  381.661527][ T1211] usb 4-1: config 174 interface 66 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  381.672659][ T1211] usb 4-1: config 174 interface 66 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  381.684051][ T1211] usb 4-1: config 174 interface 66 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  381.695988][ T1211] usb 4-1: config 174 interface 66 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[  381.707029][ T1211] usb 4-1: config 174 interface 66 altsetting 8 has a duplicate endpoint with address 0xB, skipping
[  381.717994][ T1211] usb 4-1: config 174 interface 66 altsetting 8 has a duplicate endpoint with address 0x3, skipping
[  381.729498][ T1211] usb 4-1: config 174 interface 71 altsetting 13 has a duplicate endpoint with address 0x5, skipping
[  381.740975][ T1211] usb 4-1: config 174 interface 71 altsetting 13 has a duplicate endpoint with address 0x4, skipping
[  381.752207][ T1211] usb 4-1: config 174 interface 71 altsetting 13 has a duplicate endpoint with address 0x3, skipping
[  381.763270][ T1211] usb 4-1: config 174 interface 71 altsetting 13 has a duplicate endpoint with address 0x4, skipping
[  381.774453][ T1211] usb 4-1: config 174 interface 71 altsetting 13 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  381.791497][ T1211] usb 4-1: config 174 interface 71 altsetting 13 has an invalid descriptor for endpoint zero, skipping
[  381.803894][ T1211] usb 4-1: config 174 interface 71 altsetting 13 has a duplicate endpoint with address 0x4, skipping
[  381.820398][    T9] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.226/input/input44
[  381.831695][ T1211] usb 4-1: config 174 interface 61 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  381.847150][ T1211] usb 4-1: config 174 interface 66 has no altsetting 0
[  381.856655][ T1211] usb 4-1: config 174 interface 71 has no altsetting 0
[  381.868373][    T9] usb 6-1: USB disconnect, device number 111
[  381.868525][    C1] xpad 6-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19
[  381.878752][ T1211] usb 4-1: config 174 interface 61 has no altsetting 0
[  381.894573][ T1211] usb 4-1: Dual-Role OTG device on HNP port
[  381.905826][ T1211] usb 4-1: New USB device found, idVendor=12d1, idProduct=7276, bcdDevice=8e.45
[  381.920970][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.930484][ T1211] usb 4-1: Product: Ⓘ
[  381.940933][ T1211] usb 4-1: Manufacturer: 竐螤槵ㅑ䍀㮔㴛䆷繰蹭罎䧧ꖞ켂᎚ഺ瑩槆鷎ꞃ뛽䁍ۏ蔊킢⢜⨶ѐ菔涃篦❊잲ង칌儛람뼲愳丒釡እ㐈裡謌왁⁚쌨㒓뾻雷퇚挑㒭
[  381.961071][ T1211] usb 4-1: SerialNumber: ꫭ銘䵺Ǩ⛊徉䔔䈧쑪稇ꛒ鉺蔵룀橗创퀃ṁ䞥渘偾笪⽇୚풥卉烱쨡⳾䒠赁٫䯙ᥰꂲ䤠承⸫䮀䦳煗≷န䚀
[  381.981999][T11306] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  382.200505][ T1211] option 4-1:174.66: GSM modem (1-port) converter detected
[  382.230178][ T1211] usb 4-1: USB disconnect, device number 46
[  382.248060][ T1211] option 4-1:174.66: device disconnected
[  382.573263][    T9] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[  382.723085][    T9] usb 6-1: Using ep0 maxpacket: 16
[  382.730600][    T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  382.741367][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  382.748499][    T9] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  382.756309][ T5920] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  382.763981][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.795450][    T9] usb 6-1: config 0 descriptor??
[  382.860372][T11320] netlink: 'syz.2.1476': attribute type 10 has an invalid length.
[  382.871214][T11320] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1476'.
[  382.963124][ T5920] usb 1-1: Using ep0 maxpacket: 8
[  382.970491][ T5920] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  382.981567][ T5920] usb 1-1: config 179 has no interface number 0
[  382.988108][ T5920] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  382.999879][ T5920] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  383.012407][ T5920] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  383.024258][ T5920] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  383.034903][ T5920] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  383.048666][ T5920] usb 1-1: config 179 interface 65 has no altsetting 0
[  383.055845][ T5920] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  383.066556][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.073126][ T1211] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  383.105901][ T5920] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input45
[  383.141224][T11320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  383.161950][T11320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  383.204443][T11320] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  383.229115][T11320] bond0 (unregistering): (slave team0): Releasing backup interface
[  383.238141][ T1211] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  383.240455][T11320] bond0 (unregistering): Released all slaves
[  383.262075][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.290981][    T9] cougar 0003:060B:500A.002A: unknown main item tag 0x0
[  383.304854][ T1211] usb 4-1: config 0 descriptor??
[  383.317621][ T5988] usb 1-1: USB disconnect, device number 42
[  383.340648][    T9] cougar 0003:060B:500A.002A: unknown main item tag 0x0
[  383.351684][ T1211] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  383.361156][    T9] cougar 0003:060B:500A.002A: unknown main item tag 0x0
[  383.377732][    T9] cougar 0003:060B:500A.002A: unknown main item tag 0x0
[  383.386108][    T9] cougar 0003:060B:500A.002A: unknown main item tag 0x0
[  383.393268][    T9] cougar 0003:060B:500A.002A: unknown main item tag 0x0
[  383.400550][    T9] cougar 0003:060B:500A.002A: unknown main item tag 0x0
[  383.409553][    T9] cougar 0003:060B:500A.002A: unknown main item tag 0x0
[  383.417941][    T9] cougar 0003:060B:500A.002A: unknown main item tag 0x0
[  383.428331][    T9] cougar 0003:060B:500A.002A: unknown main item tag 0x0
[  383.449605][T11309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  383.480263][T11309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  383.493837][    T9] cougar 0003:060B:500A.002A: hidraw0: USB HID v0.00 Device [HID 060b:500a] on usb-dummy_hcd.5-1/input0
[  383.520026][    T9] usb 6-1: USB disconnect, device number 112
[  383.560484][ T1211] gspca_sn9c2028: read1 error -32
[  383.568468][T11324] fido_id[11324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  383.773722][ T1211] gspca_sn9c2028: read1 error -71
[  383.780428][ T1211] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71
[  383.794292][ T1211] usb 4-1: USB disconnect, device number 47
[  384.093230][    T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  384.243356][    T9] usb 1-1: Using ep0 maxpacket: 8
[  384.250571][    T9] usb 1-1: config 8 has an invalid interface number: 161 but max is 0
[  384.259018][    T9] usb 1-1: config 8 has no interface number 0
[  384.265614][    T9] usb 1-1: config 8 interface 161 has no altsetting 0
[  384.265974][ T5920] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[  384.275415][    T9] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=60.da
[  384.290311][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.299362][    T9] usb 1-1: Product: syz
[  384.304169][    T9] usb 1-1: Manufacturer: syz
[  384.308789][    T9] usb 1-1: SerialNumber: syz
[  384.443937][ T5920] usb 6-1: Using ep0 maxpacket: 8
[  384.452112][ T5920] usb 6-1: config 4 has an invalid interface number: 20 but max is 0
[  384.465188][ T5920] usb 6-1: config 4 has no interface number 0
[  384.472311][ T5920] usb 6-1: config 4 interface 20 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  384.483552][ T5920] usb 6-1: config 4 interface 20 has no altsetting 0
[  384.492604][ T5920] usb 6-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ba.e6
[  384.502314][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.510638][ T5920] usb 6-1: Product: syz
[  384.515132][ T5920] usb 6-1: Manufacturer: syz
[  384.520049][ T5920] usb 6-1: SerialNumber: syz
[  384.560251][T11326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.569526][T11326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.675707][   T43] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  384.746339][T11328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.755656][T11328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.775831][ T5920] HFC-S_USB 6-1:4.20: probe with driver HFC-S_USB failed with error -5
[  384.792844][ T5920] usb 6-1: USB disconnect, device number 113
[  384.813715][   T43] usb 4-1: device descriptor read/64, error -71
[  385.063059][   T43] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  385.185037][T11343] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1482'.
[  385.203146][   T43] usb 4-1: device descriptor read/64, error -71
[  385.299123][T11346] netlink: 'syz.0.1483': attribute type 83 has an invalid length.
[  385.313615][   T43] usb usb4-port1: attempt power cycle
[  385.362215][T11351] netlink: 'syz.0.1483': attribute type 83 has an invalid length.
[  385.567486][ T5920] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[  385.653158][   T43] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  385.673682][   T43] usb 4-1: device descriptor read/8, error -71
[  385.705260][ T5920] usb 6-1: device descriptor read/64, error -71
[  385.913140][   T43] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  385.936428][   T43] usb 4-1: device descriptor read/8, error -71
[  385.943082][ T5920] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[  386.053723][   T43] usb usb4-port1: unable to enumerate USB device
[  386.074436][ T5920] usb 6-1: device descriptor read/64, error -71
[  386.183688][ T5920] usb usb6-port1: attempt power cycle
[  386.509801][T11370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.524571][ T5920] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[  386.541255][T11370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.554265][ T5920] usb 6-1: device descriptor read/8, error -71
[  386.795087][ T5920] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[  386.824884][ T5920] usb 6-1: device descriptor read/8, error -71
[  386.938987][ T5920] usb usb6-port1: unable to enumerate USB device
[  387.107882][T11377] netlink: 'syz.0.1492': attribute type 21 has an invalid length.
[  387.120940][T11377] netlink: 'syz.0.1492': attribute type 22 has an invalid length.
[  387.178657][T11379] Bluetooth: MGMT ver 1.23
[  387.229821][T11384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.239536][T11384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.250831][T11382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.261024][T11382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.400925][T11391] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20000
[  387.412685][T11391] netlink: 'syz.0.1497': attribute type 12 has an invalid length.
[  387.421582][T11391] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1497'.
[  387.490117][T11396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.508756][T11396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.951866][T11411] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1502'.
[  388.130636][T11419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.145912][T11419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.696037][T11436] netlink: 'syz.0.1510': attribute type 21 has an invalid length.
[  388.704435][T11436] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1510'.
[  388.753063][ T5988] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  388.753063][   T43] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[  388.913115][   T43] usb 6-1: Using ep0 maxpacket: 16
[  388.921193][   T43] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.934848][   T43] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.936871][ T5988] usb 4-1: config 6 has an invalid interface number: 2 but max is 0
[  388.954254][   T43] usb 6-1: config 0 interface 0 has no altsetting 0
[  388.959381][ T5988] usb 4-1: config 6 has no interface number 0
[  388.968087][   T43] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  388.968763][ T5988] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  388.989320][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.990776][ T5988] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  389.012114][   T43] usb 6-1: config 0 descriptor??
[  389.013729][ T5988] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  389.030560][ T5988] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  389.044700][ T5988] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  389.054643][ T5988] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  389.063957][ T5988] usb 4-1: Product: syz
[  389.068291][ T5988] usb 4-1: Manufacturer: syz
[  389.073299][ T5988] usb 4-1: SerialNumber: syz
[  389.087021][ T5988] hso 4-1:6.2: Failed to find BULK IN ep
[  389.240379][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1508'.
[  389.261060][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1508'.
[  389.287957][T11433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.299943][T11433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.319528][T11433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.333698][T11433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.342452][T11433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.351968][T11433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.372675][T11433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.373821][    T9] net1080 1-1:8.161: probe with driver net1080 failed with error -22
[  389.387186][T11433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.432745][T11433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.448520][T11433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.490692][ T1211] usb 4-1: USB disconnect, device number 52
[  389.540171][   T43] zeroplus 0003:0C12:0005.002B: collection stack underflow
[  389.548129][   T43] zeroplus 0003:0C12:0005.002B: item 0 4 0 12 parsing failed
[  389.559047][   T43] zeroplus 0003:0C12:0005.002B: parse failed
[  389.565552][   T43] zeroplus 0003:0C12:0005.002B: probe with driver zeroplus failed with error -22
[  390.213564][   T30] audit: type=1326 audit(1757859976.238:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11450 comm="syz.2.1515" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f533d78eba9 code=0x0
[  390.213973][T11452] vivid-000: =================  START STATUS  =================
[  390.298541][T11452] vivid-000: Test Pattern: 75% Colorbar
[  390.308001][T11452] vivid-000: Fill Percentage of Frame: 100
[  390.323323][T11452] vivid-000: Horizontal Movement: No Movement
[  390.339994][T11452] vivid-000: Vertical Movement: No Movement
[  390.350117][T11452] vivid-000: OSD Text Mode: All
[  390.360241][T11452] vivid-000: Show Border: false
[  390.370375][T11452] vivid-000: Show Square: false
[  390.380513][T11452] vivid-000: Sensor Flipped Horizontally: false
[  390.393095][T11452] vivid-000: Sensor Flipped Vertically: false
[  390.410877][T11452] vivid-000: Insert SAV Code in Image: false
[  390.417247][T11452] vivid-000: Insert EAV Code in Image: false
[  390.433087][T11452] vivid-000: Insert Video Guard Band: false
[  390.439196][T11452] vivid-000: Reduced Framerate: false
[  390.449343][T11452] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  390.469596][T11452] vivid-000: S-Video 000-0 Is Connected To: None
[  390.479717][T11452] vivid-000: Enable Capture Cropping: true grabbed
[  390.493084][T11452] vivid-000: Enable Capture Composing: true grabbed
[  390.510144][T11452] vivid-000: Enable Capture Scaler: true grabbed
[  390.520269][T11452] vivid-000: Timestamp Source: End of Frame
[  390.533298][T11452] vivid-000: Colorspace: Rec. 709
[  390.550661][T11452] vivid-000: Transfer Function: Default
[  390.556744][T11452] vivid-000: Y'CbCr Encoding: Default
[  390.572551][T11452] vivid-000: HSV Encoding: Hue 0-179
[  390.578315][T11452] vivid-000: Quantization: Default
[  390.586558][T11452] vivid-000: Apply Alpha To Red Only: false
[  390.593949][T11452] vivid-000: Standard Aspect Ratio: 4x3
[  390.601619][T11452] vivid-000: DV Timings Signal Mode: Current DV Timings
[  390.608933][T11452] vivid-000: DV Timings: 640x480p59 inactive
[  390.615623][T11452] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  390.623193][T11452] vivid-000: Maximum EDID Blocks: 2
[  390.628658][T11452] vivid-000: Limited RGB Range (16-235): true
[  390.635203][T11452] vivid-000: Rx RGB Quantization Range: Automatic
[  390.641817][T11452] vivid-000: Power Present: 0x00000001
[  390.648516][T11452] tpg source WxH: 1280x720 (Y'CbCr)
[  390.654864][T11452] tpg field: 1
[  390.658369][T11452] tpg crop: (0,0)/1280x720
[  390.662912][T11452] tpg compose: (0,0)/1280x720
[  390.667749][T11452] tpg colorspace: 3
[  390.671627][T11452] tpg transfer function: 0/2
[  390.676394][T11452] tpg Y'CbCr encoding: 0/1
[  390.680919][T11452] tpg quantization: 0/2
[  390.688263][T11452] tpg RGB range: 0/1
[  390.692283][T11452] vivid-000: ==================  END STATUS  ==================
[  390.823163][   T43] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  390.881395][T11463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.893870][T11463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  390.984918][   T43] usb 4-1: Using ep0 maxpacket: 8
[  390.991818][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  391.004329][   T43] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  391.020227][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.037306][   T43] usb 4-1: config 0 descriptor??
[  391.087114][T11470] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  391.427904][    T9] usb 6-1: USB disconnect, device number 118
[  391.497311][   T43] creative-sb0540 0003:041E:3100.002C: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.3-1/input0
[  391.807588][T11490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.811538][ T1211] usb 4-1: USB disconnect, device number 53
[  391.825852][T11490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.841058][T11490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.851088][T11490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.883301][    T9] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[  391.898798][T11490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.909402][T11490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.033200][    T9] usb 6-1: Using ep0 maxpacket: 32
[  392.039969][    T9] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  392.048666][    T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  392.060294][    T9] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  392.071498][    T9] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  392.085422][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  392.095102][    T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  392.104523][    T9] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  392.113046][    T9] usb 6-1: Product: syz
[  392.117221][    T9] usb 6-1: Manufacturer: syz
[  392.121827][    T9] usb 6-1: SerialNumber: syz
[  392.128478][    T9] usb 6-1: config 0 descriptor??
[  392.137362][    T9] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  392.147988][    T9] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  392.582352][T11507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.592344][T11507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.612182][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1531'.
[  392.625011][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'.
[  392.892865][T11483] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  392.895260][   T43] usb 6-1: USB disconnect, device number 119
[  392.901175][    C0] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[  392.921629][   T43] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  393.793154][   T43] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[  393.953136][   T43] usb 6-1: Using ep0 maxpacket: 32
[  393.960341][   T43] usb 6-1: unable to get BOS descriptor or descriptor too short
[  393.969529][   T43] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  393.978222][   T43] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  393.990990][   T43] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  394.000173][   T43] usb 6-1: config 128 has no interface number 0
[  394.006602][   T43] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 194, changing to 11
[  394.020622][   T43] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 33851, setting to 1024
[  394.034537][   T43] usb 6-1: config 128 interface 127 has no altsetting 0
[  394.044799][   T43] usb 6-1: string descriptor 0 read error: -22
[  394.051066][   T43] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  394.060488][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.077260][T11516] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  394.295269][T11516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.305359][T11516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.327582][   T43] usb 6-1: USB disconnect, device number 120
[  395.678253][T11536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.688857][T11536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  395.706306][T11536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.731705][T11536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.124469][T11543] netlink: 'syz.5.1544': attribute type 15 has an invalid length.
[  396.132527][T11543] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1544'.
[  396.383148][    T9] usb 6-1: new full-speed USB device number 121 using dummy_hcd
[  396.502889][T11545] overlayfs: missing 'lowerdir'
[  396.537690][    T9] usb 6-1: config 10 has an invalid interface number: 160 but max is 3
[  396.550511][    T9] usb 6-1: config 10 contains an unexpected descriptor of type 0x1, skipping
[  396.559982][    T9] usb 6-1: config 10 contains an unexpected descriptor of type 0x1, skipping
[  396.569563][    T9] usb 6-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  396.592193][    T9] usb 6-1: config 10 has 1 interface, different from the descriptor's value: 4
[  396.601298][    T9] usb 6-1: config 10 has no interface number 0
[  396.607625][    T9] usb 6-1: config 10 interface 160 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  396.623887][    T9] usb 6-1: config 10 interface 160 has no altsetting 0
[  396.634574][    T9] usb 6-1: New USB device found, idVendor=0856, idProduct=ac24, bcdDevice=11.e3
[  396.646358][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.657195][    T9] usb 6-1: Product: syz
[  396.665990][    T9] usb 6-1: Manufacturer: syz
[  396.670617][    T9] usb 6-1: SerialNumber: syz
[  396.726920][T11549] syzkaller1: entered promiscuous mode
[  396.732521][T11549] syzkaller1: entered allmulticast mode
[  396.904757][    T9] mos7840 6-1:10.160: required endpoints missing
[  396.924162][    T9] usb 6-1: USB disconnect, device number 121
[  396.978171][T11553] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  397.107701][T11557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  397.121845][T11557] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.297116][   T43] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  397.453182][   T43] usb 4-1: Using ep0 maxpacket: 16
[  397.522140][T11561] netlink: 'syz.2.1551': attribute type 5 has an invalid length.
[  397.552503][   T43] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  397.556417][T11561] fuse: Bad value for 'fd'
[  397.575216][   T43] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  397.601982][   T43] usb 4-1: config 0 interface 0 has no altsetting 0
[  397.613186][   T43] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  397.632558][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.664100][   T43] usb 4-1: config 0 descriptor??
[  397.888435][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'.
[  397.903207][ T5988] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[  397.931356][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1550'.
[  398.066296][ T5988] usb 6-1: Using ep0 maxpacket: 16
[  398.076082][ T5988] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  398.077432][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'.
[  398.093333][ T5988] usb 6-1: config 1 has no interface number 0
[  398.093384][ T5988] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  398.124671][ T5988] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  398.138962][ T5988] usb 6-1: config 1 interface 105 has no altsetting 0
[  398.149293][ T5988] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  398.162326][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.170832][ T5988] usb 6-1: Product: syz
[  398.178416][ T5988] usb 6-1: Manufacturer: syz
[  398.184270][ T5988] usb 6-1: SerialNumber: syz
[  398.198262][T11566] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  398.211081][   T43] zeroplus 0003:0C12:0005.002D: collection stack underflow
[  398.219133][T11566] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  398.227431][   T43] zeroplus 0003:0C12:0005.002D: item 0 4 0 12 parsing failed
[  398.236075][   T43] zeroplus 0003:0C12:0005.002D: parse failed
[  398.242133][   T43] zeroplus 0003:0C12:0005.002D: probe with driver zeroplus failed with error -22
[  398.644310][T11566] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  398.652236][T11566] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  399.270401][ T5988] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  399.287655][ T5988] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  399.311492][ T5988] aqc111 6-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2a:5e:9a:39:50:d0
[  399.337121][ T5988] usb 6-1: USB disconnect, device number 122
[  399.353618][ T5988] aqc111 6-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  399.434941][ T5988] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  399.450400][ T5988] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  399.461299][ T5988] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  400.034022][T11587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  400.057102][T11587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  400.082202][ T5988] usb 4-1: USB disconnect, device number 54
[  400.242537][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1564'.
[  400.266318][T11604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1565'.
[  400.283594][T11606] netlink: 'syz.3.1565': attribute type 21 has an invalid length.
[  400.296030][T11609] netlink: 'syz.3.1565': attribute type 21 has an invalid length.
[  400.296249][T11606] netlink: 'syz.3.1565': attribute type 5 has an invalid length.
[  400.324195][T11606] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1565'.
[  400.336561][ T5988] hid_parser_main: 1261 callbacks suppressed
[  400.336584][ T5988] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  400.337841][T11609] netlink: 'syz.3.1565': attribute type 5 has an invalid length.
[  400.366739][ T5869] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  400.374959][ T5869] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  400.380366][T11609] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1565'.
[  400.383306][ T5869] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  400.392749][ T5869] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  400.406243][ T5988] hid-generic 0000:0000:0000.002E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  401.198383][ T1211] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  401.267296][T11631] hugetlbfs: Bad value '���' for mount option 'size'
[  401.267296][T11631] 
[  401.279459][T11633] netlink: 328 bytes leftover after parsing attributes in process `syz.2.1574'.
[  401.383181][ T1211] usb 4-1: Using ep0 maxpacket: 16
[  401.407163][ T1211] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  401.443162][ T1211] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  401.457029][T11637] syz.0.1575: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  401.481144][T11637] CPU: 1 UID: 0 PID: 11637 Comm: syz.0.1575 Not tainted syzkaller #0 PREEMPT(full) 
[  401.481171][T11637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  401.481189][T11637] Call Trace:
[  401.481198][T11637]  <TASK>
[  401.481207][T11637]  dump_stack_lvl+0x189/0x250
[  401.481245][T11637]  ? __pfx_dump_stack_lvl+0x10/0x10
[  401.481265][T11637]  ? __pfx__printk+0x10/0x10
[  401.481291][T11637]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  401.481318][T11637]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  401.481345][T11637]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  401.481374][T11637]  warn_alloc+0x214/0x310
[  401.481403][T11637]  ? __pfx_warn_alloc+0x10/0x10
[  401.481436][T11637]  ? __get_vm_area_node+0x28f/0x300
[  401.481459][T11637]  ? hash_netiface_create+0x358/0xfe0
[  401.481489][T11637]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  401.481542][T11637]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  401.481564][T11637]  ? hash_netiface_create+0x358/0xfe0
[  401.481595][T11637]  ? rcu_is_watching+0x15/0xb0
[  401.481619][T11637]  ? hash_netiface_create+0x358/0xfe0
[  401.481645][T11637]  __kvmalloc_node_noprof+0x674/0x910
[  401.481668][T11637]  ? hash_netiface_create+0x358/0xfe0
[  401.481693][T11637]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  401.481715][T11637]  ? hash_netiface_create+0x2fe/0xfe0
[  401.481747][T11637]  hash_netiface_create+0x358/0xfe0
[  401.481782][T11637]  ? __nla_parse+0x40/0x60
[  401.481799][T11637]  ? __pfx_hash_netiface_create+0x10/0x10
[  401.481828][T11637]  ip_set_create+0xa97/0x1940
[  401.481847][T11637]  ? ip_set_create+0x4a2/0x1940
[  401.481877][T11637]  ? __pfx_ip_set_create+0x10/0x10
[  401.481934][T11637]  nfnetlink_rcv_msg+0xb4d/0x1130
[  401.481957][T11637]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  401.481997][T11637]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  401.482015][T11637]  ? kmem_cache_free+0x19a/0x690
[  401.482090][T11637]  netlink_rcv_skb+0x208/0x470
[  401.482114][T11637]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  401.482136][T11637]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  401.482170][T11637]  ? bpf_lsm_capable+0x9/0x20
[  401.482189][T11637]  ? security_capable+0x7e/0x2e0
[  401.482223][T11637]  nfnetlink_rcv+0x26a/0x2520
[  401.482254][T11637]  ? __dev_queue_xmit+0x1d79/0x3b50
[  401.482279][T11637]  ? kasan_save_track+0x3e/0x80
[  401.482298][T11637]  ? __kasan_slab_alloc+0x6c/0x80
[  401.482317][T11637]  ? kmem_cache_alloc_noprof+0x367/0x6e0
[  401.482346][T11637]  ? __dev_queue_xmit+0x27b/0x3b50
[  401.482385][T11637]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  401.482404][T11637]  ? __pfx___dev_queue_xmit+0x10/0x10
[  401.482445][T11637]  ? ref_tracker_free+0x63a/0x7d0
[  401.482463][T11637]  ? __asan_memcpy+0x40/0x70
[  401.482483][T11637]  ? __pfx_ref_tracker_free+0x10/0x10
[  401.482497][T11637]  ? __skb_clone+0x63/0x7a0
[  401.482531][T11637]  ? __skb_clone+0x483/0x7a0
[  401.482562][T11637]  ? skb_clone+0x246/0x3a0
[  401.482590][T11637]  ? __netlink_deliver_tap+0x807/0x850
[  401.482612][T11637]  ? netlink_deliver_tap+0x2e/0x1b0
[  401.482641][T11637]  ? netlink_deliver_tap+0x2e/0x1b0
[  401.482672][T11637]  netlink_unicast+0x82f/0x9e0
[  401.482702][T11637]  ? __pfx_netlink_unicast+0x10/0x10
[  401.482725][T11637]  ? netlink_sendmsg+0x642/0xb30
[  401.482744][T11637]  ? skb_put+0x11b/0x210
[  401.482770][T11637]  netlink_sendmsg+0x805/0xb30
[  401.482802][T11637]  ? __pfx_netlink_sendmsg+0x10/0x10
[  401.482828][T11637]  ? aa_sock_msg_perm+0xf1/0x1d0
[  401.482850][T11637]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  401.482873][T11637]  ? __pfx_netlink_sendmsg+0x10/0x10
[  401.482897][T11637]  __sock_sendmsg+0x21c/0x270
[  401.482920][T11637]  ____sys_sendmsg+0x505/0x830
[  401.482952][T11637]  ? __pfx_____sys_sendmsg+0x10/0x10
[  401.482982][T11637]  ? import_iovec+0x74/0xa0
[  401.483006][T11637]  ___sys_sendmsg+0x21f/0x2a0
[  401.483029][T11637]  ? __pfx____sys_sendmsg+0x10/0x10
[  401.483084][T11637]  ? __fget_files+0x2a/0x420
[  401.483108][T11637]  ? __fget_files+0x3a0/0x420
[  401.483144][T11637]  __x64_sys_sendmsg+0x19b/0x260
[  401.483171][T11637]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  401.483206][T11637]  ? do_user_addr_fault+0xc8a/0x1390
[  401.483231][T11637]  ? do_syscall_64+0xbe/0xfa0
[  401.483263][T11637]  do_syscall_64+0xfa/0xfa0
[  401.483282][T11637]  ? lockdep_hardirqs_on+0x9c/0x150
[  401.483303][T11637]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.483379][T11637]  ? clear_bhb_loop+0x60/0xb0
[  401.483401][T11637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.483426][T11637] RIP: 0033:0x7fcc8f38eba9
[  401.483448][T11637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  401.483464][T11637] RSP: 002b:00007fcc9027b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  401.483484][T11637] RAX: ffffffffffffffda RBX: 00007fcc8f5d6180 RCX: 00007fcc8f38eba9
[  401.483503][T11637] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007
[  401.483515][T11637] RBP: 00007fcc8f411e19 R08: 0000000000000000 R09: 0000000000000000
[  401.483527][T11637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  401.483539][T11637] R13: 00007fcc8f5d6218 R14: 00007fcc8f5d6180 R15: 00007ffd7ebf2e28
[  401.483570][T11637]  </TASK>
[  401.496170][ T1211] usb 4-1: config 0 interface 0 has no altsetting 0
[  401.512697][T11637] Mem-Info:
[  401.565352][ T1211] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  401.570896][T11637] active_anon:8838 inactive_anon:0 isolated_anon:0
[  401.570896][T11637]  active_file:15173 inactive_file:40561 isolated_file:0
[  401.570896][T11637]  unevictable:768 dirty:92 writeback:0
[  401.570896][T11637]  slab_reclaimable:11254 slab_unreclaimable:95262
[  401.570896][T11637]  mapped:26199 shmem:1372 pagetables:1645
[  401.570896][T11637]  sec_pagetables:0 bounce:0
[  401.570896][T11637]  kernel_misc_reclaimable:0
[  401.570896][T11637]  free:1324278 free_pcp:12383 free_cma:0
[  401.597661][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.605108][T11637] Node 0 active_anon:35352kB inactive_anon:0kB active_file:60660kB inactive_file:161832kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108780kB dirty:364kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12852kB pagetables:6452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  401.638665][ T1211] usb 4-1: config 0 descriptor??
[  401.771324][T11637] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  401.872159][   T30] audit: type=1107 audit(1757859987.828:90): pid=11632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�:��X[�?!�׾��/�5:i���p�*���t:��W��¸Mo77C���,5c������E�O����i�D;.^V����S�|^,�+��RX%�J`�������ΦH�d�™�������&Ev������\��$��-M��4<�5M���~�W�[�e�@�3Ǚq���`�9�l�'
[  401.919724][T11637] Node 0 
[  402.104948][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'.
[  402.109936][ T5869] Bluetooth: hci0: command 0x0c1a tx timeout
[  402.140071][    C0] vkms_vblank_simulate: vblank timer overrun
[  402.183494][T11637] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  402.221666][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1571'.
[  402.265854][T11637] lowmem_reserve[]: 0 2495 2496 2496 2496
[  402.297385][T11637] Node 0 DMA32 free:1376568kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35460kB inactive_anon:0kB active_file:60660kB inactive_file:160776kB unevictable:1536kB writepending:384kB zspages:0kB present:3129332kB managed:2555276kB mlocked:0kB bounce:0kB free_pcp:39932kB local_pcp:20368kB free_cma:0kB
[  402.339335][T11637] lowmem_reserve[]: 0 0 1 1 1
[  402.347169][T11637] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1064kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  402.378824][    C0] vkms_vblank_simulate: vblank timer overrun
[  402.387922][T11637] lowmem_reserve[]: 0 0 0 0 0
[  402.392908][T11637] Node 1 Normal free:3904468kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:404kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10280kB local_pcp:4704kB free_cma:0kB
[  402.425683][    C0] vkms_vblank_simulate: vblank timer overrun
[  402.432354][T11637] lowmem_reserve[]: 0 0 0 0 0
[  402.437282][T11637] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  402.452092][T11637] Node 0 DMA32: 2026*4kB (UME) 554*8kB (UM) 418*16kB (UM) 439*32kB (UME) 304*64kB (UM) 150*128kB (UM) 54*256kB (UME) 32*512kB (UME) 21*1024kB (UME) 2*2048kB (UE) 305*4096kB (UM) = 1377016kB
[  402.476687][T11637] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  402.489104][T11637] Node 1 Normal: 183*4kB (UME) 39*8kB (UME) 36*16kB (UE) 224*32kB (UE) 64*64kB (UE) 9*128kB (UE) 5*256kB (UM) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3904468kB
[  402.514459][T11637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  402.529261][T11637] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  402.540078][ T1211] usbhid 4-1:0.0: can't add hid device: -71
[  402.546674][ T1211] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  402.557436][T11637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  402.568399][T11637] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  402.581038][ T1211] usb 4-1: USB disconnect, device number 55
[  402.590189][T11637] 57106 total pagecache pages
[  402.595494][T11637] 0 pages in swap cache
[  402.600018][T11637] Free swap  = 124996kB
[  402.616556][T11637] Total swap = 124996kB
[  402.620845][T11637] 2097051 pages RAM
[  402.626291][T11637] 0 pages HighMem/MovableOnly
[  402.635655][T11637] 426334 pages reserved
[  402.641596][T11637] 0 pages cma reserved
[  402.788580][T11656] ubi7: attaching mtd0
[  402.797241][T11656] ubi7: scanning is finished
[  402.802244][T11656] ubi7: empty MTD device detected
[  402.938398][T11656] ubi7: attached mtd0 (name "mtdram test device", size 0 MiB)
[  402.950353][T11656] ubi7: PEB size: 4096 bytes (4 KiB), LEB size: 3519 bytes
[  402.959367][T11656] ubi7: min./max. I/O unit sizes: 1/64, sub-page size 1
[  402.970243][T11656] ubi7: VID header offset: 513 (aligned 513), data offset: 577
[  402.978290][T11656] ubi7: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  402.988402][T11656] ubi7: user volume: 0, internal volumes: 1, max. volumes count: 20
[  402.999077][T11656] ubi7: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3809110200
[  403.012416][T11656] ubi7: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  403.025537][T11658] ubi7: background thread "ubi_bgt7d" started, PID 11658
[  403.114831][T11661] program syz.0.1582 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  403.122074][T11662] sctp: [Deprecated]: syz.3.1583 (pid 11662) Use of int in maxseg socket option.
[  403.122074][T11662] Use struct sctp_assoc_value instead
[  403.257715][T11667] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[  403.272367][T11668] : entered promiscuous mode
[  403.281632][T11666] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[  403.428139][T11678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.440368][T11678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.603125][ T5920] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  403.755496][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  403.765698][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  403.779215][ T5920] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00
[  403.788652][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.800308][ T5920] usb 4-1: config 0 descriptor??
[  404.219934][ T5920] usbhid 4-1:0.0: can't add hid device: -71
[  404.226487][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  404.238195][ T5920] usb 4-1: USB disconnect, device number 56
[  404.327392][T11688] binder: 11687:11688 ioctl c018620c 200000000380 returned -22
[  404.836357][   T30] audit: type=1326 audit(1757859990.888:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.0.1595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f38eba9 code=0x0
[  404.858728][    C0] vkms_vblank_simulate: vblank timer overrun
[  404.884923][   T30] audit: type=1326 audit(1757859990.888:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.0.1595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f38eba9 code=0x0
[  404.960230][T11702] netlink: 'syz.0.1595': attribute type 1 has an invalid length.
[  405.320893][T11728] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1603'.
[  405.703082][   T43] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[  405.864765][   T43] usb 6-1: Using ep0 maxpacket: 16
[  405.876426][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.888522][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  405.914223][   T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  405.935451][   T43] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  405.946628][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.960121][   T43] usb 6-1: config 0 descriptor??
[  406.134619][ T3025] wlan1: Trigger new scan to find an IBSS to join
[  406.308695][T11740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.318697][T11740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.328384][T11740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.339716][T11740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.340009][T11741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.358390][T11741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.372662][   T43] microsoft 0003:045E:07DA.002F: item fetching failed at offset 3/34
[  406.383781][   T43] microsoft 0003:045E:07DA.002F: parse failed
[  406.390056][   T43] microsoft 0003:045E:07DA.002F: probe with driver microsoft failed with error -22
[  406.403301][ T1211] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  406.507324][T11743] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  406.553323][ T1211] usb 4-1: Using ep0 maxpacket: 8
[  406.562171][ T1211] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d
[  406.573937][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.582282][ T1211] usb 4-1: Product: syz
[  406.585357][   T43] usb 6-1: USB disconnect, device number 123
[  406.588329][ T1211] usb 4-1: Manufacturer: syz
[  406.599069][ T1211] usb 4-1: SerialNumber: syz
[  406.611166][ T1211] usb 4-1: config 0 descriptor??
[  406.648002][ T1211] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32
[  406.831855][   T43] usb 4-1: USB disconnect, device number 57
[  406.897522][T11750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.906950][T11750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.206710][T11757] netlink: 'syz.5.1614': attribute type 10 has an invalid length.
[  407.460020][ T5183] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  407.471916][ T5183] Bluetooth: hci1: SCO packet for unknown connection handle 201
[  407.531835][T11775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.551232][T11776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.553028][T11775] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.571635][T11776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.753189][ T5988] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  407.801725][T11780] loop2: detected capacity change from 0 to 7
[  407.810794][T11780] Dev loop2: unable to read RDB block 7
[  407.817576][T11780]  loop2: unable to read partition table
[  407.824579][T11780] loop2: partition table beyond EOD, truncated
[  407.830788][T11780] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  407.906034][ T5988] usb 4-1: Using ep0 maxpacket: 32
[  407.915846][ T5988] usb 4-1: unable to get BOS descriptor or descriptor too short
[  407.925916][T11782] loop6: detected capacity change from 0 to 2560
[  407.936364][ T5988] usb 4-1: config 0 has an invalid interface number: 251 but max is 1
[  407.936393][ T5870] buffer_io_error: 134 callbacks suppressed
[  407.936406][ T5870] Buffer I/O error on dev loop6, logical block 0, async page read
[  407.948478][ T5988] usb 4-1: config 0 has an invalid interface number: 2 but max is 1
[  407.952150][ T5870] Buffer I/O error on dev loop6, logical block 0, async page read
[  407.960721][ T5988] usb 4-1: config 0 has no interface number 0
[  407.967975][ T5870] Buffer I/O error on dev loop6, logical block 0, async page read
[  407.984087][ T5988] usb 4-1: config 0 has no interface number 1
[  407.996318][ T5870] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.005383][ T5988] usb 4-1: config 0 interface 251 has no altsetting 0
[  408.005638][ T5870] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.012442][ T5988] usb 4-1: config 0 interface 2 has no altsetting 0
[  408.027572][ T5870] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.030516][ T5988] usb 4-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f
[  408.036281][ T5870] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.054830][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.056753][ T5870] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.064023][ T5988] usb 4-1: Product: syz
[  408.072501][ T5870] ldm_validate_partition_table(): Disk read failed.
[  408.076568][ T5988] usb 4-1: Manufacturer: 郶겕췮偟魢㻿ך세紁瘾튳㸞짩ﭸ곆塲锄汫ꭴ㇎隹芷ࣀᶊ턥痎婈叧抸햔踊䟾풂肁䱻ৈ윕Ҵ線᝟馳킾㺐㝺挟㹨偩ἢ乚渂≀鏢ﶹᣤد퐳횽奄饯県貂NJ碈猐ꗅ漑ᰇ妽㢄⯛⊻㞻콀渹ꭜሷ⋂㌅꾝䦮鱋ꫪ愅ꩳṈ訷嬧አ젲䮪쐇뷔
[  408.085147][ T5870] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.113568][    C0] vkms_vblank_simulate: vblank timer overrun
[  408.114658][ T5988] usb 4-1: SerialNumber: syz
[  408.141337][ T5870] Buffer I/O error on dev loop6, logical block 0, async page read
[  408.150926][ T5988] usb 4-1: config 0 descriptor??
[  408.158482][ T5870] Dev loop6: unable to read RDB block 0
[  408.165463][ T5870]  loop6: unable to read partition table
[  408.181203][T11782] ldm_validate_partition_table(): Disk read failed.
[  408.189837][T11782] Dev loop6: unable to read RDB block 0
[  408.198323][T11782]  loop6: unable to read partition table
[  408.208582][T11782] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  408.367510][ T5988] usb 4-1: selecting invalid altsetting 0
[  408.373385][ T5988] usb 4-1: Could not set interface, error -22
[  408.389956][ T5988] usb 4-1: USB disconnect, device number 58
[  408.553068][ T6011] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[  408.703115][ T6011] usb 6-1: Using ep0 maxpacket: 8
[  408.710097][ T6011] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  408.720360][ T6011] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9
[  408.732551][ T6011] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 30064, setting to 1024
[  408.745188][ T6011] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[  408.755601][ T6011] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  408.772056][ T6011] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  408.781481][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.790339][ T6011] usb 6-1: Product: syz
[  408.794591][ T6011] usb 6-1: Manufacturer: syz
[  408.799283][ T6011] usb 6-1: SerialNumber: syz
[  408.807813][T11788] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[  408.816000][T11788] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[  408.826155][ T6011] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  408.835928][ T6011] usbtest 6-1:1.0: Linux user mode ISO test driver
[  408.842862][ T6011] usbtest 6-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  408.996544][T11797] FAULT_INJECTION: forcing a failure.
[  408.996544][T11797] name failslab, interval 1, probability 0, space 0, times 1
[  409.013573][T11797] CPU: 0 UID: 0 PID: 11797 Comm: syz.3.1630 Not tainted syzkaller #0 PREEMPT(full) 
[  409.013609][T11797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  409.013620][T11797] Call Trace:
[  409.013629][T11797]  <TASK>
[  409.013637][T11797]  dump_stack_lvl+0x189/0x250
[  409.013660][T11797]  ? __pfx____ratelimit+0x10/0x10
[  409.013682][T11797]  ? __pfx_dump_stack_lvl+0x10/0x10
[  409.013700][T11797]  ? __pfx__printk+0x10/0x10
[  409.013731][T11797]  ? __pfx___might_resched+0x10/0x10
[  409.013758][T11797]  should_fail_ex+0x414/0x560
[  409.013788][T11797]  should_failslab+0xa8/0x100
[  409.013813][T11797]  __kmalloc_noprof+0xcb/0x7f0
[  409.013832][T11797]  ? kfree+0x4d/0x6d0
[  409.013847][T11797]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  409.013867][T11797]  tomoyo_realpath_from_path+0xe3/0x5d0
[  409.013886][T11797]  ? tomoyo_domain+0xd9/0x130
[  409.013911][T11797]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  409.013936][T11797]  tomoyo_path_number_perm+0x1e8/0x5a0
[  409.013964][T11797]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  409.014029][T11797]  ? __fget_files+0x2a/0x420
[  409.014059][T11797]  ? __fget_files+0x3a0/0x420
[  409.014082][T11797]  ? __fget_files+0x2a/0x420
[  409.014110][T11797]  security_file_ioctl+0xcb/0x2d0
[  409.014137][T11797]  __se_sys_ioctl+0x47/0x170
[  409.014161][T11797]  do_syscall_64+0xfa/0xfa0
[  409.014181][T11797]  ? lockdep_hardirqs_on+0x9c/0x150
[  409.014201][T11797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.014220][T11797]  ? clear_bhb_loop+0x60/0xb0
[  409.014242][T11797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.014260][T11797] RIP: 0033:0x7f9c90f8eba9
[  409.014277][T11797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.014294][T11797] RSP: 002b:00007f9c91d3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  409.014314][T11797] RAX: ffffffffffffffda RBX: 00007f9c911d5fa0 RCX: 00007f9c90f8eba9
[  409.014327][T11797] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004
[  409.014339][T11797] RBP: 00007f9c91d3b090 R08: 0000000000000000 R09: 0000000000000000
[  409.014350][T11797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  409.014362][T11797] R13: 00007f9c911d6038 R14: 00007f9c911d5fa0 R15: 00007ffc5de19008
[  409.014394][T11797]  </TASK>
[  409.014403][T11797] ERROR: Out of memory at tomoyo_realpath_from_path.
[  409.042449][ T6011] usb 6-1: USB disconnect, device number 124
[  409.095457][T10232] wlan1: Trigger new scan to find an IBSS to join
[  409.463164][ T5920] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  409.593162][ T5920] usb 4-1: device descriptor read/64, error -71
[  409.833165][ T5920] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[  409.963126][ T5920] usb 4-1: device descriptor read/64, error -71
[  410.074105][ T5920] usb usb4-port1: attempt power cycle
[  410.413064][ T5920] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[  410.434142][ T5920] usb 4-1: device descriptor read/8, error -71
[  410.665780][    T9] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[  410.673441][ T5920] usb 4-1: new full-speed USB device number 62 using dummy_hcd
[  410.693971][ T5920] usb 4-1: device descriptor read/8, error -71
[  410.805290][ T5920] usb usb4-port1: unable to enumerate USB device
[  410.836345][    T9] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  410.844980][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.858117][    T9] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  410.867368][    T9] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  410.875760][    T9] usb 6-1: Manufacturer: syz
[  410.885820][    T9] usb 6-1: config 0 descriptor??
[  410.945696][    T9] rc_core: IR keymap rc-hauppauge not found
[  410.952784][    T9] Registered IR keymap rc-empty
[  410.958991][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  410.970738][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input46
[  411.101322][    T9] usb 6-1: USB disconnect, device number 125
[  411.258341][T11826] FAULT_INJECTION: forcing a failure.
[  411.258341][T11826] name failslab, interval 1, probability 0, space 0, times 0
[  411.272904][T11826] CPU: 0 UID: 0 PID: 11826 Comm: syz.0.1640 Not tainted syzkaller #0 PREEMPT(full) 
[  411.272933][T11826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  411.272944][T11826] Call Trace:
[  411.272951][T11826]  <TASK>
[  411.272960][T11826]  dump_stack_lvl+0x189/0x250
[  411.272982][T11826]  ? __pfx____ratelimit+0x10/0x10
[  411.273004][T11826]  ? __pfx_dump_stack_lvl+0x10/0x10
[  411.273021][T11826]  ? __pfx__printk+0x10/0x10
[  411.273051][T11826]  ? __pfx___might_resched+0x10/0x10
[  411.273070][T11826]  ? fs_reclaim_acquire+0x7d/0x100
[  411.273097][T11826]  should_fail_ex+0x414/0x560
[  411.273128][T11826]  should_failslab+0xa8/0x100
[  411.273153][T11826]  __kmalloc_noprof+0xcb/0x7f0
[  411.273173][T11826]  ? tomoyo_encode+0x28b/0x550
[  411.273198][T11826]  tomoyo_encode+0x28b/0x550
[  411.273224][T11826]  tomoyo_realpath_from_path+0x58d/0x5d0
[  411.273245][T11826]  ? tomoyo_domain+0xd9/0x130
[  411.273267][T11826]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  411.273291][T11826]  tomoyo_path_number_perm+0x1e8/0x5a0
[  411.273317][T11826]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  411.273376][T11826]  ? __fget_files+0x2a/0x420
[  411.273399][T11826]  ? __fget_files+0x3a0/0x420
[  411.273418][T11826]  ? __fget_files+0x2a/0x420
[  411.273441][T11826]  security_file_ioctl+0xcb/0x2d0
[  411.273462][T11826]  __se_sys_ioctl+0x47/0x170
[  411.273481][T11826]  do_syscall_64+0xfa/0xfa0
[  411.273497][T11826]  ? lockdep_hardirqs_on+0x9c/0x150
[  411.273514][T11826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.273528][T11826]  ? clear_bhb_loop+0x60/0xb0
[  411.273545][T11826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.273558][T11826] RIP: 0033:0x7fcc8f38eba9
[  411.273572][T11826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  411.273591][T11826] RSP: 002b:00007fcc902bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  411.273607][T11826] RAX: ffffffffffffffda RBX: 00007fcc8f5d5fa0 RCX: 00007fcc8f38eba9
[  411.273618][T11826] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004
[  411.273626][T11826] RBP: 00007fcc902bd090 R08: 0000000000000000 R09: 0000000000000000
[  411.273635][T11826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  411.273644][T11826] R13: 00007fcc8f5d6038 R14: 00007fcc8f5d5fa0 R15: 00007ffd7ebf2e28
[  411.273668][T11826]  </TASK>
[  411.506952][    C0] vkms_vblank_simulate: vblank timer overrun
[  411.526419][T11826] ERROR: Out of memory at tomoyo_realpath_from_path.
[  411.869701][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1643'.
[  412.046539][T11842] dvmrp0: entered allmulticast mode
[  412.136981][  T153] wlan1: Creating new IBSS network, BSSID b6:3b:12:45:fb:5c
[  412.317888][T11852] openvswitch: netlink: EtherType 50a is less than min 600
[  412.362817][T11854] FAULT_INJECTION: forcing a failure.
[  412.362817][T11854] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  412.377699][T11854] CPU: 0 UID: 0 PID: 11854 Comm: syz.3.1651 Not tainted syzkaller #0 PREEMPT(full) 
[  412.377724][T11854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  412.377737][T11854] Call Trace:
[  412.377745][T11854]  <TASK>
[  412.377754][T11854]  dump_stack_lvl+0x189/0x250
[  412.377777][T11854]  ? __pfx____ratelimit+0x10/0x10
[  412.377798][T11854]  ? __pfx_dump_stack_lvl+0x10/0x10
[  412.377816][T11854]  ? __pfx__printk+0x10/0x10
[  412.377853][T11854]  should_fail_ex+0x414/0x560
[  412.377883][T11854]  _copy_to_user+0x31/0xb0
[  412.377909][T11854]  simple_read_from_buffer+0xe1/0x170
[  412.377938][T11854]  proc_fail_nth_read+0x1b3/0x220
[  412.377961][T11854]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  412.377985][T11854]  ? rw_verify_area+0x2a6/0x4d0
[  412.378006][T11854]  ? __lock_acquire+0xab9/0xd20
[  412.378024][T11854]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  412.378046][T11854]  vfs_read+0x200/0xa30
[  412.378067][T11854]  ? fdget_pos+0x247/0x320
[  412.378088][T11854]  ? __pfx___mutex_lock+0x10/0x10
[  412.378111][T11854]  ? __pfx_vfs_read+0x10/0x10
[  412.378134][T11854]  ? __fget_files+0x2a/0x420
[  412.378163][T11854]  ? __fget_files+0x3a0/0x420
[  412.378186][T11854]  ? __fget_files+0x2a/0x420
[  412.378220][T11854]  ksys_read+0x145/0x250
[  412.378241][T11854]  ? __fget_files+0x2a/0x420
[  412.378274][T11854]  ? __pfx_ksys_read+0x10/0x10
[  412.378301][T11854]  ? do_syscall_64+0xbe/0xfa0
[  412.378326][T11854]  do_syscall_64+0xfa/0xfa0
[  412.378345][T11854]  ? lockdep_hardirqs_on+0x9c/0x150
[  412.378365][T11854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.378384][T11854]  ? clear_bhb_loop+0x60/0xb0
[  412.378406][T11854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.378424][T11854] RIP: 0033:0x7f9c90f8d5bc
[  412.378441][T11854] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  412.378456][T11854] RSP: 002b:00007f9c91d3b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  412.378476][T11854] RAX: ffffffffffffffda RBX: 00007f9c911d5fa0 RCX: 00007f9c90f8d5bc
[  412.378490][T11854] RDX: 000000000000000f RSI: 00007f9c91d3b0a0 RDI: 0000000000000003
[  412.378502][T11854] RBP: 00007f9c91d3b090 R08: 0000000000000000 R09: 0000000000000000
[  412.378514][T11854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  412.378524][T11854] R13: 00007f9c911d6038 R14: 00007f9c911d5fa0 R15: 00007ffc5de19008
[  412.378557][T11854]  </TASK>
[  412.618020][    C0] vkms_vblank_simulate: vblank timer overrun
[  412.625949][ T1211] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[  412.794183][ T1211] usb 6-1: Using ep0 maxpacket: 8
[  412.801549][ T1211] usb 6-1: config 0 has an invalid interface number: 130 but max is 0
[  412.811116][ T1211] usb 6-1: config 0 has no interface number 0
[  412.838493][ T1211] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b
[  412.848057][ T1211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.867981][ T1211] usb 6-1: config 0 descriptor??
[  412.892021][ T1211] ftdi_sio 6-1:0.130: FTDI USB Serial Device converter detected
[  412.906466][ T1211] ftdi_sio ttyUSB0: unknown device type: 0x711b
[  412.912013][T11861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  412.925665][T11861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.097041][    T9] usb 6-1: USB disconnect, device number 126
[  413.115244][    T9] ftdi_sio 6-1:0.130: device disconnected
[  413.263183][ T1211] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  413.403397][ T1211] usb 4-1: device descriptor read/64, error -71
[  413.501598][T11865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  413.510936][T11865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.521869][T11865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1655'.
[  413.653403][ T1211] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  413.742697][T11867] block nbd2: Attempted send on invalid socket
[  413.750899][T11867] blk_print_req_error: 136 callbacks suppressed
[  413.750918][T11867] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  413.793173][ T1211] usb 4-1: device descriptor read/64, error -71
[  413.904248][ T1211] usb usb4-port1: attempt power cycle
[  413.983228][ T5988] usb 6-1: new full-speed USB device number 127 using dummy_hcd
[  414.137374][ T5988] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  414.146898][ T5988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.157525][ T5988] usb 6-1: config 0 descriptor??
[  414.169768][ T5988] cp210x 6-1:0.0: cp210x converter detected
[  414.231312][T11877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  414.241472][T11877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  414.249605][ T1211] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  414.251121][T11877] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1660'.
[  414.274088][T11880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  414.280471][ T1211] usb 4-1: device descriptor read/8, error -71
[  414.290213][T11880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  414.429032][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1657'.
[  414.452360][T11870] xt_l2tp: missing protocol rule (udp|l2tpip)
[  414.533199][ T1211] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  414.574849][ T1211] usb 4-1: device descriptor read/8, error -71
[  414.683663][ T1211] usb usb4-port1: unable to enumerate USB device
[  414.700939][T11870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  414.713478][T11870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  414.724088][ T5988] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71
[  414.733806][ T5988] cp210x 6-1:0.0: GPIO initialisation failed: -71
[  414.758129][ T5988] usb 6-1: cp210x converter now attached to ttyUSB0
[  414.785909][ T5988] usb 6-1: USB disconnect, device number 127
[  414.803450][ T5988] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  414.814329][ T5988] cp210x 6-1:0.0: device disconnected
[  415.359823][T11903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  415.370263][T11903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.168730][T11929] kvm: user requested TSC rate below hardware speed
[  416.180688][   T30] audit: type=1326 audit(1757860002.228:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11933 comm="syz.3.1677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c90f8eba9 code=0x0
[  416.665002][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'.
[  416.987853][T11956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  417.008260][T11956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  417.163226][ T6011] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  417.242416][T11965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  417.259670][T11965] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  417.325562][ T6011] usb 4-1: Using ep0 maxpacket: 32
[  417.332905][ T6011] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  417.358275][ T6011] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  417.367693][ T6011] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  417.378572][ T6011] usb 4-1: Product: syz
[  417.382843][ T6011] usb 4-1: Manufacturer: syz
[  417.387508][ T6011] usb 4-1: SerialNumber: syz
[  417.399986][ T6011] usb 4-1: config 0 descriptor??
[  417.405979][T11954] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  417.679391][ T5988] usb 4-1: USB disconnect, device number 67
[  417.942697][T11976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  417.954467][T11976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  418.813091][ T6011] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[  418.964944][ T6011] usb 4-1: config 0 has an invalid interface number: 48 but max is 0
[  418.973294][ T6011] usb 4-1: config 0 has no interface number 0
[  418.979606][ T6011] usb 4-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30
[  418.990700][ T6011] usb 4-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55
[  419.004779][ T6011] usb 4-1: config 0 interface 48 has no altsetting 0
[  419.015966][ T6011] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  419.025382][ T6011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  419.033612][ T6011] usb 4-1: Product: syz
[  419.037789][ T6011] usb 4-1: Manufacturer: syz
[  419.042399][ T6011] usb 4-1: SerialNumber: syz
[  419.054154][ T6011] usb 4-1: config 0 descriptor??
[  419.379502][T12013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.391540][T12013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.923216][ T1211] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  419.969820][T12026] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.980110][T12026] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  419.997141][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.000896][T12026] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  420.005138][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  420.075601][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1706'.
[  420.093056][ T1211] usb 6-1: Using ep0 maxpacket: 32
[  420.104512][ T1211] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  420.116769][ T1211] usb 6-1: config 0 has no interface number 0
[  420.123738][ T1211] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  420.136996][ T1211] usb 6-1: config 0 interface 196 has no altsetting 0
[  420.147981][ T1211] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  420.157184][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.165581][ T1211] usb 6-1: Product: syz
[  420.169767][ T1211] usb 6-1: Manufacturer: syz
[  420.174627][ T1211] usb 6-1: SerialNumber: syz
[  420.182022][ T1211] usb 6-1: config 0 descriptor??
[  420.187900][T12024] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[  420.812289][ T1211] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  420.832423][ T1211] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached
[  421.023045][ T5988] usb 6-1: USB disconnect, device number 2
[  421.083768][ T5988] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected
[  421.494651][ T6011] usbtest 4-1:0.48: FX2 device
[  421.499555][ T6011] usbtest 4-1:0.48: full-speed {control bulk-in bulk-out} tests (+alt)
[  421.558203][ T6011] usb 4-1: USB disconnect, device number 68
[  421.748920][T12062] syzkaller1: entered promiscuous mode
[  421.768691][T12062] syzkaller1: entered allmulticast mode
[  422.123249][ T1211] usb 4-1: new low-speed USB device number 69 using dummy_hcd
[  422.141028][T12079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.151084][T12079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.295119][ T1211] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  422.305753][ T1211] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  422.317033][ T1211] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  422.327049][ T1211] usb 4-1: config 0 interface 0 has no altsetting 0
[  422.334084][ T1211] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  422.343879][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.357269][ T1211] usb 4-1: config 0 descriptor??
[  422.638314][T12089] overlayfs: cannot append lower layer
[  422.774604][ T1211] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0
[  422.782931][ T1211] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0
[  422.795438][ T1211] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0
[  422.805394][ T1211] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0
[  422.816812][ T1211] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0
[  422.826630][ T1211] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0
[  422.838875][ T1211] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0
[  422.847933][T12095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.848077][ T1211] logitech-hidpp-device 0003:046D:C086.0030: unknown main item tag 0x0
[  422.864964][T12095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.883520][ T1211] logitech-hidpp-device 0003:046D:C086.0030: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0
[  422.956440][   T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  422.987403][T12070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.996942][T12070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  423.011677][ T1211] usb 4-1: USB disconnect, device number 69
[  423.124731][   T24] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  423.133815][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  423.144606][   T24] usb 6-1: config 0 has no interface number 0
[  423.155455][   T24] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  423.165598][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.174603][   T24] usb 6-1: Product: syz
[  423.178875][   T24] usb 6-1: Manufacturer: syz
[  423.184203][   T24] usb 6-1: SerialNumber: syz
[  423.190742][   T24] usb 6-1: config 0 descriptor??
[  423.198870][   T24] uvcvideo 6-1:0.64: probe with driver uvcvideo failed with error -22
[  423.403321][ T1211] usb 6-1: USB disconnect, device number 3
[  423.511731][T12102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  423.523545][T12102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  423.547329][T12102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  423.559871][T12102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  424.047114][   T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  424.178894][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1730'.
[  424.204403][   T24] usb 4-1: Using ep0 maxpacket: 32
[  424.222102][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  424.244493][   T24] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  424.254080][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.262390][   T24] usb 4-1: Product: syz
[  424.268025][   T24] usb 4-1: Manufacturer: syz
[  424.272818][   T24] usb 4-1: SerialNumber: syz
[  424.283264][   T24] usb 4-1: config 0 descriptor??
[  424.433826][ T6011] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  424.465038][T12131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1732'.
[  424.480447][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'.
[  424.500401][T12115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  424.512627][T12115] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  424.595971][T12136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  424.605600][T12136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  424.609618][ T6011] usb 6-1: unable to get BOS descriptor or descriptor too short
[  424.625186][ T6011] usb 6-1: not running at top speed; connect to a high speed hub
[  424.635089][ T6011] usb 6-1: config 10 has an invalid interface number: 12 but max is 0
[  424.649612][ T6011] usb 6-1: config 10 has no interface number 0
[  424.656131][ T6011] usb 6-1: config 10 interface 12 has no altsetting 0
[  424.667144][T12136] overlayfs: missing 'lowerdir'
[  424.677216][ T6011] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=59.5c
[  424.692254][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.708358][ T6011] usb 6-1: Product: syz
[  424.713168][ T6011] usb 6-1: Manufacturer: syz
[  424.718041][ T6011] usb 6-1: SerialNumber: syz
[  424.809107][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1735'.
[  424.821701][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1735'.
[  424.890641][T12142] netlink: 'syz.0.1736': attribute type 13 has an invalid length.
[  424.929416][T12142] 9pnet_fd: Insufficient options for proto=fd
[  424.952743][ T6011] kl5kusb105 6-1:10.12: KL5KUSB105D / PalmConnect converter detected
[  424.967692][ T6011] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  424.981809][ T6011] usb 6-1: USB disconnect, device number 4
[  424.994737][ T6011] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  425.006031][ T6011] kl5kusb105 6-1:10.12: device disconnected
[  425.335334][   T24] gs_usb 4-1:0.0: Couldn't send data format (err=-110)
[  425.342380][   T24] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110
[  426.010538][T12176] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1743'.
[  426.017065][T12177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.052064][ T5869] Bluetooth: hci2: unexpected event for opcode 0x671c
[  426.060662][T12180] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  426.067662][T12180] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  426.074582][T12180] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  426.082163][T12180] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  426.088979][T12180] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  426.098256][T12180] comedi comedi3: 8255: I/O port conflict (0xe,4)
[  426.104971][T12180] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  426.112760][T12180] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  426.119731][T12180] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  426.126520][T12180] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  426.133716][T12180] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  426.140850][T12180] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  426.147848][T12180] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  426.154806][T12180] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  426.163326][T12180] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  426.171250][T12180] comedi comedi3: 8255: I/O port conflict (0xa,4)
[  426.178566][T12180] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4)
[  426.187472][T12180] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  426.803994][   T24] usb 4-1: USB disconnect, device number 70
[  427.003078][ T1211] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  427.019923][T12224] overlayfs: empty lowerdir
[  427.153667][ T1211] usb 6-1: device descriptor read/64, error -71
[  427.330955][T12236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  427.341542][T12236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  427.423068][ T1211] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  427.563289][ T1211] usb 6-1: device descriptor read/64, error -71
[  427.674048][ T1211] usb usb6-port1: attempt power cycle
[  427.956128][T12243] netlink: 'syz.0.1760': attribute type 28 has an invalid length.
[  428.025748][ T1211] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  428.054502][ T1211] usb 6-1: device descriptor read/8, error -71
[  428.293082][ T1211] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  428.313794][ T1211] usb 6-1: device descriptor read/8, error -71
[  428.424926][ T1211] usb usb6-port1: unable to enumerate USB device
[  428.984951][T12262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.994417][T12262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.540083][T12265] overlayfs: failed to set uuid (542/file1, err=-1); falling back to uuid=null.
[  429.549286][T12265] overlayfs: failed to verify upper root origin
[  429.590535][T12267] comedi comedi0: Minor 3 specified more than once!
[  429.599337][T12267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  429.611433][T12267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.690994][T12269] block nbd5: Attempted send on invalid socket
[  429.699882][T12269] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  429.716079][T12269] hfs: can't find a HFS filesystem on dev nbd5
[  429.874126][T12273] support for the xor transformation has been removed.
[  429.886716][ T5233] buffer_io_error: 37 callbacks suppressed
[  429.886727][ T5233] Buffer I/O error on dev loop6, logical block 0, async page read
[  429.901088][ T5233] Buffer I/O error on dev loop6, logical block 0, async page read
[  429.909210][ T5233] Buffer I/O error on dev loop6, logical block 0, async page read
[  429.917728][ T5233] Buffer I/O error on dev loop6, logical block 0, async page read
[  429.926655][ T5233] Buffer I/O error on dev loop6, logical block 0, async page read
[  429.937276][ T5233] Buffer I/O error on dev loop6, logical block 0, async page read
[  429.947828][ T5233] Buffer I/O error on dev loop6, logical block 0, async page read
[  429.956217][ T5233] Buffer I/O error on dev loop6, logical block 0, async page read
[  429.964497][ T5233] ldm_validate_partition_table(): Disk read failed.
[  429.971990][ T5233] Buffer I/O error on dev loop6, logical block 0, async page read
[  429.984684][ T5233] Buffer I/O error on dev loop6, logical block 0, async page read
[  429.993027][ T5233] Dev loop6: unable to read RDB block 0
[  429.999298][ T5233]  loop6: unable to read partition table
[  430.353400][ T1211] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  430.365491][T12287] netlink: 'syz.0.1773': attribute type 3 has an invalid length.
[  430.433972][T12288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  430.443381][T12288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  430.503374][ T1211] usb 6-1: Using ep0 maxpacket: 8
[  430.510756][ T1211] usb 6-1: config 8 has an invalid interface number: 161 but max is 0
[  430.519125][ T1211] usb 6-1: config 8 has no interface number 0
[  430.525546][ T1211] usb 6-1: config 8 interface 161 has no altsetting 0
[  430.534930][ T1211] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=60.da
[  430.544362][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.552506][ T1211] usb 6-1: Product: syz
[  430.556801][ T1211] usb 6-1: Manufacturer: syz
[  430.561489][ T1211] usb 6-1: SerialNumber: syz
[  430.786118][ T1211] net1080 6-1:8.161: probe with driver net1080 failed with error -22
[  430.799524][ T1211] usb 6-1: USB disconnect, device number 9
[  431.438261][T12314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.447333][T12314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  431.541920][T12319] fuseblk: Bad value for 'fd'
[  431.613424][ T5988] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  431.674334][T12325] netlink: 'syz.3.1786': attribute type 4 has an invalid length.
[  431.793053][ T5988] usb 6-1: Using ep0 maxpacket: 32
[  431.800342][ T5988] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  431.808788][ T5988] usb 6-1: config 0 has no interface number 0
[  431.816906][ T5988] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  431.829493][ T5988] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  431.838799][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.846879][ T5988] usb 6-1: Product: syz
[  431.851049][ T5988] usb 6-1: Manufacturer: syz
[  431.855806][ T5988] usb 6-1: SerialNumber: syz
[  431.862231][ T5988] usb 6-1: config 0 descriptor??
[  431.876771][ T5988] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  431.889788][ T5988] em28xx 6-1:0.132: Video interface 132 found:
[  431.963290][    T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  432.123255][    T9] usb 4-1: Using ep0 maxpacket: 32
[  432.130608][    T9] usb 4-1: config 0 has an invalid interface number: 28 but max is 0
[  432.139900][    T9] usb 4-1: config 0 has no interface number 0
[  432.153122][    T9] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=3f.37
[  432.170407][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.179289][    T9] usb 4-1: Product: syz
[  432.184468][    T9] usb 4-1: Manufacturer: syz
[  432.189241][    T9] usb 4-1: SerialNumber: syz
[  432.213240][    T9] usb 4-1: config 0 descriptor??
[  432.234139][    T9] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[  432.240749][    T9] command write [95] error -22
[  432.271873][ T5988] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  432.513419][    T9] usb 4-1: USB disconnect, device number 71
[  432.601424][ T5869] Bluetooth: hci3: unexpected event for opcode 0x2019
[  432.923179][ T5988] em28xx 6-1:0.132: failed to read eeprom (err=-110)
[  432.932178][ T5988] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110]
[  433.154783][T12310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.164181][T12310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.234701][ T5988] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  433.242746][ T5988] em28xx 6-1:0.132: analog set to bulk mode.
[  433.250539][ T5948] em28xx 6-1:0.132: Registering V4L2 extension
[  433.271637][ T5988] usb 6-1: USB disconnect, device number 10
[  433.291806][ T5988] em28xx 6-1:0.132: Disconnecting em28xx
[  433.303121][    T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  433.379873][ T5948] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  433.387743][ T5948] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  433.395846][ T5948] em28xx 6-1:0.132: No AC97 audio processor
[  433.409601][ T5948] usb 6-1: Decoder not found
[  433.418867][ T5948] em28xx 6-1:0.132: failed to create media graph
[  433.425436][ T5948] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  433.436456][ T5948] em28xx 6-1:0.132: Remote control support is not available for this card.
[  433.445319][ T5988] em28xx 6-1:0.132: Closing input extension
[  433.462594][ T5988] em28xx 6-1:0.132: Freeing device
[  433.483536][    T9] usb 4-1: Using ep0 maxpacket: 32
[  433.490596][    T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  433.502743][    T9] usb 4-1: config 0 has no interface number 0
[  433.514729][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  433.525324][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.533546][    T9] usb 4-1: Product: syz
[  433.537890][    T9] usb 4-1: Manufacturer: syz
[  433.542513][    T9] usb 4-1: SerialNumber: syz
[  433.549912][    T9] usb 4-1: config 0 descriptor??
[  433.570313][    T9] smsc95xx v2.0.0
[  433.770509][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  433.785293][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  433.997734][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  434.010146][    T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32
[  434.472205][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1802'.
[  434.482184][T12377] nbd: illegal input index -1900544
[  434.883349][   T43] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  435.033085][   T43] usb 6-1: Using ep0 maxpacket: 16
[  435.040453][   T43] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  435.050332][   T43] usb 6-1: config 0 has no interface number 0
[  435.056920][   T43] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  435.070342][   T43] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  435.079863][   T43] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  435.088639][   T43] usb 6-1: Product: syz
[  435.092872][   T43] usb 6-1: SerialNumber: syz
[  435.105955][   T43] usb 6-1: config 0 descriptor??
[  435.118192][   T43] cm109 6-1:0.8: invalid payload size 255, expected 4
[  435.127477][   T43] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input47
[  435.585484][    C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71
[  435.593138][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  435.600824][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  435.608342][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  435.617181][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  435.625188][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  435.633149][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  435.640591][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  435.648532][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  435.654945][T12388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.655901][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  435.671784][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  435.672274][T12388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.689078][   T24] usb 6-1: USB disconnect, device number 11
[  435.695491][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  435.712363][   T24] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  435.876400][T12390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1807'.
[  436.081528][ T5988] usb 4-1: USB disconnect, device number 72
[  436.290289][T12406] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.305579][T12406] buffer_io_error: 11 callbacks suppressed
[  436.305599][T12406] Buffer I/O error on dev nbd0, logical block 0, async page read
[  436.320427][T12406] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.329849][T12406] Buffer I/O error on dev nbd0, logical block 1, async page read
[  436.338465][T12406] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.351646][T12406] Buffer I/O error on dev nbd0, logical block 2, async page read
[  436.358330][T12409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.360630][T12406] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.379823][T12409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.382793][T12406] Buffer I/O error on dev nbd0, logical block 3, async page read
[  436.397328][T12406] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.407067][T12406] Buffer I/O error on dev nbd0, logical block 0, async page read
[  436.416013][T12406] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.426453][T12406] Buffer I/O error on dev nbd0, logical block 1, async page read
[  436.435507][T12406] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.445457][T12406] Buffer I/O error on dev nbd0, logical block 2, async page read
[  436.454414][T12406] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.463830][ T5988] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  436.471777][T12406] Buffer I/O error on dev nbd0, logical block 3, async page read
[  436.480529][T12406] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.490215][T12406] Buffer I/O error on dev nbd0, logical block 0, async page read
[  436.498704][T12406] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.508360][T12406] Buffer I/O error on dev nbd0, logical block 1, async page read
[  436.519894][T12406] ldm_validate_partition_table(): Disk read failed.
[  436.530923][T12406] Dev nbd0: unable to read RDB block 0
[  436.538846][T12406]  nbd0: unable to read partition table
[  436.587519][T12415] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  436.599929][T12415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.610331][T12415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.631156][ T5988] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  436.641437][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.650642][ T5988] usb 4-1: Product: syz
[  436.655253][ T5988] usb 4-1: Manufacturer: syz
[  436.659874][ T5988] usb 4-1: SerialNumber: syz
[  436.667187][ T5988] usb 4-1: config 0 descriptor??
[  436.675530][ T5988] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  437.167026][T12418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.176442][T12418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.722671][T12425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.732760][T12425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  438.276063][T12438] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1824'.
[  438.287968][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  438.303356][T12438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.312107][T12438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  438.383133][   T43] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  438.522706][T12438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.532071][T12438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  438.540195][   T43] usb 6-1: Using ep0 maxpacket: 16
[  438.550045][   T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  438.563134][   T43] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  438.572592][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.583143][   T43] usb 6-1: config 0 descriptor??
[  438.595688][   T43] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input48
[  438.791408][ T5218] bcm5974 6-1:0.0: could not read from device
[  438.805248][   T43] bcm5974 6-1:0.0: could not read from device
[  438.814830][ T5218] bcm5974 6-1:0.0: could not read from device
[  438.829196][   T43] input: failed to attach handler mousedev to device input48, error: -5
[  438.847580][ T5218] bcm5974 6-1:0.0: could not read from device
[  438.853699][   T43] usb 6-1: USB disconnect, device number 12
[  439.139375][ T5988] usb 4-1: USB disconnect, device number 73
[  439.503152][ T5988] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  439.663213][ T5988] usb 4-1: Using ep0 maxpacket: 8
[  439.669971][T12454] can0: slcan on ttyS3.
[  439.681135][ T5988] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[  439.694226][ T5988] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  439.714949][ T5988] usb 4-1: config 0 interface 0 has no altsetting 0
[  439.733380][ T5988] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  439.746924][T12454] can0 (unregistered): slcan off ttyS3.
[  439.753791][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.773318][ T5988] usb 4-1: config 0 descriptor??
[  440.208802][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  440.308801][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  440.318658][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  440.485281][    T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  440.536503][ T5988] gembird 0003:11FF:3331.0031: hidraw0: USB HID vb.f6 Device [HID 11ff:3331] on usb-dummy_hcd.3-1/input0
[  440.667064][    T9] usb 6-1: Using ep0 maxpacket: 8
[  440.701335][    T9] usb 6-1: config 4 has an invalid interface number: 20 but max is 0
[  440.703932][   T43] usb 4-1: USB disconnect, device number 74
[  440.737484][    T9] usb 6-1: config 4 has no interface number 0
[  440.750918][    T9] usb 6-1: config 4 interface 20 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  440.776249][    T9] usb 6-1: config 4 interface 20 has no altsetting 0
[  440.792552][    T9] usb 6-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ba.e6
[  440.817502][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.840308][    T9] usb 6-1: Product: syz
[  440.845609][T12490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  440.855890][T12490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  440.858069][    T9] usb 6-1: Manufacturer: syz
[  440.872048][T12490] cgroup: Unknown subsys name 'cpuset'
[  440.891730][    T9] usb 6-1: SerialNumber: syz
[  441.137287][    T9] HFC-S_USB 6-1:4.20: probe with driver HFC-S_USB failed with error -5
[  441.163371][    T9] usb 6-1: USB disconnect, device number 13
[  441.536805][T12517] 9pnet_fd: p9_fd_create_unix (12517): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  441.599072][T12519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  441.610485][T12519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  441.626595][T12519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  441.636083][T12519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  441.696891][T12522] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  442.211657][T12531] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  442.523102][   T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  442.633075][   T43] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  442.675037][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  442.685070][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  442.698077][   T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  442.707846][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.716411][   T24] usb 6-1: Product: syz
[  442.720797][   T24] usb 6-1: Manufacturer: syz
[  442.725541][   T24] usb 6-1: SerialNumber: syz
[  442.731975][   T24] usb 6-1: config 0 descriptor??
[  442.741732][   T24] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00
[  442.795076][   T43] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  442.804548][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.823011][   T43] usb 4-1: config 0 descriptor??
[  442.941210][T12534] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma?
[  442.956773][T12534] bad cache= option: none
@

[  442.956773][T12534] 
[  442.964360][T12534] CIFS: VFS: bad cache= option: none
@

[  442.998121][   T24] usb 6-1: USB disconnect, device number 14
[  443.126339][T12543] ceph: No source
[  443.220101][T12548] bond0: entered promiscuous mode
[  443.231083][T12548] 
[  443.233451][T12548] ======================================================
[  443.240569][T12548] WARNING: possible circular locking dependency detected
[  443.247620][T12548] syzkaller #0 Not tainted
[  443.252056][T12548] ------------------------------------------------------
[  443.259204][T12548] syz.0.1849/12548 is trying to acquire lock:
[  443.265625][T12548] ffffffff8faaa518 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  443.275351][T12548] 
[  443.275351][T12548] but task is already holding lock:
[  443.282899][T12548] ffffffff8faaa4b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  443.292589][T12548] 
[  443.292589][T12548] which lock already depends on the new lock.
[  443.292589][T12548] 
[  443.303088][T12548] 
[  443.303088][T12548] the existing dependency chain (in reverse order) is:
[  443.312291][T12548] 
[  443.312291][T12548] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  443.320385][T12548]        lock_acquire+0x120/0x360
[  443.325445][T12548]        _raw_spin_lock_bh+0x36/0x50
[  443.330837][T12548]        nr_rt_ioctl+0x390/0xd50
[  443.336068][T12548]        sock_do_ioctl+0xdc/0x300
[  443.341269][T12548]        sock_ioctl+0x576/0x790
[  443.346439][T12548]        __se_sys_ioctl+0xfc/0x170
[  443.351783][T12548]        do_syscall_64+0xfa/0xfa0
[  443.356833][T12548]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.363701][T12548] 
[  443.363701][T12548] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  443.371890][T12548]        lock_acquire+0x120/0x360
[  443.377462][T12548]        _raw_spin_lock_bh+0x36/0x50
[  443.383097][T12548]        nr_rt_ioctl+0x193/0xd50
[  443.388053][T12548]        sock_do_ioctl+0xdc/0x300
[  443.393182][T12548]        sock_ioctl+0x576/0x790
[  443.398222][T12548]        __se_sys_ioctl+0xfc/0x170
[  443.403465][T12548]        do_syscall_64+0xfa/0xfa0
[  443.408647][T12548]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.415200][T12548] 
[  443.415200][T12548] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  443.423213][T12548]        validate_chain+0xb9b/0x2140
[  443.428694][T12548]        __lock_acquire+0xab9/0xd20
[  443.434108][T12548]        lock_acquire+0x120/0x360
[  443.439258][T12548]        _raw_spin_lock_bh+0x36/0x50
[  443.444627][T12548]        nr_rt_device_down+0xa9/0x720
[  443.450116][T12548]        nr_device_event+0x137/0x150
[  443.455522][T12548]        notifier_call_chain+0x1b6/0x3e0
[  443.461179][T12548]        netif_close_many+0x29c/0x410
[  443.467216][T12548]        netif_close+0x158/0x210
[  443.472263][T12548]        dev_close+0x10a/0x220
[  443.477142][T12548]        bpq_device_event+0x377/0x6a0
[  443.482647][T12548]        notifier_call_chain+0x1b6/0x3e0
[  443.488395][T12548]        __dev_notify_flags+0x18d/0x2e0
[  443.494227][T12548]        netif_change_flags+0xe8/0x1a0
[  443.500059][T12548]        dev_change_flags+0x130/0x260
[  443.505807][T12548]        dev_ioctl+0x7b4/0x1150
[  443.510893][T12548]        sock_do_ioctl+0x22c/0x300
[  443.516024][T12548]        sock_ioctl+0x576/0x790
[  443.520892][T12548]        __se_sys_ioctl+0xfc/0x170
[  443.526033][T12548]        do_syscall_64+0xfa/0xfa0
[  443.531145][T12548]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.538245][T12548] 
[  443.538245][T12548] other info that might help us debug this:
[  443.538245][T12548] 
[  443.548853][T12548] Chain exists of:
[  443.548853][T12548]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  443.548853][T12548] 
[  443.563305][T12548]  Possible unsafe locking scenario:
[  443.563305][T12548] 
[  443.571428][T12548]        CPU0                    CPU1
[  443.576875][T12548]        ----                    ----
[  443.582335][T12548]   lock(nr_neigh_list_lock);
[  443.587105][T12548]                                lock(&nr_node->node_lock);
[  443.595007][T12548]                                lock(nr_neigh_list_lock);
[  443.602311][T12548]   lock(nr_node_list_lock);
[  443.606942][T12548] 
[  443.606942][T12548]  *** DEADLOCK ***
[  443.606942][T12548] 
[  443.615443][T12548] 2 locks held by syz.0.1849/12548:
[  443.620643][T12548]  #0: ffffffff8f955108 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  443.629862][T12548]  #1: ffffffff8faaa4b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  443.641527][T12548] 
[  443.641527][T12548] stack backtrace:
[  443.647873][T12548] CPU: 1 UID: 0 PID: 12548 Comm: syz.0.1849 Not tainted syzkaller #0 PREEMPT(full) 
[  443.647895][T12548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  443.647905][T12548] Call Trace:
[  443.647914][T12548]  <TASK>
[  443.647923][T12548]  dump_stack_lvl+0x189/0x250
[  443.647942][T12548]  ? __pfx_dump_stack_lvl+0x10/0x10
[  443.647956][T12548]  ? __pfx__printk+0x10/0x10
[  443.647976][T12548]  ? print_lock_name+0xde/0x100
[  443.647996][T12548]  print_circular_bug+0x2ee/0x310
[  443.648018][T12548]  check_noncircular+0x134/0x160
[  443.648038][T12548]  validate_chain+0xb9b/0x2140
[  443.648058][T12548]  ? rt6_disable_ip+0x6b3/0x720
[  443.648076][T12548]  ? __lock_acquire+0xab9/0xd20
[  443.648092][T12548]  __lock_acquire+0xab9/0xd20
[  443.648109][T12548]  ? nr_rt_device_down+0xa9/0x720
[  443.648123][T12548]  lock_acquire+0x120/0x360
[  443.648137][T12548]  ? nr_rt_device_down+0xa9/0x720
[  443.648154][T12548]  ? nr_rt_device_down+0xa9/0x720
[  443.648168][T12548]  _raw_spin_lock_bh+0x36/0x50
[  443.648183][T12548]  ? nr_rt_device_down+0xa9/0x720
[  443.648197][T12548]  nr_rt_device_down+0xa9/0x720
[  443.648211][T12548]  ? do_raw_spin_unlock+0x122/0x240
[  443.648248][T12548]  nr_device_event+0x137/0x150
[  443.648269][T12548]  notifier_call_chain+0x1b6/0x3e0
[  443.648296][T12548]  netif_close_many+0x29c/0x410
[  443.648314][T12548]  ? __pfx_netif_close_many+0x10/0x10
[  443.648331][T12548]  ? bond_netdev_event+0x227/0xe80
[  443.648349][T12548]  netif_close+0x158/0x210
[  443.648363][T12548]  ? __pfx_netif_close+0x10/0x10
[  443.648377][T12548]  ? tun_device_event+0x77/0x1030
[  443.648392][T12548]  ? lockdep_hardirqs_on+0x9c/0x150
[  443.648411][T12548]  dev_close+0x10a/0x220
[  443.648429][T12548]  bpq_device_event+0x377/0x6a0
[  443.648451][T12548]  notifier_call_chain+0x1b6/0x3e0
[  443.648471][T12548]  __dev_notify_flags+0x18d/0x2e0
[  443.648490][T12548]  ? __pfx___dev_notify_flags+0x10/0x10
[  443.648507][T12548]  ? __dev_change_flags+0x4cc/0x6d0
[  443.648526][T12548]  ? __pfx___dev_change_flags+0x10/0x10
[  443.648546][T12548]  ? irqentry_exit+0x74/0x90
[  443.648562][T12548]  ? lockdep_hardirqs_on+0x9c/0x150
[  443.648578][T12548]  netif_change_flags+0xe8/0x1a0
[  443.648598][T12548]  dev_change_flags+0x130/0x260
[  443.648616][T12548]  dev_ioctl+0x7b4/0x1150
[  443.648634][T12548]  sock_do_ioctl+0x22c/0x300
[  443.648648][T12548]  ? __pfx_sock_do_ioctl+0x10/0x10
[  443.648667][T12548]  sock_ioctl+0x576/0x790
[  443.648680][T12548]  ? __pfx_sock_ioctl+0x10/0x10
[  443.648693][T12548]  ? __fget_files+0x3a0/0x420
[  443.648714][T12548]  ? __fget_files+0x2a/0x420
[  443.648735][T12548]  ? bpf_lsm_file_ioctl+0x9/0x20
[  443.648748][T12548]  ? __pfx_sock_ioctl+0x10/0x10
[  443.648761][T12548]  __se_sys_ioctl+0xfc/0x170
[  443.648779][T12548]  do_syscall_64+0xfa/0xfa0
[  443.648795][T12548]  ? lockdep_hardirqs_on+0x9c/0x150
[  443.648811][T12548]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.648826][T12548]  ? clear_bhb_loop+0x60/0xb0
[  443.648842][T12548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.648856][T12548] RIP: 0033:0x7fcc8f38eba9
[  443.648873][T12548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  443.648886][T12548] RSP: 002b:00007fcc902bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  443.648902][T12548] RAX: ffffffffffffffda RBX: 00007fcc8f5d5fa0 RCX: 00007fcc8f38eba9
[  443.648913][T12548] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 0000000000000005
[  443.648924][T12548] RBP: 00007fcc8f411e19 R08: 0000000000000000 R09: 0000000000000000
[  443.648933][T12548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  443.648942][T12548] R13: 00007fcc8f5d6038 R14: 00007fcc8f5d5fa0 R15: 00007ffd7ebf2e28
[  443.648958][T12548]  </TASK>
[  444.086431][   T43] usb 4-1: Cannot set MAC address
[  444.091646][   T43] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  444.106238][   T43] usb 4-1: USB disconnect, device number 75