last executing test programs:

14m35.246163893s ago: executing program 32 (id=2152):
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
setregid(r1, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881ab, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2000000, 0x2002)
write$evdev(r6, &(0x7f0000000040)=[{{0x77359400}, 0x11, 0x2, 0x40000000}], 0x18)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000049"])
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xd10}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io(r9, 0x0, 0x0)

8m18.950096884s ago: executing program 2 (id=4304):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = userfaultfd(0x801)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08000300"/18, @ANYRES32=0x0, @ANYBLOB="080005000a"], 0x24}, 0x1, 0x0, 0x0, 0x404c004}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c)
r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x208}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x8000006})
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000000)='Ack*t+', 0x6}, {&(0x7f0000000100)="6c57e10420d4c2a6ad2d30149d3f05d36eba2e7e43c0ab4d1eca457b9c4e3d6d329bdb40c5457889bd15448ce43d39415bf0be130aed7b9b1e653585", 0x3c}, {&(0x7f0000000140)="7b173d07cd25c29d2ee3bb2363d90dd1ff52705093ff6c3dc164f41fe4a6a888bd99b0149d19a50481e2f51ac2df91deebf20800a85e9ec155125107076c441a441ef34092a71641c993666436f95d9df388fc5e57eadca0986f6c6e1f6eedea45abc64f48cc16957a93d5e8538f865dc6db3927905cc99d55971383f68ac0a3fe00e93a6de173d9ea121a969aa247ce4edb4c84876b625a44311736d1801e92d3ba9913f18dc378ba5d1dbd144fef3d73d7715490fc7867f5b33ee18e31474cf2ec303ec8cc981c9f7ed1dd07efeff73d3d98bb28", 0xd5}, {&(0x7f0000000240)="1ee93822f58ad92389e1b5e5aebde7d55e2bd9b9cb5d3f94c5cacbb2e71e44c8005256a2c2a346495b732b7cd6827d6ce0973349d7fc210dc4a2ea117aff23171683a3", 0x43}, {&(0x7f00000002c0)="a2fdc0a79494e5ba2197fd130f6c0548b9c7c792b110be9a29cca473f8429a03b5712db240f439ad52e77c683ec3fb729df60ec263f53c2d8f6bd515", 0x3c}, {&(0x7f0000000300)="da6bb609ee07b2b7997893c3564b672e8f40bbbf515dfad52e7aa6c21318e06afc5f61506f8711a94d257ac4bd15de0274535a3aef239713b8a4190b612fe6003d400ae31aafc0598480607ce2a212cfa3e2196161c6ef9fc571cab88fb480b84aa8ae60653ff47e1832f557c5649d19b7ff79870e826dea86643742dd1a58def876ca6ef188e72c02ef1ff3cabcf94a24f0e1f1dfdfcdd5481eeb06f74a65812c7665e71de652e106998cb2c4eab33850ae7b09", 0xb4}, {&(0x7f00000003c0)="733289bfd04bc2a77540945d7a1c83ef324fc2c9c444b3b70b1b41756b7bd612d8a6656fb6c8588a09548526f9636df2d60312b28ab9b88527d83cf6cd1d71", 0x3f}], 0x7, 0x7, 0x8)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103d39c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}})
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000000c0)="91a77a06919c84ad86e90e852bf8906ac30f6bb201a0cca85a", 0x19}], 0x1, 0xfffffeff, 0x3800000)

8m18.684197553s ago: executing program 2 (id=4305):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x74c}, 0x1, 0x0, 0x0, 0x814}, 0x800)

8m18.597525638s ago: executing program 2 (id=4306):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000))
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
read$dsp(r1, &(0x7f00000000c0)=""/105, 0x69)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0xa481)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000300)={0x11, 0x6, r4}, 0x14)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000280)={0x4, 0x4}, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x21, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

8m18.016061609s ago: executing program 2 (id=4312):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460008003400386b9bd5080026006c09e703300051802c000080200005"], 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

8m17.968486228s ago: executing program 2 (id=4313):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000008c0)={0x0, 0x6fe}, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000018008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)

8m17.100034928s ago: executing program 2 (id=4316):
r0 = userfaultfd(0x800)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

8m1.808826867s ago: executing program 33 (id=4316):
r0 = userfaultfd(0x800)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

4m48.875818554s ago: executing program 1 (id=5546):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000480))
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
close_range(r1, r1, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x0, 0x31, 0x4c, {0x10, 0xa, "0714"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040}, 0x4000)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xc9, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x0, 0x5241, 0x0, 0x4, 0x5, 0x6, 0x0, 0x40000, 0x767e, 0x80, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0xff, 0x0, 0x0, 0x2000000000000000, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x100000001]})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x4, 0x1f, 0x10, 0x80, 0x100, &(0x7f0000000040)="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"})

4m46.878976095s ago: executing program 1 (id=5557):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0)

4m46.65456529s ago: executing program 1 (id=5559):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x1}, 0xe)
listen(r1, 0x90006)
close_range(r0, 0xffffffffffffffff, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x3}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004500)=ANY=[@ANYBLOB="340000003f000701fefffffffeffffff01"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xc000)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
r5 = syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRESOCT=r2], 0x0)
syz_usb_control_io$cdc_ecm(r5, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0)
mq_open(&(0x7f0000000680)='netdevsim\x00', 0x802, 0x0, &(0x7f00000006c0)={0xffffffffffffff5c, 0x7, 0xa9a, 0x603b})
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000740)={0x800, 0x0, {0xffffffffffffffff}, {<r8=>0x0}, 0x2, 0x2910dfa8})
lstat(&(0x7f0000000780)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x4000)
setresuid(r10, r10, 0x0)
setresuid(r8, r9, r10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r11, 0x11, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x20, 0x3, 0xc0, {0xc0, 0x21, "727df2ff499b9b01fc1a552b311f75cc48e4489a75c0ea747c11cfc95ce4397e5f55c8de856e2380c09ae7732ba74bc4358da14c0a5c3e93a6a50f56b3274f72d1a0bd6056d112d9f37bc3ff12ce4f4037962d91ea0944a91c22f852ea18b676c61fb6bfae38ecf7d136ffec6385738a45c736cad771b426a80eafb995710d7acb3f3d8730572edf992cb23a92d03d98bb9b266fd9a4ea828022debf3a7040bcfb14f9bb1ee1e4de1a6b80629e801c06c740058eb6856c40a34eed097b1b"}}, &(0x7f0000000340)={0x0, 0x3, 0x54, @string={0x54, 0x3, "ba46683d4b88a3d4d32e5ab7510e339e0c64d6c761f54d857516d8f7b86498c05fb7b909107b35425eb4fc07852c3bf58b6b7f9928c855b47254a981234f4bfe76d17173356098f859ca3590d6c65088fccd"}}}, &(0x7f0000000600)={0x44, &(0x7f00000003c0)={0x20, 0x11, 0x79, "5ea47c706bac6fc5480b16998286174b26b2f11ba7e708eb85ac4df0e4d3442f0fae1536fd6fb07d5bf13a829604ccc46765099bcb640f937fae399ee6e31bbd3e229aefdfee9a46277b6084d044085e9e46c0e4cc5668e8dc1924fa7f6e37c32230c264c9b3e58f165748a73b23f3de69a4d939c9fd562852"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000004c0)={0x20, 0x81, 0x3, "238175"}, &(0x7f0000000500)={0x20, 0x82, 0x3, "938553"}, &(0x7f0000000540)={0x20, 0x83, 0x2, "1ff0"}, &(0x7f0000000580)={0x20, 0x84, 0x2, "c076"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "bacc0d"}})

4m46.057837148s ago: executing program 1 (id=5562):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)={0x0, 0x9, 0xd15})
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0)

4m45.992384495s ago: executing program 1 (id=5563):
r0 = syz_usb_connect(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7, 0x400})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f00000003c0)={0x40, 0x31, 0x95, {0x95, 0x8, "9ad823604c36ae5fc1eee5a2792fa1f2d5375b2a7a1c59821261f968094ed8c251dbc44f4ed6758bb6d310c838d45f4f01a90af4ca32c7e0a87fd0b3f95f14d1c7516ae098845987be190c1d9469858c5485dae568aca5b180130690027b53620b0d4e6a6f95ce97f9e5061625cee1b3c03888537c47295e1a2fe948300b146b1c4972440706b433e9c3fe058606987ece3e05"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000000180)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x8, 'k9}h'}, @global=@item_4={0x3, 0x1, 0x0, "a33f71c4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8000, 0xf8, 0x1, {0x22, 0xb92}}}}, &(0x7f0000000c40)={0x2c, &(0x7f0000000480)={0x20, 0x0, 0x2f, "ff0291d4877b2319c92532d2c4cb9d90e2f9b9da1e5a93bfd4f2123ab51746a6fd108a2798025234e614cee10f0275f3f0fe94972881ebc619716d3775495a0b70ed4f36bf83e3e6b5007efaaac15460f26382092f0e41250aa5f615b44bcce7c25891d0c6d9acc87c3d9dc640fb750a1efaf6045ba24e9e1c0479abeaadadb5f62a9223"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000b40)={0x20, 0x1, 0x81, "a4b621bf7f168fc8cdf306a051c36c78f9f1c01561c2df3022d042ce2497029c9c1a1d1b0f16a131dda87e0cbdecf5466532f2e83e483ba7a3aba4c6067ac12052d3fa474f5aa582815c875efa1b39211b1989d9effb2d653b01d5a517ef809621bd6eebf1979cb528f8e6278b6af946c8e6ea61c7207516b38f5afac0b0fe3cb0"}, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0x80}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="16160400000094c161ee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getpid()
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0xd2e}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0xfffffffc, @remote, 0x1}, 0x1c)
shutdown(r3, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x5, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f0000000c80)={0x20, 0x30, 0x7e, {0x7e, 0xe, "e93734b1e7454d4d1f8b50035597142ec56bee8f7f9575b72845572233068101671a1a4435b5e919b4ea7fc57e627649eed772f155456b79119615c81cc91b57678936e09f83da9083e765254d07ab33ca11ca3af0a2d085baf7a73c4a153d33029aa6b6a85cb7d8dc4cc592192d17513a4fa9e613adfd659d3901543b68af859ea9e48e5d47615ff5aba35de344ec773958f290214a1984c1a81244caa3b09f33c6aeeb52b2d86cd892502e25cb84"}}, &(0x7f0000000240)={0x0, 0x3, 0xfffffffffffffd7e, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f00000009c0)={0x0, 0x34, 0x9f, "3f42fef8fb78bb574cef4a4556a73f3fc01513b19058fb6689aa1e7249d394781acc8a4d47fda447d0864db123e0269026ef9bea0dfdbae190c52c9f2eb2dce94448472ed2f61121a198a9d2540f81c031d30eff8a2cf48bc438b837c1e47ab5d207a05986f38cee3180d0aad70710edfef3e4800637e55dc897f3ed27c3bc4aa55ad1bd4b41a1bfe131422af7e420281a5e69afd5f4140dd4d57649672a40"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x90}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x43f5, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x6, 0x2, 0x9, 0x0, 0x200}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000880)={0x20, 0x87, 0x2, 0xc}, &(0x7f0000000a80)={0x20, 0x89, 0x2, 0x1}})
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000008c0)={0xe8d, 0x6, 0x4, 0xffffffff, 0x7})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000e4e20a9b0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x3, 0x0, 0x7, 0x49, 0x80, 0x7fffffff})

4m45.636189932s ago: executing program 1 (id=5564):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47bfff7, 0x41e20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0xfcffffffffff0700)

4m45.496796425s ago: executing program 34 (id=5564):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47bfff7, 0x41e20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0xfcffffffffff0700)

3m45.949832083s ago: executing program 6 (id=5837):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x80007ffe, @mcast2, 0x4}, 0x1c, 0x0}}], 0x1, 0x4000084)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r4, 0x0, 0x0)
pidfd_send_signal(r3, 0x37, &(0x7f0000000180)={0x8, 0x8, 0x9}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4)
connect$unix(r5, &(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e)
ptrace(0x10, r2)
ptrace$setopts(0x4200, r2, 0x58880000000, 0x300051)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000140)="8469b66f", 0x20, 0x0, 0x0, 0x0)

3m45.719917009s ago: executing program 6 (id=5838):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
write$binfmt_elf32(r1, &(0x7f0000000e40)=ANY=[], 0x158)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x68, 0xe, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x2a0, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x270, 0x3, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc9, 0x6, 0x1, 0x0, "fde80b91b72fa437c27b47f8e96f06a2e77483f1b7b24658a400e9ca482a88de2374e981725f0baf66ec00ecc9acdfb6e16259b6a31acbcc805fdb6044513c0db09a9e19b45799ce56a77dabe19cb180ee61ce20112f4f095e4cb88775a066a944222a625ae96af1afce02646d553a68adbad1fa8f3dbc5ea9047da508ef5e12cba8ef78f1052551aef5cbfc846112d2736286594eae1c86b3a96c58eae28155600335cef4847c6e353f701fd3f48e9dda292582965936e650412c1cecaa1cffb1437c98b9"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff8}]}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "8ce1677e3343e241f994522eb45a68aaf79e7c7d4c53c8f6b14e057a1a59f45accda398dc8b9fe8577c19abbf63d7590c64fd0dc726aca8c5f47b2d01c610d80acad066f2cc9606f81fa225e0c7d9c8d1c3241d7016b5681d4b0bd62982d527c7cb8a2df458af54ca5857dc0768165e4f7473ff76ec903c65fb634dfa6b559121913b0d9ad5f7f6d821b4f0c08952bc3c32f2ba1c9d74594c9"}]}]}, {0xe0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x9c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "1302a3d3596be284c900fcbe888878bf237bf323a13e97745bb35014715a9763f8be336a95d22bb0c49ec8cfaf18f32e6ae0f6db26e10925452a3cc58e4962c1e7a207157c8afe0d305c7848c9a3bccf109c4bb08cd9e4ab2e80a0e5fdd4634ae083c1114f586804f7cd21c716ecc64348cbb3621e51a8c5d1a17e1aa688accdd6"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}, @NFT_MSG_DELTABLE={0xac, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x7f, 0x6, "7aba14293c0b0793ddabf09d6c3cfab4ff3a3275532366a7a67ba43c9ed0d97037de20d84f07452c5b6df31a5bee021ef9f5439465ae065853deaada20f7dc50e4f3bf5201c48be2e175bb02c1ab6e5df47b8eae92c6810b4a4f9bea285f12d21f49a89bd576a13c46b9027c6f4ddd2dc638d2fb800197fa9e1f31"}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x414}, 0x1, 0x0, 0x0, 0x4004}, 0xc8010)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[], 0x1f0}, 0x1, 0x0, 0x0, 0x20040024}, 0x24020841)

3m45.617499956s ago: executing program 6 (id=5841):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x600}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x6000000000000, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]})

3m45.42711996s ago: executing program 6 (id=5842):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000000f06010800000000000002000008050001fa0600000006000b000300000015175572f13a6f05d0f8ba778c3389da0700f008382bdfb43858a584f932928f2ec5c93c65da033bbfa6c08831cd221f71804b9f2b3fed7b19722212eb51437bec625c7a2b23cf2c652f598430c68ec4e142449781c41a31c359fed75ba29150b9df6df754d4a8a53fd99b"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r1 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100300000008fc03d805408001020301090224000101041000090400080103016f43f14e0e6cbbe3020409210400a80122c80a09"], &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xe, 0x1, 0x7f, 0xff, 0x25}, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="6e04000000"], 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1007}}]})
syz_usb_ep_write(r2, 0x8, 0x5d, &(0x7f0000000480)="8c1f7045d99ebd88c6144678e5ef2a37dc0503bdd55d7cd11ef66296f4bbde7f2d98eaf3cb8d9b0a1182d3febe5fdb27e13efb7338328d0f47eec3eb1f8e31e79ee2b9a4d6068e84793dde9f0a4dd1ae23f9c73bac995d27d1f3e7353d")
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg1\x00', <r7=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r11=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', r11, 0x700, 0x0, 0xa5c, 0x6, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010102}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', <r12=>0x0, 0x80, 0x7, 0x4, 0xf8e, {{0x11, 0x4, 0x3, 0x0, 0x44, 0x66, 0x0, 0x3, 0x2f, 0x0, @local, @local, {[@noop, @ssrr={0x89, 0x7, 0x60, [@dev={0xac, 0x14, 0x14, 0x12}]}, @timestamp_prespec={0x44, 0xc, 0xe3, 0x3, 0xe, [{@remote, 0xf}]}, @generic={0x44, 0xc, "0bbeca93103e4da9783b"}, @generic={0x88, 0xe, "d3ddaea46a37c0e2e8984346"}]}}}}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'veth0_to_team\x00', <r13=>0x0})
r14 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r15 = socket(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', <r16=>0x0})
sendto$packet(r14, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r16, 0x1, 0x62}, 0x14)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=<r17=>0x0, &(0x7f0000000700)=0x4)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x1c0, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x2, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x1c0}}, 0x8000)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r6, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4)
recvmmsg(r6, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x2, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x9}]})
syz_usb_control_io$rtl8150(r1, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2992a3ef12c8ed51"]}, 0x0)

3m42.383172471s ago: executing program 6 (id=5857):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x0, [0xffffffbffffffe00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x200, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xc0]})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000114010025bd7000fedbdf25080008"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r0, {0x81}}, './file0\x00'})
ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x8001)

3m42.262320913s ago: executing program 6 (id=5858):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc4e, 0x4})
sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304)
syz_usb_connect(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000e24b420df2001006d970102030109025100010000100009047b000076a98700052406000105330002000d240f0101000000217c10000106241a40000005240100090524ab0f"], 0x0)

3m36.84008925s ago: executing program 5 (id=5873):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
write$binfmt_elf32(r1, &(0x7f0000000e40)=ANY=[], 0x158)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x68, 0xe, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x2a0, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x270, 0x3, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc9, 0x6, 0x1, 0x0, "fde80b91b72fa437c27b47f8e96f06a2e77483f1b7b24658a400e9ca482a88de2374e981725f0baf66ec00ecc9acdfb6e16259b6a31acbcc805fdb6044513c0db09a9e19b45799ce56a77dabe19cb180ee61ce20112f4f095e4cb88775a066a944222a625ae96af1afce02646d553a68adbad1fa8f3dbc5ea9047da508ef5e12cba8ef78f1052551aef5cbfc846112d2736286594eae1c86b3a96c58eae28155600335cef4847c6e353f701fd3f48e9dda292582965936e650412c1cecaa1cffb1437c98b9"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff8}]}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "8ce1677e3343e241f994522eb45a68aaf79e7c7d4c53c8f6b14e057a1a59f45accda398dc8b9fe8577c19abbf63d7590c64fd0dc726aca8c5f47b2d01c610d80acad066f2cc9606f81fa225e0c7d9c8d1c3241d7016b5681d4b0bd62982d527c7cb8a2df458af54ca5857dc0768165e4f7473ff76ec903c65fb634dfa6b559121913b0d9ad5f7f6d821b4f0c08952bc3c32f2ba1c9d74594c9"}]}]}, {0xe0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x9c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "1302a3d3596be284c900fcbe888878bf237bf323a13e97745bb35014715a9763f8be336a95d22bb0c49ec8cfaf18f32e6ae0f6db26e10925452a3cc58e4962c1e7a207157c8afe0d305c7848c9a3bccf109c4bb08cd9e4ab2e80a0e5fdd4634ae083c1114f586804f7cd21c716ecc64348cbb3621e51a8c5d1a17e1aa688accdd6"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}, @NFT_MSG_DELTABLE={0xac, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x7f, 0x6, "7aba14293c0b0793ddabf09d6c3cfab4ff3a3275532366a7a67ba43c9ed0d97037de20d84f07452c5b6df31a5bee021ef9f5439465ae065853deaada20f7dc50e4f3bf5201c48be2e175bb02c1ab6e5df47b8eae92c6810b4a4f9bea285f12d21f49a89bd576a13c46b9027c6f4ddd2dc638d2fb800197fa9e1f31"}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x414}, 0x1, 0x0, 0x0, 0x4004}, 0xc8010)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[], 0x1f0}, 0x1, 0x0, 0x0, 0x200400c2}, 0x24020841)

3m36.832403256s ago: executing program 5 (id=5875):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
r1 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000ffdbdf251200000408000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100001c0011"], 0x44}}, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x200, 0xdda, 0x648, 0x8, 0x8}, 0x14)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e21, 0x8, @remote, 0x7fffffff}}, [0x100000000, 0x5, 0x9, 0x0, 0x3, 0x6, 0x9, 0x6, 0x7, 0x3, 0x3, 0x5, 0x8, 0x1, 0x200]}, &(0x7f0000000540)=0x100)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0xa4, 0x0, 0x8, 0x3, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x439}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc37c}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xb0}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7e}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x101}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004801}, 0x20040000)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xfffffffffffffd75}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x39, 0x10, 0x0, 0x0})
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0)

3m36.692082055s ago: executing program 5 (id=5876):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r1 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x2000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]})

3m36.612022316s ago: executing program 5 (id=5877):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3aa0}}, 0x0)
recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/194, 0xc2}], 0x1}, 0x12040)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x8000000001, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x5, 0x0, 0x5, 0x5, 0xc, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340})
r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc", 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000000040)="026bc8ca56e7", 0x6, 0xcfe})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r5, 0x0, &(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3})
ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000280)={0x28, 0x6, 0x0, r5, 0x400, 0x9, 0x3})
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="99bc2c556ede19f82c67ea0aed1a3c7d78d56bbcaadad97e5a08a7695dabe2d4c08e28c8e29d9f6053cf6b0409d5133002b744a8ded4bce9867250cc2b4ac54c0c73814b723d8031393878da"], 0x118)
r9 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x80000, 0x51, 0x2}, 0x18)
open_tree(r9, &(0x7f0000000380)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r8, 0x0)
ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x41624800ab11328e, 0x4})
sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r11 = dup(r10)
ioctl$KVM_GET_ONE_REG(r11, 0x4010aeab, &(0x7f0000000240)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000180)=0x8})

3m36.523524441s ago: executing program 5 (id=5878):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) (async)
ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={'bond0\x00', @ifru_settings={0x81, 0x10000, @sync=0x0}})

3m36.412022171s ago: executing program 5 (id=5880):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000940)={0x0, 0xb, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000b80)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getresgid(&(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r1}}, './file0\x00'})
r2 = socket$kcm(0x2d, 0x2, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r3, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
sendto(r3, 0x0, 0x0, 0x80, &(0x7f0000001080)=@qipcrtr={0x2a, 0x2}, 0x80)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e3, &(0x7f0000000000))
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0x3, 0x14, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xed)

3m26.795879718s ago: executing program 35 (id=5858):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc4e, 0x4})
sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304)
syz_usb_connect(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000e24b420df2001006d970102030109025100010000100009047b000076a98700052406000105330002000d240f0101000000217c10000106241a40000005240100090524ab0f"], 0x0)

3m21.124089601s ago: executing program 36 (id=5880):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000940)={0x0, 0xb, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000b80)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getresgid(&(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r1}}, './file0\x00'})
r2 = socket$kcm(0x2d, 0x2, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r3, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
sendto(r3, 0x0, 0x0, 0x80, &(0x7f0000001080)=@qipcrtr={0x2a, 0x2}, 0x80)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e3, &(0x7f0000000000))
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0x3, 0x14, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xed)

3m2.783659497s ago: executing program 8 (id=5986):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
chdir(&(0x7f0000000140)='./file0\x00')
recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x5, 0x4, 0x7, 0x3, 0x0, 0x0, 0x20, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3m2.435761396s ago: executing program 8 (id=5987):
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffcc2}}]}}, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5})
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x7, 0x200)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f00000000c0)=0x8)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x98)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000240)={0x1, 0x1b000, 0x1})
syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="11000000", @ANYRES16=r6, @ANYBLOB="010000000040000000100f0000000800030047b58d29065a8f6da82c04b87595a1af9a4e89b350df47bf761f5aa5b1ef9e22c5a089d7a8f8ac0c004ad839d48353eec2a27429c0247f4ff3c78a09be17d3cfd0fee3bc50b9", @ANYRES32, @ANYBLOB='\b\x00<'], 0x2c}, 0x1, 0x0, 0x0, 0x200c091}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r6, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8a}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffb}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfb1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44001}, 0x50)
r7 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
pipe2$9p(&(0x7f0000000240)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}})
ftruncate(0xffffffffffffffff, 0x1)
write$P9_RVERSION(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff070000000837"], 0xfffffd97)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3)
ioctl$HIDIOCGREPORTINFO(r7, 0xc00c4809, &(0x7f0000000400)={0x2, 0x100, 0x100})
r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VIDIOC_ENUMAUDOUT(r11, 0xc0345642, &(0x7f0000000200)={0x0, "7fe99814c2440619f3d9d94b4e4a84a23881e89eacc1333ffe736a89fb50587c"})
syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000003090400000302020000050410000005240004000d240f01000000000100000003090581032000000000090582022000080000090503020800000800"], 0x0)

3m0.537864123s ago: executing program 8 (id=5989):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x20901)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000002300))
close_range(r0, r1, 0x0)

3m0.307883153s ago: executing program 8 (id=5990):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x4045, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write(r2, 0x0, 0x0)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x3)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00#\a'], 0x0}, 0x0)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x40, &(0x7f0000000140)=ANY=[])
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x6, 0x68, {0x68, 0x23, "c58b63240b84a78713816bdda8e0b49e2414cc60b66b7fea6d45c7c281b6b6fe4a8c75d032662b50e3cbd99511bab95baa9aebbe0913e597b5859093420516321c78b43ba49b98fd5ed0492a9d0233b46b8a62bac09d194acc4acd99d8bb0ec658073102e593"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x40, 0x18, 0x3d, "9ad7c4cf518ead7f64e97215751be99020f35bffbdeb5056311082bd1582f45c9dbdadf5e5b987659cb8c15030840bbcdb5fc6c90da2b24951fdd1b8bf"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)={0x20, 0x81, 0x1, "a5"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "a057"}, &(0x7f00000003c0)={0x20, 0x83, 0x2, "69c5"}, &(0x7f0000000400)={0x20, 0x84, 0x1, "0f"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "47c372"}})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "1d4f777ff967af82c361"}}, 0x0, 0x0, 0x0}, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m58.191870167s ago: executing program 8 (id=5997):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e)
r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9, 0x210500)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x6e, 0x20, {0x6, 0xffffffffffffffff}}], 0x20})
ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000140)={0x10001})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

2m57.824202252s ago: executing program 8 (id=5999):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x5e53})
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'gre0\x00', 0x7fff})
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000c, 0x2010, r2, 0x180000000)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x11})

2m57.392015329s ago: executing program 37 (id=5999):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x5e53})
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'gre0\x00', 0x7fff})
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000c, 0x2010, r2, 0x180000000)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x11})

2m49.820267652s ago: executing program 7 (id=6020):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x88080)
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1002, 0xb, 0x8012, r0, 0x83000000)

2m49.719916353s ago: executing program 7 (id=6021):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000480))

2m49.608157347s ago: executing program 7 (id=6022):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xfffffffe, 0x0, <r1=>0x0})
futex(0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

2m49.093459978s ago: executing program 7 (id=6023):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000030a050000400000000000000a0000010900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000314000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x3, 0x3})
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x37})
r3 = socket$inet6(0xa, 0x5760bd2c2e0b0e0e, 0x10)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x3, 0x9, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="002204", 0x7f8)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000880)="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", 0x653}], 0x2, 0x0, 0x0, 0x2c}, 0x440c4)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7'])
chdir(&(0x7f0000000240)='./file0\x00')
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
ioctl$FS_IOC_GETVERSION(r6, 0xff05, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

2m48.831831117s ago: executing program 7 (id=6025):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c0c0)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8e810)
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00')
preadv(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000440)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000000)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r6, 0x1, 0x70bd2d, 0xff7ffffd, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0xb6b}, {0x6, 0x11, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4044040)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r10, 0xffffffffffffffff, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r12, 0x40485404, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3, 0xfffffffd}})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r13, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000300)={0x84, r11, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x0, 0x6, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbd}, @NL80211_TID_CONFIG_ATTR_NOACK={0xfffffffffffffe5a, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffc0}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff00000001}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4e}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x0, 0x8, 0xb}]}]}]}, 0x84}}, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2a, 0xe4, 0xed, 0x40, 0x67b, 0x612, 0xe077, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x10, 0x0, 0x2, 0xd5, 0xae, 0x9f, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4600}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0xf, 0x2}, {0x6, 0x24, 0x1a, 0x3, 0x1}}], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x0, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x54, 0x7}]}}]}}]}}]}}, 0x0)

2m48.109833439s ago: executing program 7 (id=6027):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can})
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="3ef3410f09c441722ad566ba6100b014ee660f3a4130def466410fc7b44fb80196f80f20e035000400000f22e00f3566ba4200ec660fc731", 0x38}], 0x1, 0x43, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m47.486216115s ago: executing program 38 (id=6027):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can})
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="3ef3410f09c441722ad566ba6100b014ee660f3a4130def466410fc7b44fb80196f80f20e035000400000f22e00f3566ba4200ec660fc731", 0x38}], 0x1, 0x43, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7.764037266s ago: executing program 0 (id=7000):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='ne'], 0x2a, 0xfffffffffffffff9)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
fchmodat(0xffffffffffffff9c, 0x0, 0x2)
writev(r3, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4)

7.023673413s ago: executing program 0 (id=7003):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
setreuid(0x0, 0xee00)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', 0x10000})
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0, 0x43)
getdents64(r1, &(0x7f0000000780)=""/115, 0x73)

6.865662742s ago: executing program 0 (id=7005):
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r0, 0x40045109, &(0x7f0000002240))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x18, 0x3b, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = socket(0x28, 0x80000, 0x1fa)
sendto$inet(r2, &(0x7f0000000380)="537ec6e7f672249a1b1520eaaa9ab413fbe63b3b33ffa73d6aa93299044b1c6eaf890b98e5823726e9face5fc8a8d995e1af35a0000253f6edd2c7fa73f19fc697c9a689f21b796cf64b9795450b2c3ba2aadfac56d3b9c016bcd7bb9707dcabcc58b79ae21d3d862744242a488d76ffe974f34cf15ead2ab5a597133bc5413988eed99a02", 0x85, 0x80, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r4, 0x325}, 0x14}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000002414200027bd7000fddbdf25080001000200000008003d000400000008003d000000000008003d000400000008003d0001000000080003000100000002d3aac979304cc62cf76ae49e48e25aeea1f4aecd621f096e73e134d1476c81fb539f00"], 0x40}, 0x1, 0x0, 0x0, 0x2000040}, 0x4000000)
close(r1)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r1)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x74, r5, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x800)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa4, r6, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5fbf}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}], @NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "6cc5a0687bf057a7"}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000801}, 0xc0c0)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r8, @ANYBLOB="0004080001373f0edf2503000000050001000100000014000200200100000000000000000000000000002d00070073797374656d5f753a6f626a6563745f723a73797374656d5f63726f6e5f73706f6f6c5f743a730bc166055c15b87489b6b07d300000000014000300fc000000000000000000000000000000140006007665746830000000000000000000000014000200ff02000025502dbf8ece2f3dc03d619e3099417700000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)

6.691422756s ago: executing program 0 (id=7008):
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x2, 0x8}, {0x5, 0x9, 0x90af, 0xbfc}}}}, 0x15)
syz_emit_vhci(0x0, 0x0)
syz_usb_connect(0x4, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x3c, 0x4e, 0x86, 0x8, 0x1b3d, 0x149, 0x57ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x1, 0x10, 0x3, [{{0x9, 0x4, 0xab, 0x9, 0x0, 0xff, 0x1, 0x65, 0x1}}]}}]}}, &(0x7f0000001200)={0x0, 0x0, 0x11, &(0x7f0000000e40)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0xc, 0x0, 0x2e, 0xf00, 0x5}]}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
syz_emit_vhci(&(0x7f00000016c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x0, 0xa}, {0x1, 0x2, 0xfff9, 0x8, 0x6}}}}, 0x17)
syz_emit_vhci(0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x40, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="402345000000451161639c545d2ce9daa7602630c686377369efa824c3379300000000b1d2363b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_emit_vhci(0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x11, 0x3, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r4, &(0x7f0000002640)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x0, 0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001f40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x830}}, './file0\x00'})
r5 = socket(0x25, 0x5, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x85e)

5.976010463s ago: executing program 4 (id=7012):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc08a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_connect(0x1, 0xe1d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0xb9, 0xf7, 0x69, 0xff, 0x19d2, 0x1065, 0xf556, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0b, 0x4, 0x6, 0xf8, 0x70, 0x9, [{{0x9, 0x4, 0xaa, 0x4, 0x3, 0xff, 0xff, 0xff, 0xf8, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x1, 0x1, 0x7, "33f4c9f3f1dc9655f1"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x2, 0x3, 0x6b, "e25ccda4eea2"}, @as_header={0x7, 0x24, 0x1, 0x14, 0x3, 0x4}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x1, 0x81, 0x2}]}], [{{0x9, 0x5, 0xb, 0x8, 0x20, 0x2, 0x4, 0xe}}, {{0x9, 0x5, 0xd, 0x1e, 0x40, 0xff, 0xc, 0xf, [@generic={0xa, 0x6, "1ebdd1ab5d3946f2"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x5, 0x7e, 0x3, [@generic={0xc3, 0x1, "e3611d3de38bdb4ab760f17bc8e2a58613af1eb27f0915845b1d89aa21db179625583b4194e8fd0321994fb95750ef2d00de5ef833fd615b050fd36cecf69d1bed271866c4a31577076b83dc244e9834d832c79f6c29a9db471503ad6da979691be013cc7db2c2dfd4cc20efaa910c2fde650f031cad038ae840fe6857c1ddbbeb0353232ef8d927a71949b9bf932be0f8288a2c5aa7893dba20296c010e6574b2990ecdbf800b15200a2b9646a0b1353abe80ff4da5ddea7138e48adbb933bf20"}]}}]}}, {{0x9, 0x4, 0x1, 0x2, 0x7, 0xff, 0x4, 0x3d, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x6aa3, 0xe}, [@processing_unit={0xc, 0x24, 0x7, 0x4, 0x5, 0xa, "f770ff8c1f"}, @processing_unit={0xb, 0x24, 0x7, 0x2, 0x5, 0xb, "61387cc5"}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0xf, "f99920de7ba3"}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0x6, "ceb648c7"}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x97, 0x0, "7f11"}]}, @uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x4, 0x2, 0xf6, "0795"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x4}]}], [{{0x9, 0x5, 0x9, 0x3, 0x200, 0x4, 0x5a, 0x0, [@generic={0x4e, 0xc, "e3932995103f21aafaddd680f52bd27ab41aba54e6d30a354b3151f6a8bb577695c4d18738f736f8095c059a097cd2ddd3df5e049c0250b0fd764dfa9da8ab624eb4a042a7c10c6e39fcc7bb"}]}}, {{0x9, 0x5, 0x6, 0x7, 0x200, 0xfa, 0x8, 0xa}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x80, 0xba, 0x4, [@generic={0xd8, 0x3d, "a37008057b077415f11332a137d9597e7a18363e9494bb5a32f3b71cf8c9c915be72750bd1537dc286f453761f7fe7430fcaa9a2486a6d3d9de0a8f09374c538c4e3149363f15578f5b2cb79fe403056bfd135fc7203c2fae6c6c59de3885b124f72e180603dc91111ceb5755a05acbfc367503da2ff2c1f3576778f9960caf7f3695eabc784c539193867df558190fb55dfed86af4323fa8a1b3854dec1b0951b97927389e5942bdadc571dd73757c8d5cf4fc305b7595a1b3bf87dd2d0efc7998c28884faf1355680046db58cb8881ab3289a7fc5d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x10}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x9, 0x6, 0x8}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0x9, 0x2, 0x50, [@generic={0xd8, 0x21, "228a6eb6c8b628b3012ad7b64edc0a0c5892995c5afee01aa340164e4a80a73d7c1ff2b5d46b1777ce77e344af985552bf799eaee973a50ce57dd8b002808acc47899924868761cb333d0ce83338d5f3b535dd2200611b7fd195d54c099d6df5445bb4d45a821182fc84e948a9858d46524d5f9b65672fc373268d808380f711ac68f9e4d344d80454f8127972fda36a7cb3477d6f22b948a099523c841323fe17700411dff394e0d212ffaa92ab9bf9883f9eed234749497efd745343189092f1f02500eb344f776bdd0ebbdd67583ab1451b54d8fa"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0xfc, 0x8, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x5, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x10, 0xb}, @generic={0x4b, 0x9, "c64a6a8594dc0e79ae13c43584700166362b0039f3f730e9c49a97f12ce28ff3c4feacdc2da05cf8719ad7c9c9401455da11319c0ed48d3af42dc77a5827d81d7cf848c121cdd10497"}]}}]}}, {{0x9, 0x4, 0xe2, 0x0, 0xd, 0x8d, 0x56, 0x3f, 0x18, [@uac_control={{0xa, 0x24, 0x1, 0x47, 0x1c}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x2, 0x1, 0x2, 0xe2, 0x6}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x2, 0x2, [0x3, 0x6], 0x2}]}], [{{0x9, 0x5, 0x7, 0x2, 0x10, 0xb5, 0x8, 0xf0}}, {{0x9, 0x5, 0xb, 0x3, 0x20, 0x6, 0xc5, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x9, 0x3, 0x9, [@generic={0x28, 0x1e, "42c85223dca48e5be18c9039ff36e4cda87e6b291049f1e62406a7f598b8a7c62983927c7c67"}, @generic={0x4d, 0x1, "707d5247ea58553477704dba302d92ef954b6f2c06d1662657575657e1b7327d3b5ebd6bd99e6810fd874413212c2345cc974b87b4bbe4ae30aaccb0fd606f1cb42c68575583452b0a54d4"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x3, 0x6, 0x1}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x9, 0x1, 0x6, [@generic={0xed, 0xc, "7c8f27e3aabc487d099e123c98d044b52bea06785a32c89bbcbb2a818c37117884c25206b87eadc9a165ed8a9ba51d4c627356c2936073771f4a06e403395242a84e58b6fe0c49787684c5ecaef03a2e9b590728a9d95b4e4b310fc531d852e1b5b24ed8049b7488cb7ccc00e29e60fd324422813c7afd0e0fe4a71d9564a23f9f15812ac5858bf352c79e53349513fc5355cc23ab417bbd5839ffd10408154a143a1b8cdbc8e31d69a93c97b06309882cab947870f5b120e8447874782811b35549087395f112b64a2ee5c9772ce2bd3959d2cf2dbab16eb35dceacc4b22415fbd642c6d2ae8e4708420d"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x6, 0x5, 0x9, [@generic={0xb8, 0x21, "8205800fe0e1009dd8c2ac59e92492bae336f2590c1851e67c31ea7c54393090fe6560c7524540920692e3521bf3031f888207b8a11deb9eb97f2bacd4154ccdfd4bcdfacf49f49390cd8242cb45cc999aed6109780ab641c7a899a2afbc2d1cb8cf4d22223d546748457e759587769cc68771a4159ac8b99a57f0a75ef02ba8cf90bb40f67cc82327e5bad9701ba71d14c719013752ba02d973537a13cf9b20668d69c7ae6dfc07f5a578b81f76789ab92f0727c781"}, @generic={0xbe, 0x1, "8cff5a4ca103fecdfbb396184b6c532c9aa889e10c8267ff78e88605edcc94803aaba01a4f546ce94c65a755653b7c92bb83668c752615fb0f4ec93b5f517ac900062b9476d056cb8071b4da36118be66bd7441107fbf62b95573ca5445ae7b77fb84254c63c3d70dd2fb459612128f94787ce8b2495b81e93b5c41c0e737aff9ebf67058ca6cbddb5bbe36eaa16b24d6f7e969907882551d52ca508514495d1fe4a46648fc6f603a65b5e130b0cf972508e8f30ef982907418db98a"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0xff, 0x7, 0xd1, [@generic={0x76, 0x10, "929c9396ce37345863d7a6979d950c151e749d4d6fcc0360a934448e394a3cfe25ac82cec51bb6c2c7cdd56c01ce51ce7b18a5db03cfd203c8e02d8587e007628ba64bb6beffb0dbf20f3298610cf12f5cc00394cce16274765baaae43f028ac951cd6a30bde723b318675b82349f7bbb79947d3"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x8, 0x9, 0x6, [@generic={0x9c, 0x6, "ed5d4ee6bf2c272caefe64df4074b64cb2648ae90b4203e1a7d9fcd0b270b440e9812bf86b668d91d379f18416a8e86926eeaeef52623b69288be28139bd9bde47e9228c49905f4529034ef3eff742dd6999471f9cdd0ac0d16a0e05edf89e1355a001381f75c85ffc559750d118ac36444f3d6ef84c66b2f4e2ba31f3a50ba08579fb00fc7a5654cbb1c5e56b96bf8bc3334ba628aada16b0e7"}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x46, 0x1}]}}, {{0x9, 0x5, 0x6, 0x8, 0x10, 0x7, 0x44, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3}]}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0x7, 0x81, 0xd7, [@generic={0x31, 0x30, "4af2e8e0ce364775fa0cbc779d7cee6bb8588db1d1da1785b061711f5e632e1058095e91d1139193c47cc8118370e3"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x2, 0xb3, 0xb1, [@generic={0x40, 0x7, "d403bfc7cd50edd694f478259c33cd42838cbb99b146c8190d0224bcf7327a3f3b24a956046d690283efe1e6c07290b8bd3b77ba3dd16562f5dd27db7411"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0xfd, 0x7f, 0x9}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0xb0, 0x3, 0x9, [@generic={0x7f, 0x7, "7f06c49d659dd71a22ca10f4f000dc3bcf432d1711491ed41ba42631b13606b52dbc1d5fa2995fac76e76a0b5d5ca815976657f190124ecdd263c5fb0869a531f1ffe25a61848446d4adfef409eed770c7fb8fc1ff01d940c365ebbb5f47a8fba60ac392c063db5c99e3f8696d219f6b4e9dccf34c31ed17e129611470"}, @generic={0x5b, 0x8, "ba3b22a01139b37fe78ed56220118e834b58e75beea642db624ee9a1d6c97ba3835ec9dcfc3338d261dc4b31f28c3af6b6621a9fbab250d0ba363994fefb644146dff6d4988f2b151285c711eb64d1ddfcc3488b6c086d8601"}]}}]}}, {{0x9, 0x4, 0x3, 0x0, 0xc, 0xa7, 0x1a, 0x9f, 0x4, [], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x10, 0x2, [@generic={0xb7, 0x23, "7a705b5f2f4f16a5be3b1dbbbd803740d1370674bd3e6f138457a01d9d93c069d20e4cb6e8daeaf1b4b8f5fac43a6fafa85752ce7f98bce2e579d87f2e65f3c151c662ffd3ade7eba7074bc6940835fb376ac8e5c5a64dc48a137754c2e3160f93f3f3ed8fea91c907d8d668555b95e65b8c57c3dc4e9ecd63b79e785348bf789e9a0ca812da62becb4eff9f6823bd24631db5eb319bfcbfdca496e4685e9b889b9f30215215f299643efad823dd0b48de6a5014d6"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xa}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0xf9, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}, @generic={0x97, 0x9, "0cc5acdef1943b38c42d80b7d451cfd0cf20f9a65578e82e2d4a10ad148052f2db322f5bff3eba37f510b50dc4575aae242117fa746ad28b479fa9d35576855aa46dab8704d1fea396ebb0135f3daadeeb41a4c698a7fc524668c4711284c2c12915d789f936d7723a0c12dcb797e35e2e1b7bf4954c154921af0bee8d2a29b44fbed360b8f28f7024bd1bcedeb01b3189013d4f51"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x3, 0x7, 0x9, [@generic={0xdc, 0x4, "d55675c0d7ded08d4a2de749b9ede1c997001de39b4b43817a29db0363f8efdb6b83e2e874adca3a5e3fd3f877ca9597a12a69007c5a46d3b5d3bef49279c843041c75024305b8a8e84ac2ef364d17d03e81771ef5c677fcafabcb74ccc229e4f81b30c6a567af24bb67feb03f19aee28a10449a7e483b9de200ffd23ee2181388f0e824e06aa49ba89b9e82ad7e1ef37c978bcc015accb363be4617c292107384c30310fb973c0c1c121758b275b8db16d0bfdf7de6950fc9ca6ddde7f74a81ef3cee837cccae3c5e685a61ff0a8af5df42e31fae14f9420f60"}, @generic={0x4d, 0x8, "29f4b1b8663110a3ef80cf5fb97258e4ed8ed8b7b6d3586317c4b9aa57c9b7241210712bdfe63252d72484d52475aedd2e4c292c3a6673a6b93f0d953b7f96fbb7bb5bef9302f919c3e7ac"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x7, 0x7f, 0x27, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x98, 0x8, 0x26}}, {{0x9, 0x5, 0xa, 0x2, 0x20, 0x6c, 0xe1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x2}, @generic={0x40, 0x6, "e4c45494d231f43d9185054145a2c223cd5c68c29b12ad42954d830262ee9c050fd84aea13a593c723a631f4a200a9dde06c659c888c5a9bfd130d03e1cd"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x8, 0x1, 0x2, [@generic={0x80, 0xb, "609a83412ced207532489bf8d490c3b2a0d8917e0afc8df2580217defd28631930b22c40bc993ee52c17e94ff437e30f37dc47f48f263afc345b95433a5f9b0090ef9b37fcb50778c48de9b928faca64115229314fabf32df0d8106effe5d630e61cedd7e543e44c40ff18bd71c2d960766da563792166a5473dd7f372c9"}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0xbe, 0x7}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x7, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x0, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0xb}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xe9, 0xd7, 0x5}}, {{0x9, 0x5, 0x1, 0x0, 0x74fd9b937ffa19a8, 0x1, 0x1, 0x9, [@generic={0x23, 0x4, "93604c1f4fee91295225a2000c62dc9c3aca9bb26e8e4d707941409f525e891167"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x7fff}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x2d, 0x8, 0x2}}]}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x110, 0xa0, 0x1, 0x8, 0x8, 0x5}, 0x47, &(0x7f0000000f40)={0x5, 0xf, 0x47, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x81, 0x4, 0x80, 0x401, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x32, "900deb9c93eb03e7a05336096bce6fcb"}, @ssp_cap={0x20, 0x10, 0xa, 0xc, 0x5, 0x9, 0xf0f, 0x7, [0xcf, 0x30, 0xc0cf, 0xff3f0f, 0xc000]}, @ptm_cap={0x3}]}, 0x9, [{0x90, &(0x7f0000000fc0)=@string={0x90, 0x3, "2cf98251cf83669487fe52001051d3bfa94fec7b6a6aea8914466755952058de95e1045e72f64f53dbfc17544c4fde3dde537b46dd20fce8011b37d9ec25f2bf593e993e26cb13ade2f1340e6779d8595e4af50515c041fc5624b80ef02ffc7effe22a7c60cd1482feaa9a22d721a6523b92cb252fc1af699eb4a87098f5f4bd5dbe31df7b22f20c0cc292ce8479"}}, {0x2a, &(0x7f0000001080)=@string={0x2a, 0x3, "68b0f4f63483e4f7ea75267949efcdf6048069b37633d83101c21eab46257dace5fc6a55d4955b10"}}, {0x5e, &(0x7f00000010c0)=@string={0x5e, 0x3, "375b1c64645ae3bd1e030add2ae73001e00dc243bd1463734fcae13bb7eb3b2feedca82fbdadd01df78eab77812edb1e1d4e95133593c327fd24bd67155853bd3c478ff66e7bd2f4e80c66ecebd80ba9f10723012f5c2d0297e684f5"}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x418}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x12e, &(0x7f0000001380)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11c, 0x1, 0x1, 0xd, 0xf0, 0x9, [{{0x9, 0x4, 0x0, 0x49, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x9, 0x24, 0x6, 0x0, 0x0, "0970dce9"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x4, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @acm={0x4, 0x24, 0x2, 0x9}, @obex={0x5}, @country_functional={0x6, 0x24, 0x7, 0x6, 0x5}, @mdlm_detail={0xad, 0x24, 0x13, 0x9, "e42d819a491cdfe572ff1b52235735d387151d7cff7b0af3ffce6f133a26b651d3088f1a78b108517cb388c9cd92cb9389b773ab618f7c169c83eb54ce4e38378cad213bcf3cc506f3b1018bd747782677fe86a1ccae82ade1352591ff8946705cebb35fa36a50db4fb166e01056830248ace2afc7cfd61852d2ddc831664b33cd77a87352f9a586aa576f5705808d2f72fe2368c27aa563c6c6c449eda567e61f46936c9d274ad79b"}, @country_functional={0xc, 0x24, 0x7, 0xd, 0x9, [0xfff9, 0x7f, 0x7ff]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x6, 0x54}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x310, 0x6, 0x1, 0x5, 0xff, 0x2}, 0xb8, &(0x7f0000001500)={0x5, 0xf, 0xb8, 0x4, [@generic={0x17, 0x10, 0x1, "c230479566f54fd5084e2048ad8f666bcd720e74"}, @ssp_cap={0x1c, 0x10, 0xa, 0xd, 0x4, 0x1, 0xf0f, 0x9b6, [0xff3f30, 0xffff30, 0x0, 0xff0000]}, @generic={0x60, 0x10, 0x3, "ffa0eb0f5ecd87cda4d1b13dcd371ea68351655a1ca6b5068571eeeb058324074736bb6f082f31d314065555ebe21a0f0dca4455d39ebf298d39bb197c21e17c16954774751c7243f2d5921dcbc74f8c2abb01e096bd6a0ab89e59ee3c"}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x8a, 0x8fb855cb52aa8c13, 0x98, [0xc000, 0xc0, 0xc0, 0xc03f, 0xffc000]}]}, 0x5, [{0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x6b}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x814}}, {0xa, &(0x7f00000016c0)=@string={0xa, 0x3, "3e43e20d263efbc2"}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0xa, "5a70519c"}, @global=@item_4={0x3, 0x1, 0x9, "ef275a67"}]}}, 0x0}, 0x0)

4.256565976s ago: executing program 9 (id=7020):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
close(0x3)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000001140)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x8, 0x4, 0x1, 0x7f, 0x2, 0x38, 0x40, 0x178, 0x38, 0x1f, 0x0, 0x2e, 0x20, 0x2, 0x6, 0x721, 0x3}, [{0x4, 0x2, 0x800, 0x2, 0x76e, 0x4, 0x6, 0x1}, {0x4, 0x4, 0x3, 0x5eba778, 0x5, 0x800, 0x9, 0x4}], "14a6ad4b417bd3f9ce633693797dff246d1c912a62f2a33efeb3ca4cd99d384757d8fb94609ed22690ed7574a246905f5785cbbd1729dda4a28c5313bad692793d5f908d5ff528fc480631dcfd5a806a4fded902f3479ff651ef6c14c88872efbf8abfdc5744dfda0f3ba7b901e7a513705733cf3ca4992c6c87513e213f8deddf1841e0bd39e009fef2d676c8965e5cfec18a2d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c)
syz_genetlink_get_family_id$team(&(0x7f0000001cc0), r2)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x805, 0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001c80), 0xa0000, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905", @ANYBLOB="0b87"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x402600, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000400)=@ethtool_rxnfc={0x18, 0x3, 0x6, {0x2, @usr_ip4_spec={@multicast1, @remote, 0x2, 0x3f}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 0x0, 0x9, [0x3, 0x9]}, @usr_ip4_spec={@rand_addr=0x64010101, @remote, 0x0, 0x8, 0x1, 0x2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x6, 0x1, [0x1, 0x5]}, 0x101, 0x8000}}})
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000140)=""/4096, &(0x7f0000000040)=0x1000)

3.717979159s ago: executing program 4 (id=7021):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003"], 0xa4}}, 0x0) (fail_nth: 6)

3.317256896s ago: executing program 0 (id=7024):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e23, 0x1, @empty, 0x203}, 0x8)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00')
pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x4005e)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001200)={0x60000010})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000600)={0x80000001})
chdir(&(0x7f00000000c0)='./bus\x00')
r5 = gettid()
setpgid(0x0, r5)
r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r1], 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="400e400000006934c77f0ec6f0800c149640d48a7057078aadb3441ef5faf1ce1059bd8d0bdd90eff4eca8782cbbcd222e7c15209c5e087ae43ad1c337996052cdda5f261005"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_clone(0x9148400, &(0x7f0000000280)="27945644571852e1b9ab6300490747d3e318785b68d816e0fd5dc23e1a73be8c28f9c7f946f9c6b49d6d05527e9705832c00910ce8641e616d4b745e7697a04b312bd64647908fc4f45b586d90ad166a1c27fc354e6de15048dca6c8c73675c7cf94b24cca8c93e027c7964dc260ed0f082f178d82b2da0c3e7615ba807aeb3cb81bc0f5189df9a953205fc05f8626bcfd55", 0x92, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000500)="d7fbc9b9ceec0f61850e4e74b383b045313b5619e4c28c77fb9a65c7da1ebbf81e953e9c3e1e93252cf744fac17b5845804a78b73b4a25c6a09941e781f251cd4df2db3c7d4a4aed63ca19b2ea4f0131bd54b7d177f3df553431a0fdedcfd739c9e6bf96cca82e454afea0599eb30bcf7a528152853adc64ab56634e4bd62e57606098b6ade4a0d25a09ad8520961fb06113fae073c54a50e4d360236397f74c7a512f5d14ed4462b251665b456ce58be22b720af9433cd9e50ccb525987994784ea2d480b0c4b6aabeed2de47055bdd0d3619796615768ca754bf")
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0, 0x43)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0xe0)
r8 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r8)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r9, &(0x7f0000000040)=0x1c8, 0x12)
getdents64(r7, &(0x7f0000000780)=""/115, 0xfffffffffffffebb)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0080, 0x0)

3.15219347s ago: executing program 4 (id=7025):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0x1)
fchdir(r0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001c8, 0x12)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'veth1_to_bridge\x00', {'veth1_to_bond\x00'}, 0xfffc})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000"])
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c200310"], 0xf)
fsopen(&(0x7f0000000380)='erofs\x00', 0x1)
syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x1608e2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/143, 0x8f, 0x0, &(0x7f0000000280)=""/185, 0xb9}, &(0x7f0000000340)=0x40)
ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x138d, 0xd, 0xf909, 0x899d, 0x7d, 0x9, 0x7, 0x810, 0xfffffe01, 0x1, 0x4, 0x2, 0x6, 0x5, 0x0], 0x1, 0x4000003})
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0x3)

3.083106808s ago: executing program 4 (id=7026):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x600}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6000000000000, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]})

2.971876517s ago: executing program 4 (id=7028):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0) (async, rerun: 32)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (rerun: 32)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async, rerun: 32)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32)
getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000180)=""/4096, &(0x7f0000000000)=0x1000) (async, rerun: 32)
r6 = socket$alg(0x26, 0x5, 0x0) (rerun: 32)
bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r7, 0xc008ae05, &(0x7f0000000040)={0x5, 0x0, [{0xc0000000, 0x0, 0x2, 0x11, 0x101, 0x200, 0x7fff}, {0x0, 0x3, 0x2, 0x7, 0x7fff, 0x3ff, 0xffff}, {0x1, 0x0, 0x9, 0x2, 0x68, 0xf0ca, 0xffffffff}, {0x4, 0x1, 0x2, 0x4, 0x71, 0x11, 0x8}, {0x7, 0x40, 0x5, 0x6, 0x4, 0x8, 0x7ff}]}) (async)
r8 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$alg(r8, &(0x7f0000003540)={0x0, 0x0, 0x0}, 0x340000c1) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0xf0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0x24, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'macvlan0\x00', 0x1000})
r10 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r10, 0x80088a02, 0x0) (async)
syz_usb_connect(0x3, 0x2f, &(0x7f0000002dc0)={{0x12, 0x1, 0x310, 0x9c, 0xe, 0x63, 0x8, 0x2040, 0xd300, 0x3112, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x2, 0x8, 0xc4, 0xc0, 0xc, [{{0x9, 0x4, 0x67, 0x93, 0x0, 0x4d, 0x2d, 0xd6}}, {{0x9, 0x4, 0xb3, 0x9, 0x0, 0xff, 0x1, 0x0, 0xfe, [@generic={0x2, 0x21}]}}]}}]}}, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0}) (async)
sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fe"], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) (async)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r9, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

2.95800141s ago: executing program 3 (id=7029):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000004c0)={0x0, 'veth0_vlan\x00', {0x3000000}, 0xc000})

2.865472838s ago: executing program 3 (id=7030):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003"], 0xa4}}, 0x0)

2.792078732s ago: executing program 4 (id=7031):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x9)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a22301000000000212000100000000090400000057331900"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000040)={0x0, 0x2, 0x6, "92afc102df3e"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8)
r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@remote, @in6=@local, 0x4e23, 0x8000, 0x4e1d, 0x3, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x6, 0x8, 0x1, 0xc, 0x81, 0xff, 0x408}, {0xb, 0x4c, 0x3, 0x4}, 0x85, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in=@local, 0x4d6, 0x3c}, 0xa, @in6=@mcast1, 0x0, 0x4, 0x1, 0x0, 0x4, 0x8, 0x1000000}}, 0xe8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000001280), 0x6)
mount$nfs(&(0x7f0000000100)='\x82*\'-%{\x00', &(0x7f0000000140)='./bus\x00', &(0x7f00000001c0), 0x804408, &(0x7f00000003c0)={[{}, {'\\-'}, {'['}, {'/@&\\('}, {'overlay\x00'}, {'overlay\x00'}, {'\xd1\xbd\xe2,WP\x96\xd8'}, {'\b\'f*N;\xe5\x12n\xb8\xa1\x00s\xc8\xed\xcc\xd4\xd8\v{>\xba\\DD\x00\xab=\xaf\xda\x87\\\xba\x16a\x0e\x10&\x1e\xd2o\xcdP\xa6s\xac\'\xc9\x1d\x93%\x02\xa8VW\xacgJ\xf1&\xc8B\x96'}, {'overlay\x00'}, {'\x9a\x18\xf8'}], [{@appraise}, {@uid_lt={'uid<', r1}}, {@appraise}, {@seclabel}, {@subj_type}, {@fsmagic={'fsmagic', 0x3d, 0xccf}}, {@uid_eq={'uid', 0x3d, r1}}]})

2.772021283s ago: executing program 3 (id=7032):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x15, "18bfff4000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)

2.422667688s ago: executing program 3 (id=7033):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='ne'], 0x2a, 0xfffffffffffffff9)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
fchmodat(0xffffffffffffff9c, 0x0, 0x2)
writev(r3, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x1000000)

2.25218678s ago: executing program 3 (id=7034):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = semget$private(0x0, 0x6, 0x0)
semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semctl$SETVAL(r2, 0x2, 0x10, 0x0)
getpeername$inet(r1, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f0000000040)=0x25, 0x4)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0x805, 0x4)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "aa203163", {0x1, 0x1, 0x6, 0x2}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000580)=@conn_svc_rsp={0x0, 0x0, 0xa, "82a655e7", {0x3, 0x100, 0x0, 0x5, 0x408, 0x4, 0x8}})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"])
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
semget$private(0x0, 0x6, 0x0) (async)
semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) (async)
semctl$SETVAL(r2, 0x2, 0x10, 0x0) (async)
getpeername$inet(r1, 0x0, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f0000000040)=0x25, 0x4) (async)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0x805, 0x4) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "aa203163", {0x1, 0x1, 0x6, 0x2}}) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000580)=@conn_svc_rsp={0x0, 0x0, 0xa, "82a655e7", {0x3, 0x100, 0x0, 0x5, 0x408, 0x4, 0x8}}) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"]) (async)

986.573608ms ago: executing program 9 (id=7035):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000004c0)={0x0, 'veth0_vlan\x00', {0x200000}, 0xc000})
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffc01}}, 0x0, 0xa, [{{0xa, 0x4e23, 0x5, @mcast1, 0x1}}, {{0xa, 0x4e24, 0x1, @loopback, 0x3}}, {{0xa, 0x4e22, 0x5, @local}}, {{0xa, 0x4e22, 0x1, @local, 0x6}}, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {{0xa, 0x4e22, 0x2, @loopback, 0x4}}, {{0xa, 0x4e20, 0xffffffff, @local, 0x1}}, {{0xa, 0x4e20, 0x20d, @remote, 0xd}}, {{0xa, 0x4e21, 0x3, @mcast1, 0x4}}, {{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe6}}]}, 0x590)

931.890715ms ago: executing program 9 (id=7036):
clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0xfff0bdc1, 0x4100, 0xb, 0x0, 0x3, 0x800000000000003, 0x800000000006, 0x0, 0x2000, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x7, 0xfffffffffffffffd, 0x3, 0x0, 0xe})

800.019068ms ago: executing program 3 (id=7037):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661716c7420757365723a73008000003030303030303030303030303030303337323400"], 0x2a, 0xfffffffffffffff9)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000800)={0x9, 0x8, 0xfffff684}, 0xc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u'], 0x1a, 0xffffffffffffffff)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc058560f, &(0x7f0000000180)={0x0, 0xa})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source', &(0x7f00000007c0)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R\x11\xad\x89\xd1\xb8\xe0h\\.\xa3`fv\xdc\x8b\x18r\x8e\x9ac\x182q\xb8\xca\xb09Blk\x8e\xb1\xc3j\x03\xb7\x00\x00\x00\x00\x00\x00\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\b\xe0R\x9d\x18\x19a:\xa2\xa1\xcb\xd7jx\x94\v1\xb7\xb5\xdb\x9a\b\xf9\xb4\x8c\xab{\x1dU \r\xc1\x19!\x86~\xa9\x01\xda\x020\xe7\xc0\x9b\xf8NtV\xf5\xe7\xb2\xc6\x16A\xa9\xe8\xea\x95?I\xf9}\a\xc66}a)\xb4\xa9C\xc4\xfa\xf9L\x8d}\xf2>\xc5p4\x16\x91G\xe3\x9ef\xe7\xdc9;\x1c|\x1b.q\xb2\xc7\xed\xa8{\xac\x0e\xe5\xb7\x9d\xa4\xa6\xdd\xe4\x16\a\x13+\'\x05i\x7f\xd2\xc0\xd0f&\xbc\xd0M\xe9\x0e\x819\x02\x9b\xe6\xef\xe0\x1fD=A\xdf\x10\xd5]\xcbL|-\xe8\xf4Q\xd1\x0e\x81v]\xb9\xfc\xf0\x89\"\xc2]{\xa7\xe6:\x87\r\xf2-\xd1Z\xbd\xef\xe04\xa2\'\xca\x92\xe1\x91uy\xe1\x1d\xa7\x00\x00\x00\x00\x00\x00\xbeE\a\xd2\x96\xb3_)*\x1c\xf8Z\xbd\xfaI\xe4\x9c\xc93f\xe5\xd8\xdeXh\x9a\xd5\xd9n\x80\x00\x02\xc0 =W\xbcq\x19\x90\xd9\xdb\x87!\xees\xcajZ^\x94\"k\xaeqg\x92\x90\xa3!Z\xb5\xac\x8f\x9e\x8c8\x83 DI\x8c5\x9cwX\xb1_\xb0S\x15\x0f{\x1fa\x92 \xfa\xfa\x16izQ\xeaw\x967V\'\x11=\xac\xd1V*\xfeUt\xf9`\xb1+\xcc\x7f&j\x15T\xe5r\x8a{#\xf3\x8f\x8c/:\xb8\xf7\xad\xdc1\xd1U)\x9e\xa1\xad|\xf3\x83\xe3%\xc0\xbc\x91\xeaZox \xac\xfa}A\xb5\"B\xe6\x7f\xe9\xf0\xfc\xf2\\S\x1c\xc8\xe1\xa5\x8c\x84p]\xa9C\x13D\x1fa\xb8\xb7&(\xe9\xfcqx\xf4\xfe\xec\xd7\x99Fa\xf8\xee\xb1\xc3\xbb\x04PO\x91)G\xa0\x9a\x8e\x89h\xd3lE\x03\x1eJ\xc2\xa8N\xcd\x1a\\o\xb6\xef\xa2q$\xbdu\xa9\xd2', 0x0)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000000))
syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES64=r2], 0x0)

799.858615ms ago: executing program 9 (id=7038):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003"], 0xa4}}, 0x0) (fail_nth: 7)

404.741819ms ago: executing program 9 (id=7039):
mprotect(&(0x7f00001ae000/0x3000)=nil, 0x3000, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25)
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f00001b0000/0x400000)=nil)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9fd1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000)
r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000000c0)=0x1000, 0x4)
sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x100, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18d2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf39}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x85}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2c47}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8c0}, 0x8000)
r5 = openat$vimc2(0xffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket(0x29, 0x2, 0x7fffffff)
ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000007840)={0x5})
ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000000)=0x3)

310.133374ms ago: executing program 9 (id=7040):
r0 = socket(0x10, 0x3, 0x0)
close(0x3)
socket$xdp(0x2c, 0x3, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x200408c5)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r1 = syz_clone(0x40120000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$poke(0x4, r1, &(0x7f0000001040), 0x282d)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x149601)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200), &(0x7f00000002c0)=0x65)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r3, &(0x7f0000000080)=[{0x1e, 0xff, 0x8, 0xfd, @tick=0x8, {0x0, 0x42}, {}, @raw8={"18a8c949296f2c00fe4af1b2"}}], 0x1c)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/48, 0x225000, 0x0, 0x20000000}, 0x20)
socket$inet6_udplite(0xa, 0x2, 0x88)
rt_sigaction(0x1f, &(0x7f0000000380)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xb4000006, 0x0, {[0xfffffffffffffffe]}}, 0x0, 0x8, &(0x7f0000000300))
poll(0x0, 0x0, 0x7fffffff)
socket$inet6(0xa, 0x3, 0xff)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e22, 0x12001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000001c0)=0x2000)
ioctl$SNDCTL_DSP_SETFMT(r4, 0x5001, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES8], 0x118)
mmap(&(0x7f000016e000/0x4000)=nil, 0x4000, 0x88fd537e5c114b6e, 0x11, r5, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x874fd42a7836ef67, 0x4})

0s ago: executing program 0 (id=7041):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="11072abd7000fcdbdf2505000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='ne'], 0x2a, 0xfffffffffffffff9)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x4f26, 0x0, 0x2, 0x80000000, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x403, 0x802, 0x1600, 0x1, 0x0, 0x705, 0xe1cb, 0x6, 0x4, 0x100080, 0x395, 0x80001089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x40003e, 0x8, 0x10000, 0x8000000, 0x2]})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01090050000f804c00248045002c802cd00b29a0cf37847597780a5a323c11703c85210bfb54a5f579eedc8326e6a99f7fdef66a32771b71876e0eb6dcc33910220ffd5cd1d1a8c1dcfd0e961f2fdde9"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r7, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r8})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
fchmodat(0xffffffffffffff9c, 0x0, 0x2)
r10 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000100100"], 0x10}, 0xfc00)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r11, 0x40182103, &(0x7f0000000140)={0x0, 0x6, r11, 0xb42, 0x80000})
writev(r9, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

usb 5-1: USB disconnect, device number 45
[ 1186.399976][ T5880] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected.
[ 1186.848920][T25585] 9pnet_fd: Insufficient options for proto=fd
[ 1187.349848][T21794] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1187.529333][T21794] usb 5-1: Using ep0 maxpacket: 32
[ 1187.537626][T21794] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 1187.546076][T21794] usb 5-1: config 0 has no interface number 0
[ 1187.552368][T21794] usb 5-1: config 0 interface 12 has no altsetting 0
[ 1187.566682][T21794] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1187.576112][T21794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1187.584362][T21794] usb 5-1: Product: syz
[ 1187.588663][T21794] usb 5-1: Manufacturer: syz
[ 1187.593531][T21794] usb 5-1: SerialNumber: syz
[ 1187.600556][T21794] usb 5-1: config 0 descriptor??
[ 1187.700113][T17832] usb 10-1: new high-speed USB device number 41 using dummy_hcd
[ 1187.831749][T21794] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[ 1187.840808][T21794] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[ 1187.848333][T21794] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1187.856204][T21794] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[ 1187.865520][T17832] usb 10-1: Using ep0 maxpacket: 32
[ 1187.873955][T17832] usb 10-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b
[ 1187.882097][T21794] usb 5-1: USB disconnect, device number 46
[ 1187.884873][T17832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1187.899730][T17832] usb 10-1: Product: syz
[ 1187.904773][T17832] usb 10-1: Manufacturer: syz
[ 1187.909829][T17832] usb 10-1: SerialNumber: syz
[ 1187.918813][T17832] usb 10-1: config 0 descriptor??
[ 1188.274824][T17832] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -71
[ 1188.293913][T17832] usb 10-1: USB disconnect, device number 41
[ 1188.444817][  T116] usb 4-1: USB disconnect, device number 72
[ 1188.494017][T25619] netlink: 'syz.4.6437': attribute type 4 has an invalid length.
[ 1188.714119][T25628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6439'.
[ 1189.047648][T21794] usb 4-1: new full-speed USB device number 73 using dummy_hcd
[ 1189.088982][T25648] MINIX-fs: unable to read superblock
[ 1189.131735][T25650] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[ 1189.138392][T25650] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1189.148605][T25650] vhci_hcd vhci_hcd.0: Device attached
[ 1189.156664][T25650] vhci_hcd vhci_hcd.0: port 0 already used
[ 1189.231627][T21794] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[ 1189.249654][T21794] usb 4-1: config 0 has no interface number 0
[ 1189.272353][T21794] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10
[ 1189.293389][T21794] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 1189.318446][T21794] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[ 1189.327881][T21794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1189.336438][T21794] usb 4-1: Product: syz
[ 1189.340639][T21794] usb 4-1: Manufacturer: syz
[ 1189.345274][T21794] usb 4-1: SerialNumber: syz
[ 1189.356321][T21794] usb 4-1: config 0 descriptor??
[ 1189.381968][T21794] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected
[ 1189.426505][T25651] vhci_hcd: connection closed
[ 1189.432042][   T12] vhci_hcd vhci_hcd.4: stop threads
[ 1189.443363][T17832] usb 42-1: SetAddress Request (2) to port 0
[ 1189.450399][T17832] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1189.453774][   T12] vhci_hcd vhci_hcd.4: release socket
[ 1189.475173][   T12] vhci_hcd vhci_hcd.4: disconnect device
[ 1189.493871][T17832] usb 42-1: enqueue for inactive port 0
[ 1189.598596][T21794] usb 4-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0
[ 1189.646022][T21794] usb 4-1: USB disconnect, device number 73
[ 1189.670492][T21794] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0
[ 1189.705283][T21794] cypress_m8 4-1:0.35: device disconnected
[ 1189.947822][T17832] usb usb42-port1: attempt power cycle
[ 1190.398679][T25676] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6455'.
[ 1190.408389][T25676] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6455'.
[ 1190.553306][T25681] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1190.570599][T17832] usb usb42-port1: unable to enumerate USB device
[ 1190.605317][T25681] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[ 1190.758345][T25687] FAULT_INJECTION: forcing a failure.
[ 1190.758345][T25687] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1190.774397][T25687] CPU: 0 UID: 0 PID: 25687 Comm: syz.9.6461 Not tainted syzkaller #0 PREEMPT(full) 
[ 1190.774426][T25687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1190.774448][T25687] Call Trace:
[ 1190.774457][T25687]  <TASK>
[ 1190.774466][T25687]  dump_stack_lvl+0x189/0x250
[ 1190.774498][T25687]  ? __pfx____ratelimit+0x10/0x10
[ 1190.774529][T25687]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1190.774554][T25687]  ? __pfx__printk+0x10/0x10
[ 1190.774578][T25687]  ? __might_fault+0xb0/0x130
[ 1190.774619][T25687]  should_fail_ex+0x414/0x560
[ 1190.774656][T25687]  _copy_from_user+0x2d/0xb0
[ 1190.774686][T25687]  __sys_connect+0x123/0x440
[ 1190.774707][T25687]  ? __fget_files+0x3a0/0x420
[ 1190.774735][T25687]  ? __pfx___sys_connect+0x10/0x10
[ 1190.774769][T25687]  ? __pfx_ksys_write+0x10/0x10
[ 1190.774800][T25687]  __x64_sys_connect+0x7a/0x90
[ 1190.774822][T25687]  do_syscall_64+0xfa/0xfa0
[ 1190.774841][T25687]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1190.774861][T25687]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1190.774882][T25687]  ? clear_bhb_loop+0x60/0xb0
[ 1190.774907][T25687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1190.774927][T25687] RIP: 0033:0x7f095bb8efc9
[ 1190.774947][T25687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1190.774966][T25687] RSP: 002b:00007f095c9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1190.774991][T25687] RAX: ffffffffffffffda RBX: 00007f095bde5fa0 RCX: 00007f095bb8efc9
[ 1190.775014][T25687] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003
[ 1190.775040][T25687] RBP: 00007f095c9d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1190.775053][T25687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1190.775074][T25687] R13: 00007f095bde6038 R14: 00007f095bde5fa0 R15: 00007ffdc829d758
[ 1190.775110][T25687]  </TASK>
[ 1191.131841][ T5842] Bluetooth: Wrong link type (-57)
[ 1191.500678][T25714] FAULT_INJECTION: forcing a failure.
[ 1191.500678][T25714] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1191.514316][T25714] CPU: 1 UID: 0 PID: 25714 Comm: syz.3.6472 Not tainted syzkaller #0 PREEMPT(full) 
[ 1191.514347][T25714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1191.514357][T25714] Call Trace:
[ 1191.514363][T25714]  <TASK>
[ 1191.514369][T25714]  dump_stack_lvl+0x189/0x250
[ 1191.514390][T25714]  ? __pfx____ratelimit+0x10/0x10
[ 1191.514408][T25714]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1191.514422][T25714]  ? __pfx__printk+0x10/0x10
[ 1191.514455][T25714]  should_fail_ex+0x414/0x560
[ 1191.514477][T25714]  _copy_to_user+0x31/0xb0
[ 1191.514494][T25714]  simple_read_from_buffer+0xe1/0x170
[ 1191.514513][T25714]  proc_fail_nth_read+0x1b3/0x220
[ 1191.514527][T25714]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1191.514541][T25714]  ? rw_verify_area+0x2a6/0x4d0
[ 1191.514553][T25714]  ? __lock_acquire+0xab9/0xd20
[ 1191.514569][T25714]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1191.514582][T25714]  vfs_read+0x200/0xa30
[ 1191.514594][T25714]  ? fdget_pos+0x247/0x320
[ 1191.514611][T25714]  ? __pfx___mutex_lock+0x10/0x10
[ 1191.514624][T25714]  ? __pfx_vfs_read+0x10/0x10
[ 1191.514638][T25714]  ? __fget_files+0x2a/0x420
[ 1191.514655][T25714]  ? __fget_files+0x3a0/0x420
[ 1191.514668][T25714]  ? __fget_files+0x2a/0x420
[ 1191.514688][T25714]  ksys_read+0x145/0x250
[ 1191.514702][T25714]  ? __pfx_ksys_read+0x10/0x10
[ 1191.514717][T25714]  ? do_syscall_64+0xbe/0xfa0
[ 1191.514731][T25714]  do_syscall_64+0xfa/0xfa0
[ 1191.514742][T25714]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1191.514754][T25714]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1191.514765][T25714]  ? clear_bhb_loop+0x60/0xb0
[ 1191.514780][T25714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1191.514792][T25714] RIP: 0033:0x7f44f218d9dc
[ 1191.514804][T25714] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1191.514815][T25714] RSP: 002b:00007f44f306f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1191.514831][T25714] RAX: ffffffffffffffda RBX: 00007f44f23e5fa0 RCX: 00007f44f218d9dc
[ 1191.514840][T25714] RDX: 000000000000000f RSI: 00007f44f306f0a0 RDI: 0000000000000004
[ 1191.514848][T25714] RBP: 00007f44f306f090 R08: 0000000000000000 R09: 0000000000000000
[ 1191.514856][T25714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1191.514863][T25714] R13: 00007f44f23e6038 R14: 00007f44f23e5fa0 R15: 00007ffd37a82858
[ 1191.514883][T25714]  </TASK>
[ 1191.767578][T17832] usb 10-1: new high-speed USB device number 42 using dummy_hcd
[ 1191.892192][T23979] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[ 1191.934946][T17832] usb 10-1: Using ep0 maxpacket: 16
[ 1191.942380][T17832] usb 10-1: config 0 has an invalid interface number: 126 but max is 0
[ 1191.954203][T17832] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1191.964801][T17832] usb 10-1: config 0 has no interface number 0
[ 1191.971179][T17832] usb 10-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1191.983240][T17832] usb 10-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[ 1191.995079][T17832] usb 10-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[ 1192.006870][T17832] usb 10-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[ 1192.028027][T17832] usb 10-1: config 0 interface 126 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[ 1192.038671][T17832] usb 10-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1192.051994][T17832] usb 10-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[ 1192.055885][T23979] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1192.061392][T17832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1192.097779][T23979] usb 5-1: no configurations
[ 1192.106503][T17832] usb 10-1: config 0 descriptor??
[ 1192.112787][T23979] usb 5-1: can't read configurations, error -22
[ 1192.123201][T25705] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1192.143784][T17832] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 1192.359327][T25705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1192.368410][T25705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1192.379263][   T10] usb 10-1: USB disconnect, device number 42
[ 1193.061017][T25751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6486'.
[ 1193.336479][T21794] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 1193.389525][T23979] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1193.517930][T21794] usb 4-1: Using ep0 maxpacket: 16
[ 1193.526009][T21794] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1193.535978][T21794] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1193.546123][T21794] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1193.557058][T21794] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1193.566409][T21794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1193.574713][T23979] usb 5-1: Using ep0 maxpacket: 8
[ 1193.580560][T21794] usb 4-1: Product: 蹂榈幢챿୞죝果吤簈⦠箍⚯킘윻匍䣹뼇
[ 1193.590234][T21794] usb 4-1: Manufacturer: ⠁
[ 1193.595427][T21794] usb 4-1: SerialNumber: ѕ
[ 1193.604795][T23979] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1193.614575][T23979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1193.623367][T23979] usb 5-1: Product: syz
[ 1193.628290][T23979] usb 5-1: Manufacturer: syz
[ 1193.633015][T23979] usb 5-1: SerialNumber: syz
[ 1193.641023][T23979] usb 5-1: config 0 descriptor??
[ 1193.862000][T23979] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1194.080956][T21794] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 1 proto 2 vid 0x0525 pid 0xA4A8
[ 1194.133337][T23979] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1194.159795][T21794] usb 4-1: USB disconnect, device number 74
[ 1194.188949][T23979] usb 5-1: USB disconnect, device number 49
[ 1194.212506][T21794] usblp0: removed
[ 1194.549829][T25773] binder: 25772:25773 ioctl c018620c 200000000640 returned -22
[ 1195.030457][T25792] netlink: 'syz.3.6503': attribute type 4 has an invalid length.
[ 1195.699509][  T116] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1195.827802][T17832] usb 10-1: new high-speed USB device number 43 using dummy_hcd
[ 1195.848491][T25809] xt_socket: unknown flags 0x50
[ 1195.892223][  T116] usb 5-1: Using ep0 maxpacket: 32
[ 1195.918275][  T116] usb 5-1: config 0 has an invalid interface number: 230 but max is 0
[ 1195.936329][  T116] usb 5-1: config 0 has no interface number 0
[ 1195.945358][  T116] usb 5-1: config 0 interface 230 has no altsetting 0
[ 1195.966681][  T116] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[ 1195.988215][  T116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1196.007498][  T116] usb 5-1: Product: syz
[ 1196.016133][T17832] usb 10-1: Using ep0 maxpacket: 32
[ 1196.022571][  T116] usb 5-1: Manufacturer: syz
[ 1196.027216][  T116] usb 5-1: SerialNumber: syz
[ 1196.047035][T17832] usb 10-1: config index 0 descriptor too short (expected 65298, got 18)
[ 1196.064706][T17832] usb 10-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[ 1196.079106][  T116] usb 5-1: config 0 descriptor??
[ 1196.095015][T17832] usb 10-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[ 1196.116873][  T116] ums-usbat 5-1:0.230: USB Mass Storage device detected
[ 1196.135301][T17832] usb 10-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[ 1196.151760][  T116] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1
[ 1196.172862][T17832] usb 10-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=e9.e9
[ 1196.184270][T17832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1196.223171][T17832] usb 10-1: Product: syz
[ 1196.227800][T17832] usb 10-1: Manufacturer: syz
[ 1196.259143][T17832] usb 10-1: SerialNumber: syz
[ 1196.502863][T25805] netlink: 'syz.9.6507': attribute type 2 has an invalid length.
[ 1196.512728][T25805] netlink: 160 bytes leftover after parsing attributes in process `syz.9.6507'.
[ 1196.532554][T17832] usb 10-1: USB disconnect, device number 43
[ 1197.190540][T25839] netlink: 'syz.9.6517': attribute type 21 has an invalid length.
[ 1197.200947][T25839] netlink: 128 bytes leftover after parsing attributes in process `syz.9.6517'.
[ 1197.215823][T25839] netlink: 'syz.9.6517': attribute type 6 has an invalid length.
[ 1197.223845][T25839] netlink: 3 bytes leftover after parsing attributes in process `syz.9.6517'.
[ 1197.519721][T25854] usb usb8: usbfs: process 25854 (syz.3.6524) did not claim interface 0 before use
[ 1197.580950][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1197.611922][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1197.684714][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1197.721085][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1197.763967][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1197.805831][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1197.819317][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1197.840496][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1197.860225][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1197.874271][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1197.885825][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1197.906642][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1197.928075][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1197.971398][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1197.988417][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.016204][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.047891][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.063136][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.081069][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.091831][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.105952][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.113570][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.124312][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.145942][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.180951][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.189413][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.205599][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.212643][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.219532][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.227210][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.234766][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.242859][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.250037][T25857] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1198.437014][T21794] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 1198.520292][  T116] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5
[ 1198.599415][T21794] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1198.612694][T21794] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[ 1198.622008][T21794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1198.634356][T21794] usb 4-1: config 0 descriptor??
[ 1198.977118][T25887] mmap: syz.9.6537 (25887): VmData 37728256 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data.
[ 1199.504573][T21794] letsketch 0003:6161:4D15.006C: Device info: 㡵
[ 1199.775510][T21794] letsketch 0003:6161:4D15.006C: Device info: 劸
[ 1200.003089][  T116] usb 5-1: USB disconnect, device number 50
[ 1200.479802][  T116] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1200.642412][  T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1200.656921][  T116] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1200.668105][  T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1200.686247][  T116] usb 5-1: config 0 descriptor??
[ 1201.139642][  T116] keytouch 0003:0926:3333.006D: fixing up Keytouch IEC report descriptor
[ 1201.156384][  T116] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.006D/input/input166
[ 1201.228412][T23893] usb 10-1: new high-speed USB device number 44 using dummy_hcd
[ 1201.282719][  T116] keytouch 0003:0926:3333.006D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 1201.414165][T23893] usb 10-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[ 1201.431326][T23893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1201.475483][T23893] usb 10-1: config 0 descriptor??
[ 1201.488737][T23893] gspca_main: sunplus-2.14.0 probing 055f:c420
[ 1201.512110][T21794] usb 4-1: Max retries (5) exceeded reading string descriptor 202
[ 1201.537082][T21794] letsketch 0003:6161:4D15.006C: probe with driver letsketch failed with error -71
[ 1201.580427][T25907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1201.600257][T21794] usb 4-1: USB disconnect, device number 75
[ 1201.638381][T25907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1201.689697][ T5880] usb 5-1: USB disconnect, device number 51
[ 1202.091172][T21794] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1202.276646][T21794] usb 4-1: Using ep0 maxpacket: 32
[ 1202.286414][T21794] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1202.300166][T21794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1202.311848][T21794] usb 4-1: config 0 descriptor??
[ 1202.326580][T21794] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1202.460729][T23893] gspca_sunplus: reg_w_riv err -71
[ 1202.476715][T23893] sunplus 10-1:0.0: probe with driver sunplus failed with error -71
[ 1202.496729][T23893] usb 10-1: USB disconnect, device number 44
[ 1202.758583][T17832] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1202.907214][T17832] usb 5-1: device descriptor read/64, error -71
[ 1202.973308][T23893] usb 4-1: USB disconnect, device number 76
[ 1203.163761][T17832] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1203.302848][T21794] usb 10-1: new full-speed USB device number 45 using dummy_hcd
[ 1203.303793][T17832] usb 5-1: device descriptor read/64, error -71
[ 1203.433582][T17832] usb usb5-port1: attempt power cycle
[ 1203.475856][T21794] usb 10-1: config 0 has an invalid interface number: 29 but max is 0
[ 1203.484279][T21794] usb 10-1: config 0 has no interface number 0
[ 1203.490617][T21794] usb 10-1: config 0 interface 29 has no altsetting 0
[ 1203.499493][T21794] usb 10-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[ 1203.508976][T21794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1203.517381][T21794] usb 10-1: Product: syz
[ 1203.536876][T21794] usb 10-1: Manufacturer: syz
[ 1203.541746][T21794] usb 10-1: SerialNumber: syz
[ 1203.550205][T21794] usb 10-1: config 0 descriptor??
[ 1203.772972][T21794] peak_usb 10-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels)
[ 1203.807506][T17832] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1203.827451][T17832] usb 5-1: device descriptor read/8, error -71
[ 1203.848166][  T116] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 1203.987437][  T116] usb 4-1: device descriptor read/64, error -71
[ 1203.995144][T21794] peak_usb 10-1:0.29 can0: sending command failure: -22
[ 1204.002433][T21794] peak_usb 10-1:0.29 can0: sending command failure: -22
[ 1204.009475][T21794] peak_usb 10-1:0.29 can0: sending command failure: -22
[ 1204.074378][T21794] peak_usb 10-1:0.29: probe with driver peak_usb failed with error -22
[ 1204.083475][T17832] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1204.113745][T17832] usb 5-1: device descriptor read/8, error -71
[ 1204.235268][T17832] usb usb5-port1: unable to enumerate USB device
[ 1204.243828][  T116] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 1204.382931][  T116] usb 4-1: device descriptor read/64, error -71
[ 1204.501630][  T116] usb usb4-port1: attempt power cycle
[ 1204.885616][  T116] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 1204.907634][  T116] usb 4-1: device descriptor read/8, error -71
[ 1205.174584][  T116] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 1205.196975][  T116] usb 4-1: device descriptor read/8, error -71
[ 1205.317238][  T116] usb usb4-port1: unable to enumerate USB device
[ 1205.969602][T25980] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1205.978733][T25980] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1206.297341][  T116] usb 10-1: USB disconnect, device number 45
[ 1206.360635][T25984] netlink: 'syz.9.6570': attribute type 64 has an invalid length.
[ 1206.374444][T25984] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6570'.
[ 1206.668442][T25992] autofs4:pid:25992:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374)
[ 1206.682357][T25992] autofs4:pid:25992:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374)
[ 1206.738219][T25992] tmpfs: Bad value for 'mpol'
[ 1206.746285][  T116] usb 10-1: new low-speed USB device number 46 using dummy_hcd
[ 1206.940796][  T116] usb 10-1: config 3 has an invalid interface number: 113 but max is 1
[ 1206.950971][  T116] usb 10-1: config 3 has an invalid interface number: 225 but max is 1
[ 1206.959600][  T116] usb 10-1: config 3 has no interface number 0
[ 1206.966719][  T116] usb 10-1: config 3 has no interface number 1
[ 1206.977620][  T116] usb 10-1: config 3 interface 113 has no altsetting 0
[ 1206.985113][  T116] usb 10-1: config 3 interface 225 has no altsetting 0
[ 1207.012258][  T116] usb 10-1: string descriptor 0 read error: -22
[ 1207.018981][  T116] usb 10-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=11.9b
[ 1207.036911][  T116] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1207.080244][T26002] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1207.095880][T26002] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1207.286419][  T116] usb 10-1: USB disconnect, device number 46
[ 1207.556116][T26027] overlayfs: missing 'lowerdir'
[ 1207.954385][T21794] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 1207.987353][  T116] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[ 1208.115178][T21794] usb 4-1: Using ep0 maxpacket: 32
[ 1208.125190][T21794] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[ 1208.134095][T21794] usb 4-1: config 0 has no interface number 0
[ 1208.143416][T21794] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1208.153258][T21794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1208.161397][T21794] usb 4-1: Product: syz
[ 1208.165670][T21794] usb 4-1: Manufacturer: syz
[ 1208.170567][T21794] usb 4-1: SerialNumber: syz
[ 1208.171928][  T116] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1208.178053][T21794] usb 4-1: config 0 descriptor??
[ 1208.190374][  T116] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 42769, setting to 64
[ 1208.200271][T21794] smsc95xx v2.0.0
[ 1208.205678][  T116] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1208.215623][  T116] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1208.225293][  T116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1208.235506][  T116] usb 5-1: Product: syz
[ 1208.240174][  T116] usb 5-1: Manufacturer: syz
[ 1208.244909][  T116] usb 5-1: SerialNumber: syz
[ 1208.253389][  T116] usb 5-1: config 0 descriptor??
[ 1208.264056][  T116] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found
[ 1208.271740][T17832] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[ 1208.413682][T26043] tmpfs: Bad value for 'mpol'
[ 1208.454796][T17832] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1208.464163][T17832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1208.473594][T17832] usb 10-1: Product: syz
[ 1208.478638][T17832] usb 10-1: Manufacturer: syz
[ 1208.480647][T26036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1208.483395][T17832] usb 10-1: SerialNumber: syz
[ 1208.494299][T26036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1208.515456][T26036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1208.516169][T17832] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1208.525966][T26044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1208.548721][T26036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1208.560507][T26044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1208.561831][T23891] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1208.591128][  T116] snd_usb_toneport 5-1:0.0: set_interface failed
[ 1208.602680][  T116] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1208.629187][  T116] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -71
[ 1208.640022][T21794] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1208.649325][  T116] usb 5-1: USB disconnect, device number 56
[ 1208.671193][T21794] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1208.724134][T21794] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1208.755857][T21794] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32
[ 1208.761111][T26050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1208.786111][T26050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1208.815298][T21794] usb 4-1: USB disconnect, device number 81
[ 1208.972014][  T116] usb 10-1: USB disconnect, device number 47
[ 1209.010901][T26061] overlayfs: missing 'lowerdir'
[ 1209.401959][T26081] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[ 1209.408559][T26081] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1209.434459][T26081] vhci_hcd vhci_hcd.0: Device attached
[ 1209.477767][T26087] overlayfs: missing 'lowerdir'
[ 1209.516584][T26081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1209.559838][T26081] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1209.683662][T26095] netlink: 'syz.9.6609': attribute type 6 has an invalid length.
[ 1209.708660][T23891] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive
[ 1209.716458][T23891] ath9k_htc: Failed to initialize the device
[ 1209.722703][T17832] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[ 1209.731669][  T116] usb 10-1: ath9k_htc: USB layer deinitialized
[ 1209.751362][ T5880] usb 5-1: new low-speed USB device number 57 using dummy_hcd
[ 1209.762526][T21794] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 1209.933213][ T5880] usb 5-1: Invalid ep0 maxpacket: 16
[ 1209.938655][T21794] usb 4-1: Using ep0 maxpacket: 16
[ 1209.946149][T21794] usb 4-1: config 0 has no interfaces?
[ 1209.951657][T21794] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1209.960824][T21794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1209.976629][T21794] usb 4-1: config 0 descriptor??
[ 1210.082902][ T5880] usb 5-1: new low-speed USB device number 58 using dummy_hcd
[ 1210.206603][T26082] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1
[ 1210.207422][T21794] usb 4-1: USB disconnect, device number 82
[ 1210.222041][   T13] vhci_hcd vhci_hcd.3: stop threads
[ 1210.227388][   T13] vhci_hcd vhci_hcd.3: release socket
[ 1210.236231][   T13] vhci_hcd vhci_hcd.3: disconnect device
[ 1210.254233][ T5880] usb 5-1: Invalid ep0 maxpacket: 16
[ 1210.261018][ T5880] usb usb5-port1: attempt power cycle
[ 1210.628343][ T5880] usb 5-1: new low-speed USB device number 59 using dummy_hcd
[ 1210.653003][ T5880] usb 5-1: Invalid ep0 maxpacket: 16
[ 1210.789264][ T5880] usb 5-1: new low-speed USB device number 60 using dummy_hcd
[ 1210.821750][ T5880] usb 5-1: Invalid ep0 maxpacket: 16
[ 1210.832677][ T5880] usb usb5-port1: unable to enumerate USB device
[ 1210.955583][T26112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1211.154573][T26117] overlayfs: missing 'workdir'
[ 1211.900917][ T5880] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[ 1212.050910][T23893] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[ 1212.072136][ T5880] usb 4-1: Using ep0 maxpacket: 16
[ 1212.079244][ T5880] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[ 1212.087477][ T5880] usb 4-1: config 0 has no interface number 0
[ 1212.093901][ T5880] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1212.111608][ T5880] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1212.121235][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1212.129476][ T5880] usb 4-1: Product: syz
[ 1212.134010][ T5880] usb 4-1: SerialNumber: syz
[ 1212.141096][ T5880] usb 4-1: config 0 descriptor??
[ 1212.152028][ T5880] usbhid 4-1:0.8: couldn't find an input interrupt endpoint
[ 1212.222099][T23893] usb 10-1: Using ep0 maxpacket: 32
[ 1212.229772][T23893] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1212.242255][T23893] usb 10-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6
[ 1212.251607][T23893] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1212.259951][T23893] usb 10-1: Product: syz
[ 1212.264219][T23893] usb 10-1: Manufacturer: syz
[ 1212.269090][T23893] usb 10-1: SerialNumber: syz
[ 1212.276509][T23893] usb 10-1: config 0 descriptor??
[ 1212.291037][T23893] snd_usb_variax 10-1:0.0: Line 6 Variax Workbench found
[ 1212.298406][T23893] usb 10-1: selecting invalid altsetting 1
[ 1212.304230][T23893] snd_usb_variax 10-1:0.0: set_interface failed
[ 1212.310865][T23893] snd_usb_variax 10-1:0.0: Line 6 Variax Workbench now disconnected
[ 1212.319120][T23893] snd_usb_variax 10-1:0.0: probe with driver snd_usb_variax failed with error -22
[ 1212.368311][ T5880] usb 4-1: USB disconnect, device number 83
[ 1212.506214][T23893] usb 10-1: USB disconnect, device number 48
[ 1212.902061][T26138] overlayfs: missing 'workdir'
[ 1213.476833][T26163] overlayfs: missing 'workdir'
[ 1213.766271][   T30] audit: type=1326 audit(1761646828.701:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26173 comm="syz.3.6640" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44f218efc9 code=0x0
[ 1215.044641][T26215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6655'.
[ 1215.056787][T26216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6655'.
[ 1215.068214][T23893] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 1215.173958][T17832] vhci_hcd vhci_hcd.3: vhci_device speed not set
[ 1215.184868][T23891] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[ 1215.237667][T23893] usb 4-1: Using ep0 maxpacket: 32
[ 1215.253324][T23893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1215.274751][T23893] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1215.299457][T23893] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[ 1215.319813][T23893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1215.336976][T23893] usb 4-1: config 0 descriptor??
[ 1215.379328][T23891] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1215.402918][T23891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1215.425438][T23891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1215.451937][T23891] usb 10-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 1215.472884][T23891] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1215.481370][T23891] usb 10-1: Product: syz
[ 1215.494211][T23891] usb 10-1: Manufacturer: syz
[ 1215.498954][T23891] usb 10-1: SerialNumber: syz
[ 1215.518328][T23891] usb 10-1: config 0 descriptor??
[ 1215.534018][T26211] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1215.576731][T21794] usb 4-1: USB disconnect, device number 84
[ 1215.781669][T23891] powermate: unknown product id 0240
[ 1215.790926][T23891] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[ 1215.813823][T23891] input: Griffin SoundKnob as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input167
[ 1216.231380][    C1] powermate: config urb returned -71
[ 1216.237200][    C1] powermate: config urb returned -71
[ 1216.242950][    C1] powermate: config urb returned -71
[ 1216.249183][T17832] usb 10-1: USB disconnect, device number 49
[ 1216.255398][    C1] powermate 10-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[ 1216.435159][ T5880] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[ 1216.598011][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1216.609149][ T5880] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[ 1216.618746][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1216.630370][ T5880] usb 5-1: config 0 descriptor??
[ 1216.636426][T26233] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1217.107709][ T5880] kone 0003:1E7D:2CED.006E: hidraw0: USB HID v1.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0
[ 1217.262407][T26246] No source specified
[ 1217.269339][T17832] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 1217.311502][ T5880] usb 5-1: USB disconnect, device number 61
[ 1217.368324][T26248] program syz.9.6666 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1217.430179][T17832] usb 4-1: Using ep0 maxpacket: 32
[ 1217.440083][T17832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1217.452247][T17832] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1217.461871][T17832] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[ 1217.470993][T17832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1217.483124][T17832] usb 4-1: config 0 descriptor??
[ 1217.675681][T17832] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[ 1217.713138][ T5880] usb 4-1: USB disconnect, device number 85
[ 1217.847163][T17832] usb 10-1: Using ep0 maxpacket: 16
[ 1217.855248][T17832] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1217.866586][T17832] usb 10-1: config 1 has no interface number 1
[ 1217.873167][T17832] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1217.884416][T17832] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1217.898195][T17832] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1217.921657][T17832] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1217.931558][T17832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1217.950428][T17832] usb 10-1: Product: syz
[ 1217.954853][T17832] usb 10-1: Manufacturer: syz
[ 1217.959758][T17832] usb 10-1: SerialNumber: syz
[ 1218.198651][T17832] usb 10-1: 2:1 : format type 0 is detected, processed as PCM
[ 1218.309469][T23893] usb 5-1: new full-speed USB device number 62 using dummy_hcd
[ 1218.482606][T23893] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1218.496010][T23893] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1218.511500][T23893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64
[ 1218.527714][T23893] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1218.549023][T23893] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1218.558840][T23893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1218.571210][T23893] usb 5-1: Product: syz
[ 1218.578623][T23893] usb 5-1: Manufacturer: syz
[ 1218.583525][T23893] usb 5-1: SerialNumber: syz
[ 1218.595173][T23893] usb 5-1: config 0 descriptor??
[ 1218.652656][T23893] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input168
[ 1218.872701][T17832] usb 10-1: 2:1: cannot get freq at ep 0x82
[ 1218.895908][T26256] devtmpfs: Too few inodes for current use
[ 1219.291930][T17832] usb 4-1: new full-speed USB device number 86 using dummy_hcd
[ 1219.469634][T17832] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1219.481575][T17832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1219.501639][T17832] usb 4-1: config 0 descriptor??
[ 1220.421373][T26298] netlink: 'syz.0.6677': attribute type 12 has an invalid length.
[ 1220.436851][T26298] trusted_key: encrypted_key: master key parameter is missing
[ 1220.570367][T26302] ���������tuvҫ: renamed from lo (while UP)
[ 1220.714534][  T116] usb 10-1: USB disconnect, device number 50
[ 1221.003398][T26309] 9pnet_fd: Insufficient options for proto=fd
[ 1221.044798][T17832] pegasus 4-1:0.0: can't reset MAC
[ 1221.050450][T17832] pegasus 4-1:0.0: probe with driver pegasus failed with error -5
[ 1221.215622][  T116] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[ 1221.328487][T23979] usb 5-1: USB disconnect, device number 62
[ 1221.397564][  T116] usb 10-1: Using ep0 maxpacket: 8
[ 1221.411162][  T116] usb 10-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[ 1221.420714][  T116] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1221.430235][  T116] usb 10-1: Product: syz
[ 1221.434711][  T116] usb 10-1: Manufacturer: syz
[ 1221.439450][  T116] usb 10-1: SerialNumber: syz
[ 1221.846516][T23979] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1221.891265][  T116] mxuport 10-1:254.0: Direct firmware load for moxa/moxa-1450.fw failed with error -2
[ 1221.901223][  T116] mxuport 10-1:254.0: Falling back to sysfs fallback for: moxa/moxa-1450.fw
[ 1222.008328][T23979] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1222.018635][T23979] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1222.029191][T23979] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1222.043093][T23979] usb 5-1: config 1 interface 0 has no altsetting 1
[ 1222.052781][T23979] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1222.062055][T23979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1222.070086][T23979] usb 5-1: Product: syz
[ 1222.074766][T23979] usb 5-1: Manufacturer: syz
[ 1222.079481][T23979] usb 5-1: SerialNumber: syz
[ 1222.091892][T23979] smsusb:smsusb_probe: board id=8, interface number 0
[ 1222.308205][T23979] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[ 1222.315896][T23979] smsusb 5-1:1.0: probe with driver smsusb failed with error -71
[ 1222.326624][T23979] usb 5-1: USB disconnect, device number 63
[ 1222.362065][T21794] usb 4-1: USB disconnect, device number 86
[ 1223.072975][T23893] IPVS: starting estimator thread 0...
[ 1223.172404][T26333] IPVS: using max 31 ests per chain, 74400 per kthread
[ 1223.247512][T23979] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1223.407944][T23979] usb 5-1: device descriptor read/64, error -71
[ 1223.434177][T26339] loop3: detected capacity change from 0 to 7
[ 1223.441946][T26339] Dev loop3: unable to read RDB block 7
[ 1223.447581][T26339]  loop3: unable to read partition table
[ 1223.455889][T26339] loop3: partition table beyond EOD, truncated
[ 1223.463804][T26339] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[ 1223.669242][T23979] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1223.813256][T26357] syzkaller1: entered promiscuous mode
[ 1223.820677][T26357] syzkaller1: entered allmulticast mode
[ 1223.824726][T23979] usb 5-1: device descriptor read/64, error -71
[ 1223.831983][T26357] netlink: 'syz.9.6700': attribute type 11 has an invalid length.
[ 1223.954976][T23979] usb usb5-port1: attempt power cycle
[ 1223.960726][T13529] usb 4-1: new full-speed USB device number 87 using dummy_hcd
[ 1224.141093][T13529] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1224.154827][T13529] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1224.165628][T13529] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.80
[ 1224.176043][T13529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1224.188768][T13529] usb 4-1: config 0 descriptor??
[ 1224.195550][T26351] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1224.327493][T23979] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 1224.352717][T23979] usb 5-1: device descriptor read/8, error -71
[ 1224.628182][T23979] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 1224.650601][T23979] usb 5-1: device descriptor read/8, error -71
[ 1224.667662][T13529] logitech 0003:046D:C50C.006F: hidraw0: USB HID v1.01 Device [HID 046d:c50c] on usb-dummy_hcd.3-1/input0
[ 1224.808952][T23979] usb usb5-port1: unable to enumerate USB device
[ 1224.864737][T26367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1224.879571][T26367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1224.913276][T23893] usb 4-1: USB disconnect, device number 87
[ 1225.845818][T24535] usb 4-1: new full-speed USB device number 88 using dummy_hcd
[ 1225.984979][T24535] usb 4-1: device descriptor read/64, error -71
[ 1226.241492][T24535] usb 4-1: new full-speed USB device number 89 using dummy_hcd
[ 1226.374197][T26409] delete_channel: no stack
[ 1226.378900][T26409] delete_channel: no stack
[ 1226.391559][T24535] usb 4-1: device descriptor read/64, error -71
[ 1226.512718][T24535] usb usb4-port1: attempt power cycle
[ 1226.816240][T26422] binder: 26421:26422 unknown command 0
[ 1226.822899][T26422] binder: 26421:26422 ioctl c0306201 200000000080 returned -22
[ 1226.836092][T26422] afs: Unknown parameter 'aut  �Z�~�ock'
[ 1226.845581][T26422] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1226.853954][T26422] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 1226.862751][T26422] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1226.870831][T26422] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 1226.883159][T24535] usb 4-1: new full-speed USB device number 90 using dummy_hcd
[ 1226.905581][T24535] usb 4-1: device descriptor read/8, error -71
[ 1227.172531][T24535] usb 4-1: new full-speed USB device number 91 using dummy_hcd
[ 1227.194340][T24535] usb 4-1: device descriptor read/8, error -71
[ 1227.313285][T24535] usb usb4-port1: unable to enumerate USB device
[ 1228.717778][T26447] NILFS (nullb0): couldn't find nilfs on the device
[ 1228.858924][T26451] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1229.129179][T23979] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 1229.278574][T23979] usb 5-1: device descriptor read/64, error -71
[ 1229.545918][T23979] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[ 1229.685485][T23979] usb 5-1: device descriptor read/64, error -71
[ 1229.719480][T13529] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1229.803018][T23979] usb usb5-port1: attempt power cycle
[ 1229.888446][T13529] usb 4-1: Using ep0 maxpacket: 32
[ 1229.896110][T13529] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1229.914409][T13529] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1229.923843][T13529] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[ 1229.933267][T13529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1229.944376][T13529] usb 4-1: config 0 descriptor??
[ 1230.171004][T17832] usb 4-1: USB disconnect, device number 92
[ 1230.178493][T23979] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 1230.200500][T23979] usb 5-1: device descriptor read/8, error -71
[ 1230.455068][T23979] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 1230.500622][T23979] usb 5-1: device descriptor read/8, error -71
[ 1230.618280][T23979] usb usb5-port1: unable to enumerate USB device
[ 1231.343924][   T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1231.503040][   T10] usb 4-1: Using ep0 maxpacket: 16
[ 1231.514361][   T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[ 1231.535206][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1231.543359][   T10] usb 4-1: Product: syz
[ 1231.566761][   T10] usb 4-1: Manufacturer: syz
[ 1231.571608][   T10] usb 4-1: SerialNumber: syz
[ 1231.589817][   T10] usb 4-1: config 0 descriptor??
[ 1231.615813][   T10] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[ 1231.702858][T26524] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6762'.
[ 1231.817076][T26499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1231.842866][T26499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1231.868664][T26499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1231.887316][T26499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1231.934108][T26499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1231.984915][T26499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1232.067276][   T10] gspca_sn9c2028: read1 error -71
[ 1232.086409][   T10] gspca_sn9c2028: read1 error -71
[ 1232.146695][   T10] gspca_sn9c2028: read1 error -71
[ 1232.152093][   T10] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71
[ 1232.203986][   T10] usb 4-1: USB disconnect, device number 93
[ 1232.551119][T23979] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[ 1232.725205][T23979] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1232.755663][T23979] usb 5-1: can't read configurations, error -61
[ 1232.916546][T23979] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 1233.105872][T23979] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1233.129644][T23979] usb 5-1: can't read configurations, error -61
[ 1233.148687][T23979] usb usb5-port1: attempt power cycle
[ 1233.310347][   T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1233.487086][   T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1233.504009][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1233.512157][   T10] usb 4-1: Product: syz
[ 1233.530001][T23979] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 1233.538415][   T10] usb 4-1: Manufacturer: syz
[ 1233.543061][   T10] usb 4-1: SerialNumber: syz
[ 1233.557531][   T10] usb 4-1: config 0 descriptor??
[ 1233.572501][T23979] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1233.586914][   T10] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1233.608686][T23979] usb 5-1: can't read configurations, error -61
[ 1233.751303][T23979] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 1233.784106][   T10] gspca_sunplus: reg_r err -71
[ 1233.795958][T23979] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1233.806871][   T10] usb 4-1: USB disconnect, device number 94
[ 1233.814250][T23979] usb 5-1: can't read configurations, error -61
[ 1233.826114][T23979] usb usb5-port1: unable to enumerate USB device
[ 1234.754215][   T10] usb 4-1: new low-speed USB device number 95 using dummy_hcd
[ 1234.927027][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1234.937412][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1234.952580][   T10] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[ 1234.961964][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1234.973093][   T10] usb 4-1: config 0 descriptor??
[ 1235.196573][T26584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1235.207966][T26584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1235.447884][   T10] uclogic 0003:5543:0064.0070: item fetching failed at offset 0/1
[ 1235.485471][   T10] uclogic 0003:5543:0064.0070: parse failed
[ 1235.505012][   T10] uclogic 0003:5543:0064.0070: probe with driver uclogic failed with error -22
[ 1235.650835][T23891] usb 4-1: USB disconnect, device number 95
[ 1236.374231][T13529] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[ 1236.378849][   T30] audit: type=1326 audit(1761648641.837:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26607 comm="syz.0.6796" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa53f8efc9 code=0x0
[ 1236.549952][T13529] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1236.559559][   T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1236.567650][T13529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1236.582023][T13529] usb 5-1: Product: syz
[ 1236.586474][T13529] usb 5-1: Manufacturer: syz
[ 1236.592288][T13529] usb 5-1: SerialNumber: syz
[ 1236.732601][   T10] usb 4-1: Using ep0 maxpacket: 32
[ 1236.740401][   T10] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 252, changing to 11
[ 1236.752935][   T10] usb 4-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1236.766537][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1236.773697][   T10] usb 4-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.00
[ 1236.783452][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1236.807302][   T10] usb 4-1: config 0 descriptor??
[ 1237.036837][T26605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1237.046463][T26605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1237.046777][T13529] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1237.069829][T13529] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1237.299580][   T10] usb 4-1: string descriptor 0 read error: -71
[ 1237.316653][   T10] usbhid 4-1:0.0: can't add hid device: -71
[ 1237.323518][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1237.353600][   T10] usb 4-1: USB disconnect, device number 96
[ 1237.514055][T13529] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[ 1237.526675][T13529] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1237.538864][T13529] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1237.549474][T13529] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[ 1237.563449][T13529] usb 5-1: USB disconnect, device number 76
[ 1238.475491][T13529] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1238.528979][   T10] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[ 1238.635944][T13529] usb 4-1: Using ep0 maxpacket: 32
[ 1238.643480][T13529] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1238.654727][T13529] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1238.663872][T13529] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[ 1238.675275][T13529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1238.686581][T13529] usb 4-1: config 0 descriptor??
[ 1238.699988][   T10] usb 5-1: Using ep0 maxpacket: 32
[ 1238.708035][   T10] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1238.718836][   T10] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1238.730971][   T10] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1238.742500][   T10] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1238.759947][   T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1238.770228][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1238.778611][   T10] usb 5-1: Product: syz
[ 1238.784521][   T10] usb 5-1: Manufacturer: syz
[ 1238.789721][   T10] usb 5-1: SerialNumber: syz
[ 1238.813016][    C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1238.825446][   T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input170
[ 1238.917188][T13529] usb 4-1: USB disconnect, device number 97
[ 1239.042194][   T10] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1239.051575][   T10]  (id 0x00)
[ 1239.106365][   T10] rc_core: IR keymap rc-imon-pad not found
[ 1239.113997][   T10] Registered IR keymap rc-empty
[ 1239.119516][   T10] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1239.130329][   T10] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1239.259676][   T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0
[ 1239.273140][   T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input171
[ 1239.288530][   T10] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:77> initialized
[ 1240.346961][T23891] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 1240.529750][T23891] usb 4-1: too many configurations: 17, using maximum allowed: 8
[ 1240.551917][T23891] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 1240.561298][T23891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1240.569498][T23891] usb 4-1: Product: syz
[ 1240.575345][T23891] usb 4-1: Manufacturer: syz
[ 1240.580093][T23891] usb 4-1: SerialNumber: syz
[ 1240.592946][T23891] usb 4-1: config 0 descriptor??
[ 1240.602441][T23891] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 1240.615529][T23891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1240.626204][T23891] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[ 1240.636035][T23891] usb 4-1: media controller created
[ 1240.655615][T23891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1240.718874][T26653] imon:send_packet: packet tx failed (-71)
[ 1240.719344][T24535] usb 5-1: USB disconnect, device number 77
[ 1240.764686][T26653] imon:vfd_write: send packet #4 failed
[ 1240.793340][T23891] DVB: Unable to find symbol mt352_attach()
[ 1240.861119][T26666] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6815'.
[ 1240.877525][T23891] DVB: Unable to find symbol nxt6000_attach()
[ 1240.884183][T23891] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[ 1240.898508][T23891] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input172
[ 1240.912527][T23891] dvb-usb: schedule remote query interval to 1000 msecs.
[ 1240.922390][T23891] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[ 1240.932930][T23891] dvb-usb: bulk message failed: -22 (7/0)
[ 1240.939303][T23891] dvb-usb: bulk message failed: -22 (7/0)
[ 1240.952557][T23891] usb 4-1: USB disconnect, device number 98
[ 1241.018166][T23891] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[ 1241.466827][T26668] binder: 26667:26668 ioctl c0306201 0 returned -14
[ 1241.477589][T26668] binder: 26667:26668 ioctl c0306201 2000000000c0 returned -11
[ 1241.824806][T26676] batadv_slave_0: entered promiscuous mode
[ 1241.890507][T26674] batadv_slave_0: left promiscuous mode
[ 1242.293233][   T10] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[ 1242.463008][   T10] usb 5-1: config 8 has an invalid interface number: 223 but max is 0
[ 1242.491616][   T10] usb 5-1: config 8 contains an unexpected descriptor of type 0x2, skipping
[ 1242.505022][   T10] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1242.519254][   T10] usb 5-1: config 8 has no interface number 0
[ 1242.525616][   T10] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[ 1242.538669][   T10] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1242.556111][   T10] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[ 1242.574443][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1242.585858][   T10] usb 5-1: Product: syz
[ 1242.597336][   T10] usb 5-1: Manufacturer: syz
[ 1242.601996][   T10] usb 5-1: SerialNumber: syz
[ 1242.609377][T26713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1242.623203][T26713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1242.635160][T26713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1242.657411][T26713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1242.863138][T26692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1242.892490][T26692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1243.004828][   T10] usb 5-1: USB disconnect, device number 78
[ 1243.105227][T26733] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6837'.
[ 1244.264678][T26759] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6846'.
[ 1244.420363][T26764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6848'.
[ 1244.785060][T23893] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 1244.977597][T23893] usb 5-1: Using ep0 maxpacket: 16
[ 1245.004267][T23893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1245.031608][T23893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1245.062864][T23893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1245.083680][T23893] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1245.107869][T23893] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1245.126055][T23893] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1245.142783][T23893] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1245.151439][T23893] usb 5-1: Manufacturer: syz
[ 1245.172303][T23893] usb 5-1: config 0 descriptor??
[ 1245.266099][T24535] usb 4-1: new full-speed USB device number 99 using dummy_hcd
[ 1245.429524][T24535] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1245.446418][T24535] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1245.462357][T24535] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1245.477283][T23893] rc_core: IR keymap rc-hauppauge not found
[ 1245.483484][T23893] Registered IR keymap rc-empty
[ 1245.489069][T23893] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1245.500104][T24535] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1245.509482][T24535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1245.518295][T23893] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1245.527136][T24535] usb 4-1: Product: syz
[ 1245.531331][T24535] usb 4-1: Manufacturer: syz
[ 1245.536555][T24535] usb 4-1: SerialNumber: syz
[ 1245.547295][T26781] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1245.558015][T23893] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1245.573325][T24535] usb 4-1: bad CDC descriptors
[ 1245.580718][T23893] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input174
[ 1245.603752][T23893] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1245.622616][T26771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1245.632655][T26771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1245.640931][T23893] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1245.662101][T23893] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1245.693982][T23893] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1245.715450][T23893] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1245.736718][T23893] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1245.758155][T23893] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1245.779471][T23893] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1245.801059][T23893] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1245.822374][T23893] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1245.847231][T23893] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1245.859561][T23893] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1245.955650][T23893] usb 5-1: USB disconnect, device number 79
[ 1245.982220][T26784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1245.997626][T26784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1246.168820][ T5880] usb 4-1: USB disconnect, device number 99
[ 1246.535457][T23893] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0
[ 1246.543029][T23893] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0
[ 1246.551102][T23893] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0
[ 1246.560719][T23893] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0
[ 1246.568369][T23893] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0
[ 1246.576735][T23893] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0
[ 1246.589397][T23893] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0
[ 1246.599260][T23893] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0
[ 1246.607984][T23893] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0
[ 1246.615600][T23893] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0
[ 1246.628373][T23893] hid-generic 0006:0004:0009.0071: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 1246.704707][T26788] fido_id[26788]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1246.707903][T26790] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6858'.
[ 1246.956933][T26803] __vm_enough_memory: pid: 26803, comm: syz.4.6862, bytes: 4503599627366400 not enough memory for the allocation
[ 1247.520936][T26824] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6867'.
[ 1247.533240][T24535] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[ 1247.721817][T24535] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1247.733346][T24535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1247.742773][T24535] usb 5-1: Product: syz
[ 1247.747024][T24535] usb 5-1: Manufacturer: syz
[ 1247.751678][T24535] usb 5-1: SerialNumber: syz
[ 1247.761039][T24535] usb 5-1: config 0 descriptor??
[ 1248.001336][T24535] hso 5-1:0.0: Failed to find BULK IN ep
[ 1248.025745][T24535] usb-storage 5-1:0.0: USB Mass Storage device detected
[ 1248.230409][ T5880] usb 5-1: USB disconnect, device number 80
[ 1248.678477][T26852] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6876'.
[ 1248.793172][T26854] netlink: 'syz.3.6877': attribute type 28 has an invalid length.
[ 1249.079428][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1249.086130][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1249.904899][T26879] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6886'.
[ 1249.939305][T24535] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 1250.117623][T24535] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1250.139072][T24535] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1250.153288][T24535] usb 5-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00
[ 1250.173518][T24535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1250.196006][T24535] usb 5-1: config 0 descriptor??
[ 1250.335014][   T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1250.495324][   T10] usb 4-1: Using ep0 maxpacket: 32
[ 1250.506944][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1250.517490][   T10] usb 4-1: config 125 has an invalid interface number: 27 but max is 0
[ 1250.526260][   T10] usb 4-1: config 125 has no interface number 0
[ 1250.533342][   T10] usb 4-1: config 125 interface 27 has no altsetting 0
[ 1250.548024][   T10] usb 4-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70
[ 1250.570165][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1250.578706][   T10] usb 4-1: Product: syz
[ 1250.583197][   T10] usb 4-1: Manufacturer: syz
[ 1250.588095][   T10] usb 4-1: SerialNumber: syz
[ 1250.655126][T24535] aquacomputer_d5next 0003:0C70:F014.0072: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.4-1/input0
[ 1250.838837][T26886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1250.872124][T26886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1250.917225][   T10] hub 4-1:125.27: bad descriptor, ignoring hub
[ 1250.936358][   T10] hub 4-1:125.27: probe with driver hub failed with error -5
[ 1250.962915][   T10] sierra 4-1:125.27: Sierra USB modem converter detected
[ 1250.998583][   T10] usb 4-1: Sierra USB modem converter now attached to ttyUSB0
[ 1251.040441][   T10] usb 4-1: USB disconnect, device number 100
[ 1251.082733][   T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1251.099308][T26892] netlink: 212 bytes leftover after parsing attributes in process `syz.9.6890'.
[ 1251.110381][T26893] netlink: 212 bytes leftover after parsing attributes in process `syz.9.6890'.
[ 1251.122857][   T10] sierra 4-1:125.27: device disconnected
[ 1251.733522][T26903] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6894'.
[ 1251.961472][ T5880] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1252.148832][ T5880] usb 4-1: Using ep0 maxpacket: 16
[ 1252.165761][ T5880] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1252.173778][ T5880] usb 4-1: can't read configurations, error -61
[ 1252.324017][ T5880] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1252.495305][ T5880] usb 4-1: Using ep0 maxpacket: 16
[ 1252.517734][ T5880] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1252.525674][ T5880] usb 4-1: can't read configurations, error -61
[ 1252.539043][ T5880] usb usb4-port1: attempt power cycle
[ 1252.584285][T24535] usb 5-1: USB disconnect, device number 81
[ 1252.726158][T26915] XFS (nullb0): Invalid superblock magic number
[ 1252.901942][ T5880] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1252.947653][ T5880] usb 4-1: Using ep0 maxpacket: 16
[ 1252.965100][ T5880] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1252.976044][ T5880] usb 4-1: can't read configurations, error -61
[ 1253.094490][T24535] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 1253.126533][ T5880] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1253.164855][ T5880] usb 4-1: Using ep0 maxpacket: 16
[ 1253.176093][ T5880] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1253.195659][ T5880] usb 4-1: can't read configurations, error -61
[ 1253.212175][ T5880] usb usb4-port1: unable to enumerate USB device
[ 1253.462570][T26933] tmpfs: Bad value for 'nr_blocks'
[ 1255.330215][ T5880] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1255.465006][T26953] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6911'.
[ 1255.496134][T26953] .30�X��D: renamed from macvtap0 (while UP)
[ 1255.507990][T26953] .30�X��D: entered allmulticast mode
[ 1255.524158][ T5880] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[ 1255.542901][T26953] veth0_macvtap: entered allmulticast mode
[ 1255.557030][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1255.566641][T26953] A link change request failed with some changes committed already. Interface .30�X��D may have been left with an inconsistent configuration, please check.
[ 1255.593126][ T5880] usb 4-1: Product: syz
[ 1255.603521][ T5880] usb 4-1: Manufacturer: syz
[ 1255.614213][ T5880] usb 4-1: SerialNumber: syz
[ 1256.102186][T26956] erofs (device nbd4): cannot find valid erofs superblock
[ 1256.271361][T26958] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6913'.
[ 1256.288795][T26947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1256.325111][T26947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1256.571046][ T5880] (unnamed net_device) (uninitialized): Assigned a random MAC address: 7e:38:f9:af:a1:b5
[ 1256.631777][ T5880] rtl8150 4-1:1.0: eth1: rtl8150 is detected
[ 1258.080673][T26977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1258.270400][T26982] No control pipe specified
[ 1258.295198][    C1] usb 4-1: eth1: intr status -71
[ 1258.295717][   T10] usb 4-1: USB disconnect, device number 105
[ 1258.322809][ T5493] usb 4-1: device reset failed
[ 1258.674694][T26995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6921'.
[ 1258.806954][T26999] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6922'.
[ 1258.853086][T27001] overlayfs: failed to resolve './file0': -2
[ 1258.866958][   T10] hid_parser_main: 10 callbacks suppressed
[ 1258.866984][   T10] hid-generic 0003:0006:0531.0073: unknown main item tag 0x2
[ 1258.884875][   T30] audit: type=1326 audit(1761648918.890:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f218efc9 code=0x7ffc0000
[ 1258.908228][   T10] hid-generic 0003:0006:0531.0073: unknown main item tag 0x3
[ 1258.908266][   T10] hid-generic 0003:0006:0531.0073: item fetching failed at offset 16/198
[ 1258.908979][   T10] hid-generic 0003:0006:0531.0073: probe with driver hid-generic failed with error -22
[ 1258.956138][   T30] audit: type=1326 audit(1761648918.890:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f218efc9 code=0x7ffc0000
[ 1258.979502][   T30] audit: type=1326 audit(1761648918.890:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f218efc9 code=0x7ffc0000
[ 1259.007606][   T30] audit: type=1326 audit(1761648918.890:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f218efc9 code=0x7ffc0000
[ 1259.061904][   T30] audit: type=1326 audit(1761648918.890:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f44f218efc9 code=0x7ffc0000
[ 1259.084992][   T30] audit: type=1326 audit(1761648918.890:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f218efc9 code=0x7ffc0000
[ 1259.113267][   T30] audit: type=1326 audit(1761648918.890:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f218efc9 code=0x7ffc0000
[ 1259.175219][   T30] audit: type=1326 audit(1761648918.890:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f218efc9 code=0x7ffc0000
[ 1259.214063][   T30] audit: type=1326 audit(1761648918.890:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f218efc9 code=0x7ffc0000
[ 1259.237054][   T30] audit: type=1326 audit(1761648918.890:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44f218efc9 code=0x7ffc0000
[ 1259.430631][T27016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6926'.
[ 1259.443336][T27016] netlink: 480 bytes leftover after parsing attributes in process `syz.4.6926'.
[ 1259.453522][T27016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6926'.
[ 1259.498545][T27018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6927'.
[ 1259.725299][T27028] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6932'.
[ 1259.734871][T23893] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[ 1259.782118][T27030] binder_alloc: 27029: binder_alloc_buf, no vma
[ 1259.895498][T23893] usb 5-1: Using ep0 maxpacket: 32
[ 1259.903422][T23893] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1259.922636][T23893] usb 5-1: config 0 has an invalid interface number: 251 but max is 1
[ 1259.932721][T23893] usb 5-1: config 0 has an invalid interface number: 2 but max is 1
[ 1259.939696][T21794] usb 4-1: new full-speed USB device number 106 using dummy_hcd
[ 1259.942558][T23893] usb 5-1: config 0 has no interface number 0
[ 1259.955244][T23893] usb 5-1: config 0 has no interface number 1
[ 1259.961988][T23893] usb 5-1: config 0 interface 251 has no altsetting 0
[ 1259.969034][T23893] usb 5-1: config 0 interface 2 has no altsetting 0
[ 1259.979147][T23893] usb 5-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f
[ 1259.989851][T23893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1259.998338][T23893] usb 5-1: Product: syz
[ 1260.006218][T23893] usb 5-1: Manufacturer: syz
[ 1260.011016][T23893] usb 5-1: SerialNumber: syz
[ 1260.026631][T23893] usb 5-1: config 0 descriptor??
[ 1260.131125][T21794] usb 4-1: config 0 has no interfaces?
[ 1260.143904][T21794] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[ 1260.158273][T21794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1260.167463][T21794] usb 4-1: Product: syz
[ 1260.171786][T21794] usb 4-1: Manufacturer: syz
[ 1260.177053][T21794] usb 4-1: SerialNumber: syz
[ 1260.191833][T21794] usb 4-1: config 0 descriptor??
[ 1260.259778][T23893] usb 5-1: selecting invalid altsetting 0
[ 1260.265695][T23893] usb 5-1: Could not set interface, error -22
[ 1260.276642][T23893] usb 5-1: USB disconnect, device number 83
[ 1260.422389][T27024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1260.431618][T27024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1260.445737][T21794] usb 4-1: USB disconnect, device number 106
[ 1260.829962][T27041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1260.839280][T27041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1260.921929][T23893] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1261.092926][T23893] usb 4-1: Using ep0 maxpacket: 16
[ 1261.106060][T23893] usb 4-1: config 0 has no interfaces?
[ 1261.123293][T23893] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[ 1261.140226][T23893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1261.152650][T23893] usb 4-1: Manufacturer: 潘
[ 1261.159616][T23893] usb 4-1: SerialNumber: syz
[ 1261.176956][T23893] usb 4-1: config 0 descriptor??
[ 1261.270165][T27044] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6938'.
[ 1261.406322][T23893] usb 4-1: USB disconnect, device number 107
[ 1261.687113][T27054] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6941'.
[ 1262.423945][T27077] overlayfs: failed to resolve './file1': -2
[ 1262.580766][T27083] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6954'.
[ 1262.648675][T27086] FAULT_INJECTION: forcing a failure.
[ 1262.648675][T27086] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1262.667109][T27086] CPU: 0 UID: 0 PID: 27086 Comm: syz.3.6955 Not tainted syzkaller #0 PREEMPT(full) 
[ 1262.667140][T27086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1262.667153][T27086] Call Trace:
[ 1262.667161][T27086]  <TASK>
[ 1262.667170][T27086]  dump_stack_lvl+0x189/0x250
[ 1262.667202][T27086]  ? __pfx____ratelimit+0x10/0x10
[ 1262.667231][T27086]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1262.667268][T27086]  ? __pfx__printk+0x10/0x10
[ 1262.667291][T27086]  ? __might_fault+0xb0/0x130
[ 1262.667331][T27086]  should_fail_ex+0x414/0x560
[ 1262.667367][T27086]  _copy_from_user+0x2d/0xb0
[ 1262.667395][T27086]  ___sys_sendmsg+0x158/0x2a0
[ 1262.667422][T27086]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1262.667482][T27086]  ? __fget_files+0x2a/0x420
[ 1262.667506][T27086]  ? __fget_files+0x3a0/0x420
[ 1262.667541][T27086]  __x64_sys_sendmsg+0x19b/0x260
[ 1262.667567][T27086]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1262.667599][T27086]  ? __pfx_ksys_write+0x10/0x10
[ 1262.667626][T27086]  ? do_syscall_64+0xbe/0xfa0
[ 1262.667649][T27086]  do_syscall_64+0xfa/0xfa0
[ 1262.667668][T27086]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1262.667687][T27086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1262.667708][T27086]  ? clear_bhb_loop+0x60/0xb0
[ 1262.667733][T27086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1262.667754][T27086] RIP: 0033:0x7f44f218efc9
[ 1262.667773][T27086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1262.667790][T27086] RSP: 002b:00007f44f306f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1262.667812][T27086] RAX: ffffffffffffffda RBX: 00007f44f23e5fa0 RCX: 00007f44f218efc9
[ 1262.667827][T27086] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003
[ 1262.667842][T27086] RBP: 00007f44f306f090 R08: 0000000000000000 R09: 0000000000000000
[ 1262.667855][T27086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1262.667867][T27086] R13: 00007f44f23e6038 R14: 00007f44f23e5fa0 R15: 00007ffd37a82858
[ 1262.667901][T27086]  </TASK>
[ 1263.456900][T27117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6966'.
[ 1263.748041][T27127] FAULT_INJECTION: forcing a failure.
[ 1263.748041][T27127] name failslab, interval 1, probability 0, space 0, times 0
[ 1263.761534][T27127] CPU: 1 UID: 0 PID: 27127 Comm: syz.3.6969 Not tainted syzkaller #0 PREEMPT(full) 
[ 1263.761562][T27127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1263.761570][T27127] Call Trace:
[ 1263.761575][T27127]  <TASK>
[ 1263.761581][T27127]  dump_stack_lvl+0x189/0x250
[ 1263.761602][T27127]  ? __pfx____ratelimit+0x10/0x10
[ 1263.761619][T27127]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1263.761632][T27127]  ? __pfx__printk+0x10/0x10
[ 1263.761650][T27127]  ? __pfx___might_resched+0x10/0x10
[ 1263.761662][T27127]  ? fs_reclaim_acquire+0x7d/0x100
[ 1263.761692][T27127]  should_fail_ex+0x414/0x560
[ 1263.761728][T27127]  should_failslab+0xa8/0x100
[ 1263.761749][T27127]  kmem_cache_alloc_node_noprof+0x8c/0x710
[ 1263.761778][T27127]  ? __alloc_skb+0x112/0x2d0
[ 1263.761790][T27127]  ? netlink_autobind+0xdb/0x300
[ 1263.761806][T27127]  __alloc_skb+0x112/0x2d0
[ 1263.761820][T27127]  netlink_sendmsg+0x5c6/0xb30
[ 1263.761837][T27127]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1263.761852][T27127]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1263.761868][T27127]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1263.761880][T27127]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1263.761893][T27127]  __sock_sendmsg+0x21c/0x270
[ 1263.761911][T27127]  ____sys_sendmsg+0x505/0x830
[ 1263.761927][T27127]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1263.761946][T27127]  ? import_iovec+0x74/0xa0
[ 1263.761969][T27127]  ___sys_sendmsg+0x21f/0x2a0
[ 1263.761994][T27127]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1263.762052][T27127]  ? __fget_files+0x2a/0x420
[ 1263.762069][T27127]  ? __fget_files+0x3a0/0x420
[ 1263.762089][T27127]  __x64_sys_sendmsg+0x19b/0x260
[ 1263.762104][T27127]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1263.762122][T27127]  ? __pfx_ksys_write+0x10/0x10
[ 1263.762138][T27127]  ? do_syscall_64+0xbe/0xfa0
[ 1263.762152][T27127]  do_syscall_64+0xfa/0xfa0
[ 1263.762162][T27127]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1263.762173][T27127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1263.762185][T27127]  ? clear_bhb_loop+0x60/0xb0
[ 1263.762199][T27127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1263.762211][T27127] RIP: 0033:0x7f44f218efc9
[ 1263.762224][T27127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1263.762234][T27127] RSP: 002b:00007f44f306f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1263.762249][T27127] RAX: ffffffffffffffda RBX: 00007f44f23e5fa0 RCX: 00007f44f218efc9
[ 1263.762259][T27127] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003
[ 1263.762267][T27127] RBP: 00007f44f306f090 R08: 0000000000000000 R09: 0000000000000000
[ 1263.762274][T27127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1263.762282][T27127] R13: 00007f44f23e6038 R14: 00007f44f23e5fa0 R15: 00007ffd37a82858
[ 1263.762304][T27127]  </TASK>
[ 1264.132079][T27129] FAULT_INJECTION: forcing a failure.
[ 1264.132079][T27129] name failslab, interval 1, probability 0, space 0, times 0
[ 1264.144979][T27129] CPU: 0 UID: 0 PID: 27129 Comm: syz.3.6970 Not tainted syzkaller #0 PREEMPT(full) 
[ 1264.144999][T27129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1264.145006][T27129] Call Trace:
[ 1264.145011][T27129]  <TASK>
[ 1264.145017][T27129]  dump_stack_lvl+0x189/0x250
[ 1264.145037][T27129]  ? __pfx____ratelimit+0x10/0x10
[ 1264.145055][T27129]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1264.145069][T27129]  ? __pfx__printk+0x10/0x10
[ 1264.145086][T27129]  ? __pfx___might_resched+0x10/0x10
[ 1264.145097][T27129]  ? fs_reclaim_acquire+0x7d/0x100
[ 1264.145118][T27129]  should_fail_ex+0x414/0x560
[ 1264.145139][T27129]  should_failslab+0xa8/0x100
[ 1264.145153][T27129]  __kmalloc_noprof+0xdf/0x800
[ 1264.145168][T27129]  ? tomoyo_encode+0x28b/0x550
[ 1264.145186][T27129]  tomoyo_encode+0x28b/0x550
[ 1264.145204][T27129]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1264.145219][T27129]  ? tomoyo_domain+0xd8/0x130
[ 1264.145237][T27129]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1264.145251][T27129]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1264.145267][T27129]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1264.145302][T27129]  ? __fget_files+0x2a/0x420
[ 1264.145320][T27129]  ? __fget_files+0x3a0/0x420
[ 1264.145333][T27129]  ? __fget_files+0x2a/0x420
[ 1264.145350][T27129]  security_file_ioctl+0xcb/0x2d0
[ 1264.145369][T27129]  __se_sys_ioctl+0x47/0x170
[ 1264.145382][T27129]  do_syscall_64+0xfa/0xfa0
[ 1264.145393][T27129]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1264.145404][T27129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1264.145416][T27129]  ? clear_bhb_loop+0x60/0xb0
[ 1264.145430][T27129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1264.145442][T27129] RIP: 0033:0x7f44f218efc9
[ 1264.145454][T27129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1264.145469][T27129] RSP: 002b:00007f44f306f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1264.145492][T27129] RAX: ffffffffffffffda RBX: 00007f44f23e5fa0 RCX: 00007f44f218efc9
[ 1264.145517][T27129] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 1264.145530][T27129] RBP: 00007f44f306f090 R08: 0000000000000000 R09: 0000000000000000
[ 1264.145543][T27129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1264.145555][T27129] R13: 00007f44f23e6038 R14: 00007f44f23e5fa0 R15: 00007ffd37a82858
[ 1264.145579][T27129]  </TASK>
[ 1264.145595][T27129] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1264.676801][T27140] netlink: 'syz.3.6973': attribute type 21 has an invalid length.
[ 1264.699474][T27136] input: syz1 as /devices/virtual/input/input176
[ 1264.777129][T27144] program syz.4.6976 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1264.865158][ T5842] Bluetooth: hci2: unexpected subevent 0x04 length: 7 < 11
[ 1265.124644][   T10] usb 4-1: new full-speed USB device number 108 using dummy_hcd
[ 1265.287496][   T10] usb 4-1: config 6 has an invalid interface number: 52 but max is 1
[ 1265.296514][   T10] usb 4-1: config 6 has an invalid interface number: 135 but max is 1
[ 1265.304868][   T10] usb 4-1: config 6 has no interface number 0
[ 1265.311393][   T10] usb 4-1: config 6 has no interface number 1
[ 1265.318035][   T10] usb 4-1: config 6 interface 52 altsetting 127 has an invalid descriptor for endpoint zero, skipping
[ 1265.329748][   T10] usb 4-1: config 6 interface 52 has no altsetting 0
[ 1265.336503][   T10] usb 4-1: config 6 interface 135 has no altsetting 0
[ 1265.346577][   T10] usb 4-1: New USB device found, idVendor=2357, idProduct=0137, bcdDevice=ba.11
[ 1265.356077][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1265.364374][   T10] usb 4-1: Product: syz
[ 1265.368561][   T10] usb 4-1: Manufacturer: syz
[ 1265.373956][   T10] usb 4-1: SerialNumber: syz
[ 1266.465767][T27169] FAULT_INJECTION: forcing a failure.
[ 1266.465767][T27169] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1266.496854][T27169] CPU: 0 UID: 0 PID: 27169 Comm: syz.0.6985 Not tainted syzkaller #0 PREEMPT(full) 
[ 1266.496893][T27169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1266.496906][T27169] Call Trace:
[ 1266.496916][T27169]  <TASK>
[ 1266.496926][T27169]  dump_stack_lvl+0x189/0x250
[ 1266.496967][T27169]  ? __pfx____ratelimit+0x10/0x10
[ 1266.496998][T27169]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1266.497024][T27169]  ? __pfx__printk+0x10/0x10
[ 1266.497050][T27169]  ? fs_reclaim_acquire+0x7d/0x100
[ 1266.497092][T27169]  should_fail_ex+0x414/0x560
[ 1266.497131][T27169]  prepare_alloc_pages+0x22b/0x650
[ 1266.497162][T27169]  __alloc_frozen_pages_noprof+0x123/0x370
[ 1266.497188][T27169]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1266.497220][T27169]  ? policy_nodemask+0x27c/0x720
[ 1266.497238][T27169]  ? __lock_acquire+0xab9/0xd20
[ 1266.497275][T27169]  alloc_pages_mpol+0x232/0x4a0
[ 1266.497303][T27169]  vma_alloc_folio_noprof+0xe4/0x200
[ 1266.497329][T27169]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1266.497366][T27169]  folio_prealloc+0x30/0x180
[ 1266.497398][T27169]  __handle_mm_fault+0x2a86/0x5440
[ 1266.497445][T27169]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1266.497502][T27169]  ? follow_page_pte+0x7ef/0x13e0
[ 1266.497540][T27169]  handle_mm_fault+0x40a/0x8e0
[ 1266.497579][T27169]  __get_user_pages+0x1650/0x29f0
[ 1266.497645][T27169]  get_user_pages_unlocked+0x1e3/0x720
[ 1266.497686][T27169]  hva_to_pfn+0x313/0xc90
[ 1266.497722][T27169]  ? __pfx_hva_to_pfn+0x10/0x10
[ 1266.497757][T27169]  ? xas_start+0x390/0x770
[ 1266.497787][T27169]  ? xa_load+0x60/0x210
[ 1266.497818][T27169]  ? kvm_follow_pfn+0x21a/0x3c0
[ 1266.497848][T27169]  __kvm_faultin_pfn+0xaa/0x100
[ 1266.497882][T27169]  kvm_mmu_faultin_pfn+0x73c/0x1590
[ 1266.497935][T27169]  ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10
[ 1266.497980][T27169]  kvm_tdp_page_fault+0x273/0x370
[ 1266.498007][T27169]  kvm_mmu_do_page_fault+0x2c5/0x640
[ 1266.498038][T27169]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[ 1266.498078][T27169]  ? vmx_handle_exit_irqoff+0x2a3/0x940
[ 1266.498099][T27169]  ? __pfx_current_save_fsgs+0x10/0x10
[ 1266.498129][T27169]  kvm_mmu_page_fault+0x22f/0xb70
[ 1266.498161][T27169]  ? __pfx_handle_ept_violation+0x10/0x10
[ 1266.498186][T27169]  vmx_handle_exit+0x10a4/0x18c0
[ 1266.498218][T27169]  ? vcpu_run+0x361b/0x7040
[ 1266.498265][T27169]  vcpu_run+0x43aa/0x7040
[ 1266.498309][T27169]  ? vcpu_run+0x361b/0x7040
[ 1266.498404][T27169]  ? __pfx_vcpu_run+0x10/0x10
[ 1266.498439][T27169]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 1266.498494][T27169]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[ 1266.498529][T27169]  ? __mutex_trylock_common+0x153/0x260
[ 1266.498557][T27169]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 1266.498586][T27169]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1266.498617][T27169]  ? rcu_is_watching+0x15/0xb0
[ 1266.498639][T27169]  ? trace_contention_end+0x39/0x120
[ 1266.498663][T27169]  ? __mutex_lock+0x335/0x1350
[ 1266.498698][T27169]  ? __lock_acquire+0xab9/0xd20
[ 1266.498763][T27169]  kvm_vcpu_ioctl+0x95c/0xe90
[ 1266.498797][T27169]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1266.498850][T27169]  ? __fget_files+0x2a/0x420
[ 1266.498882][T27169]  ? __fget_files+0x3a0/0x420
[ 1266.498907][T27169]  ? __fget_files+0x2a/0x420
[ 1266.498936][T27169]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1266.498959][T27169]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1266.498985][T27169]  __se_sys_ioctl+0xfc/0x170
[ 1266.499010][T27169]  do_syscall_64+0xfa/0xfa0
[ 1266.499028][T27169]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1266.499049][T27169]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1266.499069][T27169]  ? clear_bhb_loop+0x60/0xb0
[ 1266.499095][T27169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1266.499115][T27169] RIP: 0033:0x7ffa53f8efc9
[ 1266.499134][T27169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1266.499153][T27169] RSP: 002b:00007ffa54eb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1266.499177][T27169] RAX: ffffffffffffffda RBX: 00007ffa541e6090 RCX: 00007ffa53f8efc9
[ 1266.499192][T27169] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 1266.499206][T27169] RBP: 00007ffa54eb6090 R08: 0000000000000000 R09: 0000000000000000
[ 1266.499218][T27169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1266.499231][T27169] R13: 00007ffa541e6128 R14: 00007ffa541e6090 R15: 00007ffd8ebb7ad8
[ 1266.499268][T27169]  </TASK>
[ 1267.222958][   T10] usb 4-1: USB disconnect, device number 108
[ 1267.403745][T27179] comedi comedi0: c6xdigio: I/O port conflict (0x4f26,3)
[ 1267.435013][   T30] kauditd_printk_skb: 70 callbacks suppressed
[ 1267.435050][   T30] audit: type=1326 audit(1761649694.888:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27178 comm="syz.4.6990" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa62238efc9 code=0x0
[ 1267.507792][T27176] netlink: 'syz.3.6989': attribute type 25 has an invalid length.
[ 1267.516072][T27176] netlink: 'syz.3.6989': attribute type 28 has an invalid length.
[ 1267.847310][T27201] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6997'.
[ 1267.871306][T27203] FAULT_INJECTION: forcing a failure.
[ 1267.871306][T27203] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1267.886454][T27203] CPU: 1 UID: 0 PID: 27203 Comm: syz.0.6996 Not tainted syzkaller #0 PREEMPT(full) 
[ 1267.886485][T27203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1267.886498][T27203] Call Trace:
[ 1267.886506][T27203]  <TASK>
[ 1267.886514][T27203]  dump_stack_lvl+0x189/0x250
[ 1267.886545][T27203]  ? __pfx____ratelimit+0x10/0x10
[ 1267.886574][T27203]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1267.886597][T27203]  ? __pfx__printk+0x10/0x10
[ 1267.886619][T27203]  ? __might_fault+0xb0/0x130
[ 1267.886657][T27203]  should_fail_ex+0x414/0x560
[ 1267.886693][T27203]  _copy_from_iter+0x1de/0x1790
[ 1267.886722][T27203]  ? rcu_is_watching+0x15/0xb0
[ 1267.886750][T27203]  ? __pfx__copy_from_iter+0x10/0x10
[ 1267.886776][T27203]  ? __build_skb_around+0x262/0x3f0
[ 1267.886801][T27203]  ? netlink_sendmsg+0x642/0xb30
[ 1267.886822][T27203]  ? skb_put+0x11b/0x210
[ 1267.886846][T27203]  netlink_sendmsg+0x6b2/0xb30
[ 1267.886877][T27203]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1267.886903][T27203]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1267.886931][T27203]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1267.886949][T27203]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1267.886972][T27203]  __sock_sendmsg+0x21c/0x270
[ 1267.887010][T27203]  ____sys_sendmsg+0x505/0x830
[ 1267.887039][T27203]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1267.887072][T27203]  ? import_iovec+0x74/0xa0
[ 1267.887103][T27203]  ___sys_sendmsg+0x21f/0x2a0
[ 1267.887127][T27203]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1267.887187][T27203]  ? __fget_files+0x2a/0x420
[ 1267.887210][T27203]  ? __fget_files+0x3a0/0x420
[ 1267.887244][T27203]  __x64_sys_sendmsg+0x19b/0x260
[ 1267.887270][T27203]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1267.887304][T27203]  ? __pfx_ksys_write+0x10/0x10
[ 1267.887331][T27203]  ? do_syscall_64+0xbe/0xfa0
[ 1267.887354][T27203]  do_syscall_64+0xfa/0xfa0
[ 1267.887372][T27203]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1267.887391][T27203]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1267.887410][T27203]  ? clear_bhb_loop+0x60/0xb0
[ 1267.887444][T27203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1267.887464][T27203] RIP: 0033:0x7ffa53f8efc9
[ 1267.887483][T27203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1267.887501][T27203] RSP: 002b:00007ffa54ed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1267.887525][T27203] RAX: ffffffffffffffda RBX: 00007ffa541e5fa0 RCX: 00007ffa53f8efc9
[ 1267.887541][T27203] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003
[ 1267.887554][T27203] RBP: 00007ffa54ed7090 R08: 0000000000000000 R09: 0000000000000000
[ 1267.887567][T27203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1267.887579][T27203] R13: 00007ffa541e6038 R14: 00007ffa541e5fa0 R15: 00007ffd8ebb7ad8
[ 1267.887613][T27203]  </TASK>
[ 1267.937085][ T5880] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1268.153308][T27207] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6999'.
[ 1268.305569][T27212] FAULT_INJECTION: forcing a failure.
[ 1268.305569][T27212] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1268.319744][T27212] CPU: 1 UID: 0 PID: 27212 Comm: syz.0.7000 Not tainted syzkaller #0 PREEMPT(full) 
[ 1268.319775][T27212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1268.319788][T27212] Call Trace:
[ 1268.319797][T27212]  <TASK>
[ 1268.319806][T27212]  dump_stack_lvl+0x189/0x250
[ 1268.319837][T27212]  ? __pfx____ratelimit+0x10/0x10
[ 1268.319868][T27212]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1268.319891][T27212]  ? __pfx__printk+0x10/0x10
[ 1268.319931][T27212]  should_fail_ex+0x414/0x560
[ 1268.319968][T27212]  __kvm_read_guest_page+0x18d/0x240
[ 1268.319999][T27212]  kvm_fetch_guest_virt+0x12b/0x170
[ 1268.320024][T27212]  ? __pfx_kvm_fetch_guest_virt+0x10/0x10
[ 1268.320046][T27212]  __do_insn_fetch_bytes+0x2fc/0x6d0
[ 1268.320082][T27212]  ? __pfx___do_insn_fetch_bytes+0x10/0x10
[ 1268.320107][T27212]  ? __up_read+0x280/0x680
[ 1268.320134][T27212]  ? __pfx___up_read+0x10/0x10
[ 1268.320167][T27212]  x86_decode_insn+0x31d/0x5470
[ 1268.320200][T27212]  ? kvm_is_mmio_pfn+0x169/0x730
[ 1268.320247][T27212]  ? rcu_is_watching+0x15/0xb0
[ 1268.320272][T27212]  ? handle_changed_spte+0x1cd/0x10a0
[ 1268.320305][T27212]  ? handle_changed_spte+0x3f5/0x10a0
[ 1268.320336][T27212]  ? __pfx_x86_decode_insn+0x10/0x10
[ 1268.320372][T27212]  ? kvm_tdp_mmu_map+0x308/0x1d30
[ 1268.320414][T27212]  ? __asan_memset+0x22/0x50
[ 1268.320441][T27212]  ? init_decode_cache+0x78/0x90
[ 1268.320470][T27212]  ? init_emulate_ctxt+0x4d6/0x660
[ 1268.320498][T27212]  ? __pfx_init_emulate_ctxt+0x10/0x10
[ 1268.320525][T27212]  ? trace_rcu_utilization+0x47/0x1d0
[ 1268.320552][T27212]  x86_emulate_instruction+0x61b/0x1f90
[ 1268.320598][T27212]  ? _raw_read_unlock+0x28/0x50
[ 1268.320628][T27212]  ? __pfx_x86_emulate_instruction+0x10/0x10
[ 1268.320650][T27212]  ? __get_current_cr3_fast+0x90/0x150
[ 1268.320677][T27212]  ? clear_bhb_loop+0x60/0xb0
[ 1268.320697][T27212]  ? clear_bhb_loop+0x60/0xb0
[ 1268.320719][T27212]  ? vmx_vcpu_run+0xe92/0x2b70
[ 1268.320738][T27212]  ? __vmx_complete_interrupts+0xe7/0x690
[ 1268.320774][T27212]  handle_ud+0x142/0x590
[ 1268.320801][T27212]  ? __pfx_handle_ud+0x10/0x10
[ 1268.320819][T27212]  ? vmx_handle_exit_irqoff+0x61e/0x940
[ 1268.320839][T27212]  ? __pfx_current_save_fsgs+0x10/0x10
[ 1268.320870][T27212]  ? __lock_acquire+0xab9/0xd20
[ 1268.320903][T27212]  ? __pfx_handle_exception_nmi+0x10/0x10
[ 1268.320925][T27212]  vmx_handle_exit+0x10a4/0x18c0
[ 1268.320957][T27212]  ? vcpu_run+0x361b/0x7040
[ 1268.321001][T27212]  vcpu_run+0x43aa/0x7040
[ 1268.321045][T27212]  ? vcpu_run+0x361b/0x7040
[ 1268.321137][T27212]  ? __pfx_vcpu_run+0x10/0x10
[ 1268.321172][T27212]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 1268.321208][T27212]  ? rcu_is_watching+0x15/0xb0
[ 1268.321245][T27212]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[ 1268.321278][T27212]  ? __mutex_trylock_common+0x153/0x260
[ 1268.321305][T27212]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 1268.321333][T27212]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1268.321363][T27212]  ? rcu_is_watching+0x15/0xb0
[ 1268.321385][T27212]  ? trace_contention_end+0x39/0x120
[ 1268.321408][T27212]  ? __mutex_lock+0x335/0x1350
[ 1268.321438][T27212]  ? kasan_quarantine_put+0xdd/0x220
[ 1268.321466][T27212]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1268.321484][T27212]  ? kvm_vcpu_ioctl+0x22e/0xe90
[ 1268.321513][T27212]  ? __pfx___mutex_lock+0x10/0x10
[ 1268.321534][T27212]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1268.321562][T27212]  ? do_vfs_ioctl+0xbe8/0x1430
[ 1268.321581][T27212]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1268.321604][T27212]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1268.321629][T27212]  kvm_vcpu_ioctl+0x95c/0xe90
[ 1268.321662][T27212]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1268.321713][T27212]  ? __fget_files+0x2a/0x420
[ 1268.321744][T27212]  ? __fget_files+0x3a0/0x420
[ 1268.321773][T27212]  ? __fget_files+0x2a/0x420
[ 1268.321803][T27212]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1268.321826][T27212]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1268.321850][T27212]  __se_sys_ioctl+0xfc/0x170
[ 1268.321873][T27212]  do_syscall_64+0xfa/0xfa0
[ 1268.321892][T27212]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1268.321911][T27212]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1268.321930][T27212]  ? clear_bhb_loop+0x60/0xb0
[ 1268.321953][T27212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1268.321972][T27212] RIP: 0033:0x7ffa53f8efc9
[ 1268.321992][T27212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1268.322009][T27212] RSP: 002b:00007ffa54ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1268.322032][T27212] RAX: ffffffffffffffda RBX: 00007ffa541e5fa0 RCX: 00007ffa53f8efc9
[ 1268.322048][T27212] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 1268.322060][T27212] RBP: 00007ffa54ed7090 R08: 0000000000000000 R09: 0000000000000000
[ 1268.322073][T27212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1268.322084][T27212] R13: 00007ffa541e6038 R14: 00007ffa541e5fa0 R15: 00007ffd8ebb7ad8
[ 1268.322120][T27212]  </TASK>
[ 1268.356348][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1268.825972][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1268.835967][ T5880] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1268.845144][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1268.856838][ T5880] usb 4-1: config 0 descriptor??
[ 1269.371047][T27236] FAULT_INJECTION: forcing a failure.
[ 1269.371047][T27236] name failslab, interval 1, probability 0, space 0, times 0
[ 1269.385088][T27236] CPU: 1 UID: 0 PID: 27236 Comm: syz.9.7007 Not tainted syzkaller #0 PREEMPT(full) 
[ 1269.385118][T27236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1269.385131][T27236] Call Trace:
[ 1269.385140][T27236]  <TASK>
[ 1269.385149][T27236]  dump_stack_lvl+0x189/0x250
[ 1269.385180][T27236]  ? __pfx____ratelimit+0x10/0x10
[ 1269.385209][T27236]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1269.385234][T27236]  ? __pfx__printk+0x10/0x10
[ 1269.385258][T27236]  ? save_netdev_trace_buffer+0x952/0xa70
[ 1269.385307][T27236]  should_fail_ex+0x414/0x560
[ 1269.385343][T27236]  should_failslab+0xa8/0x100
[ 1269.385364][T27236]  kmem_cache_alloc_noprof+0x88/0x700
[ 1269.385390][T27236]  ? skb_clone+0x212/0x3a0
[ 1269.385418][T27236]  skb_clone+0x212/0x3a0
[ 1269.385443][T27236]  __netlink_deliver_tap+0x424/0x8b0
[ 1269.385488][T27236]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1269.385510][T27236]  netlink_deliver_tap+0x19c/0x1b0
[ 1269.385533][T27236]  netlink_unicast+0x7fa/0x9e0
[ 1269.385574][T27236]  ? __pfx_netlink_unicast+0x10/0x10
[ 1269.385606][T27236]  ? netlink_sendmsg+0x642/0xb30
[ 1269.385624][T27236]  ? skb_put+0x11b/0x210
[ 1269.385648][T27236]  netlink_sendmsg+0x805/0xb30
[ 1269.385679][T27236]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1269.385706][T27236]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1269.385733][T27236]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1269.385752][T27236]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1269.385775][T27236]  __sock_sendmsg+0x21c/0x270
[ 1269.385805][T27236]  ____sys_sendmsg+0x505/0x830
[ 1269.385835][T27236]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1269.385868][T27236]  ? import_iovec+0x74/0xa0
[ 1269.385900][T27236]  ___sys_sendmsg+0x21f/0x2a0
[ 1269.385925][T27236]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1269.385988][T27236]  ? __fget_files+0x2a/0x420
[ 1269.386014][T27236]  ? __fget_files+0x3a0/0x420
[ 1269.386051][T27236]  __x64_sys_sendmsg+0x19b/0x260
[ 1269.386086][T27236]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1269.386121][T27236]  ? __pfx_ksys_write+0x10/0x10
[ 1269.386150][T27236]  ? do_syscall_64+0xbe/0xfa0
[ 1269.386174][T27236]  do_syscall_64+0xfa/0xfa0
[ 1269.386193][T27236]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1269.386211][T27236]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1269.386231][T27236]  ? clear_bhb_loop+0x60/0xb0
[ 1269.386255][T27236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1269.386276][T27236] RIP: 0033:0x7f095bb8efc9
[ 1269.386305][T27236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1269.386323][T27236] RSP: 002b:00007f095c9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1269.386347][T27236] RAX: ffffffffffffffda RBX: 00007f095bde5fa0 RCX: 00007f095bb8efc9
[ 1269.386363][T27236] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003
[ 1269.386376][T27236] RBP: 00007f095c9d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1269.386389][T27236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1269.386401][T27236] R13: 00007f095bde6038 R14: 00007f095bde5fa0 R15: 00007ffdc829d758
[ 1269.386435][T27236]  </TASK>
[ 1269.386540][T27236] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7007'.
[ 1269.423979][ T5842] Bluetooth: hci1: ACL packet for unknown connection handle 200
[ 1269.424117][ T5842] Bluetooth: hci1: ACL packet for unknown connection handle 201
[ 1269.762880][ T5880] hid-led 0003:27B8:01ED.0074: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0
[ 1269.817683][ T5880] hid-led 0003:27B8:01ED.0074: ThingM blink(1) v1 initialized
[ 1269.995745][T27196] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6993'.
[ 1270.014720][T21794] usb 4-1: USB disconnect, device number 109
[ 1270.353918][T17832] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 1270.528235][T17832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1270.543098][T17832] usb 5-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.00
[ 1270.557138][T17832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1270.583371][T17832] usb 5-1: config 0 descriptor??
[ 1270.735779][T27260] FAULT_INJECTION: forcing a failure.
[ 1270.735779][T27260] name failslab, interval 1, probability 0, space 0, times 0
[ 1270.771619][T27260] CPU: 1 UID: 0 PID: 27260 Comm: syz.3.7014 Not tainted syzkaller #0 PREEMPT(full) 
[ 1270.771655][T27260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1270.771669][T27260] Call Trace:
[ 1270.771678][T27260]  <TASK>
[ 1270.771688][T27260]  dump_stack_lvl+0x189/0x250
[ 1270.771720][T27260]  ? __pfx____ratelimit+0x10/0x10
[ 1270.771751][T27260]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1270.771775][T27260]  ? __pfx__printk+0x10/0x10
[ 1270.771806][T27260]  ? __pfx___might_resched+0x10/0x10
[ 1270.771832][T27260]  should_fail_ex+0x414/0x560
[ 1270.771878][T27260]  should_failslab+0xa8/0x100
[ 1270.771902][T27260]  __kmalloc_noprof+0xdf/0x800
[ 1270.771928][T27260]  ? kfree+0x4d/0x6d0
[ 1270.771951][T27260]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1270.771983][T27260]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1270.772012][T27260]  ? tomoyo_domain+0xd8/0x130
[ 1270.772044][T27260]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1270.772066][T27260]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1270.772091][T27260]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1270.772166][T27260]  ? __fget_files+0x2a/0x420
[ 1270.772198][T27260]  ? __fget_files+0x3a0/0x420
[ 1270.772222][T27260]  ? __fget_files+0x2a/0x420
[ 1270.772253][T27260]  security_file_ioctl+0xcb/0x2d0
[ 1270.772288][T27260]  __se_sys_ioctl+0x47/0x170
[ 1270.772313][T27260]  do_syscall_64+0xfa/0xfa0
[ 1270.772333][T27260]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1270.772353][T27260]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1270.772374][T27260]  ? clear_bhb_loop+0x60/0xb0
[ 1270.772408][T27260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1270.772429][T27260] RIP: 0033:0x7f44f218efc9
[ 1270.772449][T27260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1270.772467][T27260] RSP: 002b:00007f44f304e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1270.772491][T27260] RAX: ffffffffffffffda RBX: 00007f44f23e6090 RCX: 00007f44f218efc9
[ 1270.772507][T27260] RDX: 0000200000000000 RSI: 0000000000005412 RDI: 0000000000000003
[ 1270.772521][T27260] RBP: 00007f44f304e090 R08: 0000000000000000 R09: 0000000000000000
[ 1270.772535][T27260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1270.772547][T27260] R13: 00007f44f23e6128 R14: 00007f44f23e6090 R15: 00007ffd37a82858
[ 1270.772583][T27260]  </TASK>
[ 1270.772619][T27260] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1270.961948][T27250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1270.984477][T27259] FAULT_INJECTION: forcing a failure.
[ 1270.984477][T27259] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1270.998119][T27250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1271.050764][T27259] CPU: 0 UID: 0 PID: 27259 Comm: syz.9.7015 Not tainted syzkaller #0 PREEMPT(full) 
[ 1271.050795][T27259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1271.050808][T27259] Call Trace:
[ 1271.050816][T27259]  <TASK>
[ 1271.050825][T27259]  dump_stack_lvl+0x189/0x250
[ 1271.050856][T27259]  ? __pfx____ratelimit+0x10/0x10
[ 1271.050885][T27259]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1271.050908][T27259]  ? __pfx__printk+0x10/0x10
[ 1271.050945][T27259]  should_fail_ex+0x414/0x560
[ 1271.050981][T27259]  __kvm_read_guest_page+0x18d/0x240
[ 1271.051013][T27259]  kvm_fetch_guest_virt+0x12b/0x170
[ 1271.051038][T27259]  ? __pfx_kvm_fetch_guest_virt+0x10/0x10
[ 1271.051058][T27259]  __do_insn_fetch_bytes+0x2fc/0x6d0
[ 1271.051090][T27259]  ? __pfx___do_insn_fetch_bytes+0x10/0x10
[ 1271.051133][T27259]  x86_decode_insn+0x31d/0x5470
[ 1271.051179][T27259]  ? __pfx_x86_decode_insn+0x10/0x10
[ 1271.051233][T27259]  ? __pfx_x86_decode_insn+0x10/0x10
[ 1271.051262][T27259]  ? rcu_qs+0xc4/0x170
[ 1271.051282][T27259]  ? __pfx_rcu_qs+0x10/0x10
[ 1271.051303][T27259]  ? kvm_multiple_exception+0x69a/0xc00
[ 1271.051339][T27259]  ? __asan_memset+0x22/0x50
[ 1271.051367][T27259]  ? init_decode_cache+0x78/0x90
[ 1271.051395][T27259]  ? init_emulate_ctxt+0x4d6/0x660
[ 1271.051423][T27259]  ? __pfx_init_emulate_ctxt+0x10/0x10
[ 1271.051452][T27259]  ? _raw_read_unlock+0x28/0x50
[ 1271.051479][T27259]  ? __phys_addr+0xd3/0x180
[ 1271.051509][T27259]  x86_emulate_instruction+0x61b/0x1f90
[ 1271.051538][T27259]  ? __vmx_complete_interrupts+0xe7/0x690
[ 1271.051577][T27259]  ? __pfx_x86_emulate_instruction+0x10/0x10
[ 1271.051605][T27259]  ? vmx_handle_exit_irqoff+0x2a3/0x940
[ 1271.051625][T27259]  ? __pfx_current_save_fsgs+0x10/0x10
[ 1271.051659][T27259]  ? __lock_acquire+0xab9/0xd20
[ 1271.051690][T27259]  ? handle_io+0x1e3/0x270
[ 1271.051714][T27259]  ? __pfx_handle_io+0x10/0x10
[ 1271.051737][T27259]  vmx_handle_exit+0x10a4/0x18c0
[ 1271.051771][T27259]  ? vcpu_run+0x361b/0x7040
[ 1271.051816][T27259]  vcpu_run+0x43aa/0x7040
[ 1271.051860][T27259]  ? vcpu_run+0x361b/0x7040
[ 1271.051953][T27259]  ? __pfx_vcpu_run+0x10/0x10
[ 1271.051989][T27259]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 1271.052026][T27259]  ? rcu_is_watching+0x15/0xb0
[ 1271.052053][T27259]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[ 1271.052088][T27259]  ? __mutex_trylock_common+0x153/0x260
[ 1271.052115][T27259]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 1271.052150][T27259]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1271.052179][T27259]  ? rcu_is_watching+0x15/0xb0
[ 1271.052201][T27259]  ? trace_contention_end+0x39/0x120
[ 1271.052225][T27259]  ? __mutex_lock+0x335/0x1350
[ 1271.052255][T27259]  ? kasan_quarantine_put+0xdd/0x220
[ 1271.052283][T27259]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1271.052303][T27259]  ? kvm_vcpu_ioctl+0x22e/0xe90
[ 1271.052333][T27259]  ? __pfx___mutex_lock+0x10/0x10
[ 1271.052355][T27259]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1271.052382][T27259]  ? do_vfs_ioctl+0xbe8/0x1430
[ 1271.052401][T27259]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1271.052424][T27259]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1271.052450][T27259]  kvm_vcpu_ioctl+0x95c/0xe90
[ 1271.052483][T27259]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1271.052535][T27259]  ? __fget_files+0x2a/0x420
[ 1271.052566][T27259]  ? __fget_files+0x3a0/0x420
[ 1271.052589][T27259]  ? __fget_files+0x2a/0x420
[ 1271.052619][T27259]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1271.052642][T27259]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1271.052668][T27259]  __se_sys_ioctl+0xfc/0x170
[ 1271.052692][T27259]  do_syscall_64+0xfa/0xfa0
[ 1271.052711][T27259]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1271.052731][T27259]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1271.052752][T27259]  ? clear_bhb_loop+0x60/0xb0
[ 1271.052778][T27259]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1271.052798][T27259] RIP: 0033:0x7f095bb8efc9
[ 1271.052818][T27259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1271.052836][T27259] RSP: 002b:00007f095c9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1271.052859][T27259] RAX: ffffffffffffffda RBX: 00007f095bde5fa0 RCX: 00007f095bb8efc9
[ 1271.052875][T27259] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 1271.052889][T27259] RBP: 00007f095c9d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1271.052902][T27259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1271.052914][T27259] R13: 00007f095bde6038 R14: 00007f095bde5fa0 R15: 00007ffdc829d758
[ 1271.052951][T27259]  </TASK>
[ 1271.513835][T27262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1271.524382][T27262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1271.541245][T17832] logitech-hidpp-device 0003:046D:C08A.0075: item fetching failed at offset 5/7
[ 1271.604420][T17832] logitech-hidpp-device 0003:046D:C08A.0075: hidpp_probe:parse failed
[ 1271.638794][T17832] logitech-hidpp-device 0003:046D:C08A.0075: probe with driver logitech-hidpp-device failed with error -22
[ 1271.753764][ T5880] usb 5-1: USB disconnect, device number 85
[ 1272.321354][T27277] FAULT_INJECTION: forcing a failure.
[ 1272.321354][T27277] name failslab, interval 1, probability 0, space 0, times 0
[ 1272.334683][T27277] CPU: 1 UID: 0 PID: 27277 Comm: syz.4.7021 Not tainted syzkaller #0 PREEMPT(full) 
[ 1272.334711][T27277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1272.334724][T27277] Call Trace:
[ 1272.334733][T27277]  <TASK>
[ 1272.334742][T27277]  dump_stack_lvl+0x189/0x250
[ 1272.334773][T27277]  ? __pfx____ratelimit+0x10/0x10
[ 1272.334803][T27277]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1272.334826][T27277]  ? __pfx__printk+0x10/0x10
[ 1272.334845][T27277]  ? skb_network_protocol+0x508/0x760
[ 1272.334865][T27277]  should_fail_ex+0x414/0x560
[ 1272.334886][T27277]  should_failslab+0xa8/0x100
[ 1272.334900][T27277]  kmem_cache_alloc_noprof+0x88/0x700
[ 1272.334917][T27277]  ? skb_clone+0x212/0x3a0
[ 1272.334934][T27277]  skb_clone+0x212/0x3a0
[ 1272.334947][T27277]  ? dev_queue_xmit_nit+0x25a/0xcc0
[ 1272.334961][T27277]  dev_queue_xmit_nit+0x416/0xcc0
[ 1272.334973][T27277]  ? dev_queue_xmit_nit+0x2d/0xcc0
[ 1272.334991][T27277]  dev_hard_start_xmit+0x1be/0x830
[ 1272.335014][T27277]  __dev_queue_xmit+0x172a/0x3740
[ 1272.335038][T27277]  ? do_syscall_64+0xfa/0xfa0
[ 1272.335048][T27277]  ? __dev_queue_xmit+0x284/0x3740
[ 1272.335068][T27277]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1272.335093][T27277]  ? __copy_skb_header+0xa7/0x550
[ 1272.335178][T27277]  ? __asan_memcpy+0x40/0x70
[ 1272.335194][T27277]  ? __skb_clone+0x63/0x7a0
[ 1272.335209][T27277]  ? __skb_clone+0x483/0x7a0
[ 1272.335225][T27277]  ? skb_clone+0x246/0x3a0
[ 1272.335241][T27277]  __netlink_deliver_tap+0x5d9/0x8b0
[ 1272.335261][T27277]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1272.335275][T27277]  netlink_deliver_tap+0x19c/0x1b0
[ 1272.335287][T27277]  netlink_unicast+0x7fa/0x9e0
[ 1272.335311][T27277]  ? __pfx_netlink_unicast+0x10/0x10
[ 1272.335329][T27277]  ? netlink_sendmsg+0x642/0xb30
[ 1272.335340][T27277]  ? skb_put+0x11b/0x210
[ 1272.335357][T27277]  netlink_sendmsg+0x805/0xb30
[ 1272.335375][T27277]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1272.335390][T27277]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1272.335406][T27277]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1272.335418][T27277]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1272.335431][T27277]  __sock_sendmsg+0x21c/0x270
[ 1272.335449][T27277]  ____sys_sendmsg+0x505/0x830
[ 1272.335466][T27277]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1272.335487][T27277]  ? import_iovec+0x74/0xa0
[ 1272.335507][T27277]  ___sys_sendmsg+0x21f/0x2a0
[ 1272.335522][T27277]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1272.335556][T27277]  ? __fget_files+0x2a/0x420
[ 1272.335570][T27277]  ? __fget_files+0x3a0/0x420
[ 1272.335590][T27277]  __x64_sys_sendmsg+0x19b/0x260
[ 1272.335605][T27277]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1272.335624][T27277]  ? __pfx_ksys_write+0x10/0x10
[ 1272.335640][T27277]  ? do_syscall_64+0xbe/0xfa0
[ 1272.335653][T27277]  do_syscall_64+0xfa/0xfa0
[ 1272.335664][T27277]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1272.335675][T27277]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1272.335687][T27277]  ? clear_bhb_loop+0x60/0xb0
[ 1272.335701][T27277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1272.335713][T27277] RIP: 0033:0x7fa62238efc9
[ 1272.335726][T27277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1272.335737][T27277] RSP: 002b:00007fa623177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1272.335752][T27277] RAX: ffffffffffffffda RBX: 00007fa6225e5fa0 RCX: 00007fa62238efc9
[ 1272.335761][T27277] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003
[ 1272.335769][T27277] RBP: 00007fa623177090 R08: 0000000000000000 R09: 0000000000000000
[ 1272.335777][T27277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1272.335784][T27277] R13: 00007fa6225e6038 R14: 00007fa6225e5fa0 R15: 00007fffbf52fec8
[ 1272.335803][T27277]  </TASK>
[ 1272.338462][T27277] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7021'.
[ 1272.755302][T27283] overlayfs: missing 'workdir'
[ 1273.094281][T27296] binder: 27294:27296 ioctl 400454ca 200000000200 returned -22
[ 1273.209393][T27302] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7030'.
[ 1273.497857][T21794] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[ 1273.683234][T21794] usb 5-1: Using ep0 maxpacket: 8
[ 1273.689522][T21794] usb 5-1: no configurations
[ 1273.697404][T21794] usb 5-1: can't read configurations, error -22
[ 1273.840089][T21794] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 1274.000435][T21794] usb 5-1: Using ep0 maxpacket: 8
[ 1274.006325][T21794] usb 5-1: no configurations
[ 1274.010941][T21794] usb 5-1: can't read configurations, error -22
[ 1274.018196][T21794] usb usb5-port1: attempt power cycle
[ 1274.021801][ T5901] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1274.197518][ T5901] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1274.207027][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1274.215473][ T5901] usb 4-1: Product: syz
[ 1274.219687][ T5901] usb 4-1: Manufacturer: syz
[ 1274.224406][ T5901] usb 4-1: SerialNumber: syz
[ 1274.234202][ T5901] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1274.251070][T17832] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1274.387256][T21794] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 1274.418229][T21794] usb 5-1: Using ep0 maxpacket: 8
[ 1274.424394][T21794] usb 5-1: no configurations
[ 1274.429289][T21794] usb 5-1: can't read configurations, error -22
[ 1274.567265][T21794] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 1274.590378][T21794] usb 5-1: Using ep0 maxpacket: 8
[ 1274.596372][T21794] usb 5-1: no configurations
[ 1274.601142][T21794] usb 5-1: can't read configurations, error -22
[ 1274.607840][T21794] usb usb5-port1: unable to enumerate USB device
[ 1275.113532][T27312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1275.127083][T27312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1275.159954][T21794] usb 4-1: USB disconnect, device number 110
[ 1275.247465][T27324] FAULT_INJECTION: forcing a failure.
[ 1275.247465][T27324] name failslab, interval 1, probability 0, space 0, times 0
[ 1275.265153][T27324] CPU: 0 UID: 0 PID: 27324 Comm: syz.9.7038 Not tainted syzkaller #0 PREEMPT(full) 
[ 1275.265182][T27324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1275.265193][T27324] Call Trace:
[ 1275.265202][T27324]  <TASK>
[ 1275.265210][T27324]  dump_stack_lvl+0x189/0x250
[ 1275.265241][T27324]  ? __pfx____ratelimit+0x10/0x10
[ 1275.265273][T27324]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1275.265298][T27324]  ? __pfx__printk+0x10/0x10
[ 1275.265325][T27324]  ? __pfx___might_resched+0x10/0x10
[ 1275.265356][T27324]  ? fs_reclaim_acquire+0x7d/0x100
[ 1275.265392][T27324]  should_fail_ex+0x414/0x560
[ 1275.265428][T27324]  should_failslab+0xa8/0x100
[ 1275.265451][T27324]  __kmalloc_cache_noprof+0x84/0x700
[ 1275.265480][T27324]  ? nfnetlink_rcv+0xf97/0x2590
[ 1275.265519][T27324]  nfnetlink_rcv+0xf97/0x2590
[ 1275.265587][T27324]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1275.265632][T27324]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[ 1275.265657][T27324]  ? ref_tracker_free+0x63a/0x7d0
[ 1275.265679][T27324]  ? netlink_unicast+0x7fa/0x9e0
[ 1275.265706][T27324]  ? netlink_sendmsg+0x805/0xb30
[ 1275.265755][T27324]  ? __netlink_deliver_tap+0x866/0x8b0
[ 1275.265779][T27324]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1275.265821][T27324]  netlink_unicast+0x82f/0x9e0
[ 1275.265860][T27324]  ? __pfx_netlink_unicast+0x10/0x10
[ 1275.265891][T27324]  ? netlink_sendmsg+0x642/0xb30
[ 1275.265909][T27324]  ? skb_put+0x11b/0x210
[ 1275.265929][T27324]  netlink_sendmsg+0x805/0xb30
[ 1275.265956][T27324]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1275.265976][T27324]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1275.265998][T27324]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1275.266014][T27324]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1275.266032][T27324]  __sock_sendmsg+0x21c/0x270
[ 1275.266058][T27324]  ____sys_sendmsg+0x505/0x830
[ 1275.266082][T27324]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1275.266109][T27324]  ? import_iovec+0x74/0xa0
[ 1275.266135][T27324]  ___sys_sendmsg+0x21f/0x2a0
[ 1275.266156][T27324]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1275.266206][T27324]  ? __fget_files+0x2a/0x420
[ 1275.266226][T27324]  ? __fget_files+0x3a0/0x420
[ 1275.266256][T27324]  __x64_sys_sendmsg+0x19b/0x260
[ 1275.266277][T27324]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1275.266304][T27324]  ? __pfx_ksys_write+0x10/0x10
[ 1275.266326][T27324]  ? do_syscall_64+0xbe/0xfa0
[ 1275.266354][T27324]  do_syscall_64+0xfa/0xfa0
[ 1275.266368][T27324]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1275.266383][T27324]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1275.266398][T27324]  ? clear_bhb_loop+0x60/0xb0
[ 1275.266419][T27324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1275.266433][T27324] RIP: 0033:0x7f095bb8efc9
[ 1275.266450][T27324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1275.266465][T27324] RSP: 002b:00007f095c9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1275.266483][T27324] RAX: ffffffffffffffda RBX: 00007f095bde5fa0 RCX: 00007f095bb8efc9
[ 1275.266496][T27324] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003
[ 1275.266506][T27324] RBP: 00007f095c9d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1275.266517][T27324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1275.266527][T27324] R13: 00007f095bde6038 R14: 00007f095bde5fa0 R15: 00007ffdc829d758
[ 1275.266555][T27324]  </TASK>
[ 1275.775526][T17832] usb 4-1: Service connection timeout for: 257
[ 1275.782267][T17832] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1275.794731][T17832] ath9k_htc: Failed to initialize the device
[ 1275.801652][T21794] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1276.055711][T27335] comedi comedi0: c6xdigio: I/O port conflict (0x4f26,3)
[ 1276.062901][T27335] ==================================================================
[ 1276.071169][T27335] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x3d/0x70
[ 1276.079202][T27335] Read of size 8 at addr ffff88801e697a30 by task syz.0.7041/27335
[ 1276.087180][T27335] 
[ 1276.089631][T27335] CPU: 1 UID: 0 PID: 27335 Comm: syz.0.7041 Not tainted syzkaller #0 PREEMPT(full) 
[ 1276.089660][T27335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1276.089673][T27335] Call Trace:
[ 1276.089683][T27335]  <TASK>
[ 1276.089693][T27335]  dump_stack_lvl+0x189/0x250
[ 1276.089723][T27335]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1276.089750][T27335]  ? rcu_is_watching+0x15/0xb0
[ 1276.089772][T27335]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1276.089796][T27335]  ? rcu_is_watching+0x15/0xb0
[ 1276.089818][T27335]  ? lock_release+0x4b/0x3e0
[ 1276.089848][T27335]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 1276.089880][T27335]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1276.089905][T27335]  ? __virt_addr_valid+0x4a5/0x5c0
[ 1276.089931][T27335]  print_report+0xca/0x240
[ 1276.089958][T27335]  ? sysfs_remove_file_ns+0x3d/0x70
[ 1276.089987][T27335]  kasan_report+0x118/0x150
[ 1276.090008][T27335]  ? sysfs_remove_file_ns+0x3d/0x70
[ 1276.090040][T27335]  sysfs_remove_file_ns+0x3d/0x70
[ 1276.090077][T27335]  bus_remove_driver+0x198/0x320
[ 1276.090100][T27335]  comedi_device_detach_locked+0x178/0x750
[ 1276.090131][T27335]  comedi_device_attach+0x5d4/0x720
[ 1276.090160][T27335]  comedi_unlocked_ioctl+0x645/0x1020
[ 1276.090181][T27335]  ? kasan_quarantine_put+0xdd/0x220
[ 1276.090214][T27335]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1276.090259][T27335]  ? __fget_files+0x2a/0x420
[ 1276.090288][T27335]  ? __fget_files+0x3a0/0x420
[ 1276.090312][T27335]  ? __fget_files+0x2a/0x420
[ 1276.090339][T27335]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1276.090361][T27335]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1276.090382][T27335]  __se_sys_ioctl+0xfc/0x170
[ 1276.090403][T27335]  do_syscall_64+0xfa/0xfa0
[ 1276.090423][T27335]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1276.090442][T27335]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1276.090462][T27335]  ? clear_bhb_loop+0x60/0xb0
[ 1276.090485][T27335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1276.090505][T27335] RIP: 0033:0x7ffa53f8efc9
[ 1276.090526][T27335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1276.090545][T27335] RSP: 002b:00007ffa54ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1276.090570][T27335] RAX: ffffffffffffffda RBX: 00007ffa541e5fa0 RCX: 00007ffa53f8efc9
[ 1276.090586][T27335] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000006
[ 1276.090602][T27335] RBP: 00007ffa54011f91 R08: 0000000000000000 R09: 0000000000000000
[ 1276.090616][T27335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1276.090630][T27335] R13: 00007ffa541e6038 R14: 00007ffa541e5fa0 R15: 00007ffd8ebb7ad8
[ 1276.090661][T27335]  </TASK>
[ 1276.090669][T27335] 
[ 1276.358501][T27335] Allocated by task 18926:
[ 1276.362919][T27335]  kasan_save_track+0x3e/0x80
[ 1276.367878][T27335]  __kasan_kmalloc+0x93/0xb0
[ 1276.372518][T27335]  __kmalloc_cache_noprof+0x3e2/0x700
[ 1276.378056][T27335]  bus_add_driver+0x162/0x670
[ 1276.382761][T27335]  driver_register+0x23a/0x320
[ 1276.387631][T27335]  c6xdigio_attach+0x94/0x890
[ 1276.392330][T27335]  comedi_device_attach+0x51f/0x720
[ 1276.397719][T27335]  comedi_unlocked_ioctl+0x645/0x1020
[ 1276.403273][T27335]  __se_sys_ioctl+0xfc/0x170
[ 1276.408137][T27335]  do_syscall_64+0xfa/0xfa0
[ 1276.414174][T27335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1276.420437][T27335] 
[ 1276.422771][T27335] Freed by task 27179:
[ 1276.426936][T27335]  kasan_save_track+0x3e/0x80
[ 1276.431655][T27335]  kasan_save_free_info+0x46/0x50
[ 1276.436723][T27335]  __kasan_slab_free+0x5c/0x80
[ 1276.441513][T27335]  kfree+0x19a/0x6d0
[ 1276.445702][T27335]  kobject_put+0x22b/0x570
[ 1276.450151][T27335]  bus_remove_driver+0x245/0x320
[ 1276.455385][T27335]  comedi_device_detach_locked+0x178/0x750
[ 1276.461510][T27335]  comedi_device_attach+0x5d4/0x720
[ 1276.466743][T27335]  comedi_unlocked_ioctl+0x645/0x1020
[ 1276.472572][T27335]  __se_sys_ioctl+0xfc/0x170
[ 1276.477172][T27335]  do_syscall_64+0xfa/0xfa0
[ 1276.481715][T27335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1276.487612][T27335] 
[ 1276.490047][T27335] The buggy address belongs to the object at ffff88801e697a00
[ 1276.490047][T27335]  which belongs to the cache kmalloc-256 of size 256
[ 1276.505149][T27335] The buggy address is located 48 bytes inside of
[ 1276.505149][T27335]  freed 256-byte region [ffff88801e697a00, ffff88801e697b00)
[ 1276.518952][T27335] 
[ 1276.521290][T27335] The buggy address belongs to the physical page:
[ 1276.527704][T27335] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801e697000 pfn:0x1e696
[ 1276.537865][T27335] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1276.546599][T27335] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1276.555281][T27335] page_type: f5(slab)
[ 1276.559282][T27335] raw: 00fff00000000240 ffff88813ffa6b40 ffffea0000c92c10 ffffea00016d9d10
[ 1276.568060][T27335] raw: ffff88801e697000 000000000010000c 00000000f5000000 0000000000000000
[ 1276.576898][T27335] head: 00fff00000000240 ffff88813ffa6b40 ffffea0000c92c10 ffffea00016d9d10
[ 1276.585792][T27335] head: ffff88801e697000 000000000010000c 00000000f5000000 0000000000000000
[ 1276.594849][T27335] head: 00fff00000000001 ffffea000079a581 00000000ffffffff 00000000ffffffff
[ 1276.603949][T27335] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 1276.612742][T27335] page dumped because: kasan: bad access detected
[ 1276.619543][T27335] page_owner tracks the page as allocated
[ 1276.625620][T27335] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6076, tgid 6074 (syz.0.54), ts 103926733695, free_ts 103047771227
[ 1276.647448][T27335]  post_alloc_hook+0x240/0x2a0
[ 1276.652251][T27335]  get_page_from_freelist+0x2365/0x2440
[ 1276.657805][T27335]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1276.663979][T27335]  alloc_pages_mpol+0x232/0x4a0
[ 1276.669161][T27335]  allocate_slab+0x96/0x350
[ 1276.673680][T27335]  ___slab_alloc+0xe94/0x18a0
[ 1276.678476][T27335]  __slab_alloc+0x65/0x100
[ 1276.682932][T27335]  __kmalloc_noprof+0x47d/0x800
[ 1276.687798][T27335]  copy_splice_read+0x143/0xa50
[ 1276.692860][T27335]  splice_direct_to_actor+0x4d0/0xcc0
[ 1276.698787][T27335]  do_splice_direct+0x181/0x270
[ 1276.704025][T27335]  do_sendfile+0x4da/0x7e0
[ 1276.708474][T27335]  __se_sys_sendfile64+0x13e/0x190
[ 1276.713872][T27335]  do_syscall_64+0xfa/0xfa0
[ 1276.718736][T27335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1276.724815][T27335] page last free pid 6048 tgid 6047 stack trace:
[ 1276.731325][T27335]  __free_frozen_pages+0xbc8/0xd30
[ 1276.736538][T27335]  rcu_core+0xcab/0x1770
[ 1276.740963][T27335]  handle_softirqs+0x286/0x870
[ 1276.745785][T27335]  __irq_exit_rcu+0xca/0x1f0
[ 1276.750736][T27335]  irq_exit_rcu+0x9/0x30
[ 1276.755268][T27335]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1276.760937][T27335]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1276.767110][T27335] 
[ 1276.769521][T27335] Memory state around the buggy address:
[ 1276.775522][T27335]  ffff88801e697900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1276.783791][T27335]  ffff88801e697980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1276.792229][T27335] >ffff88801e697a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1276.800390][T27335]                                      ^
[ 1276.806131][T27335]  ffff88801e697a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1276.814821][T27335]  ffff88801e697b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1276.823148][T27335] ==================================================================
[ 1276.836238][T21794] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1276.858625][T27335] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1276.865903][T27335] CPU: 0 UID: 0 PID: 27335 Comm: syz.0.7041 Not tainted syzkaller #0 PREEMPT(full) 
[ 1276.875482][T27335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1276.885918][T27335] Call Trace:
[ 1276.889312][T27335]  <TASK>
[ 1276.892354][T27335]  dump_stack_lvl+0x99/0x250
[ 1276.896964][T27335]  ? __asan_memcpy+0x40/0x70
[ 1276.901801][T27335]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1276.907224][T27335]  ? __pfx__printk+0x10/0x10
[ 1276.912171][T27335]  vpanic+0x237/0x6d0
[ 1276.916161][T27335]  ? __pfx_vpanic+0x10/0x10
[ 1276.920842][T27335]  ? preempt_schedule+0xae/0xc0
[ 1276.925996][T27335]  ? __pfx_preempt_schedule+0x10/0x10
[ 1276.931591][T27335]  panic+0xb9/0xc0
[ 1276.935502][T27335]  ? __pfx_panic+0x10/0x10
[ 1276.940109][T27335]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 1276.946197][T27335]  ? is_module_address+0x17/0xf0
[ 1276.951408][T27335]  ? sysfs_remove_file_ns+0x3d/0x70
[ 1276.956714][T27335]  check_panic_on_warn+0x89/0xb0
[ 1276.961930][T27335]  ? sysfs_remove_file_ns+0x3d/0x70
[ 1276.967400][T27335]  end_report+0x78/0x160
[ 1276.971828][T27335]  kasan_report+0x129/0x150
[ 1276.976644][T27335]  ? sysfs_remove_file_ns+0x3d/0x70
[ 1276.981879][T27335]  sysfs_remove_file_ns+0x3d/0x70
[ 1276.986940][T27335]  bus_remove_driver+0x198/0x320
[ 1276.992354][T27335]  comedi_device_detach_locked+0x178/0x750
[ 1276.998366][T27335]  comedi_device_attach+0x5d4/0x720
[ 1277.003769][T27335]  comedi_unlocked_ioctl+0x645/0x1020
[ 1277.009263][T27335]  ? kasan_quarantine_put+0xdd/0x220
[ 1277.014863][T27335]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1277.021078][T27335]  ? __fget_files+0x2a/0x420
[ 1277.025802][T27335]  ? __fget_files+0x3a0/0x420
[ 1277.030766][T27335]  ? __fget_files+0x2a/0x420
[ 1277.035559][T27335]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1277.041496][T27335]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1277.047416][T27335]  __se_sys_ioctl+0xfc/0x170
[ 1277.052193][T27335]  do_syscall_64+0xfa/0xfa0
[ 1277.056880][T27335]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1277.062082][T27335]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1277.068255][T27335]  ? clear_bhb_loop+0x60/0xb0
[ 1277.073312][T27335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1277.079407][T27335] RIP: 0033:0x7ffa53f8efc9
[ 1277.084090][T27335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1277.105203][T27335] RSP: 002b:00007ffa54ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1277.113845][T27335] RAX: ffffffffffffffda RBX: 00007ffa541e5fa0 RCX: 00007ffa53f8efc9
[ 1277.122548][T27335] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000006
[ 1277.130904][T27335] RBP: 00007ffa54011f91 R08: 0000000000000000 R09: 0000000000000000
[ 1277.139164][T27335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1277.147888][T27335] R13: 00007ffa541e6038 R14: 00007ffa541e5fa0 R15: 00007ffd8ebb7ad8
[ 1277.156009][T27335]  </TASK>
[ 1277.159568][T27335] Kernel Offset: disabled
[ 1277.164097][T27335] Rebooting in 86400 seconds..