last executing test programs:

8m0.177358448s ago: executing program 1 (id=54):
r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x4902) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async, rerun: 32)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32)
sendmmsg$inet(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000d80)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a17010038c1eb44279a8e72a4cf912806", 0x3e}, {&(0x7f0000000740)="d49d34126760ba3d32ff8845c013009d49376600fbffffffdcea06454d79a2b78e26f169005d71eb7db0f6678e5ac4c64461e72cb2c59f9ce81a393282b753b0048c4304f0e6b98900cb3a3653f8d0d34992e6a5bb2d36e5f874bdd907519983c899ad2bc330d784bc27b0c50a98d6b05597f13174bc21f6a921753ee4b9e53087153b7c7aaf25", 0x87}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)='\a', 0x1}], 0x1}}], 0x2, 0xc0) (async)
sendto$inet(r1, &(0x7f0000000180)="9a4de52b0a0b92444696179d8920b588fd6074f5ddae00a370c5f1fff5ed31e33a89da740194951ec2f92383c1ae6d08e341f79b66e2cb24ccf74ed835c1acdee08f4e9661d1d8863831b52e080000005372f66d558c8e374a845a7e026e5a1c305d", 0xfffffdbc, 0x40, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) (async, rerun: 32)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
pread64(r3, &(0x7f0000001100)=""/4080, 0xff0, 0x7f)
r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0) (async)
fallocate(r0, 0x0, 0xb4d, 0xe)

8m0.117943894s ago: executing program 1 (id=55):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000600)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0xff0f})
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) (async, rerun: 32)
write(r1, &(0x7f0000000100)="240000001ae75e0014f9f507000909000aff8000000000000000000008001e000019660017fbc0dbb409ffd08a33fb90c847acf612863da99252b8268e6f35c74d21aef40007a58326668f6fdcdce3cb444eab2737f56d80f8fa9504af70aed9c47eee1d1bef7fe27a4d218777a488a0ee4b67954bbbb51bdd21294fd0529f85cb27ba8bc47052daa89c6527f7ad731ed8c96c3f60eb6fc85bdf68e44f9fda391f5396122d", 0xa5) (rerun: 32)

8m0.017982395s ago: executing program 1 (id=56):
r0 = gettid()
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)

7m59.935458894s ago: executing program 1 (id=58):
mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000005c0)="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", 0x1000, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000040)={r1, 0x1000, &(0x7f00000015c0)=""/4096}) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x8004)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) (async)
r3 = syz_open_dev$vim2m(&(0x7f0000001340), 0x5, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000000)={0x1, @pix_mp={0x0, 0x0, 0x38414762, 0x8, 0x0, [{0x0, 0x8}]}}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x24040800)

7m59.773969806s ago: executing program 1 (id=59):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x109400, 0x0)
ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000040))
r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341)
ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000380)=0xffffffff)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x14004040)

7m59.4538339s ago: executing program 1 (id=62):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$pppoe(0x18, 0x1, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) (async)
read$alg(r3, &(0x7f0000001080)=""/4130, 0x1022) (async)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000070a01020000000000000000020000000900020073797a32000000000900010073797a300000000079fcbf4e535131258b6c7f1a6b52d3d20ceeaaa4203fa2f8583338981dd8f572e5035962b7eb2e52fd87779a8f8152e838e61a0589da05b35965d9765c7e9d41519639a331a44d767ef9fa6a168fa769ad"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x84a200, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) (async)
ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
fcntl$setpipe(r1, 0x407, 0x3) (async)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r11=>0x0})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000003c0)={0x3d, 0xaa, 0x1, 'queue0\x00', 0x8}) (async)
sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090025bd3b258300df25090000000800030050b062e356865def4c1ae7ed1c85b18ad8a62aa575b56d1761ae8d", @ANYRES32=r11, @ANYBLOB="0500080004000000"], 0x24}}, 0x84) (async)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)

7m59.190082284s ago: executing program 32 (id=62):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$pppoe(0x18, 0x1, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) (async)
read$alg(r3, &(0x7f0000001080)=""/4130, 0x1022) (async)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000070a01020000000000000000020000000900020073797a32000000000900010073797a300000000079fcbf4e535131258b6c7f1a6b52d3d20ceeaaa4203fa2f8583338981dd8f572e5035962b7eb2e52fd87779a8f8152e838e61a0589da05b35965d9765c7e9d41519639a331a44d767ef9fa6a168fa769ad"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x84a200, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) (async)
ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
fcntl$setpipe(r1, 0x407, 0x3) (async)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r11=>0x0})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000003c0)={0x3d, 0xaa, 0x1, 'queue0\x00', 0x8}) (async)
sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090025bd3b258300df25090000000800030050b062e356865def4c1ae7ed1c85b18ad8a62aa575b56d1761ae8d", @ANYRES32=r11, @ANYBLOB="0500080004000000"], 0x24}}, 0x84) (async)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)

7m9.516642228s ago: executing program 4 (id=270):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @private0, 0x85}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0x18}}], 0x1, 0x0)
syz_usb_connect(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200))
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = dup(r2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ppoll(&(0x7f0000000000)=[{r4, 0x1108}], 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r5, &(0x7f0000000080)={'exec ', ':\x00'}, 0x7)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000181"], 0xfdef)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

7m6.444477089s ago: executing program 4 (id=289):
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r0, 0x541b, &(0x7f0000000300))
r1 = socket$inet6(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB="2c726f6f746f64653d30830c2206000000e2d93030303030303030303030303030303030873403302030335c6b6b74b5429ec1c0c9067b2823e7dde287a83d4da0b07e67fb3508d34dd1f9c67b84fa5b3ded6efc502162c6cabdadf77d422175c9cc78c08f83a94e592eca84f5fd2b3c100d056ca28c8d653ffd1325d64702b0b973d5b44f003e4706966ae2f2cb4955610add657176e0a83f433074a34f", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r1])
newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x4000)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000180)={0x3, @win={{0xd5, 0xe7, 0x0, 0x6}, 0x9, 0x3, &(0x7f0000000040)={{0x0, 0x100000, 0x7, 0x9}}, 0x2, 0x0, 0x84}})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
fcntl$getownex(r0, 0x10, &(0x7f0000000380))
landlock_create_ruleset(&(0x7f00000003c0)={0x50, 0x1}, 0x18, 0x2)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002e000100000008000000000004000080"], 0x14}], 0x1}, 0x0)
r5 = syz_clone(0x89aea080, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r6=>r4, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000000340)={0x3, 0x7, 0xb2, &(0x7f00000000c0)=""/178})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x2, 0x0)

7m6.282060036s ago: executing program 4 (id=290):
syz_usb_connect$uac1(0x5, 0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000206b1d0101400001020301090285000301a400d30904000000010100000a24010400ec0201020624050408cf0d2406040203030002000300fd09040100000102000009040101010102000009050109ff0300c104072501c5080800090402000001020000090405010101020000072401020100000c24020206000800018a72b6090582090002b1d40507250100fb03"], 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
openat$kvm(0xffffffffffffff9c, 0x0, 0x202, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0})
mount$overlay(0x0, 0x0, 0x0, 0x840, &(0x7f00000001c0)={[{@index_on}]})
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x40000009, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7m5.24125818s ago: executing program 4 (id=299):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x600000, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x100000000)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r2=>0x0})
close(r0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000b80)='./file0/file0\x00', 0x100)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
recvfrom$inet6(r4, &(0x7f00000000c0)=""/3, 0x3, 0x40000043, 0x0, 0x0)
listen(r3, 0x8)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0)
accept4(r3, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000240)=0xfffffff8)
getsockopt$sock_int(r7, 0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r2})

7m5.089793229s ago: executing program 4 (id=300):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xf0)
r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x40040)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000200)=0xf0)
setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x19)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

7m4.90551414s ago: executing program 4 (id=301):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000014c0)={0xffffffd1, 0x2, 0x2, 0x811a, 0x1, "030000000000000000049dd0ffd76d7fcb0b0e", 0x6, 0x201})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
r3 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYRES8=r0], 0x0)
r4 = syz_open_dev$dri(&(0x7f0000001400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xffffffff, 0x1, 0x3})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)

7m4.502678009s ago: executing program 33 (id=301):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000014c0)={0xffffffd1, 0x2, 0x2, 0x811a, 0x1, "030000000000000000049dd0ffd76d7fcb0b0e", 0x6, 0x201})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
r3 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYRES8=r0], 0x0)
r4 = syz_open_dev$dri(&(0x7f0000001400), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xffffffff, 0x1, 0x3})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)

4m30.281504492s ago: executing program 5 (id=1221):
lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'system.', '].[\x00'}, &(0x7f0000000080)='$+#*:}\b]\x00', 0x9, 0x2) (async)
lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'system.', '].[\x00'}, &(0x7f0000000080)='$+#*:}\b]\x00', 0x9, 0x2)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
mount$pvfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x21020, &(0x7f0000000240)={[{'system.'}, {'].[\x00'}, {'].[\x00'}, {'$+#*:}\b]\x00'}], [{@euid_gt={'euid>', r0}}, {@fsname}, {@appraise_type}]})
mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@uuid_auto}, {@uuid_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$+#*:}\b]\x00'}}]})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file1\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file1\x00'})
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x2}) (async)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x2})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'})
lsetxattr$security_ima(&(0x7f0000000440)='./file2\x00', &(0x7f0000000480), &(0x7f00000004c0)=@md5={0x1, "36e621133310b12d3f7a9ccdf8b4ca43"}, 0x11, 0x2)
write$binfmt_register(r2, &(0x7f0000000500)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3, 0x3a, '[(', 0x3a, 'fsname', 0x3a, './file3', 0x3a, [0x0, 0x46, 0x43, 0x50, 0x4f, 0x43, 0x46, 0x0]}, 0x37) (async)
write$binfmt_register(r2, &(0x7f0000000500)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3, 0x3a, '[(', 0x3a, 'fsname', 0x3a, './file3', 0x3a, [0x0, 0x46, 0x43, 0x50, 0x4f, 0x43, 0x46, 0x0]}, 0x37)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000540))
setxattr$incfs_id(&(0x7f0000000580)='./file2\x00', &(0x7f00000005c0), &(0x7f0000000600)={'0000000000000000000000000000000', 0x30}, 0x20, 0x1)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2f)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000640)="641fe395260fc72bf30f1ec9660f3880618b0fc72d640f01330f01c20f303e0f6fed", 0x22}], 0x1, 0x4, &(0x7f00000006c0)=[@cr4={0x1, 0x21000e}], 0x1)
open$dir(&(0x7f0000000700)='./file1\x00', 0x410000, 0xa0) (async)
open$dir(&(0x7f0000000700)='./file1\x00', 0x410000, 0xa0)
connect$bt_sco(r2, &(0x7f0000000740)={0x1f, @none}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r4=>r3, {r0, r1}}, './file3\x00'})
sendto$unix(r2, &(0x7f00000007c0)="769766a8d2ff266543a9f4c0c998ae5e51e0956090fe55e21efaa541265882fa28e8e8ebcd4b92421d523ced365de52374", 0x31, 0x48810, &(0x7f0000000800)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000880)={'pim6reg0\x00', 0x4e58})
sendto$unix(0xffffffffffffffff, &(0x7f00000008c0)="65d214d336ba1982f3b4b2e1e488f2d9f28ccd5f2b52569ceddc367c6d43682764eac6d6cdf1ad07e8259db499e7208a93eba5e11c0eb889befe3a7c33ec1e75d2d1211792959a529ac77bcde44eaaec798d9e043d15deea2326763f499a49431d28240e1844edf09b43a37bad01533331b90c509e117a9dce254709ad4478cb31fe49fcd3c5600ff5bb4332e2675adaf34efc3c1c69feb44c7f340142a594", 0x9f, 0x81, &(0x7f0000000980)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000a00)) (async)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000a00))
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000a40)={0x1000, 0x4000}) (async)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000a40)={0x1000, 0x4000})
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000a80)={<r6=>0x0, 0xd22, 0x8, [0x9b, 0xffc1, 0x3, 0x7f, 0x6, 0x2, 0x8, 0x1]}, &(0x7f0000000ac0)=0x18)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000b00)=@sack_info={r6, 0x8, 0x6}, 0xc) (async)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000b00)=@sack_info={r6, 0x8, 0x6}, 0xc)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000b40)={<r7=>r6, 0xe4, "cdeeb5e7c5a83a456ad6bdde39e0490bcc04ec088818a62a9d44be28f684b0eae030dc44773824f1052690f9a4f3b9850fcddb674e22ef1c1a320dd120f0f1a440a963b721792b11c8756749b9cccdb50013470a93124653621c2fd76c6086c305eea49eaa39db59f449fd35d5679d5aa25f99382663decc55158f2662919d39b42edc56a4dad48f8155a486e533c8a61c463de79bf252b20d305d91e32479cecbf8688a43090b9d8aae366279755d548fa75054949ffb31e56e44d00b1acefc24abe7bd62987c291d26ae3a16a66ceced28395016d9ede76ce7a2fcbe3b485c4a5c0bdc"}, &(0x7f0000000c40)=0xec)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000c80)={r7, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2}, &(0x7f0000000d40)=0x90)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000d80)={[{0x0, 0xe1d, 0x9, 0x8, 0x1, 0x7, 0xff, 0x2, 0x80, 0x9, 0xf, 0xc, 0x4}, {0xa2, 0x9, 0x4, 0xb6, 0x2, 0x2, 0x7f, 0x2, 0x7f, 0x3, 0x42, 0x6, 0x2}, {0x7ff, 0x3, 0x7, 0x4, 0x9, 0x3, 0x9, 0xb0, 0xfc, 0x1, 0xf, 0x8, 0x9}], 0x410f})
lchown(&(0x7f0000000e00)='./file2\x00', r0, r1) (async)
lchown(&(0x7f0000000e00)='./file2\x00', r0, r1)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000e40)={0x1, 0x0, {[0x496, 0x2, 0xfffffffffffffffb, 0x35, 0xb1f, 0x8000000000000000, 0x15, 0x5]}})
ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000ec0)={0x8f, 0x0, 0xf})

4m30.182473163s ago: executing program 5 (id=1222):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
pselect6(0x40, &(0x7f0000000100)={0x9, 0xffffffffffff0001, 0xe4, 0x1000, 0xc686, 0x6, 0x6, 0xf}, &(0x7f00000001c0)={0x9, 0x2, 0x6, 0x37, 0x80000001, 0x1ff, 0x1, 0x9}, 0x0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) (async)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

4m30.049820097s ago: executing program 5 (id=1223):
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000014c0)='tmpfs\x00', 0x9000, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
recvmsg$can_bcm(r3, &(0x7f0000001500)={&(0x7f0000000180)=@nfc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001480)=""/39, 0x27}, {&(0x7f0000000280)=""/15, 0xf}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000340)=""/167, 0xa7}], 0x4, &(0x7f0000000400)=""/57, 0x39}, 0x2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xfffffffffffffffe, 0x5b84, 0xc0, 0xf, 0xfffffffffffffffd, 0x9, 0xad, 0x0, 0xdb})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7, 0x1, 0x0, 0x6, 0x3, 0x5}, 0x20)
r5 = socket(0x1, 0x1, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0)
r6 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r7, 0x8b32, &(0x7f0000000040))
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000000)=@secondary)
keyctl$link(0x8, r0, r0)

4m29.988553012s ago: executing program 5 (id=1224):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x90, 0x4}, {0xc, 0x90, 0x2000000}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8841}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
recvmmsg(r0, &(0x7f0000009500)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x40010000, 0x0)

4m29.812157225s ago: executing program 5 (id=1227):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, 0x0) (async)
setpgid(0x0, r3)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20000, 0x23)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) (async)
mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async)
unshare(0x2c020400) (async)
msgget$private(0x0, 0x240)
msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) (async)
msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) (async)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
ioctl$BLKSSZGET(r5, 0x1268, &(0x7f0000000140))

4m29.696932758s ago: executing program 5 (id=1228):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235010000000f30ac660f3815b216cb000066baf80cb89c39bd8aef66ba960ced0f20c035100000000f22768686f4020000b8112e8535bacb8be0280f303e0f2084c4c2498cbd0cc500000f7806dbd6", 0x55}], 0xaaaab93, 0x20, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m13.340956982s ago: executing program 34 (id=1228):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235010000000f30ac660f3815b216cb000066baf80cb89c39bd8aef66ba960ced0f20c035100000000f22768686f4020000b8112e8535bacb8be0280f303e0f2084c4c2498cbd0cc500000f7806dbd6", 0x55}], 0xaaaab93, 0x20, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m57.472198393s ago: executing program 3 (id=1389):
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1})
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x3, 0x8, 0xc0f, 0x4000005, 0xf2, "5154e3b549928deeb9e7027f241e66e9d92a68", 0x8, 0x7fff})
write$UHID_INPUT(r0, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) (async)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) (async)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x3, 0x8, 0xc0f, 0x4000005, 0xf2, "5154e3b549928deeb9e7027f241e66e9d92a68", 0x8, 0x7fff}) (async)
write$UHID_INPUT(r0, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) (async)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) (async)

3m57.029783051s ago: executing program 3 (id=1390):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)={{0x4}, {0x4}, 0x0, 0x7})
syz_usb_connect$uac1(0x6, 0x97, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES64=r0], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8080)
socket$packet(0x11, 0x2, 0x300)
syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b"], 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x5, "f896e404"}, @local=@item_012={0x1, 0x2, 0x2, 'e'}, @main=@item_012={0x2, 0x0, 0x9, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'ip6gretap0\x00', 0x0})
mount$overlay(0x0, 0x0, 0x0, 0x840, &(0x7f00000001c0)={[{@index_on}]})
r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x40000009, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
ioctl$KVM_RUN(r6, 0xae80, 0x0)
kexec_load(0xd, 0x0, 0x0, 0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3m55.582753244s ago: executing program 3 (id=1402):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000ac0)={0xfffffffffffffeb2, 0x0, 0x0, 0x0})

3m54.193956888s ago: executing program 3 (id=1416):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
socket(0x2, 0x3, 0xff) (async)
r0 = socket(0x2, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x44a2, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) (async)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x410102, 0x0, 0x10}, 0x18)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x80000001, 0x10, 0x7, 0xfffffff9, 0x1, 0x0, [{0x4, 0x9, 0x3, '\x00', 0x700}]})

3m54.045825782s ago: executing program 3 (id=1417):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={<r1=>0x0}, &(0x7f00000002c0)=0xc)
fcntl$lock(r0, 0x25, &(0x7f0000000300)={0x1, 0x3, 0x7ff, 0x3, r1})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
write$FUSE_INIT(r6, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, &(0x7f00000002c0))
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='bdev\x00', 0x2208080, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x39f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0)

3m53.73653561s ago: executing program 3 (id=1421):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}})
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000100)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101020000006025de685a5d000102030109021b000101048f23050904dee301070102010905010240000707"], 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="1c0100002b00010000000000fcdbdf250a01f2800c00090008ac0f0000000000140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x7, 0x832, [0x200000000940, 0x0, 0x0, 0x200000000b6c, 0x200000000e30], 0x0, &(0x7f0000000080), &(0x7f0000000940)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000300000054000000000d6272696467653000000000000000000076657468315f6d61637674617000000070696d3672656700000000000000000070696d72656731000000000000000000aaaaaaaaaa26ff00ffff00ff00000000000000ffffff00009e0000009e000000d6000000706b747479706500000000000000000000000000000000000000000000000000080000000000000007000000000000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000c0ffffff00000000ffffffff00000000110000000300000060006d6163736563300000000000000000006d6163766c616e31000000000000000070696d3672656700000000000000000076657468315f6d616376746170000000aaaaaaaaaa41ffff00ffffffaaaaaaaaaaaaffffff000000ee000000ee000000260100006367726f75700000000000000000000000000000000000000000000000000000080000000000000008e2682b010000006e66616363740000000000000000000000000000000000000000000000000000280000000000000073797a3000000000000000000000000000000000000000000000000000000000ff0f000000000000736e617400000000000000000000000000000000000000000000000000000000100000000000000011383498e84c0000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000002000000030000000100000022f07369742ff7000000000000000000000076657468305f746f5f626f6e640000007465616d5f736c6176655f310000000070696d72656730000000000000000000aaaaaaaaaabbff000000ff00bbbbbbbbbbbbff0000ff0000de000000160100006601000071756f7461000000000000000000000000000000000000000000000000000000180000000000000001000000000000000800000000000000ff0f0000000000003830325f330000000000000000000000000000000000000000000000000000000800000000000000ff00ffff02060000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000fcffffff0000000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000007f00000073797a3000000000000000000000000000000000000000000000000000040000000000000300000000000000000c70696d7265673000000000000000000067726530000000000000000000000000766c616e30000000000000000000000076657468315f746f5f6873720000000000000000bbffff00000000be000000f60000002e01000068656c70657200000000000000000000000000000000000000000000000000002800000000000000000000007369702d32303030300000000000000000000000000000000000000000000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000ffffffff000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa340000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000fcffffff01000000030000004400000086dd6261746164765f736c6176655f300000697036746e6c30000000000000000000626f6e645f736c6176655f300000000077673200000000000000000000000000aaaaaaaaaabbff00ffffff00aaaaaaaaaaaaff00000000ffee000000ee0000001e0100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000008000003000000050000000000000004000000090000000100000000000000636c7573746572001c000000000000000000000000000000000000000000000010000000000000000900000007000000ff0700000100000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000ffffffff02000000090000000200000088fb6e696376663000000000000000000000677265300000000000000000000000007866726d30000000000000000000000076657468305f766c616e000000000000bbbbbbbbbbbbff00ffffffff000000000000ff0000ff00006e0000006e000000a6000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb0000fdffffff000000000300000027000000060064756d6d79300000000000000000000076657468315f766c616e00000000000076657468305f746f5f626f6e64000000626f6e645f736c6176655f300000000015aa83f9162a00ff0000ff00f1b397b4d42000000000ff00ae000000e60000001e0100007374617469737469630000000000000000000000000000000000000000000000180000000000000001000100b2040000ff01000005000000c5a1e8ed0c344f847897df9e6a2504000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb000000000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaa"]}, 0x89d)

3m53.562375426s ago: executing program 35 (id=1421):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}})
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000100)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101020000006025de685a5d000102030109021b000101048f23050904dee301070102010905010240000707"], 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="1c0100002b00010000000000fcdbdf250a01f2800c00090008ac0f0000000000140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x7, 0x832, [0x200000000940, 0x0, 0x0, 0x200000000b6c, 0x200000000e30], 0x0, &(0x7f0000000080), &(0x7f0000000940)=ANY=[@ANYBLOB="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"]}, 0x89d)

2m28.113501623s ago: executing program 2 (id=1881):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000d80)="153b2f570b35b48ea8bc66e9bf821395befbdfade652da5c60ab361b7917a78af8c03f4722450baece00403c04", 0x2d}], 0x1}}], 0x1, 0x24004840)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000bc0)={'veth0_vlan\x00', 0x1})
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000740)={r4, 0x1, 0x6}, 0x10)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000580)={r4, 0x1, 0x6, @local}, 0x10)
sendmsg$xdp(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x2c, 0x1, r4, 0x28}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000140)="78ee4cce6da61e968872a1dd867466fada29a946fbf69fa32f9c83cacad12f1d44108126aefb9995538f7036d419e2bdac5707a1cdeb40cc5a39d47065ed606bb5b9dfde6b6d60d626749dbd2e56b9d3c0a516f1542c84eab9ee67b46d1e6a5ba0f537ddddab0d0406fc5175b94bc9aa3955e653f3d073bd111cf3a11e6ce58390912b1989436216ab7a4f89c63777f4840dc79741d15cc9019c6548ff4980c6fa8cdcea01af9f3d2302ca8c6a8b000a0abe19ff3508fec35d41db05e4ce861515b7852f2a23e8ebcbf0a0039a8d73c682b56631eea6627c94ec989e91ac00d6aa9b", 0xe2}, {&(0x7f0000000240)="c885fd5da5d8990f83d96474377172942c44629bc7b15352a6bdf713507859fbee08822f751da83e34a18d1107c9e5", 0x2f}, {&(0x7f0000000280)="b9687f059a815ab1d7ecc7076fbd3859187ec7c2fbcd57def80fd3a86dd90f9ed3594df4f3e69a6ebaccbd33695a838eabbdf2e517e3a5fb00ba1a7eda9f372b12f82b4b083b51b581de9f142178bffb16abacda3df2aa89024825c6f150e8d8591049496a174d53a5f90677e7d1860faa3472127f236a4d745b126840859411b1d42700a19df7ef58973b26bb2c977062b6fa94f646efc82fd5d8609c2cd753159536e666d10c52f8fdc8f5fa962fae670c4658d185d219fdb1b43598d509d285be9dac8df99cf6e9", 0xc9}, {&(0x7f0000000440)="039299a45a3b6186408c14d91ddc602b4b74ef47a46fc97abe4d29a997a23012b0c03367d0261381fe9702b56baf8d8eeabf9acdef07e5978f62f3eb9ab79b25ecfb60e9846c1704288c152a2b023955fe8cd4e9338b3746096614372399aaa76cef5152587fc2b7c3fe1fad47b9b302a7848192fbc691764022628873ee07e9eb", 0x81}, {&(0x7f0000000500)="b3849909d17da14b90ab88e5101718622ab32f77a40f22c7ce13c94b75edea7d2be980801d83f90bfffd00a845d311526ae408e2786d84d6032e3af0d4ade56a372671e52ff757cab0feae2d7ae8b18229511dae0115b04b68250db63e4839dc5a12e7ab9fb19bb78b4de41ce9cb0aedc084ffe7773d6b56a98fddcebedc381f7dff0e2672c470917bf72b52c2d4ee63a5f7a1a986890cdbd3aab94b2cfa142c6ba73a55e5494e33b356bc3047b8bef7c512021966cd1e18ca2234bcb80da88599dfa7e9321cd5b96d4f1dcc1492", 0xce}, {&(0x7f0000000380)="7104b695d58cecd4c7365284c711d146d963d1558d3f78ac5b0b1d3b9933b3ee2030160969bb16c198310cfe968c04c271e33ab475c3f0997bb8ec14754a7736338a348a2b2f793858b2f8a3497130e0f1752b44fcee1bd6a2bc3725848bbdd679dd7467b8f2b4d7bd306a02c961bd0f5dca1fc51d6884911dac158f0c", 0x7d}, {&(0x7f0000000600)="63727a2081add8a94f13cfa63ae3c72dd62b5ba1ab9eb3938debff06272093eca45c52c2ed0440b092c5cced6fdbb42232977f0ae28be0b1bbf81d5352eeeaf4a500b0c46ab4c928b61de77e594451199f8b98ef76523cb1ac0b5577044e2ac2a18d", 0x62}], 0x7, 0x0, 0x0, 0x44000}, 0x200008c4) (async)
sendmsg$xdp(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x2c, 0x1, r4, 0x28}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000140)="78ee4cce6da61e968872a1dd867466fada29a946fbf69fa32f9c83cacad12f1d44108126aefb9995538f7036d419e2bdac5707a1cdeb40cc5a39d47065ed606bb5b9dfde6b6d60d626749dbd2e56b9d3c0a516f1542c84eab9ee67b46d1e6a5ba0f537ddddab0d0406fc5175b94bc9aa3955e653f3d073bd111cf3a11e6ce58390912b1989436216ab7a4f89c63777f4840dc79741d15cc9019c6548ff4980c6fa8cdcea01af9f3d2302ca8c6a8b000a0abe19ff3508fec35d41db05e4ce861515b7852f2a23e8ebcbf0a0039a8d73c682b56631eea6627c94ec989e91ac00d6aa9b", 0xe2}, {&(0x7f0000000240)="c885fd5da5d8990f83d96474377172942c44629bc7b15352a6bdf713507859fbee08822f751da83e34a18d1107c9e5", 0x2f}, {&(0x7f0000000280)="b9687f059a815ab1d7ecc7076fbd3859187ec7c2fbcd57def80fd3a86dd90f9ed3594df4f3e69a6ebaccbd33695a838eabbdf2e517e3a5fb00ba1a7eda9f372b12f82b4b083b51b581de9f142178bffb16abacda3df2aa89024825c6f150e8d8591049496a174d53a5f90677e7d1860faa3472127f236a4d745b126840859411b1d42700a19df7ef58973b26bb2c977062b6fa94f646efc82fd5d8609c2cd753159536e666d10c52f8fdc8f5fa962fae670c4658d185d219fdb1b43598d509d285be9dac8df99cf6e9", 0xc9}, {&(0x7f0000000440)="039299a45a3b6186408c14d91ddc602b4b74ef47a46fc97abe4d29a997a23012b0c03367d0261381fe9702b56baf8d8eeabf9acdef07e5978f62f3eb9ab79b25ecfb60e9846c1704288c152a2b023955fe8cd4e9338b3746096614372399aaa76cef5152587fc2b7c3fe1fad47b9b302a7848192fbc691764022628873ee07e9eb", 0x81}, {&(0x7f0000000500)="b3849909d17da14b90ab88e5101718622ab32f77a40f22c7ce13c94b75edea7d2be980801d83f90bfffd00a845d311526ae408e2786d84d6032e3af0d4ade56a372671e52ff757cab0feae2d7ae8b18229511dae0115b04b68250db63e4839dc5a12e7ab9fb19bb78b4de41ce9cb0aedc084ffe7773d6b56a98fddcebedc381f7dff0e2672c470917bf72b52c2d4ee63a5f7a1a986890cdbd3aab94b2cfa142c6ba73a55e5494e33b356bc3047b8bef7c512021966cd1e18ca2234bcb80da88599dfa7e9321cd5b96d4f1dcc1492", 0xce}, {&(0x7f0000000380)="7104b695d58cecd4c7365284c711d146d963d1558d3f78ac5b0b1d3b9933b3ee2030160969bb16c198310cfe968c04c271e33ab475c3f0997bb8ec14754a7736338a348a2b2f793858b2f8a3497130e0f1752b44fcee1bd6a2bc3725848bbdd679dd7467b8f2b4d7bd306a02c961bd0f5dca1fc51d6884911dac158f0c", 0x7d}, {&(0x7f0000000600)="63727a2081add8a94f13cfa63ae3c72dd62b5ba1ab9eb3938debff06272093eca45c52c2ed0440b092c5cced6fdbb42232977f0ae28be0b1bbf81d5352eeeaf4a500b0c46ab4c928b61de77e594451199f8b98ef76523cb1ac0b5577044e2ac2a18d", 0x62}], 0x7, 0x0, 0x0, 0x44000}, 0x200008c4)

2m27.592494821s ago: executing program 2 (id=1886):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, 0x0, 0x0, 0x200440c0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d  \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x4000, 0x141200})
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x7}, '\x00', "dc66e577951f4dac2f05c9c93200edff", "322b621d", "7b1905565748a634"}, 0x28)
readv(r7, &(0x7f0000000080)=[{&(0x7f0000001580)=""/206, 0xce}], 0x1)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000100)=@x86={0x6, 0x2, 0x10, 0x0, 0xb, 0x7, 0x2, 0x9, 0x1, 0x51, 0x0, 0x8, 0x0, 0x4, 0x10, 0xff, 0xb, 0x2, 0x7, '\x00', 0x6, 0x4080000000000005})
ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000040)=0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0)

2m26.335993841s ago: executing program 2 (id=1892):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000020aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516", 0x5d}, {&(0x7f0000001d00)="0092e9a7e64c32c40a81fa1164b59906f29b6a0aa0e850e7eb26dd111c83b33cf6f3f5bfdf52e23faac8580b58c35613a51fec2e1500747c8a72eb20d3d6b9e4e75d266a5440ad6fa037d9055e6a4a6760575b9459419cfc252cb04e3a624aaaa02bf155303808bcb8ec989fd7db312bb9808e1efe0dab699418e3", 0x7b}], 0x2, 0x0, 0x0, 0x7400}, 0x40040)
syz_usb_connect(0x1, 0x7dc, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0xc7, 0x46, 0xe5, 0x40, 0x424, 0xcf19, 0x41f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7ca, 0x2, 0xa, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x25, 0x1, 0xc, 0x2a, 0xbb, 0x19, 0x9, [@generic={0x86, 0x10, "f36afe48cc489c0d3e623add57cbf64d64fe37c0658801bb02d336f106375072f30d6eba191483adb9013569dc9e12a767d2783bc52dfff99b84a8bfbc800077dbe4e79148192ca656e56e29e2795bab845e2433d66beea49dd4eb389de129112f83e840ace9de10d0afb47be7c013b3fbb232e6caef11e7667892a50d5a598132d5b259"}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x8, 0xe6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x7f}]}}, {{0x9, 0x5, 0x6, 0x10, 0x650, 0x4, 0x47, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x3, 0x3, 0xfc, [@generic={0xb0, 0x3, "7bdf4371350e31402aead4e0189e099b573325433e218cfb9c0f12bb50af9da3ba034daa74818310bdee53d80d6e6d02e40a77558cdd4219bd576c68682487c199aadbeafdddad500605c87018dd47c51458c0d67a5ed8e94546065b2954010f1e8cceb3ade75396ffb3512b5ff739790666f92ad65ba71018771f7589b4802b085a20ca3e3bdfa54185ef0f235f8df5c0f7fce8708e2936b6729e913ee24eba7e88a81baf3a5577985b98284733"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x0, 0xd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x2, 0x7, 0xc9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xa, 0x3}]}}, {{0x9, 0x5, 0xf, 0x2, 0x0, 0x3, 0x1, 0x6, [@generic={0xa4, 0x23, "1452f6fcb5081ec5c6421920f8848360bbf4884ad767b0f1cf5ea6e93e24da347946546ac6a8d842d0c6cf5a930d6b641039b83a13cae46e1693cc45cfe916c4f2a8a71b24a39abd667900017dd3951727108f52035d1bfc9958aeb00538681e5901ec094e335736f9e46495d0d4a92b0a60c8a2217a7e8f37988e5958cf2a21158a4b564b5b2dfdc7f864a1abe3d7bc92bc3d6ee9847a6fe421963e5da0197e3732"}, @generic={0x102, 0x2, "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"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x1, 0x0, 0x3c, [@generic={0xd2, 0x24, "d6bbd64054b91e684e78782710b934a07f38bdfbad55c029265feca1aa3be4c8d13be52dce42cfc6262078406504824fc2bdd7ceda58e8ead376821d6750a8a44c7b1e47741cab23a9b10a8264f3afa5005e054d1491b33fcbc49f53f97909f7539537cefe112018910ccef13ea2608d369871c454348509626b35aa3f29db6851b3f4156967e3a5e0d5c188e31ba663eebc8f0d807978ddb2884658d8e0bb91e9d911bbd1a35dc9535f6a19b33b3c2d72bd88175fff79c98f06fa6e4be21aac39487a93bccc2a8b7aeeafe492217a09"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xdf, 0x1}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x3, 0x9, 0x2, [@generic={0xd5, 0xb, "1e43dba8afd062088b606dca6eb32cebc638f2e3ac994666caad8ffc1aae1aeaf6a2b470351dcfabc4e7f5cab5c8ab181852f9ee89a139ade6fef6290eb984783a463aac8e006139c738f4a6790bd8b7d575bacd2dcc8b50f153e743573876c22ec2aa0476edb139f5fb4bd74dacd48d57283ed6ed1d3f092f0379cd4c22b2cd340c0deffe10474eb4b44e7757dd2f8391e6ecda2f252064b5297dc759e7dd85d9baec6451cf14876f2eb02262039494880482a3df023b98c77dd562bf3e1c3376eced6b17bc14d3d0e4a56767374bcf7a6e6d"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x19, 0xf7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x47a0}]}}, {{0x9, 0x5, 0x18, 0x10, 0x200, 0x1, 0xe, 0x7, [@generic={0x59, 0x23, "12fc77372e0280f718a44e49baaeafc9a89387f6ce5f4a3b67a560fb114aac26c0dd1d3e5567c48663dc544bc012a476c31aad4cf4b96e074fcf2e46eee2e194db189d163e55370dac02f1c387974485f765490b932cee"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xff, 0x50, 0x73, [@generic={0xb8, 0x22, "1667d2640f0a2e4a287b32b2bb517f4e2554035ddbcf2e333593ac27c2aca0c5b1ae8b44c6c9d4c2e85e5ef0986d1854fb29ed4479ca587a47d02beeccd511f0f639e608cfe61866aa81130419560e0ee61b7cbe12c29241f48f251a138d4cbbec249e5a184cdaceb39b1b59b4c724a762efccb581197dc1f087dfa9344ce42bace46c4033be9a4df58260e34604a1b65f9b4659800c961439bffe376385f7068829ffc515112393cbbd3fed39240606f4782795eb19"}, @generic={0x53, 0x31, "4c7a1cfaae4d53edf74e97464626b1af80d4c40d33a1bff214232122c28ba100f2ba5e1cc6ef525f51180aab8c83cc580a1e25f3e26f1778acf92aad9154df20ebffb171a0ee71c056f592530c504fc82a"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x30, 0x3, 0x6}}]}}, {{0x9, 0x4, 0x17, 0x75, 0x3, 0xe9, 0xa7, 0xb1, 0x9, [], [{{0x9, 0x5, 0xb, 0x10, 0x19f, 0x3, 0x4, 0xe6, [@generic={0xf0, 0x9, "b720e13a034c487880f973d8c63952b410f1ad529418bdfed418d252ec04ce5cfefb33cf854b5f52fbc8bc8121a72a6c11a57c2542df9d56011811e10ac2c6b82a26e928ec9176904aa85775346c1b1a6e5c8944b5e010e302ba967cf63a6d7e4b69115a72a0efb2f32656394b4e7ffcb455ce8677cbd4d0e792bd51f52d3a21fd47ef0747cc175d0484e9eebef9c939466689540fce8afd9f613bfa550ff41e87bd03feeb4ec189c067b62aac4ef6e5b54f1cd2f75a9c5036f04001d4c6fd4d9dfa5b9a0b94ae8cc80d76a97df666d1580c2fb6f6a208efc49da004872d38945d726a55eedaec276e4b84cb6ece"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0xe7, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xed}]}}, {{0x9, 0x5, 0x3, 0x10, 0x0, 0x4, 0x2, 0x5, [@generic={0x19, 0x21, "121295e67114cc09816d8f2e61e6acac42191d0c32e321"}]}}]}}]}}]}}, 0x0)

2m23.0625584s ago: executing program 2 (id=1905):
futex(0x0, 0xd, 0x2, &(0x7f0000000040)={0x77359400}, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004740)={0x20, 0x35, 0x107, 0xfffffffe, 0x25dfdbfd, {0x3, 0x7c}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32=0x306a}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048091}, 0x8010)
futex(0x0, 0xd, 0x2, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004740)={0x20, 0x35, 0x107, 0xfffffffe, 0x25dfdbfd, {0x3, 0x7c}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32=0x306a}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048091}, 0x8010) (async)

2m22.942054098s ago: executing program 2 (id=1907):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000580)}}], 0x1, 0x200400c0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0x28, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0x80a0000, 0xe6e50002, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0xf, 0x0, 0xff, 0x5}, {0x8000000, 0x3000, 0x9, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0xa, 0x1}, {0x100000, 0x0, 0x0, 0x1, 0x3, 0x9, 0x9, 0x1, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x0, 0xc, 0x45, 0x6, 0x10, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x6}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x2, 0x2100, 0xe6e70c00, [0xffffffffffffff47, 0x3ff, 0x5, 0xc5]})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000003008"])
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd00001200000014764b1b60fc030000366c00fe8000000000000100000000000000aaff020000000000000000000000000001"], 0x6c)
ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012002daf08d08981490a00f480102030109021b00010755e00109043a03024ed82c5c09050efd"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})

2m21.229850883s ago: executing program 2 (id=1910):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
signalfd(r0, &(0x7f0000000080)={[0x81]}, 0x8)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0xfffffffffffffffc, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0)

2m5.156280342s ago: executing program 36 (id=1910):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
signalfd(r0, &(0x7f0000000080)={[0x81]}, 0x8)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0xfffffffffffffffc, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0)

28.282173352s ago: executing program 6 (id=2344):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_clone(0xc61c0a00, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_clone(0x10068c80, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r2, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0xfffffffffffffd32, <r3=>0xffffffffffffffff, {0x1}}, './file0\x00'})
sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000001c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="40000000091400042cbd7000ffdbdf2508000100020000000800010000000000080001000200000008000b000000000008000100020000000800010000000000", @ANYRES8, @ANYRES8=r3], 0x40}}, 0x4010)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r4, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/224, 0xe0}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}], 0x9, 0x4022, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2002)
ioprio_get$pid(0x2, r5)
capset(&(0x7f0000000100)={0x20071026, r1}, &(0x7f0000000180)={0x5, 0x1, 0x5, 0x2, 0x2, 0x5})
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001714b579"], 0x20}}, 0x0)
r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd28710000000000000109022400010000a0000904000001030001000921050008f47a3ace3f7b24f11000000007"], 0x0)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42000, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = dup(r9)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000600)="440f01df430f32660f284e4b420f01f8c744240203000000ff2c2466b84a008e17c8c80f01c50f813ecbcb66440f388299d3b9939366b8e1000f00d8460fc7bdf0286d53", 0x44}], 0x1, 0x4d, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x39c}, 0x20040041)
write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000069"], 0xfe33)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000400)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00234262ef7c0501d0d8c9"], 0x0, 0x0, 0x0}, 0x0)
socket(0x10, 0x2, 0xfffffffe)

27.294915794s ago: executing program 6 (id=2349):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffffb, 0x1, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0})

24.043652909s ago: executing program 6 (id=2366):
memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080", @ANYRES32=0x0], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x188}}, 0x845)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
sendmmsg$inet(r3, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd41, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r3], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2042, 0x0)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000440)={0x2d, 0x9b69e244bf4e4056})
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="b80000001300e99922c39eed7faab03e8df3e8dc2c1000000000000000fd000000000000fc02000000000000000000000000000000000000000000010a00c02000000000cb73f344f90604f1fa15d8304df49308fd6ce2", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000005200000000000000000000000000000001000000000200"/112], 0xb8}}, 0x0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x100, &(0x7f0000000580)={0x100070, 0xe, 0x100000}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
faccessat(0xffffffffffffffff, 0x0, 0x3)
recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x201}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}], 0x4, 0x20, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x8000, 0x0, 0x1, 0x2226, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x64, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010102, {[@generic={0x86, 0x3, "11"}, @noop, @timestamp_prespec={0x44, 0x44, 0xe3, 0x3, 0x8, [{@private=0xa010102, 0xa8}, {@multicast2, 0x1ff}, {@private=0xa010102, 0x8}, {@rand_addr=0x64010101, 0x6}, {@local, 0x6000}, {@loopback, 0x7}, {@multicast1, 0x84}, {@private=0xa010102, 0x8}]}, @timestamp={0x44, 0x8, 0xcd, 0x0, 0x6, [0xdb8]}]}}}}})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYRES16, @ANYRES16=r7, @ANYBLOB="010040000000000002034400000008000300", @ANYRESHEX=0x0, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x4004000)
r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r9, 0x0, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

23.909120258s ago: executing program 6 (id=2367):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7)
ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0xc3})
r3 = socket$inet6(0xa, 0x3, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @loopback}], 0x1c)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240))
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0x19, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r7, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r7, 0x0, <r8=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r8, 0x0, 0x0, 0xffca, &(0x7f0000000040)='?', 0x5})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4881}, 0x400c084)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000000c0)="2ef2dd050080000048b844410000000000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b9009800000f01d90f01c965470f01c4410f79d226450f01cb660f013b", 0x55}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0)
syz_usb_connect$uac1(0x3, 0x9e, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x11, 0x50, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2, 0x1, 0x9, 0x6, '\x00\x00\x00\x00\x00'}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xb, 0x1, 0x40, 0x4, "0000fb1aa400b1383c"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0x69, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0xf, 0x0, {0x7, 0x25, 0x1, 0x81, 0x2, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x8, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x80, 0x1, {0x7, 0x25, 0x1, 0x81, 0x3, 0x7}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x7, 0x49, 0x9, 0x40, 0x28}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x4, 0x0, 0x69d, 0xb}]}, 0x6, [{0x2f, &(0x7f0000000140)=ANY=[@ANYBLOB="2f03e74ce36e64e9089748f3aa701ff0cfb184ddf9ddf2397659cb7ae613548220efd5c1139c94718b14018edc0ee0"]}, {0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="5203d4e5d7a08dfb5028089f64bf28497f5783597da8a645473ff9eb658d28d52b5b55f96f42f576875c4d1657d6dce0c6d6318aab7d430fc50e3d179fefaea5776a28860e9b55419d41787c821ceaa2034a"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x421}}, {0xb6, &(0x7f0000000240)=@string={0xb6, 0x3, "7c70cc337ba262e31f024f5463bdb6ad2ddcd3cc461edcc37cc3404ffe2ad5fa42140cce79c33f6468b1c05e87d0832343af6c003047e1c78341bc8ce172687c7eca5fecb155e83108af2ba7572d99db89eed814608cb631325395f532e1d3dcda259c82517e296464fa620ab25415dbce15fa3580256e98be29da3c488b9a0893819eec90b75acda0828ca2c5fb97b92a458a0504745cc8dd45d894442653193b8169a8d96026829046b6318b44b0994a097ead"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x816}}]})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r10, 0x80089418, &(0x7f00000004c0))

22.352532278s ago: executing program 6 (id=2374):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x400000002, 0x0)
setxattr$incfs_metadata(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8042, 0x8)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x8, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}})
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1800000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0)

22.241620998s ago: executing program 6 (id=2375):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x80000000002})
fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x1, [0x1]}})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000002bc0), r3)
sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYRES8], 0x24}}, 0x4)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r4, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x400000c1)
r10 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0x200})
getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8)
quotactl_fd$Q_SETQUOTA(r10, 0xffffffff80000800, r11, &(0x7f0000000280)={0x1, 0xe1, 0x3, 0xcd, 0x9, 0x7, 0x3, 0x1, 0x5089})
r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2)
r13 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_UIE_ON(r13, 0x7003)
ioctl$RTC_AIE_ON(r13, 0x7001)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r14)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r15, 0x70b, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000051}, 0x40000a0)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r15, 0xc02, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$RTC_SET_TIME(r13, 0x4024700a, &(0x7f0000000040)={0x5, 0x2a, 0x2, 0x5, 0x1, 0x62, 0x0, 0x20006e})
sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="0100"/14], 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)

21.6388353s ago: executing program 8 (id=2379):
syz_usb_connect$uac1(0x5, 0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000206b1d0101400001020301090285000301a400d30904000000010100000a24010400ec0201020624050408cf0d2406040203030002000300fd09040100000102000009040101010102000009050109ff0300c104072501c5080800090402000001020000090405010101020000072401020100000c24020206"], 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ec110000150001002dbd7000ffdbdf2510"], 0x11ec}, 0x1, 0x0, 0x0, 0x1}, 0x48090)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000300)=0x3, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x40000009, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
syz_usb_connect(0x0, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904360000e0010300052406000005240000000d04"], 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

21.257429444s ago: executing program 0 (id=2381):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x51)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x10001}}, './file0\x00'})
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'})
mount(&(0x7f0000000100)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='ext4\x00', 0x208003, 0x0)

21.145031286s ago: executing program 0 (id=2383):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r2=>0x0}})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000480)={r2, "efdc47602048f9a979ee2a890fb00314"})
r3 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001480), 0x2, 0x0)
readv(r3, &(0x7f0000002580)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/101, 0x65}, {&(0x7f0000002540)=""/2, 0x2}], 0x3)
sendfile(r1, r3, &(0x7f00000025c0)=0x8000000000000001, 0x2)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000002600)=0x40000000)
ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000002640)=0x7)
io_setup(0x8, &(0x7f0000002680)=<r4=>0x0)
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000002a40), 0x2)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000002c40)={{0x1, 0x1, 0x18, <r6=>r0}, './file0\x00'})
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002cc0), 0x8000, 0x0)
r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000002dc0), 0xc6481)
io_submit(r4, 0x7, &(0x7f0000002e40)=[&(0x7f0000002740)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f00000026c0)="d4de55eb869b119d6da9370198b22b17e43f95dd0a121b2cb7938fa0369b53ea79e2f7c518ee647c35de51af30f037416d166a277a5e79d5b699d8063ea40d3a33fb", 0x42, 0xffffffff, 0x0, 0x0, r0}, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0x3, r3, &(0x7f0000002780)="12d42f869351d6fed939b603d00413aff93cd0f4429f96c12a0b616c6a0d519223", 0x21, 0x7fffffffffffffff, 0x0, 0x2, r0}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0xfff2, r3, &(0x7f0000002800)="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", 0xfa, 0x5, 0x0, 0x3}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f0000002940)="4d9eaec6b17b3b9c1f0d5b65602339957914d8396098c1297137336a75c389080b0c3691020ce3e82a851a283835c8f42fa3858d4c299c3e34c5a89e1b4e61e109be24c54622a76a571225eb2bf681b058c3b0407a3f4ed6d71d24771712cff1415e045cffbaffe07ef751ffc73b2e575afbf04d4a5cd238d921e320f9f254cf3980", 0x82, 0x8, 0x0, 0x3}, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0xd, 0xd8e7, r5, &(0x7f0000002a80)="c8adf16152a7d6a77d35c0613ce9118a0bc2190f987c832a1ee30b5f877eb149ce1950775fa6b77ad3274a34cf1de9a4feb2ac7bdfdb7bf87ef407a77d8023649f5fcda7985bf19c3e1c96d77ae374a7e4f490183e6b96bd9b8b57dac33891ce1c5351b25dbfee4b2fdfbfa31d906c84a60086666a5d258d492b8cfca8a6b6c3af8dfbee89d9aaee07cbe6a7d0110661f13e36134b3fb9244e2244018912efd4de82b8b75846ce425ae34afba22b266b041d1af9bedf664a54cedef4a9ada613d33aa6eca211edf5a8b3460f3ece12f1e3b25e3869e57508d61ce263e114", 0xde, 0xfcb, 0x0, 0x1, r0}, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0xb, 0x8001, r0, &(0x7f0000002bc0)="5f4333b457f5a9c98ae3156899ea1be14d09461d0823dbfab62e033862ec102a7ceeb40dc638d325bed350bbb86679c1fb13e6254638a3d59a903eabfc1c4a832cc856754e01259fa293b971c461db9697a0adba577a2e5c718a536e6b9b37ea", 0x60, 0x26, 0x0, 0x2, r6}, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x4, 0xa, r7, &(0x7f0000002d00)="bb8c0148696d37af1fe07137efaef5d6202ece6f48749607218738eb859382b43d9bc4817f2f76934b2005178d49ec8bb9bf215a90429645c54ad0082dcd3ce7204c21cda13ad5cb5a2b617a01bfded2112fba3ab5f44da78a7e8ce9419d4bfa51e643803c2509272e290b77761151962832720c29c1bc62aec25be9833eefaebca4c6a207e16e0e96d1c20ccf04eb", 0x8f, 0xa0, 0x0, 0x2, r8}])
ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x11)
bind$bt_sco(r0, &(0x7f0000002e80)={0x1f, @none}, 0x8)
sendmsg$nl_generic(r6, &(0x7f0000003040)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003000)={&(0x7f0000002f00)={0xe8, 0x26, 0x10, 0x70bd2d, 0x25dfdbfb, {0x1e}, [@typed={0xd2, 0x10c, 0x0, 0x0, @binary="fa109a9dfca107d59e804fd58845579a832b3eb7d0d6819d4d946e04541604d85d5e5c8c466e03bac486b6ae9a62e0448fe8931890b5fe40cb7a484ea9050118048beeb58786573ff909c8e63159e9b6f6cfb6a52216344a2595ef676b08817032bb9873fe929798be21bf2e43827675e9d694871fac132eeea8e1fa3b6bb3d3c7ecc19624eb1284cfc0dcfe87ab818b7766fa8c18dab14d181d0a5da9234e23c4a2a827b7c492f03c3c2781df204aadd60993f6f8684070d3b70b1560ac500cdf40c2c8bca6249bec55fdd75ab1"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40040001}, 0x20000010)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000003080)={0x16, @private=0xa010102, 0x4e21, 0x4, 'lblcr\x00', 0x2, 0x10000, 0x67}, 0x2c)
ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f00000030c0)={{0x2, 0x4e23, @empty}, {0x306, @multicast}, 0x24, {0x2, 0x4e21, @loopback}, 'erspan0\x00'})
sendmsg$nl_netfilter(r0, &(0x7f0000004200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000041c0)={&(0x7f0000003180)={0x1024, 0x14, 0x7, 0x301, 0x70bd26, 0x25dfdbff, {0x1, 0x0, 0x2}, [@nested={0x1010, 0x79, 0x0, 0x1, [@typed={0x1004, 0xaf, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x9f}, @nested={0x4, 0xa}]}]}, 0x1024}}, 0x4001)
r9 = syz_genetlink_get_family_id$smc(&(0x7f0000004280), r0)
sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x20, r9, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x20000050)
close(r3)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000004380), &(0x7f00000043c0)=0x4)
ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000004400)={{0x1, 0x1, 0x18, <r10=>r0, {0x6}}, './file0\x00'})
ioctl$VT_GETSTATE(r10, 0x5603, &(0x7f0000004440)={0xffff, 0x6, 0x4})
getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000004500)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000004600)=0xe8)
read$FUSE(r6, &(0x7f0000004640)={0x2020, 0x0, 0x0, <r12=>0x0}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000004480)='./file0/file0\x00', &(0x7f00000044c0), 0x48021, &(0x7f0000006680)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x401}}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, '%\'^'}}, {@cache_mmap}, {@cache_mmap}, {@access_any}], [{@fsname}, {@fowner_lt={'fowner<', r11}}, {@uid_gt={'uid>', r12}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'lblcr\x00'}}]}})

20.97789123s ago: executing program 0 (id=2384):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0xc000)
sendfile(r4, r3, 0x0, 0x4000000053d2)
r9 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r9, 0x0, 0x0, 0x40040, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10)
r10 = socket$l2tp(0x2, 0x2, 0x73)
r11 = accept4(r10, 0x0, 0x0, 0xc0800)
r12 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f00000001c0)=0xd0)
sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2, &(0x7f0000000380), 0x4}], 0x1, 0x40801)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000200)=""/65, 0x41}], 0x2}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r13 = socket$phonet(0x23, 0x2, 0x1)
recvmsg(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000600)=""/141, 0x8d}], 0x2}, 0x2041)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c000400"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)

20.929035564s ago: executing program 0 (id=2385):
syz_usb_connect$uac1(0x5, 0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000206b1d0101400001020301090285000301a400d30904000000010100000a24010400ec0201020624050408cf0d2406040203030002000300fd09040100000102000009040101010102000009050109ff0300c104072501c50808000904020000010200000904"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060101000000000300000000000000050005000a001800050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x40000009, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20.325705628s ago: executing program 8 (id=2386):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30)
ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x2d000}) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x2d000})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x77, 0x5, {}, {}, 0x7, 0xffffffffffff7fff}) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x77, 0x5, {<r1=>0x0}, {<r2=>0x0}, 0x7, 0xffffffffffff7fff})
r3 = syz_open_procfs(r1, &(0x7f00000000c0)='stack\x00')
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x320, 0x2e, 0x8, 0x70bd27, 0x25dfdbfd, {0xc}, [@nested={0xbe, 0xed, 0x0, 0x1, [@typed={0x4, 0x94}, @typed={0xa, 0x3e, 0x0, 0x0, @str='stack\x00'}, @generic="ebbc877df69c1cab1f1e63290e8a70fd9ab7545cbe2bca0eebb3ab85d513145011192b1550d8f92f8e8d5ca5b5fd883038727112da5bbc5ba2d83e00ceb3645df8339561abe27d4172d083d4e679f0082f958d32c4cb0b05d610488c5c17b9a740e601", @generic="4342d210ff63270e62911d4c0180d44a2d90f915ce2f72f92f253018be70f77f8f845cfaac7236d6af6c89f3239cd835245318550b109347276371c3522e4132366a6791f8fc74"]}, @generic="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", @nested={0x54, 0xc6, 0x0, 0x1, [@typed={0x5, 0x5c, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x10}, @generic="94ee5b287bc5b07e9f25194a1b", @typed={0x8, 0xd8, 0x0, 0x0, @uid=r2}, @generic="85a76e65ecf6942f8e514a610d328f52fed94f38007581be24a2b634f5af10f118456298be2bf70324d4e549989d91"]}, @generic="5ad6c77d916dbd67299b5464da69f70aeaec001da522978206907af9b57f80a157e2d65ae2366e1b8a544d673a4bef816cbe43140f0794d0b8baea9d25753e6b528633c95a9a8a7063c34068cf5a2ba86ff9caa64d0aa746c92547d50bf21f64ebcd546f108e8d850de96901b993fdceac202207d0", @nested={0x8, 0xf8, 0x0, 0x1, [@typed={0x4, 0x50}]}, @generic="66fc737d15a5bda2d4e2a1fd5b41dcc023b6cf7022782fdb867c2af92a65682736c53d46c6d81b54120b91f0e9089bb19c60ea28183de6f3c1bfaaa8ad4018c6431d13f1773bd99d28af99ed39666260d02aa7419947a01300be755a4cb120869caf9a12d794a9e7ca5baafbe3ec48e0a1f99e", @typed={0x8, 0x34, 0x0, 0x0, @fd=r4}]}, 0x320}, 0x1, 0x0, 0x0, 0x8d2}, 0x20000811)
r5 = syz_io_uring_setup(0x3910, &(0x7f0000000540)={0x0, 0xdb07, 0x2, 0x3, 0x37, 0x0, r3}, &(0x7f00000005c0), &(0x7f0000000600))
r6 = dup2(r4, r5)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000640)={{0x3000, 0xeeef0000, 0xa, 0x9, 0x2, 0xe, 0x7, 0x4, 0x80, 0x63, 0x4, 0x8}, {0x3711d3e902b3f4a7, 0x10000, 0xc, 0x1, 0x2, 0x31, 0x3, 0x81, 0x8, 0x3, 0x3, 0x7}, {0x6000, 0xeeee0000, 0x9, 0x81, 0x6, 0x3, 0x30, 0x1, 0x80, 0x8, 0x5c, 0x7}, {0x8000000, 0xeeee0000, 0x4, 0x5, 0x67, 0x5, 0x7, 0x3d, 0x23, 0x3, 0x5, 0x8}, {0xdddd0000, 0xdddd0000, 0x10, 0xbd, 0x6, 0xf4, 0x67, 0x81, 0x47, 0x2, 0xed, 0x78}, {0x10000, 0xd000, 0x0, 0x6, 0xf7, 0xf0, 0x4b, 0xfe, 0x7, 0x69, 0x9, 0x4}, {0xffff1000, 0x3000, 0xe, 0x8, 0xa, 0x9, 0xb, 0x9, 0x2, 0x6, 0x2}, {0xdddd1000, 0x0, 0x8, 0x3, 0x2, 0x3, 0x7, 0x8, 0x4, 0x70, 0xf7, 0x1}, {0x2}, {0x5000, 0x6}, 0x10010, 0x0, 0x4, 0x100000, 0xb, 0x800, 0xa000, [0x40, 0x80000000, 0x101, 0x7]}) (async)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000640)={{0x3000, 0xeeef0000, 0xa, 0x9, 0x2, 0xe, 0x7, 0x4, 0x80, 0x63, 0x4, 0x8}, {0x3711d3e902b3f4a7, 0x10000, 0xc, 0x1, 0x2, 0x31, 0x3, 0x81, 0x8, 0x3, 0x3, 0x7}, {0x6000, 0xeeee0000, 0x9, 0x81, 0x6, 0x3, 0x30, 0x1, 0x80, 0x8, 0x5c, 0x7}, {0x8000000, 0xeeee0000, 0x4, 0x5, 0x67, 0x5, 0x7, 0x3d, 0x23, 0x3, 0x5, 0x8}, {0xdddd0000, 0xdddd0000, 0x10, 0xbd, 0x6, 0xf4, 0x67, 0x81, 0x47, 0x2, 0xed, 0x78}, {0x10000, 0xd000, 0x0, 0x6, 0xf7, 0xf0, 0x4b, 0xfe, 0x7, 0x69, 0x9, 0x4}, {0xffff1000, 0x3000, 0xe, 0x8, 0xa, 0x9, 0xb, 0x9, 0x2, 0x6, 0x2}, {0xdddd1000, 0x0, 0x8, 0x3, 0x2, 0x3, 0x7, 0x8, 0x4, 0x70, 0xf7, 0x1}, {0x2}, {0x5000, 0x6}, 0x10010, 0x0, 0x4, 0x100000, 0xb, 0x800, 0xa000, [0x40, 0x80000000, 0x101, 0x7]})
ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000780)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0xba, 'syz0\x00', @null, 0x5d5, 0x1, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
r7 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'veth0_to_hsr\x00'})
socket$phonet(0x23, 0x2, 0x1) (async)
r8 = socket$phonet(0x23, 0x2, 0x1)
pread64(r8, &(0x7f0000000840)=""/194, 0xc2, 0x10001) (async)
pread64(r8, &(0x7f0000000840)=""/194, 0xc2, 0x10001)
socket$kcm(0x29, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000980)={{{@in=@initdev, @in6=@remote}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f0000000a80)=0xe8) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000980)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f0000000a80)=0xe8)
r10 = getegid()
r11 = getegid()
lstat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)) (async)
lstat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)) (async)
getresgid(&(0x7f0000000b80), &(0x7f0000000bc0)=<r13=>0x0, &(0x7f0000000c00))
read$FUSE(r6, &(0x7f0000000c40)={0x2020, 0x0, 0x0, 0x0, <r14=>0x0}, 0x2020)
statx(r3, &(0x7f0000002c80)='./file0\x00', 0x100, 0x8, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
fsetxattr$system_posix_acl(r5, &(0x7f0000000940)='system.posix_acl_access\x00', &(0x7f0000002dc0)={{}, {0x1, 0x5}, [{0x2, 0x0, r9}], {0x4, 0xa}, [{0x8, 0xd, 0xee00}, {0x8, 0x1, r10}, {0x8, 0x2, r11}, {0x8, 0x4, r12}, {0x8, 0x0, r13}, {0x8, 0x4, r14}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x7, r15}], {0x10, 0x1}, {0x20, 0x1}}, 0x6c, 0x1) (async)
fsetxattr$system_posix_acl(r5, &(0x7f0000000940)='system.posix_acl_access\x00', &(0x7f0000002dc0)={{}, {0x1, 0x5}, [{0x2, 0x0, r9}], {0x4, 0xa}, [{0x8, 0xd, 0xee00}, {0x8, 0x1, r10}, {0x8, 0x2, r11}, {0x8, 0x4, r12}, {0x8, 0x0, r13}, {0x8, 0x4, r14}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x7, r15}], {0x10, 0x1}, {0x20, 0x1}}, 0x6c, 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000002e80), r6) (async)
r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002e80), r6)
sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000002f80)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x70, r16, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe49}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x70}}, 0x2)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000002fc0)={0x2, [0x0, 0x0]}, &(0x7f0000003000)=0xc)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000003040)=0x20000, 0x4)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000030c0)={0x12, 0x3f, &(0x7f0000003080)="a27b44d5e6c81a733ec1d180cbf83f5d7e30c3fddbe465b5ec0dc3a082a6d6df6078e868972f71047e476f3e61bb30ac687688c8c8be1f72fafc5a0565d117"})
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000003500)={0x3, 0x0, [{0x7, 0x7, 0x4, 0x9, 0x80000001, 0x0, 0xfe3}, {0x4, 0xffff, 0x1, 0x1000, 0x6, 0x0, 0x3}, {0xc0000000, 0x7, 0x4, 0x7a8c, 0x6, 0x4, 0x7a3269dd}]})

20.218045205s ago: executing program 8 (id=2387):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='numa_maps\x00')
pread64(r0, &(0x7f0000002180)=""/4105, 0x137, 0x0)
ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000000)) (async)
r1 = socket(0x6, 0x2, 0x7)
write(r1, &(0x7f00000002c0)="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", 0xfc)

20.217572548s ago: executing program 8 (id=2388):
r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd2833090000000000010902240001000080000904f901010300010009210000000122f8040805810340"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000004480)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="6000000000000000290000003700000089080000f2a27a2b920085a1e8834c77f28996a9000000000738000000000c0a4b005766d96f00000000000100000000000005000000000000000100000000000000f7ff0600000400000000000000000014"], 0x78}}], 0x2, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000009280)={{{@in=@empty, @in6=@loopback}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000009380)=0xe8)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0)

19.505556034s ago: executing program 0 (id=2391):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x24)
close(0x3)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)=ANY=[@ANYBLOB="f401000041120001000000000904000000bee4f900"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x40305828, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}})
syz_usb_control_io$lan78xx(r1, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x23, 0x1b, {0x1b, 0xd, "f4322d9fd6d44a9241e8c08b0a263f1a982cffeaf3d1a0a3ad"}}, &(0x7f0000000040)={0x0, 0x3, 0x3e, @string={0x3e, 0x3, "679e3c035b12f0d192b8e03de28b1d8989ec3d02cd1a935b796c1dbbdc021b5ec13b43f1b0bc7f18d4952b1597beaf674c94ded56593e0e05ba9cd6b"}}}, &(0x7f0000000300)={0x34, &(0x7f0000000140)={0x20, 0xa, 0x62, "c66d0f617fc73db5181d702ff6733075ae474782d7fbfe28eee16c60e2380b1e28b6ac27b1fb54173e78101c7635d9b79cb9efcd4aeaaf6f356677b9c695f9ad8996280e147c5baee78e2f7c6a19c36588108557d72795c31e37936b8dbdec62f6b7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xf2}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0xd}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "9f1c0702c917e619b42191cbc8dc54c9fe2d7c7a2abdf7ffa8157e331047a80b1e3295911fda24d6ba3425d1fe4281"}})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000fa0fffffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

18.669996448s ago: executing program 7 (id=2392):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000040}, 0x8004000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f0000000080)=0x8611)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "b79e5e602970a4f9", "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0)

18.634597412s ago: executing program 7 (id=2393):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x480040, 0x0)
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800)
getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000000c0)=""/97, 0x61)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0xfffffff9}}, 0x30)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
r4 = dup(r3)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x80000, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0x14, 0xd5, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20000004}, 0x140000c4)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
read$FUSE(r4, &(0x7f0000002740)={0x2020}, 0x2020)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x1, 0x1)
fchdir(r8)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
lseek(r9, 0x3, 0x0)
r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_open_dev$vim2m(&(0x7f0000000300), 0x61, 0x2)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x4000, 0x141200})
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000100)=@x86={0x6, 0x2, 0x10, 0x0, 0xb, 0x7, 0x2, 0x9, 0x1, 0x51, 0x0, 0x8, 0x0, 0x4, 0x10, 0xff, 0xb, 0x2, 0x7, '\x00', 0x6, 0x4080000000000005})
ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000000040)=0x3)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

18.579725504s ago: executing program 7 (id=2394):
syz_usb_connect$uac1(0x5, 0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000206b1d0101400001020301090285000301a400d30904000000010100000a24010400ec0201020624050408cf0d2406040203030002000300fd09040100000102000009040101010102000009050109ff0300c104072501c5080800090402000001020000090405010101020000072401020100000c24020206"], 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ec110000150001002dbd7000ffdbdf2510"], 0x11ec}, 0x1, 0x0, 0x0, 0x1}, 0x48090)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000300)=0x3, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x40000009, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
syz_usb_connect(0x0, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904360000e0010300052406000005240000000d04"], 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
ioctl$KVM_RUN(r5, 0xae80, 0x0)

17.937991198s ago: executing program 8 (id=2395):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x1)
sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000401904000600000000000109022400010000000709040000010300000009210000000122070009058103ff03ff00007d6de788a099ae6c960516466cfb6a0400000000000000505c1f95d4357052d8d41e93df73a36853f97a0e88aba5be4a00c11b31b15a136231b30009a73a279f0a6879da"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="403007089f59bb254ce6270000476e001459f4dd2326995bd4fe42017b99c42cc10fb6c9fd51bbb8a68c0772f64f3e302c4e7d6fb5d0207515992784f0d495ab285bfd71abcc31bc38ddbeab36ff0dd229e1e10408c55dfe37b85e99f1f56bd44dfbefbd9b000991f923f09b6283a19fa81817e058552967934bc3855e956e9739d112ee4606c7b61a7c3787972f01711eb705f16b0bb9b6004a7de9c0027c0881a5806f811a9032f1b62de213e951036b0df27959fc78bb468e6262b09dba45674ad3b0733195213b84dfd54dc09f48250bd6626a83f00711bea47a62c302"], 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x1) (async)
sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000401904000600000000000109022400010000000709040000010300000009210000000122070009058103ff03ff00007d6de788a099ae6c960516466cfb6a0400000000000000505c1f95d4357052d8d41e93df73a36853f97a0e88aba5be4a00c11b31b15a136231b30009a73a279f0a6879da"], 0x0) (async)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="403007089f59bb254ce6270000476e001459f4dd2326995bd4fe42017b99c42cc10fb6c9fd51bbb8a68c0772f64f3e302c4e7d6fb5d0207515992784f0d495ab285bfd71abcc31bc38ddbeab36ff0dd229e1e10408c55dfe37b85e99f1f56bd44dfbefbd9b000991f923f09b6283a19fa81817e058552967934bc3855e956e9739d112ee4606c7b61a7c3787972f01711eb705f16b0bb9b6004a7de9c0027c0881a5806f811a9032f1b62de213e951036b0df27959fc78bb468e6262b09dba45674ad3b0733195213b84dfd54dc09f48250bd6626a83f00711bea47a62c302"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)

17.273909809s ago: executing program 7 (id=2396):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000640)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x2, 0x4, 0x200, 0xfffffff7, 0xc7a, 0x5, "d0b1"}}, 0x11a) (async)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2000003, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1003, 0x6, 0xffff, 0x0, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x8049]}) (async)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x1e, 0x0, &(0x7f0000000140)) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r3 = memfd_secret(0x0)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000780)={0x4, 0x1})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e01000000010902120001000000000904"], 0x0) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x4e24, 0x40, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x4, 0x0, 0x0, 0x2, 0x8}}, 0xe8) (async)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x2}, 0x4) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r8=>r1, {0x3, 0x3}}, './file0\x00'})
bind$inet6(r8, &(0x7f0000000600)={0xa, 0x4e22, 0x80, @private1, 0x645}, 0x1c) (async)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async)
getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffff70) (async)
close_range(r6, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000070307000000000000000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x2000c015}, 0x40c0000) (async)
accept4$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c, 0x80800) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r10}, './file0\x00'})
poll(&(0x7f00000005c0), 0x0, 0x3) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000070900020073797a32000000000900010073797a300000000028000480240001800b00010065787468647200001400048008000640000000010800054000000001140000001100010000000000000000000000000a9e1f43f90ada8ffcbe9299a3ee70840a0d3cd30b7e45722cf0700eb95e2caadd272621b92aa6bc88c909e801ceb8c6e1d680ad611e0ec0339e9d0a44982117156f77b8cb9e9f8f7afdba2fc717237be255f7"], 0x7c}}, 0x0)

17.16889006s ago: executing program 7 (id=2397):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x80000001, 0x0, 0x5, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x2000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]})
r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$VIDIOC_REQBUFS(r1, 0xc058565d, &(0x7f0000000a00)={0x0, 0x6})
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)="0e", 0x1}], 0x1, 0x0, 0x36}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884)
recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001a80)=""/4096, 0x1000}], 0x1}, 0xa741}], 0x1, 0x10020, 0x0)

16.641911669s ago: executing program 8 (id=2398):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xf0, r1, 0x801, 0x70bd26, 0xc69f, {}, [@NFC_ATTR_LLC_SDP={0x18, 0x13, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [{0xd, 0x1, 'configfs\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_LLC_SDP={0xb4, 0x13, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [{0x5, 0x1, '-'}, {0xd, 0x1, 'configfs\x00'}, {0xd, 0x1, 'configfs\x00'}, {0xd, 0x1, 'configfs\x00'}]}, {0x14, 0x0, 0x0, 0x1, [{0xd, 0x1, 'configfs\x00'}]}, {0x60, 0x0, 0x0, 0x1, [{0xd, 0x1, 'configfs\x00'}, {0xd, 0x1, 'configfs\x00'}, {0xd, 0x1, '-5)\'.{^]*'}, {0xd, 0x1, 'configfs\x00'}, {0x6, 0x1, '%#'}, {0x4}, {0xd, 0x1, 'configfs\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x8080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x4000, 0x0)

16.236843065s ago: executing program 0 (id=2399):
syz_usb_connect$uac1(0x5, 0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000206b1d0101400001020301090285000301a400d30904000000010100000a24010400ec0201020624050408cf0d2406040203030002000300fd09040100000102000009040101010102000009050109ff0300c104072501c50808000904020000010200000904"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060101000000000300000000000000050005000a001800050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x40000009, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

16.209908967s ago: executing program 7 (id=2400):
syz_usb_connect$uac1(0x5, 0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000206b1d0101400001020301090285000301a400d30904000000010100000a24010400ec0201020624050408cf0d2406040203030002000300fd09040100000102000009040101010102000009050109ff0300c104072501c5080800090402000001020000090405010101020000072401020100000c24020206"], 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2)
ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f00000002c0)={0x81, 0x0, 0x1})
r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x40000009, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000001180)={'erspan0\x00', {0x2, 0x4e22, @rand_addr=0x64010102}})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

5.489282837s ago: executing program 37 (id=2375):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x80000000002})
fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x1, [0x1]}})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000002bc0), r3)
sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYRES8], 0x24}}, 0x4)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r4, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x400000c1)
r10 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0x200})
getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8)
quotactl_fd$Q_SETQUOTA(r10, 0xffffffff80000800, r11, &(0x7f0000000280)={0x1, 0xe1, 0x3, 0xcd, 0x9, 0x7, 0x3, 0x1, 0x5089})
r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2)
r13 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_UIE_ON(r13, 0x7003)
ioctl$RTC_AIE_ON(r13, 0x7001)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r14)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r15, 0x70b, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000051}, 0x40000a0)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r15, 0xc02, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$RTC_SET_TIME(r13, 0x4024700a, &(0x7f0000000040)={0x5, 0x2a, 0x2, 0x5, 0x1, 0x62, 0x0, 0x20006e})
sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="0100"/14], 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)

112.507267ms ago: executing program 38 (id=2399):
syz_usb_connect$uac1(0x5, 0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000206b1d0101400001020301090285000301a400d30904000000010100000a24010400ec0201020624050408cf0d2406040203030002000300fd09040100000102000009040101010102000009050109ff0300c104072501c50808000904020000010200000904"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060101000000000300000000000000050005000a001800050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x40000009, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

64.353886ms ago: executing program 39 (id=2398):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xf0, r1, 0x801, 0x70bd26, 0xc69f, {}, [@NFC_ATTR_LLC_SDP={0x18, 0x13, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [{0xd, 0x1, 'configfs\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_LLC_SDP={0xb4, 0x13, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [{0x5, 0x1, '-'}, {0xd, 0x1, 'configfs\x00'}, {0xd, 0x1, 'configfs\x00'}, {0xd, 0x1, 'configfs\x00'}]}, {0x14, 0x0, 0x0, 0x1, [{0xd, 0x1, 'configfs\x00'}]}, {0x60, 0x0, 0x0, 0x1, [{0xd, 0x1, 'configfs\x00'}, {0xd, 0x1, 'configfs\x00'}, {0xd, 0x1, '-5)\'.{^]*'}, {0xd, 0x1, 'configfs\x00'}, {0x6, 0x1, '%#'}, {0x4}, {0xd, 0x1, 'configfs\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x8080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x4000, 0x0)

0s ago: executing program 40 (id=2400):
syz_usb_connect$uac1(0x5, 0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000206b1d0101400001020301090285000301a400d30904000000010100000a24010400ec0201020624050408cf0d2406040203030002000300fd09040100000102000009040101010102000009050109ff0300c104072501c5080800090402000001020000090405010101020000072401020100000c24020206"], 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2)
ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f00000002c0)={0x81, 0x0, 0x1})
r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x40000009, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000001180)={'erspan0\x00', {0x2, 0x4e22, @rand_addr=0x64010102}})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

e80 RDI: 000000000000000c
[  497.921696][T13307] RBP: 00007f2bbb8da090 R08: 0000000000000000 R09: 0000000000000000
[  497.921706][T13307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  497.921716][T13307] R13: 00007f2bbabe6038 R14: 00007f2bbabe5fa0 R15: 00007ffd6049a5e8
[  497.921744][T13307]  </TASK>
[  497.921900][ T5912] usb 1-1: config 0 descriptor??
[  497.963061][ T5926] usb 8-1: new high-speed USB device number 86 using dummy_hcd
[  497.990708][   T44] usb usb9-port1: attempt power cycle
[  498.193435][ T5926] usb 8-1: Using ep0 maxpacket: 16
[  498.418472][ T5926] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  498.427533][ T5926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.431535][ T5912] uclogic 0003:5543:0003.003C: ignoring exceeding usage max
[  498.436712][ T5926] usb 8-1: Product: syz
[  498.449400][ T5926] usb 8-1: Manufacturer: syz
[  498.451324][  T116] usb 7-1: unable to get BOS descriptor or descriptor too short
[  498.454720][ T5926] usb 8-1: SerialNumber: syz
[  498.474222][ T5912] uclogic 0003:5543:0003.003C: hidraw0: USB HID v8.00 Device [HID 5543:0003] on usb-dummy_hcd.0-1/input0
[  498.476497][ T5926] r8152-cfgselector 8-1: Unknown version 0x0000
[  498.492431][  T116] usb 7-1: unable to read config index 0 descriptor/start: -71
[  498.500290][ T5926] r8152-cfgselector 8-1: config 0 descriptor??
[  498.502811][  T116] usb 7-1: can't read configurations, error -71
[  498.557088][   T44] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  498.579172][   T44] usb 9-1: device descriptor read/8, error -71
[  498.845878][   T44] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  498.868576][   T44] usb 9-1: device descriptor read/8, error -71
[  498.957991][ T5926] r8152-cfgselector 8-1: USB disconnect, device number 86
[  498.995935][   T44] usb usb9-port1: unable to enumerate USB device
[  499.190264][   T44] usb 1-1: USB disconnect, device number 34
[  499.616103][   T44] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  499.757052][T13320] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2142'.
[  499.798041][   T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  499.810239][   T44] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  499.823173][   T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.831634][  T116] usb 8-1: new full-speed USB device number 87 using dummy_hcd
[  499.844826][   T44] usb 1-1: config 0 descriptor??
[  499.853212][   T44] pwc: Askey VC010 type 2 USB webcam detected.
[  500.024926][  T116] usb 8-1: unable to get BOS descriptor or descriptor too short
[  500.033418][  T116] usb 8-1: not running at top speed; connect to a high speed hub
[  500.042302][  T116] usb 8-1: config 3 has an invalid interface number: 152 but max is 0
[  500.050635][  T116] usb 8-1: config 3 has no interface number 0
[  500.057062][  T116] usb 8-1: config 3 interface 152 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  500.072379][  T116] usb 8-1: New USB device found, idVendor=0bfd, idProduct=000c, bcdDevice=96.78
[  500.075905][  T983] usb 7-1: new low-speed USB device number 98 using dummy_hcd
[  500.081693][  T116] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.098066][  T116] usb 8-1: Product: syz
[  500.102276][  T116] usb 8-1: Manufacturer: syz
[  500.106869][  T116] usb 8-1: SerialNumber: syz
[  500.249069][  T983] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  500.257601][  T983] usb 7-1: config 179 has no interface number 0
[  500.263896][  T983] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  500.275463][  T983] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  500.286174][  T983] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  500.298032][  T983] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[  500.327926][  T983] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  500.342107][  T983] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  500.342724][T13318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.360312][   T44] pwc: recv_control_msg error -32 req 02 val 2b00
[  500.362525][  T983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.378616][   T44] pwc: recv_control_msg error -32 req 02 val 2700
[  500.400209][T13322] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  500.403924][T13318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.426754][  T983] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  500.445503][  T983] xpad 7-1:179.65: probe with driver xpad failed with error -90
[  500.527112][  T116] kvaser_usb 8-1:3.152: error -ENODEV: Cannot get usb endpoint(s)
[  500.540169][  T116] usb 8-1: USB disconnect, device number 87
[  500.601015][   T44] pwc: recv_control_msg error -71 req 04 val 1000
[  500.608116][   T44] pwc: recv_control_msg error -71 req 04 val 1300
[  500.615937][   T44] pwc: recv_control_msg error -71 req 04 val 1400
[  500.622804][   T44] pwc: recv_control_msg error -71 req 02 val 2000
[  500.632336][   T44] pwc: recv_control_msg error -71 req 02 val 2100
[  500.635301][  T983] usb 7-1: USB disconnect, device number 98
[  500.644013][   T44] pwc: recv_control_msg error -71 req 04 val 1500
[  500.651613][   T44] pwc: recv_control_msg error -71 req 02 val 2500
[  500.664250][   T44] pwc: recv_control_msg error -71 req 02 val 2400
[  500.671521][   T44] pwc: recv_control_msg error -71 req 02 val 2600
[  500.684292][   T44] pwc: recv_control_msg error -71 req 02 val 2900
[  500.692823][   T44] pwc: recv_control_msg error -71 req 02 val 2800
[  500.700530][   T44] pwc: recv_control_msg error -71 req 04 val 1100
[  500.711682][   T44] pwc: recv_control_msg error -71 req 04 val 1200
[  500.720274][   T44] pwc: Registered as video103.
[  500.727194][   T44] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input60
[  500.738997][   T24] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  500.772188][   T44] usb 1-1: USB disconnect, device number 35
[  500.795168][ T5866] udevd[5866]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  500.924732][   T24] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  500.934106][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.942157][   T24] usb 9-1: Product: syz
[  500.946328][   T24] usb 9-1: Manufacturer: syz
[  500.950905][   T24] usb 9-1: SerialNumber: syz
[  501.105798][T13328] netlink: 'syz.7.2145': attribute type 10 has an invalid length.
[  501.256681][   T24] rtl8150 9-1:1.0: couldn't reset the device
[  501.265936][   T24] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5
[  501.284544][   T24] usb 9-1: USB disconnect, device number 31
[  501.341061][T13328] team0 (unregistering): Port device team_slave_0 removed
[  501.353732][T13328] team0 (unregistering): Port device team_slave_1 removed
[  501.509829][  T116] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  501.562540][   T44] usb 7-1: new high-speed USB device number 99 using dummy_hcd
[  501.680280][  T116] usb 1-1: Using ep0 maxpacket: 32
[  501.712138][  T983] usb 8-1: new full-speed USB device number 88 using dummy_hcd
[  501.733919][   T44] usb 7-1: Using ep0 maxpacket: 32
[  501.762503][T13332] FAULT_INJECTION: forcing a failure.
[  501.762503][T13332] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  501.766705][  T116] usb 1-1: unable to get BOS descriptor or descriptor too short
[  501.778364][T13332] CPU: 0 UID: 0 PID: 13332 Comm: syz.6.2147 Not tainted syzkaller #0 PREEMPT(full) 
[  501.778388][T13332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  501.778399][T13332] Call Trace:
[  501.778407][T13332]  <TASK>
[  501.778415][T13332]  dump_stack_lvl+0x189/0x250
[  501.778436][T13332]  ? __pfx____ratelimit+0x10/0x10
[  501.778460][T13332]  ? __pfx_dump_stack_lvl+0x10/0x10
[  501.778475][T13332]  ? __pfx__printk+0x10/0x10
[  501.778511][T13332]  should_fail_ex+0x414/0x560
[  501.778539][T13332]  __kvm_read_guest_page+0x18d/0x240
[  501.778560][T13332]  kvm_fetch_guest_virt+0x12b/0x170
[  501.778586][T13332]  ? __pfx_kvm_fetch_guest_virt+0x10/0x10
[  501.778607][T13332]  __do_insn_fetch_bytes+0x2fc/0x6d0
[  501.778631][T13332]  ? __pfx___do_insn_fetch_bytes+0x10/0x10
[  501.778652][T13332]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  501.778675][T13332]  ? x86_decode_insn+0x12d7/0x5310
[  501.778697][T13332]  x86_decode_insn+0x33c/0x5310
[  501.778746][T13332]  ? __pfx_x86_decode_insn+0x10/0x10
[  501.778776][T13332]  ? __asan_memset+0x22/0x50
[  501.778795][T13332]  ? init_decode_cache+0x78/0x90
[  501.778813][T13332]  ? init_emulate_ctxt+0x4d6/0x660
[  501.778838][T13332]  ? __pfx_init_emulate_ctxt+0x10/0x10
[  501.778866][T13332]  ? trace_rcu_utilization+0x47/0x1d0
[  501.778890][T13332]  x86_emulate_instruction+0x61b/0x1f90
[  501.778926][T13332]  ? __pfx_x86_emulate_instruction+0x10/0x10
[  501.778940][T13332]  ? __get_current_cr3_fast+0x90/0x150
[  501.778958][T13332]  ? clear_bhb_loop+0x60/0xb0
[  501.778973][T13332]  ? clear_bhb_loop+0x60/0xb0
[  501.778997][T13332]  ? vmx_vcpu_run+0xe92/0x2b70
[  501.779016][T13332]  ? __vmx_complete_interrupts+0xe7/0x690
[  501.779048][T13332]  handle_ud+0x142/0x590
[  501.779074][T13332]  ? __pfx_handle_ud+0x10/0x10
[  501.779093][T13332]  ? vmx_handle_exit_irqoff+0x61e/0x940
[  501.779112][T13332]  ? __pfx_current_save_fsgs+0x10/0x10
[  501.779134][T13332]  ? __lock_acquire+0xab9/0xd20
[  501.779155][T13332]  ? __pfx_handle_exception_nmi+0x10/0x10
[  501.779177][T13332]  vmx_handle_exit+0x10a4/0x18c0
[  501.779199][T13332]  ? vcpu_run+0x361b/0x7040
[  501.779230][T13332]  vcpu_run+0x43aa/0x7040
[  501.779261][T13332]  ? vcpu_run+0x361b/0x7040
[  501.779331][T13332]  ? __pfx_vcpu_run+0x10/0x10
[  501.779349][T13332]  ? __pfx_x86_emulate_instruction+0x10/0x10
[  501.779373][T13332]  ? complete_emulated_mmio+0x18e/0x7a0
[  501.779391][T13332]  ? __asan_memcpy+0x40/0x70
[  501.779410][T13332]  ? complete_emulated_mmio+0x4d2/0x7a0
[  501.779436][T13332]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  501.779459][T13332]  ? __mutex_trylock_common+0x153/0x260
[  501.779484][T13332]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  501.779501][T13332]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  501.779522][T13332]  ? rcu_is_watching+0x15/0xb0
[  501.779541][T13332]  ? trace_contention_end+0x39/0x120
[  501.779563][T13332]  ? __mutex_lock+0x335/0x1350
[  501.779587][T13332]  ? kasan_quarantine_put+0xdd/0x220
[  501.779605][T13332]  ? lockdep_hardirqs_on+0x9c/0x150
[  501.779627][T13332]  ? kvm_vcpu_ioctl+0x22e/0xe90
[  501.779648][T13332]  ? __pfx___mutex_lock+0x10/0x10
[  501.779665][T13332]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  501.779687][T13332]  ? do_vfs_ioctl+0xbe8/0x1430
[  501.779707][T13332]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  501.779725][T13332]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  501.779755][T13332]  kvm_vcpu_ioctl+0x95c/0xe90
[  501.779778][T13332]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  501.779816][T13332]  ? __fget_files+0x2a/0x420
[  501.779837][T13332]  ? __fget_files+0x3a0/0x420
[  501.779851][T13332]  ? __fget_files+0x2a/0x420
[  501.779870][T13332]  ? bpf_lsm_file_ioctl+0x9/0x20
[  501.779886][T13332]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  501.779904][T13332]  __se_sys_ioctl+0xfc/0x170
[  501.779927][T13332]  do_syscall_64+0xfa/0xfa0
[  501.779941][T13332]  ? lockdep_hardirqs_on+0x9c/0x150
[  501.779962][T13332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.779978][T13332]  ? clear_bhb_loop+0x60/0xb0
[  501.780003][T13332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.780018][T13332] RIP: 0033:0x7f2bba98eec9
[  501.780034][T13332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  501.780048][T13332] RSP: 002b:00007f2bbb8da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  501.780065][T13332] RAX: ffffffffffffffda RBX: 00007f2bbabe5fa0 RCX: 00007f2bba98eec9
[  501.780077][T13332] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c
[  501.780087][T13332] RBP: 00007f2bbb8da090 R08: 0000000000000000 R09: 0000000000000000
[  501.780097][T13332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  501.780107][T13332] R13: 00007f2bbabe6038 R14: 00007f2bbabe5fa0 R15: 00007ffd6049a5e8
[  501.780137][T13332]  </TASK>
[  501.887482][  T983] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  501.890203][  T116] usb 1-1: unable to read config index 0 descriptor/start: -71
[  501.894396][  T983] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.899197][  T116] usb 1-1: can't read configurations, error -71
[  501.908684][  T983] usb 8-1: Product: syz
[  502.291949][  T983] usb 8-1: Manufacturer: syz
[  502.296669][  T983] usb 8-1: SerialNumber: syz
[  502.301388][   T44] usb 7-1: unable to get BOS descriptor or descriptor too short
[  502.305879][   T44] usb 7-1: unable to read config index 0 descriptor/start: -71
[  502.319307][  T983] usb 8-1: config 0 descriptor??
[  502.329024][   T44] usb 7-1: can't read configurations, error -71
[  502.553013][  T983] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  502.994844][  T983] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  503.032354][  T983] usb 8-1: USB disconnect, device number 88
[  503.466138][   T44] usb 7-1: new full-speed USB device number 100 using dummy_hcd
[  503.609528][   T44] usb 7-1: device descriptor read/64, error -71
[  503.726952][T13358] netlink: 'syz.8.2156': attribute type 1 has an invalid length.
[  503.739848][T13358] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2156'.
[  503.753392][   T44] usb usb7-port1: attempt power cycle
[  503.842311][  T116] usb 8-1: new high-speed USB device number 89 using dummy_hcd
[  503.979531][  T983] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  504.011794][  T116] usb 8-1: Using ep0 maxpacket: 32
[  504.129478][   T44] usb 7-1: new full-speed USB device number 101 using dummy_hcd
[  504.144323][  T116] usb 8-1: unable to get BOS descriptor or descriptor too short
[  504.153103][  T116] usb 8-1: unable to read config index 0 descriptor/start: -71
[  504.160668][  T116] usb 8-1: can't read configurations, error -71
[  504.168566][   T44] usb 7-1: device descriptor read/8, error -71
[  504.172345][  T983] usb 1-1: Using ep0 maxpacket: 32
[  504.259660][  T983] usb 1-1: unable to get BOS descriptor or descriptor too short
[  504.270893][  T983] usb 1-1: unable to read config index 0 descriptor/start: -71
[  504.278577][  T983] usb 1-1: can't read configurations, error -71
[  504.428712][   T44] usb 7-1: new full-speed USB device number 102 using dummy_hcd
[  504.450767][   T44] usb 7-1: device descriptor read/8, error -71
[  504.568236][   T44] usb usb7-port1: unable to enumerate USB device
[  505.067416][T13377] netlink: 'syz.8.2163': attribute type 10 has an invalid length.
[  505.082475][  T116] usb 8-1: new high-speed USB device number 90 using dummy_hcd
[  505.096327][T13377] team0: Port device dummy0 added
[  505.262932][  T116] usb 8-1: Using ep0 maxpacket: 32
[  505.288295][T13368] FAULT_INJECTION: forcing a failure.
[  505.288295][T13368] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  505.301603][T13368] CPU: 0 UID: 0 PID: 13368 Comm: syz.7.2159 Not tainted syzkaller #0 PREEMPT(full) 
[  505.301625][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  505.301635][T13368] Call Trace:
[  505.301642][T13368]  <TASK>
[  505.301649][T13368]  dump_stack_lvl+0x189/0x250
[  505.301671][T13368]  ? __pfx____ratelimit+0x10/0x10
[  505.301694][T13368]  ? __pfx_dump_stack_lvl+0x10/0x10
[  505.301711][T13368]  ? __pfx__printk+0x10/0x10
[  505.301752][T13368]  should_fail_ex+0x414/0x560
[  505.301778][T13368]  __kvm_read_guest_page+0x18d/0x240
[  505.301800][T13368]  kvm_fetch_guest_virt+0x12b/0x170
[  505.301826][T13368]  ? __pfx_kvm_fetch_guest_virt+0x10/0x10
[  505.301848][T13368]  __do_insn_fetch_bytes+0x2fc/0x6d0
[  505.301873][T13368]  ? __pfx___do_insn_fetch_bytes+0x10/0x10
[  505.301893][T13368]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  505.301917][T13368]  ? x86_decode_insn+0x12d7/0x5310
[  505.301940][T13368]  x86_decode_insn+0x33c/0x5310
[  505.301990][T13368]  ? __pfx_x86_decode_insn+0x10/0x10
[  505.302021][T13368]  ? __asan_memset+0x22/0x50
[  505.302042][T13368]  ? init_decode_cache+0x78/0x90
[  505.302059][T13368]  ? init_emulate_ctxt+0x4d6/0x660
[  505.302086][T13368]  ? __pfx_init_emulate_ctxt+0x10/0x10
[  505.302114][T13368]  ? trace_rcu_utilization+0x47/0x1d0
[  505.302139][T13368]  x86_emulate_instruction+0x61b/0x1f90
[  505.302176][T13368]  ? __pfx_x86_emulate_instruction+0x10/0x10
[  505.302191][T13368]  ? __get_current_cr3_fast+0x90/0x150
[  505.302206][T13368]  ? clear_bhb_loop+0x60/0xb0
[  505.302220][T13368]  ? clear_bhb_loop+0x60/0xb0
[  505.302238][T13368]  ? vmx_vcpu_run+0xe92/0x2b70
[  505.302258][T13368]  ? __vmx_complete_interrupts+0xe7/0x690
[  505.302292][T13368]  handle_ud+0x142/0x590
[  505.302318][T13368]  ? __pfx_handle_ud+0x10/0x10
[  505.302338][T13368]  ? vmx_handle_exit_irqoff+0x61e/0x940
[  505.302357][T13368]  ? __pfx_current_save_fsgs+0x10/0x10
[  505.302378][T13368]  ? __lock_acquire+0xab9/0xd20
[  505.302401][T13368]  ? __pfx_handle_exception_nmi+0x10/0x10
[  505.302422][T13368]  vmx_handle_exit+0x10a4/0x18c0
[  505.302444][T13368]  ? vcpu_run+0x361b/0x7040
[  505.302476][T13368]  vcpu_run+0x43aa/0x7040
[  505.302509][T13368]  ? vcpu_run+0x361b/0x7040
[  505.302583][T13368]  ? __pfx_vcpu_run+0x10/0x10
[  505.302601][T13368]  ? __pfx_x86_emulate_instruction+0x10/0x10
[  505.302618][T13368]  ? complete_emulated_mmio+0x18e/0x7a0
[  505.302637][T13368]  ? __asan_memcpy+0x40/0x70
[  505.302656][T13368]  ? complete_emulated_mmio+0x4d2/0x7a0
[  505.302680][T13368]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  505.302704][T13368]  ? __mutex_trylock_common+0x153/0x260
[  505.302735][T13368]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  505.302753][T13368]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  505.302773][T13368]  ? rcu_is_watching+0x15/0xb0
[  505.302792][T13368]  ? trace_contention_end+0x39/0x120
[  505.302815][T13368]  ? __mutex_lock+0x335/0x1350
[  505.302840][T13368]  ? kasan_quarantine_put+0xdd/0x220
[  505.302860][T13368]  ? lockdep_hardirqs_on+0x9c/0x150
[  505.302883][T13368]  ? kvm_vcpu_ioctl+0x22e/0xe90
[  505.302903][T13368]  ? __pfx___mutex_lock+0x10/0x10
[  505.302924][T13368]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  505.302945][T13368]  ? do_vfs_ioctl+0xbe8/0x1430
[  505.302964][T13368]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  505.302984][T13368]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  505.303008][T13368]  kvm_vcpu_ioctl+0x95c/0xe90
[  505.303029][T13368]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  505.303068][T13368]  ? __fget_files+0x2a/0x420
[  505.303091][T13368]  ? __fget_files+0x3a0/0x420
[  505.303106][T13368]  ? __fget_files+0x2a/0x420
[  505.303126][T13368]  ? bpf_lsm_file_ioctl+0x9/0x20
[  505.303143][T13368]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  505.303161][T13368]  __se_sys_ioctl+0xfc/0x170
[  505.303184][T13368]  do_syscall_64+0xfa/0xfa0
[  505.303199][T13368]  ? lockdep_hardirqs_on+0x9c/0x150
[  505.303222][T13368]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.303238][T13368]  ? clear_bhb_loop+0x60/0xb0
[  505.303259][T13368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.303276][T13368] RIP: 0033:0x7f5fa2d8eec9
[  505.303292][T13368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  505.303307][T13368] RSP: 002b:00007f5fa3cd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  505.303324][T13368] RAX: ffffffffffffffda RBX: 00007f5fa2fe5fa0 RCX: 00007f5fa2d8eec9
[  505.303337][T13368] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c
[  505.303348][T13368] RBP: 00007f5fa3cd4090 R08: 0000000000000000 R09: 0000000000000000
[  505.303359][T13368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  505.303369][T13368] R13: 00007f5fa2fe6038 R14: 00007f5fa2fe5fa0 R15: 00007ffd74c50db8
[  505.303400][T13368]  </TASK>
[  505.823794][  T116] usb 8-1: unable to get BOS descriptor or descriptor too short
[  505.832389][  T116] usb 8-1: unable to read config index 0 descriptor/start: -71
[  505.839966][  T116] usb 8-1: can't read configurations, error -71
[  505.840485][  T983] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  505.846804][  T116] usb usb8-port1: attempt power cycle
[  505.854021][ T5955] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  506.043775][  T983] usb 1-1: Using ep0 maxpacket: 8
[  506.049036][ T5955] usb 9-1: Using ep0 maxpacket: 32
[  506.056989][  T983] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  506.067562][ T5955] usb 9-1: config 0 has an invalid interface number: 250 but max is 2
[  506.075807][ T5955] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  506.085921][ T5955] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3
[  506.094871][ T5955] usb 9-1: config 0 has no interface number 0
[  506.101209][  T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  506.113519][  T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  506.123426][  T983] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  506.134731][  T983] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  506.147955][  T983] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  506.157100][  T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.165322][ T5955] usb 9-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f
[  506.174408][ T5955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.182414][ T5955] usb 9-1: Product: syz
[  506.186865][ T5955] usb 9-1: Manufacturer: syz
[  506.191460][ T5955] usb 9-1: SerialNumber: syz
[  506.198318][ T5955] usb 9-1: config 0 descriptor??
[  506.205874][ T5955] uvcvideo 9-1:0.250: probe with driver uvcvideo failed with error -22
[  506.224109][  T983] usb 1-1: config 0 descriptor??
[  506.422809][T13377] netlink: 'syz.8.2163': attribute type 10 has an invalid length.
[  506.439253][T13377] team0: Port device dummy0 removed
[  506.451702][T13377] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  506.466686][ T5912] usb 9-1: USB disconnect, device number 32
[  506.478977][  T983] usb 1-1: USB disconnect, device number 39
[  506.738912][  T116] usb 8-1: new high-speed USB device number 91 using dummy_hcd
[  506.760807][  T116] usb 8-1: device descriptor read/8, error -71
[  506.824724][   T44] usb 7-1: new high-speed USB device number 103 using dummy_hcd
[  506.987880][   T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  506.999066][   T44] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  507.008158][   T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.018201][   T44] usb 7-1: config 0 descriptor??
[  507.030855][  T116] usb 8-1: new high-speed USB device number 92 using dummy_hcd
[  507.071171][  T116] usb 8-1: device descriptor read/8, error -71
[  507.188893][  T116] usb usb8-port1: unable to enumerate USB device
[  507.245008][   T44] usbhid 7-1:0.0: can't add hid device: -71
[  507.251831][   T44] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  507.264088][   T44] usb 7-1: USB disconnect, device number 103
[  507.359220][  T983] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  507.380635][ T5912] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  507.519641][  T983] usb 9-1: Using ep0 maxpacket: 32
[  507.547482][ T5912] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  507.553517][T13386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  507.561326][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.567938][T13386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  507.575290][ T5912] usb 1-1: Product: syz
[  507.585433][ T5912] usb 1-1: Manufacturer: syz
[  507.590085][ T5912] usb 1-1: SerialNumber: syz
[  507.606732][ T5912] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  507.626154][   T44] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  507.662108][  T983] usb 9-1: unable to get BOS descriptor or descriptor too short
[  507.674985][  T983] usb 9-1: unable to read config index 0 descriptor/start: -71
[  507.683110][  T983] usb 9-1: can't read configurations, error -71
[  507.712128][ T5961] usb 7-1: new high-speed USB device number 104 using dummy_hcd
[  507.875429][ T5961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  507.886627][ T5961] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  507.896240][ T5961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.907261][ T5961] usb 7-1: config 0 descriptor??
[  508.080937][  T116] usb 1-1: USB disconnect, device number 40
[  508.348898][ T5961] usbhid 7-1:0.0: can't add hid device: -71
[  508.358754][ T5961] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  508.375746][ T5961] usb 7-1: USB disconnect, device number 104
[  508.792364][   T44] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  508.792447][  T983] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[  508.799865][   T44] ath9k_htc: Failed to initialize the device
[  508.813522][  T116] usb 1-1: ath9k_htc: USB layer deinitialized
[  508.965393][  T983] usb 9-1: Using ep0 maxpacket: 32
[  509.086488][  T983] usb 9-1: unable to get BOS descriptor or descriptor too short
[  509.101156][  T983] usb 9-1: unable to read config index 0 descriptor/start: -71
[  509.110423][  T983] usb 9-1: can't read configurations, error -71
[  509.118519][  T983] usb usb9-port1: attempt power cycle
[  509.135478][  T116] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  509.284367][ T5912] usb 7-1: new high-speed USB device number 105 using dummy_hcd
[  509.455500][ T5912] usb 7-1: Using ep0 maxpacket: 32
[  509.492722][T13405] FAULT_INJECTION: forcing a failure.
[  509.492722][T13405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  509.507709][T13405] CPU: 1 UID: 0 PID: 13405 Comm: syz.6.2172 Not tainted syzkaller #0 PREEMPT(full) 
[  509.507734][T13405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  509.507746][T13405] Call Trace:
[  509.507754][T13405]  <TASK>
[  509.507762][T13405]  dump_stack_lvl+0x189/0x250
[  509.507790][T13405]  ? __pfx____ratelimit+0x10/0x10
[  509.507814][T13405]  ? __pfx_dump_stack_lvl+0x10/0x10
[  509.507831][T13405]  ? __pfx__printk+0x10/0x10
[  509.507868][T13405]  should_fail_ex+0x414/0x560
[  509.507897][T13405]  __kvm_read_guest_page+0x18d/0x240
[  509.507920][T13405]  kvm_fetch_guest_virt+0x12b/0x170
[  509.507946][T13405]  ? __pfx_kvm_fetch_guest_virt+0x10/0x10
[  509.507968][T13405]  __do_insn_fetch_bytes+0x2fc/0x6d0
[  509.507993][T13405]  ? __pfx___do_insn_fetch_bytes+0x10/0x10
[  509.508014][T13405]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  509.508037][T13405]  ? x86_decode_insn+0x12d7/0x5310
[  509.508060][T13405]  x86_decode_insn+0x33c/0x5310
[  509.508111][T13405]  ? __pfx_x86_decode_insn+0x10/0x10
[  509.508143][T13405]  ? __asan_memset+0x22/0x50
[  509.508162][T13405]  ? init_decode_cache+0x78/0x90
[  509.508181][T13405]  ? init_emulate_ctxt+0x4d6/0x660
[  509.508209][T13405]  ? __pfx_init_emulate_ctxt+0x10/0x10
[  509.508237][T13405]  ? trace_rcu_utilization+0x47/0x1d0
[  509.508263][T13405]  x86_emulate_instruction+0x61b/0x1f90
[  509.508285][T13405]  ? fred_extint+0x38/0x80
[  509.508305][T13405]  ? fred_sysvec_apic_timer_interrupt+0xad/0xe0
[  509.508327][T13405]  ? fred_extint+0x4f/0x80
[  509.508344][T13405]  ? __pfx_x86_emulate_instruction+0x10/0x10
[  509.508359][T13405]  ? __get_current_cr3_fast+0x90/0x150
[  509.508375][T13405]  ? clear_bhb_loop+0x60/0xb0
[  509.508392][T13405]  ? clear_bhb_loop+0x60/0xb0
[  509.508409][T13405]  ? vmx_vcpu_run+0xe92/0x2b70
[  509.508429][T13405]  ? __vmx_complete_interrupts+0xe7/0x690
[  509.508463][T13405]  handle_ud+0x142/0x590
[  509.508488][T13405]  ? __pfx_handle_ud+0x10/0x10
[  509.508508][T13405]  ? vmx_handle_exit_irqoff+0x61e/0x940
[  509.508528][T13405]  ? __pfx_current_save_fsgs+0x10/0x10
[  509.508559][T13405]  ? __lock_acquire+0xab9/0xd20
[  509.508583][T13405]  ? __pfx_handle_exception_nmi+0x10/0x10
[  509.508606][T13405]  vmx_handle_exit+0x10a4/0x18c0
[  509.508629][T13405]  ? vcpu_run+0x361b/0x7040
[  509.508662][T13405]  vcpu_run+0x43aa/0x7040
[  509.508695][T13405]  ? vcpu_run+0x361b/0x7040
[  509.508767][T13405]  ? __pfx_vcpu_run+0x10/0x10
[  509.508786][T13405]  ? __pfx_x86_emulate_instruction+0x10/0x10
[  509.508802][T13405]  ? complete_emulated_mmio+0x18e/0x7a0
[  509.508818][T13405]  ? __asan_memcpy+0x40/0x70
[  509.508835][T13405]  ? complete_emulated_mmio+0x4d2/0x7a0
[  509.508859][T13405]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  509.508879][T13405]  ? __mutex_trylock_common+0x153/0x260
[  509.508901][T13405]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  509.508920][T13405]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  509.508940][T13405]  ? rcu_is_watching+0x15/0xb0
[  509.508962][T13405]  ? trace_contention_end+0x39/0x120
[  509.508984][T13405]  ? __mutex_lock+0x335/0x1350
[  509.509009][T13405]  ? kasan_quarantine_put+0xdd/0x220
[  509.509028][T13405]  ? lockdep_hardirqs_on+0x9c/0x150
[  509.509052][T13405]  ? kvm_vcpu_ioctl+0x22e/0xe90
[  509.509073][T13405]  ? __pfx___mutex_lock+0x10/0x10
[  509.509088][T13405]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  509.509113][T13405]  ? do_vfs_ioctl+0xbe8/0x1430
[  509.509133][T13405]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  509.509152][T13405]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  509.509178][T13405]  kvm_vcpu_ioctl+0x95c/0xe90
[  509.509203][T13405]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  509.509243][T13405]  ? __fget_files+0x2a/0x420
[  509.509265][T13405]  ? __fget_files+0x3a0/0x420
[  509.509281][T13405]  ? __fget_files+0x2a/0x420
[  509.509299][T13405]  ? bpf_lsm_file_ioctl+0x9/0x20
[  509.509316][T13405]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  509.509334][T13405]  __se_sys_ioctl+0xfc/0x170
[  509.509357][T13405]  do_syscall_64+0xfa/0xfa0
[  509.509374][T13405]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.509390][T13405]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  509.509406][T13405]  ? clear_bhb_loop+0x60/0xb0
[  509.509427][T13405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.509444][T13405] RIP: 0033:0x7f2bba98eec9
[  509.509461][T13405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  509.509475][T13405] RSP: 002b:00007f2bbb8da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  509.509493][T13405] RAX: ffffffffffffffda RBX: 00007f2bbabe5fa0 RCX: 00007f2bba98eec9
[  509.509506][T13405] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c
[  509.509516][T13405] RBP: 00007f2bbb8da090 R08: 0000000000000000 R09: 0000000000000000
[  509.509527][T13405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  509.509544][T13405] R13: 00007f2bbabe6038 R14: 00007f2bbabe5fa0 R15: 00007ffd6049a5e8
[  509.509574][T13405]  </TASK>
[  510.091428][ T5912] usb 7-1: unable to get BOS descriptor or descriptor too short
[  510.102357][ T5912] usb 7-1: unable to read config index 0 descriptor/start: -71
[  510.180239][ T5912] usb 7-1: can't read configurations, error -71
[  510.358011][T13421] kAFS: unparsable volume name
[  510.364138][T13421] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.2178'.
[  510.373553][T13421] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  510.503616][  T983] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  510.535835][   T24] usb 8-1: new full-speed USB device number 93 using dummy_hcd
[  510.664149][  T983] usb 9-1: Using ep0 maxpacket: 32
[  510.711935][   T24] usb 8-1: config 0 has an invalid interface number: 133 but max is 0
[  510.720673][   T24] usb 8-1: config 0 has no interface number 0
[  510.729799][   T24] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  510.739939][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.748044][   T24] usb 8-1: Product: syz
[  510.753081][   T24] usb 8-1: Manufacturer: syz
[  510.757699][   T24] usb 8-1: SerialNumber: syz
[  510.772146][   T24] usb 8-1: config 0 descriptor??
[  510.877940][  T116] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  510.996792][   T24] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected
[  511.006618][   T24] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81
[  511.014579][   T24] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1
[  511.023178][   T24] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2
[  511.036493][   T24] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  511.049193][  T116] usb 1-1: Using ep0 maxpacket: 32
[  511.055836][  T983] usb 9-1: unable to get BOS descriptor or descriptor too short
[  511.065367][  T983] usb 9-1: unable to read config index 0 descriptor/start: -71
[  511.066447][  T116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  511.076475][  T983] usb 9-1: can't read configurations, error -71
[  511.089658][  T116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  511.100843][ T5912] usb 7-1: new high-speed USB device number 106 using dummy_hcd
[  511.109076][  T116] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  511.119015][  T116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.131306][  T116] usb 1-1: config 0 descriptor??
[  511.263030][ T5912] usb 7-1: device descriptor read/64, error -71
[  511.381101][ T5912] usb usb7-port1: attempt power cycle
[  511.437720][ T5955] usb 8-1: USB disconnect, device number 93
[  511.449812][ T5955] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  511.460091][ T5955] keyspan 8-1:0.133: device disconnected
[  511.574319][  T116] ft260 0003:0403:6030.003D: item fetching failed at offset 0/2
[  511.582577][  T116] ft260 0003:0403:6030.003D: failed to parse HID
[  511.590023][  T116] ft260 0003:0403:6030.003D: probe with driver ft260 failed with error -22
[  511.765616][ T5912] usb 7-1: new high-speed USB device number 107 using dummy_hcd
[  511.798258][ T5912] usb 7-1: device descriptor read/8, error -71
[  511.990470][  T983] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  512.065989][ T5912] usb 7-1: new high-speed USB device number 108 using dummy_hcd
[  512.087049][ T5912] usb 7-1: device descriptor read/8, error -71
[  512.150663][  T983] usb 9-1: Using ep0 maxpacket: 16
[  512.157337][  T983] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  512.168556][  T983] usb 9-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  512.177869][  T983] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.187805][  T983] usb 9-1: config 0 descriptor??
[  512.204627][ T5912] usb usb7-port1: unable to enumerate USB device
[  512.289714][  T116] usb 8-1: new high-speed USB device number 94 using dummy_hcd
[  512.331459][ T5912] usb 1-1: USB disconnect, device number 42
[  512.451159][  T116] usb 8-1: Using ep0 maxpacket: 32
[  512.502823][T13446] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  512.605535][  T116] usb 8-1: unable to get BOS descriptor or descriptor too short
[  512.617873][  T116] usb 8-1: unable to read config index 0 descriptor/start: -71
[  512.625785][  T116] usb 8-1: can't read configurations, error -71
[  512.638680][  T983] mcp2200 0003:04D8:00DF.003E: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.8-1/input0
[  512.850120][ T5955] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  512.862245][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  512.871342][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  512.884593][  T983] usb 9-1: USB disconnect, device number 37
[  513.016928][ T5955] usb 1-1: Using ep0 maxpacket: 32
[  513.039694][T13449] FAULT_INJECTION: forcing a failure.
[  513.039694][T13449] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  513.053232][T13449] CPU: 1 UID: 0 PID: 13449 Comm: syz.0.2189 Not tainted syzkaller #0 PREEMPT(full) 
[  513.053256][T13449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  513.053274][T13449] Call Trace:
[  513.053284][T13449]  <TASK>
[  513.053293][T13449]  dump_stack_lvl+0x189/0x250
[  513.053313][T13449]  ? __pfx____ratelimit+0x10/0x10
[  513.053327][T13449]  ? __pfx_dump_stack_lvl+0x10/0x10
[  513.053337][T13449]  ? __pfx__printk+0x10/0x10
[  513.053358][T13449]  should_fail_ex+0x414/0x560
[  513.053383][T13449]  __kvm_read_guest_page+0x18d/0x240
[  513.053406][T13449]  kvm_fetch_guest_virt+0x12b/0x170
[  513.053433][T13449]  ? __pfx_kvm_fetch_guest_virt+0x10/0x10
[  513.053455][T13449]  __do_insn_fetch_bytes+0x2fc/0x6d0
[  513.053472][T13449]  ? __pfx___do_insn_fetch_bytes+0x10/0x10
[  513.053484][T13449]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  513.053498][T13449]  ? x86_decode_insn+0x12d7/0x5310
[  513.053511][T13449]  x86_decode_insn+0x33c/0x5310
[  513.053558][T13449]  ? __pfx_x86_decode_insn+0x10/0x10
[  513.053625][T13449]  ? __asan_memset+0x22/0x50
[  513.053648][T13449]  ? init_decode_cache+0x78/0x90
[  513.053660][T13449]  ? init_emulate_ctxt+0x4d6/0x660
[  513.053692][T13449]  ? __pfx_init_emulate_ctxt+0x10/0x10
[  513.053727][T13449]  ? trace_rcu_utilization+0x47/0x1d0
[  513.053752][T13449]  x86_emulate_instruction+0x61b/0x1f90
[  513.053791][T13449]  ? __pfx_x86_emulate_instruction+0x10/0x10
[  513.053807][T13449]  ? __get_current_cr3_fast+0x90/0x150
[  513.053823][T13449]  ? clear_bhb_loop+0x60/0xb0
[  513.053833][T13449]  ? clear_bhb_loop+0x60/0xb0
[  513.053843][T13449]  ? vmx_vcpu_run+0xe92/0x2b70
[  513.053855][T13449]  ? __vmx_complete_interrupts+0xe7/0x690
[  513.053884][T13449]  handle_ud+0x142/0x590
[  513.053968][T13449]  ? __pfx_handle_ud+0x10/0x10
[  513.053981][T13449]  ? vmx_handle_exit_irqoff+0x61e/0x940
[  513.053993][T13449]  ? __pfx_current_save_fsgs+0x10/0x10
[  513.054006][T13449]  ? __lock_acquire+0xab9/0xd20
[  513.054022][T13449]  ? __pfx_handle_exception_nmi+0x10/0x10
[  513.054045][T13449]  vmx_handle_exit+0x10a4/0x18c0
[  513.054069][T13449]  ? vcpu_run+0x361b/0x7040
[  513.054102][T13449]  vcpu_run+0x43aa/0x7040
[  513.054123][T13449]  ? vcpu_run+0x361b/0x7040
[  513.054175][T13449]  ? __pfx_vcpu_run+0x10/0x10
[  513.054202][T13449]  ? __pfx_x86_emulate_instruction+0x10/0x10
[  513.054220][T13449]  ? complete_emulated_mmio+0x18e/0x7a0
[  513.054240][T13449]  ? __asan_memcpy+0x40/0x70
[  513.054259][T13449]  ? complete_emulated_mmio+0x4d2/0x7a0
[  513.054275][T13449]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  513.054289][T13449]  ? __mutex_trylock_common+0x153/0x260
[  513.054312][T13449]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  513.054328][T13449]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  513.054351][T13449]  ? rcu_is_watching+0x15/0xb0
[  513.054373][T13449]  ? trace_contention_end+0x39/0x120
[  513.054396][T13449]  ? __mutex_lock+0x335/0x1350
[  513.054416][T13449]  ? kasan_quarantine_put+0xdd/0x220
[  513.054434][T13449]  ? lockdep_hardirqs_on+0x9c/0x150
[  513.054448][T13449]  ? kvm_vcpu_ioctl+0x22e/0xe90
[  513.054461][T13449]  ? __pfx___mutex_lock+0x10/0x10
[  513.054472][T13449]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  513.054496][T13449]  ? do_vfs_ioctl+0xbe8/0x1430
[  513.054517][T13449]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  513.054579][T13449]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  513.054602][T13449]  kvm_vcpu_ioctl+0x95c/0xe90
[  513.054621][T13449]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  513.054655][T13449]  ? __fget_files+0x2a/0x420
[  513.054675][T13449]  ? __fget_files+0x3a0/0x420
[  513.054698][T13449]  ? __fget_files+0x2a/0x420
[  513.054719][T13449]  ? bpf_lsm_file_ioctl+0x9/0x20
[  513.054735][T13449]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  513.054751][T13449]  __se_sys_ioctl+0xfc/0x170
[  513.054767][T13449]  do_syscall_64+0xfa/0xfa0
[  513.054777][T13449]  ? lockdep_hardirqs_on+0x9c/0x150
[  513.054791][T13449]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.054800][T13449]  ? clear_bhb_loop+0x60/0xb0
[  513.054817][T13449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.054834][T13449] RIP: 0033:0x7f282018eec9
[  513.054852][T13449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  513.054867][T13449] RSP: 002b:00007f2820fea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  513.054886][T13449] RAX: ffffffffffffffda RBX: 00007f28203e5fa0 RCX: 00007f282018eec9
[  513.054899][T13449] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c
[  513.054906][T13449] RBP: 00007f2820fea090 R08: 0000000000000000 R09: 0000000000000000
[  513.054912][T13449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  513.054918][T13449] R13: 00007f28203e6038 R14: 00007f28203e5fa0 R15: 00007ffe98651df8
[  513.055014][T13449]  </TASK>
[  513.578680][ T5955] usb 1-1: unable to get BOS descriptor or descriptor too short
[  513.595112][ T5955] usb 1-1: unable to read config index 0 descriptor/start: -71
[  513.602718][ T5955] usb 1-1: can't read configurations, error -71
[  513.893650][T13456] netlink: get zone limit has 4 unknown bytes
[  514.066023][  T116] usb 8-1: new high-speed USB device number 95 using dummy_hcd
[  514.191356][T13467] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2197'.
[  514.201525][T13467] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  514.225622][  T116] usb 8-1: Using ep0 maxpacket: 32
[  514.273297][T13471] netlink: 'syz.8.2199': attribute type 83 has an invalid length.
[  514.353875][   T24] usb 7-1: new high-speed USB device number 109 using dummy_hcd
[  514.424342][T13478] netlink: 'syz.8.2200': attribute type 16 has an invalid length.
[  514.496533][  T116] usb 8-1: unable to get BOS descriptor or descriptor too short
[  514.506213][  T116] usb 8-1: unable to read config index 0 descriptor/start: -71
[  514.513820][  T116] usb 8-1: can't read configurations, error -71
[  514.521914][  T116] usb usb8-port1: attempt power cycle
[  514.529243][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  514.540157][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  514.550583][   T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  514.559689][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.569676][   T24] usb 7-1: config 0 descriptor??
[  514.717474][ T5955] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  514.738841][ T5961] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  514.888622][ T5955] usb 1-1: Using ep0 maxpacket: 32
[  514.893957][ T5961] usb 9-1: device descriptor read/64, error -71
[  514.970173][ T5955] usb 1-1: unable to get BOS descriptor or descriptor too short
[  514.982279][ T5955] usb 1-1: unable to read config index 0 descriptor/start: -71
[  514.990157][ T5955] usb 1-1: can't read configurations, error -71
[  514.996899][ T5955] usb usb1-port1: attempt power cycle
[  515.092934][T13485] overlay: Unknown parameter 'func'
[  515.101235][T13485] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  515.112455][T13485] overlayfs: maximum fs stacking depth exceeded
[  515.156738][ T5961] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  515.318586][ T5961] usb 9-1: device descriptor read/64, error -71
[  515.435629][ T5961] usb usb9-port1: attempt power cycle
[  515.581764][   T24] logitech 0003:046D:C29C.003F: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.6-1/input0
[  515.658725][  T116] usb 8-1: new high-speed USB device number 96 using dummy_hcd
[  515.691216][  T116] usb 8-1: Using ep0 maxpacket: 32
[  515.716113][T13487] FAULT_INJECTION: forcing a failure.
[  515.716113][T13487] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  515.732388][T13487] CPU: 0 UID: 0 PID: 13487 Comm: syz.7.2204 Not tainted syzkaller #0 PREEMPT(full) 
[  515.732414][T13487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  515.732425][T13487] Call Trace:
[  515.732433][T13487]  <TASK>
[  515.732440][T13487]  dump_stack_lvl+0x189/0x250
[  515.732462][T13487]  ? __pfx____ratelimit+0x10/0x10
[  515.732479][T13487]  ? __pfx_dump_stack_lvl+0x10/0x10
[  515.732489][T13487]  ? __pfx__printk+0x10/0x10
[  515.732509][T13487]  should_fail_ex+0x414/0x560
[  515.732532][T13487]  _copy_to_user+0x31/0xb0
[  515.732551][T13487]  simple_read_from_buffer+0xe1/0x170
[  515.732580][T13487]  proc_fail_nth_read+0x1b3/0x220
[  515.732600][T13487]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  515.732620][T13487]  ? rw_verify_area+0x2a6/0x4d0
[  515.732638][T13487]  ? __lock_acquire+0xab9/0xd20
[  515.732652][T13487]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  515.732769][T13487]  vfs_read+0x200/0xa30
[  515.732791][T13487]  ? fdget_pos+0x247/0x320
[  515.732860][T13487]  ? __pfx___mutex_lock+0x10/0x10
[  515.732878][T13487]  ? __pfx_vfs_read+0x10/0x10
[  515.732901][T13487]  ? __fget_files+0x2a/0x420
[  515.732919][T13487]  ? __fget_files+0x3a0/0x420
[  515.732932][T13487]  ? __fget_files+0x2a/0x420
[  515.732954][T13487]  ksys_read+0x145/0x250
[  515.732972][T13487]  ? __fget_files+0x2a/0x420
[  515.732987][T13487]  ? __pfx_ksys_read+0x10/0x10
[  515.733010][T13487]  ? do_syscall_64+0xbe/0xfa0
[  515.733029][T13487]  do_syscall_64+0xfa/0xfa0
[  515.733046][T13487]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.733061][T13487]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  515.733076][T13487]  ? clear_bhb_loop+0x60/0xb0
[  515.733093][T13487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.733108][T13487] RIP: 0033:0x7f5fa2d8d8dc
[  515.733143][T13487] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  515.733156][T13487] RSP: 002b:00007f5fa3cd4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  515.733182][T13487] RAX: ffffffffffffffda RBX: 00007f5fa2fe5fa0 RCX: 00007f5fa2d8d8dc
[  515.733196][T13487] RDX: 000000000000000f RSI: 00007f5fa3cd40a0 RDI: 000000000000000d
[  515.733207][T13487] RBP: 00007f5fa3cd4090 R08: 0000000000000000 R09: 0000000000000000
[  515.733217][T13487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  515.733225][T13487] R13: 00007f5fa2fe6038 R14: 00007f5fa2fe5fa0 R15: 00007ffd74c50db8
[  515.733252][T13487]  </TASK>
[  515.758954][T13498] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2207'.
[  515.793284][T13458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  515.997847][T13458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  516.000953][ T5961] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  516.030358][   T24] logitech 0003:046D:C29C.003F: no inputs found
[  516.053872][ T5961] usb 9-1: device descriptor read/8, error -71
[  516.062417][   T24] usb 7-1: USB disconnect, device number 109
[  516.100145][  T116] usb 8-1: unable to get BOS descriptor or descriptor too short
[  516.110098][  T116] usb 8-1: unable to read config index 0 descriptor/start: -71
[  516.118373][  T116] usb 8-1: can't read configurations, error -71
[  516.166535][T13504] openvswitch: netlink: Key type 169 is out of range max 32
[  516.311565][ T5961] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  516.332937][ T5961] usb 9-1: device descriptor read/8, error -71
[  516.450337][ T5961] usb usb9-port1: unable to enumerate USB device
[  516.503689][  T116] usb 8-1: new high-speed USB device number 97 using dummy_hcd
[  516.525597][  T116] usb 8-1: Using ep0 maxpacket: 32
[  516.623502][  T116] usb 8-1: unable to get BOS descriptor or descriptor too short
[  516.632201][  T116] usb 8-1: unable to read config index 0 descriptor/start: -71
[  516.639791][  T116] usb 8-1: can't read configurations, error -71
[  516.646857][  T116] usb usb8-port1: unable to enumerate USB device
[  516.853091][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2212'.
[  516.866688][T13515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  516.976089][ T5961] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  517.087727][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  517.094145][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  517.145265][ T5961] usb 1-1: Using ep0 maxpacket: 8
[  517.153072][ T5961] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  517.161914][ T5961] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  517.198810][ T5961] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  517.218417][ T5961] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  517.239657][ T5961] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  517.260055][ T5961] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  517.272939][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.527594][ T5961] usb 1-1: usb_control_msg returned -71
[  517.552837][ T5961] usbtmc 1-1:16.0: can't read capabilities
[  517.577009][ T5961] usb 1-1: USB disconnect, device number 46
[  517.603458][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'.
[  517.618082][T13557] xt_l2tp: missing protocol rule (udp|l2tpip)
[  517.756214][   T24] usb 8-1: new high-speed USB device number 98 using dummy_hcd
[  517.910357][T13565] input: syz1 as /devices/virtual/input/input62
[  517.940493][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  517.952051][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  517.962725][   T24] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  517.977783][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.993009][   T24] usb 8-1: config 0 descriptor??
[  518.069937][T13575] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  518.120082][T13572] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2223'.
[  518.161870][   T44] usb 7-1: new high-speed USB device number 110 using dummy_hcd
[  518.216504][T13582] kAFS: unable to lookup cell '.,c¾ûL'
[  518.288007][T13585] vxfs: WRONG superblock magic 00000000 at 1
[  518.296909][T13585] vxfs: WRONG superblock magic 00000000 at 8
[  518.303185][T13585] vxfs: can't find superblock.
[  518.353905][   T44] usb 7-1: Using ep0 maxpacket: 32
[  518.430684][   T24] usbhid 8-1:0.0: can't add hid device: -71
[  518.440916][   T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  518.461500][   T24] usb 8-1: USB disconnect, device number 98
[  518.467558][ T5912] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  518.518839][   T44] usb 7-1: unable to get BOS descriptor or descriptor too short
[  518.529727][   T44] usb 7-1: unable to read config index 0 descriptor/start: -71
[  518.537631][   T44] usb 7-1: can't read configurations, error -71
[  518.621291][ T5912] usb 1-1: device descriptor read/64, error -71
[  518.685573][  T983] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[  518.845934][  T983] usb 9-1: Using ep0 maxpacket: 8
[  518.854469][  T983] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  518.863727][  T983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.871830][  T983] usb 9-1: Product: syz
[  518.876029][  T983] usb 9-1: Manufacturer: syz
[  518.880999][  T983] usb 9-1: SerialNumber: syz
[  518.887619][  T983] usb 9-1: config 0 descriptor??
[  518.888790][ T5912] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  518.904497][  T983] gspca_main: sq930x-2.14.0 probing 2770:930c
[  519.039224][ T5912] usb 1-1: device descriptor read/64, error -71
[  519.167238][ T5912] usb usb1-port1: attempt power cycle
[  519.263877][  T116] usb 8-1: new low-speed USB device number 99 using dummy_hcd
[  519.338639][  T983] gspca_sq930x: ucbus_write failed -71
[  519.425069][  T116] usb 8-1: unable to get BOS descriptor or descriptor too short
[  519.433881][  T116] usb 8-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config
[  519.444102][   T44] usb 7-1: new full-speed USB device number 111 using dummy_hcd
[  519.452007][  T116] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  519.465410][  T116] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0
[  519.478067][  T116] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 24, changing to 4
[  519.489344][  T116] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0
[  519.499918][  T116] usb 8-1: config 1 interface 1 has no altsetting 0
[  519.510302][  T116] usb 8-1: string descriptor 0 read error: -22
[  519.516561][  T116] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  519.526104][  T116] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.542158][  T116] usb 8-1: low speed audio streaming not supported
[  519.548915][ T5912] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  519.573362][  T983] gspca_sq930x: Sensor ov9630 not yet treated
[  519.585672][ T5912] usb 1-1: device descriptor read/8, error -71
[  519.591981][  T983] sq930x 9-1:0.0: probe with driver sq930x failed with error -22
[  519.611199][  T983] usb 9-1: USB disconnect, device number 42
[  519.639751][   T44] usb 7-1: unable to get BOS descriptor or descriptor too short
[  519.650410][   T44] usb 7-1: not running at top speed; connect to a high speed hub
[  519.660841][   T44] usb 7-1: config 140 has an invalid interface number: 70 but max is 0
[  519.669120][   T44] usb 7-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config
[  519.679463][   T44] usb 7-1: config 140 has no interface number 0
[  519.685883][   T44] usb 7-1: config 140 interface 70 altsetting 6 has an endpoint descriptor with address 0x91, changing to 0x81
[  519.698235][   T44] usb 7-1: config 140 interface 70 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  519.708604][   T44] usb 7-1: config 140 interface 70 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  519.722376][   T44] usb 7-1: config 140 interface 70 has no altsetting 0
[  519.732965][   T44] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=19.a5
[  519.742066][   T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.750101][   T44] usb 7-1: Product: syz
[  519.754295][   T44] usb 7-1: Manufacturer: syz
[  519.759281][   T44] usb 7-1: SerialNumber: syz
[  519.760758][ T5955] usb 8-1: USB disconnect, device number 99
[  519.851268][ T5912] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  519.884182][ T5912] usb 1-1: device descriptor read/8, error -71
[  519.995396][   T44] peak_usb 7-1:140.70 can0: unable to request usb[type=0 value=1] err=-71
[  520.004522][ T5912] usb usb1-port1: unable to enumerate USB device
[  520.010937][   T44] peak_usb 7-1:140.70: unable to read PCAN-USB Pro firmware info (err -71)
[  520.077345][   T44] peak_usb 7-1:140.70: probe with driver peak_usb failed with error -71
[  520.090786][   T44] usb 7-1: USB disconnect, device number 111
[  520.182897][  T983] usb 9-1: new full-speed USB device number 43 using dummy_hcd
[  520.344478][T13603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  520.345236][  T983] usb 9-1: unable to get BOS descriptor or descriptor too short
[  520.363166][  T983] usb 9-1: not running at top speed; connect to a high speed hub
[  520.373745][  T983] usb 9-1: config index 0 descriptor too short (expected 9, got 0)
[  520.382091][  T983] usb 9-1: can't read configurations, error -22
[  520.525145][  T983] usb 9-1: new full-speed USB device number 44 using dummy_hcd
[  520.653477][ T5955] usb 8-1: new high-speed USB device number 100 using dummy_hcd
[  520.698680][  T983] usb 9-1: unable to get BOS descriptor or descriptor too short
[  520.707189][  T983] usb 9-1: not running at top speed; connect to a high speed hub
[  520.716655][  T983] usb 9-1: config index 0 descriptor too short (expected 9, got 0)
[  520.724762][  T983] usb 9-1: can't read configurations, error -22
[  520.731601][  T983] usb usb9-port1: attempt power cycle
[  520.803047][ T5961] usb 7-1: new high-speed USB device number 112 using dummy_hcd
[  520.815459][ T5955] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  520.826682][ T5955] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  520.836525][ T5955] usb 8-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  520.845660][ T5955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.855902][ T5955] usb 8-1: config 0 descriptor??
[  520.974306][ T5961] usb 7-1: Using ep0 maxpacket: 8
[  520.981236][ T5961] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  520.989870][ T5961] usb 7-1: config 179 has no interface number 0
[  520.996383][ T5961] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  521.008784][ T5961] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  521.020637][ T5961] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  521.032439][ T5961] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  521.043972][ T5961] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  521.057416][ T5961] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  521.066755][ T5961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.077525][T13607] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  521.091916][  T983] usb 9-1: new full-speed USB device number 45 using dummy_hcd
[  521.126790][  T983] usb 9-1: unable to get BOS descriptor or descriptor too short
[  521.135749][  T983] usb 9-1: not running at top speed; connect to a high speed hub
[  521.146476][  T983] usb 9-1: config index 0 descriptor too short (expected 9, got 0)
[  521.154527][  T983] usb 9-1: can't read configurations, error -22
[  521.295108][  T983] usb 9-1: new full-speed USB device number 46 using dummy_hcd
[  521.316478][ T5961] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input63
[  521.329454][ T5955] usbhid 8-1:0.0: can't add hid device: -71
[  521.340217][  T983] usb 9-1: unable to get BOS descriptor or descriptor too short
[  521.351398][ T5955] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  521.362837][  T983] usb 9-1: not running at top speed; connect to a high speed hub
[  521.379717][ T5955] usb 8-1: USB disconnect, device number 100
[  521.392494][  T983] usb 9-1: config index 0 descriptor too short (expected 9, got 0)
[  521.401071][  T983] usb 9-1: can't read configurations, error -22
[  521.412381][  T983] usb usb9-port1: unable to enumerate USB device
[  521.567514][T13607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  521.576933][T13607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  521.874133][   T44] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  522.045856][   T44] usb 1-1: config 0 has an invalid interface number: 74 but max is 1
[  522.054037][   T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  522.064642][   T44] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  522.073645][   T44] usb 1-1: config 0 has no interface number 0
[  522.080096][   T44] usb 1-1: config 0 interface 74 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  522.091073][   T44] usb 1-1: config 0 interface 74 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  522.101813][   T44] usb 1-1: config 0 interface 74 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  522.116869][   T44] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[  522.126034][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.134156][   T44] usb 1-1: Product: syz
[  522.138345][   T44] usb 1-1: Manufacturer: syz
[  522.143205][   T44] usb 1-1: SerialNumber: syz
[  522.150747][   T44] usb 1-1: config 0 descriptor??
[  522.379729][   T44] cypress_m8 1-1:0.74: HID->COM RS232 Adapter converter detected
[  522.389836][   T44] cyphidcom ttyUSB0: required endpoint is missing
[  522.399839][   T44] usb 1-1: USB disconnect, device number 51
[  522.407480][ T5955] usb 8-1: new high-speed USB device number 101 using dummy_hcd
[  522.408393][   T44] cypress_m8 1-1:0.74: device disconnected
[  522.589327][ T5955] usb 8-1: Using ep0 maxpacket: 16
[  522.597024][ T5955] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  522.608347][ T5955] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  522.618287][ T5955] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  522.631561][ T5955] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  522.640795][ T5955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.652867][ T5955] usb 8-1: config 0 descriptor??
[  523.105190][ T5955] microsoft 0003:045E:07DA.0040: report is too long
[  523.112794][ T5955] microsoft 0003:045E:07DA.0040: item 0 4 0 8 parsing failed
[  523.121875][ T5955] microsoft 0003:045E:07DA.0040: parse failed
[  523.129553][ T5955] microsoft 0003:045E:07DA.0040: probe with driver microsoft failed with error -22
[  523.413432][   T44] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  523.584446][   T44] usb 1-1: Using ep0 maxpacket: 32
[  523.592695][   T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  523.602666][   T24] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[  523.610355][   T44] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  523.620482][   T44] usb 1-1: config 0 interface 0 has no altsetting 0
[  523.634523][   T44] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  523.643677][   T44] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  523.652227][   T44] usb 1-1: Product: syz
[  523.656403][   T44] usb 1-1: Manufacturer: syz
[  523.661091][   T44] usb 1-1: SerialNumber: syz
[  523.668392][   T44] usb 1-1: config 0 descriptor??
[  523.755228][ T5861] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  523.755242][ T5867] Bluetooth: hci3: command 0x1003 tx timeout
[  523.793410][   T24] usb 9-1: Using ep0 maxpacket: 32
[  523.797654][    C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  523.806912][    C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  523.825797][  T983] usb 7-1: USB disconnect, device number 112
[  523.906698][T13625] overlayfs: failed to resolve '/vóÊ7Àho%jL°Gá	V§Ôc¡e±¸Li�“†Ÿ}»Û å”*¤ÝíîñÙ': -2
[  523.995965][   T24] usb 9-1: unable to get BOS descriptor or descriptor too short
[  524.009723][   T24] usb 9-1: unable to read config index 0 descriptor/start: -71
[  524.018624][   T24] usb 9-1: can't read configurations, error -71
[  524.176797][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2240'.
[  524.193164][T13623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  524.202544][T13623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  524.214233][   T44] gs_usb 1-1:0.0: Couldn't get device config: (err=-71)
[  524.221737][   T44] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71
[  524.238890][   T44] usb 1-1: USB disconnect, device number 52
[  524.343262][  T983] usb 7-1: new high-speed USB device number 113 using dummy_hcd
[  524.482314][  T983] usb 7-1: device descriptor read/64, error -71
[  524.738954][  T983] usb 7-1: new high-speed USB device number 114 using dummy_hcd
[  524.877961][  T983] usb 7-1: device descriptor read/64, error -71
[  524.931823][   T24] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[  524.999067][  T983] usb usb7-port1: attempt power cycle
[  525.102481][   T24] usb 9-1: Using ep0 maxpacket: 32
[  525.111363][   T24] usb 9-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  525.121696][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.129864][   T24] usb 9-1: Product: syz
[  525.134216][   T24] usb 9-1: Manufacturer: syz
[  525.139800][   T24] usb 9-1: SerialNumber: syz
[  525.140644][ T5955] usb 8-1: USB disconnect, device number 101
[  525.152705][   T24] usb 9-1: config 0 descriptor??
[  525.177196][   T24] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  525.232837][ T5961] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[  525.380652][  T983] usb 7-1: new high-speed USB device number 115 using dummy_hcd
[  525.403416][  T983] usb 7-1: device descriptor read/8, error -71
[  525.414012][ T5961] usb 1-1: not running at top speed; connect to a high speed hub
[  525.423160][ T5961] usb 1-1: config 127 has an invalid interface number: 15 but max is 0
[  525.431623][ T5961] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  525.442258][ T5961] usb 1-1: config 127 has no interface number 0
[  525.449335][ T5961] usb 1-1: config 127 interface 15 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  525.462993][ T5961] usb 1-1: config 127 interface 15 has no altsetting 0
[  525.472156][ T5961] usb 1-1: New USB device found, idVendor=04dd, idProduct=8001, bcdDevice=12.c5
[  525.481494][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.489594][ T5961] usb 1-1: Product: �
[  525.494776][ T5961] usb 1-1: Manufacturer: ⰎꜮ씲츦迷ኖ导嶒ἶ�心⋹胼�矽꥜㨑殬�꿄J镗䥖맒儌腎�婙쀄�⺊�粜蛞﷮똡〜㌨뽛㎅멋�寰曳젞뷱ấ鳦
[  525.512071][ T5961] usb 1-1: SerialNumber: syz
[  525.583840][ T5955] usb 8-1: new high-speed USB device number 102 using dummy_hcd
[  525.654056][   T24] gspca_topro: reg_w err -71
[  525.670790][  T983] usb 7-1: new high-speed USB device number 116 using dummy_hcd
[  525.695010][   T24] gspca_topro: Sensor soi763a
[  525.705068][  T983] usb 7-1: device descriptor read/8, error -71
[  525.712204][   T24] usb 9-1: USB disconnect, device number 48
[  525.759210][ T5961] safe_serial 1-1:127.15: safe_serial converter detected
[  525.767445][ T5955] usb 8-1: Using ep0 maxpacket: 16
[  525.775351][ T5961] safe_serial 1-1:127.15: probe with driver safe_serial failed with error -22
[  525.787499][ T5955] usb 8-1: no configurations
[  525.792162][ T5955] usb 8-1: can't read configurations, error -22
[  525.811193][ T5961] usb 1-1: USB disconnect, device number 53
[  525.821050][  T983] usb usb7-port1: unable to enumerate USB device
[  525.940516][ T5955] usb 8-1: new high-speed USB device number 103 using dummy_hcd
[  526.045992][T13668] syzkaller0: entered promiscuous mode
[  526.051710][T13668] syzkaller0: entered allmulticast mode
[  526.118917][ T5955] usb 8-1: Using ep0 maxpacket: 16
[  526.125095][ T5955] usb 8-1: no configurations
[  526.130608][ T5955] usb 8-1: can't read configurations, error -22
[  526.137237][ T5955] usb usb8-port1: attempt power cycle
[  526.311089][ T5961] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[  526.471507][ T5961] usb 9-1: Using ep0 maxpacket: 32
[  526.503631][ T5955] usb 8-1: new high-speed USB device number 104 using dummy_hcd
[  526.536799][ T5955] usb 8-1: Using ep0 maxpacket: 16
[  526.542507][ T5955] usb 8-1: no configurations
[  526.547617][ T5955] usb 8-1: can't read configurations, error -22
[  526.578677][ T5961] usb 9-1: unable to get BOS descriptor or descriptor too short
[  526.589377][   T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  526.590315][ T5961] usb 9-1: unable to read config index 0 descriptor/start: -71
[  526.604785][ T5961] usb 9-1: can't read configurations, error -71
[  526.687988][ T5955] usb 8-1: new high-speed USB device number 105 using dummy_hcd
[  526.736175][ T5955] usb 8-1: Using ep0 maxpacket: 16
[  526.743002][ T5955] usb 8-1: no configurations
[  526.747627][ T5955] usb 8-1: can't read configurations, error -22
[  526.752171][   T24] usb 1-1: Using ep0 maxpacket: 32
[  526.756442][ T5955] usb usb8-port1: unable to enumerate USB device
[  526.766218][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  526.777956][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  526.788109][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  526.801419][   T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  526.813935][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.833557][   T24] usb 1-1: config 0 descriptor??
[  527.311183][   T24] usbhid 1-1:0.0: can't add hid device: -71
[  527.318632][   T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  527.336475][   T24] usb 1-1: USB disconnect, device number 54
[  528.161319][ T5961] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  528.336753][ T5961] usb 1-1: Using ep0 maxpacket: 32
[  528.345946][ T5961] usb 1-1: config 1 interface 0 altsetting 77 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  528.357094][ T5961] usb 1-1: config 1 interface 0 altsetting 77 bulk endpoint 0x82 has invalid maxpacket 1023
[  528.367797][ T5961] usb 1-1: config 1 interface 0 has no altsetting 0
[  528.376064][ T5961] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  528.385121][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  528.393323][ T5961] usb 1-1: SerialNumber: syz
[  528.402837][T13684] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  528.628064][T13684] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  528.899402][   T24] usb 8-1: new high-speed USB device number 106 using dummy_hcd
[  528.974317][ T5912] usb 7-1: new high-speed USB device number 117 using dummy_hcd
[  529.062681][   T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  529.073037][   T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  529.083809][   T24] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  529.084811][ T5961] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42
[  529.095844][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  529.113486][   T24] usb 8-1: SerialNumber: syz
[  529.136578][ T5912] usb 7-1: Using ep0 maxpacket: 16
[  529.165685][ T5912] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  529.175064][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.184912][ T5912] usb 7-1: Product: syz
[  529.189178][ T5912] usb 7-1: Manufacturer: syz
[  529.193901][ T5912] usb 7-1: SerialNumber: syz
[  529.216130][ T5912] r8152-cfgselector 7-1: Unknown version 0x0000
[  529.231174][ T5912] r8152-cfgselector 7-1: config 0 descriptor??
[  529.390691][   T24] usb 8-1: 0:2 : does not exist
[  529.432067][   T24] usb 8-1: USB disconnect, device number 106
[  529.496444][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  529.525325][T13707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  529.552740][T13707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.594607][ T5961] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[  529.690233][T13690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  529.708445][T13690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.741290][ T5912] r8152-cfgselector 7-1: USB disconnect, device number 117
[  529.787381][ T5961] usb 9-1: Using ep0 maxpacket: 8
[  529.800327][ T5961] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13
[  529.827410][ T5961] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  529.839384][ T5961] usb 9-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  529.848967][ T5961] usb 9-1: Product: syz
[  529.853580][ T5961] usb 9-1: Manufacturer: syz
[  529.858237][ T5961] usb 9-1: SerialNumber: syz
[  529.864506][   T24] usb 8-1: new full-speed USB device number 107 using dummy_hcd
[  529.868747][ T5961] usb 9-1: config 0 descriptor??
[  529.885467][ T5961] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  530.029123][  T116] usb 1-1: USB disconnect, device number 55
[  530.048101][   T24] usb 8-1: config 5 has an invalid interface number: 54 but max is 0
[  530.058392][  T116] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[  530.070030][   T24] usb 8-1: config 5 has no interface number 0
[  530.083524][   T24] usb 8-1: config 5 interface 54 has no altsetting 0
[  530.097993][ T5961] gspca_zc3xx: reg_w_i err -71
[  530.105938][   T24] usb 8-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=96.c4
[  530.137439][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.155030][   T24] usb 8-1: Product: syz
[  530.163169][ T5912] usb 7-1: new high-speed USB device number 118 using dummy_hcd
[  530.185071][   T24] usb 8-1: Manufacturer: syz
[  530.199445][   T24] usb 8-1: SerialNumber: syz
[  530.322354][ T5912] usb 7-1: device descriptor read/64, error -71
[  530.440749][   T24] usb 8-1: bad CDC descriptors
[  530.459197][   T24] cdc_acm 8-1:5.54: Zero length descriptor references
[  530.467486][   T24] cdc_acm 8-1:5.54: probe with driver cdc_acm failed with error -22
[  530.483601][   T24] usb 8-1: USB disconnect, device number 107
[  530.589299][ T5912] usb 7-1: new high-speed USB device number 119 using dummy_hcd
[  530.728542][ T5961] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  530.735592][ T5961] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  530.749971][ T5912] usb 7-1: device descriptor read/64, error -71
[  530.759345][ T5961] usb 9-1: USB disconnect, device number 51
[  530.883052][ T5912] usb usb7-port1: attempt power cycle
[  530.910004][  T116] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  531.049714][T13762] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  531.075409][  T116] usb 1-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00
[  531.104108][ T5961] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[  531.108263][  T116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.122556][  T116] usb 1-1: Product: syz
[  531.134773][  T116] usb 1-1: Manufacturer: syz
[  531.139415][  T116] usb 1-1: SerialNumber: syz
[  531.167384][  T116] usb 1-1: config 0 descriptor??
[  531.211049][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2267'.
[  531.252400][ T5912] usb 7-1: new high-speed USB device number 120 using dummy_hcd
[  531.274324][ T5912] usb 7-1: device descriptor read/8, error -71
[  531.284590][ T5961] usb 9-1: Using ep0 maxpacket: 8
[  531.303632][ T5961] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13
[  531.316610][T13770] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2268'.
[  531.332361][ T5961] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  531.345365][ T5961] usb 9-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  531.354903][ T5961] usb 9-1: Product: syz
[  531.359575][ T5961] usb 9-1: Manufacturer: syz
[  531.364179][ T5961] usb 9-1: SerialNumber: syz
[  531.376760][ T5961] usb 9-1: config 0 descriptor??
[  531.389279][ T5961] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  531.396459][   T24] usb 1-1: USB disconnect, device number 56
[  531.530541][ T5912] usb 7-1: new high-speed USB device number 121 using dummy_hcd
[  531.552400][ T5912] usb 7-1: device descriptor read/8, error -71
[  531.691263][ T5912] usb usb7-port1: unable to enumerate USB device
[  531.840559][   T24] usb 8-1: new high-speed USB device number 108 using dummy_hcd
[  532.011595][   T24] usb 8-1: Using ep0 maxpacket: 32
[  532.053000][   T24] usb 8-1: unable to get BOS descriptor or descriptor too short
[  532.069209][   T24] usb 8-1: unable to read config index 0 descriptor/start: -71
[  532.077152][   T24] usb 8-1: can't read configurations, error -71
[  532.491895][ T5961] gspca_zc3xx: reg_w_i err -71
[  532.963484][   T24] usb 8-1: new high-speed USB device number 109 using dummy_hcd
[  533.123935][   T24] usb 8-1: Using ep0 maxpacket: 8
[  533.131145][   T24] usb 8-1: unable to get BOS descriptor or descriptor too short
[  533.141532][   T24] usb 8-1: config 1 interface 0 has no altsetting 0
[  533.155102][   T24] usb 8-1: New USB device found, idVendor=00ac, idProduct=024e, bcdDevice= 0.40
[  533.165217][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19
[  533.166716][ T5961] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  533.175400][   T24] usb 8-1: Product: syz
[  533.184211][   T24] usb 8-1: Manufacturer: syz
[  533.190720][ T5961] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  533.194700][   T24] usb 8-1: SerialNumber: syz
[  533.207916][ T5961] usb 9-1: USB disconnect, device number 52
[  533.380816][ T7212] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  533.442115][T13817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.451344][T13817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.467368][ T5943] usb 7-1: new high-speed USB device number 122 using dummy_hcd
[  533.468047][   T24] usbhid 8-1:1.0: can't add hid device: -71
[  533.481213][   T24] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  533.493268][   T24] usb 8-1: USB disconnect, device number 109
[  533.541569][ T5961] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[  533.553567][ T7212] usb 1-1: Using ep0 maxpacket: 16
[  533.560415][ T7212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  533.570751][ T7212] usb 1-1: config 0 has no interfaces?
[  533.576357][ T7212] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  533.585466][ T7212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.601017][ T7212] usb 1-1: config 0 descriptor??
[  533.626607][ T5943] usb 7-1: Using ep0 maxpacket: 16
[  533.633299][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  533.644943][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  533.654734][ T5943] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  533.667775][ T5943] usb 7-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00
[  533.678643][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.687247][ T5961] usb 9-1: device descriptor read/64, error -71
[  533.695638][ T5943] usb 7-1: config 0 descriptor??
[  533.958120][ T5961] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[  534.097370][ T5961] usb 9-1: device descriptor read/64, error -71
[  534.138469][ T5943] wacom 0003:056A:0027.0041: unknown main item tag 0x0
[  534.146446][ T5943] wacom 0003:056A:0027.0041: unknown main item tag 0x0
[  534.153702][ T5943] wacom 0003:056A:0027.0041: unknown main item tag 0x0
[  534.160676][ T5943] wacom 0003:056A:0027.0041: unknown main item tag 0x0
[  534.211181][T13827] netlink: 'syz.0.2282': attribute type 29 has an invalid length.
[  534.220850][T13827] netlink: 'syz.0.2282': attribute type 29 has an invalid length.
[  534.225920][ T5961] usb usb9-port1: attempt power cycle
[  534.300404][ T5955] usb 8-1: new high-speed USB device number 110 using dummy_hcd
[  534.350897][   T24] usb 7-1: USB disconnect, device number 122
[  534.482212][ T5955] usb 8-1: Using ep0 maxpacket: 32
[  534.504582][T13826] 9pnet_fd: p9_fd_create_tcp (13826): problem connecting socket to 127.0.0.1
[  534.518862][T13826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  534.527700][T13826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  534.540582][ T5955] usb 8-1: unable to get BOS descriptor or descriptor too short
[  534.550393][ T5955] usb 8-1: unable to read config index 0 descriptor/start: -71
[  534.558772][ T5955] usb 8-1: can't read configurations, error -71
[  534.599843][ T5961] usb 9-1: new high-speed USB device number 55 using dummy_hcd
[  534.623610][ T5961] usb 9-1: device descriptor read/8, error -71
[  534.880158][ T5961] usb 9-1: new high-speed USB device number 56 using dummy_hcd
[  534.911211][ T5961] usb 9-1: device descriptor read/8, error -71
[  535.028769][ T5961] usb usb9-port1: unable to enumerate USB device
[  535.423356][ T5943] usb 7-1: new high-speed USB device number 123 using dummy_hcd
[  535.444798][ T5955] usb 8-1: new high-speed USB device number 111 using dummy_hcd
[  535.583799][ T5943] usb 7-1: Using ep0 maxpacket: 32
[  535.605184][ T5955] usb 8-1: Using ep0 maxpacket: 32
[  535.612302][ T5955] usb 8-1: unable to get BOS descriptor or descriptor too short
[  535.621241][ T5955] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  535.631614][ T5955] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  535.640678][ T5955] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  535.655637][ T5955] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  535.664839][ T5955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.672952][ T5955] usb 8-1: Product: syz
[  535.677133][ T5955] usb 8-1: Manufacturer: syz
[  535.682477][ T5955] usb 8-1: SerialNumber: syz
[  535.944657][ T5943] usb 7-1: unable to get BOS descriptor or descriptor too short
[  535.954729][ T5943] usb 7-1: unable to read config index 0 descriptor/start: -71
[  535.962795][ T5943] usb 7-1: can't read configurations, error -71
[  535.989430][ T5955] usb 8-1: 0:2 : does not exist
[  536.008924][ T5955] usb 8-1: USB disconnect, device number 111
[  536.027648][ T6271] udevd[6271]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory
[  536.038897][ T6271] udevd[6271]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory
[  536.193518][ T7212] usb 9-1: new high-speed USB device number 57 using dummy_hcd
[  536.324558][ T5961] usb 1-1: USB disconnect, device number 57
[  536.333493][ T7212] usb 9-1: device descriptor read/64, error -71
[  536.610662][ T7212] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[  536.685612][ T5961] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  536.749590][ T7212] usb 9-1: device descriptor read/64, error -71
[  536.856671][ T5961] usb 1-1: Using ep0 maxpacket: 16
[  536.864006][ T5961] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  536.867547][ T7212] usb usb9-port1: attempt power cycle
[  536.873107][ T5961] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  536.889474][ T5943] usb 7-1: new high-speed USB device number 124 using dummy_hcd
[  536.897311][ T5961] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  536.911242][ T5961] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  536.920314][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.928753][ T5961] usb 1-1: Product: syz
[  536.933565][ T5961] usb 1-1: Manufacturer: syz
[  536.938260][ T5961] usb 1-1: SerialNumber: syz
[  536.941487][T13855] netlink: 684 bytes leftover after parsing attributes in process `syz.7.2294'.
[  537.065455][ T5943] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  537.074681][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.085313][ T5943] usb 7-1: Product: syz
[  537.089534][ T5943] usb 7-1: Manufacturer: syz
[  537.094674][ T5943] usb 7-1: SerialNumber: syz
[  537.121158][ T5943] r8152-cfgselector 7-1: Unknown version 0x0000
[  537.121183][ T5943] r8152-cfgselector 7-1: config 0 descriptor??
[  537.165583][ T5961] usb 1-1: 0:2 : does not exist
[  537.199940][ T5961] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1)
[  537.239681][ T5961] usb 1-1: USB disconnect, device number 58
[  537.252308][ T7212] usb 9-1: new high-speed USB device number 59 using dummy_hcd
[  537.285398][ T7212] usb 9-1: device descriptor read/8, error -71
[  537.292070][ T6271] udevd[6271]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  537.410953][T13865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.431693][T13865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.442759][T13867] program syz.7.2297 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  537.543098][ T7212] usb 9-1: new high-speed USB device number 60 using dummy_hcd
[  537.564910][ T7212] usb 9-1: device descriptor read/8, error -71
[  537.658927][ T5961] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  537.680779][ T7212] usb usb9-port1: unable to enumerate USB device
[  537.692375][ T7212] r8152-cfgselector 7-1: USB disconnect, device number 124
[  537.819148][ T5961] usb 1-1: Using ep0 maxpacket: 8
[  537.826784][ T5961] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[  537.835440][ T5961] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[  537.844012][ T5961] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[  537.853241][ T5961] usb 1-1: config 250 has no interface number 0
[  537.859546][ T5961] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  537.871919][ T5961] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  537.882536][ T5961] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  537.893135][ T5961] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  537.903478][ T5961] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  537.917260][ T5961] usb 1-1: config 250 interface 228 has no altsetting 0
[  537.926058][ T5961] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  537.928663][ T5912] usb 8-1: new high-speed USB device number 112 using dummy_hcd
[  537.935553][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  537.935577][ T5961] usb 1-1: Product: syz
[  537.935590][ T5961] usb 1-1: SerialNumber: syz
[  537.964281][ T5961] hub 1-1:250.228: bad descriptor, ignoring hub
[  537.970673][ T5961] hub 1-1:250.228: probe with driver hub failed with error -5
[  538.118589][ T5912] usb 8-1: Using ep0 maxpacket: 32
[  538.156481][T13882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.168157][T13882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.241350][ T5912] usb 8-1: unable to get BOS descriptor or descriptor too short
[  538.253444][ T5912] usb 8-1: unable to read config index 0 descriptor/start: -71
[  538.266178][ T5912] usb 8-1: can't read configurations, error -71
[  538.267419][ T5961] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 59 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  538.482913][ T7212] usb 1-1: USB disconnect, device number 59
[  538.491139][ T7212] usblp0: removed
[  538.664049][ T5961] usb 7-1: new high-speed USB device number 125 using dummy_hcd
[  538.836893][ T5961] usb 7-1: Using ep0 maxpacket: 32
[  538.844084][ T5961] usb 7-1: unable to get BOS descriptor or descriptor too short
[  538.854212][ T5961] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  538.866455][ T5961] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  538.878174][ T5961] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  538.897108][ T5961] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  538.908310][ T5961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.919848][ T5961] usb 7-1: Product: syz
[  538.924145][ T5961] usb 7-1: Manufacturer: syz
[  538.928750][ T5961] usb 7-1: SerialNumber: syz
[  539.475566][ T5961] usb 7-1: 0:2 : does not exist
[  539.519786][ T5943] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  539.536111][ T5961] usb 7-1: USB disconnect, device number 125
[  539.680068][ T5943] usb 1-1: device descriptor read/64, error -71
[  539.744207][ T5912] usb 9-1: new full-speed USB device number 61 using dummy_hcd
[  539.849960][T13913] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  539.865737][T13913] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  539.947456][ T5943] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  539.976217][ T5912] usb 9-1: unable to get BOS descriptor or descriptor too short
[  539.985534][ T5912] usb 9-1: not running at top speed; connect to a high speed hub
[  539.995446][ T5912] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  540.010278][ T5912] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  540.020846][ T5912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.029247][ T5912] usb 9-1: Product: syz
[  540.057231][ T5912] usb 9-1: Manufacturer: syz
[  540.062559][ T5912] usb 9-1: SerialNumber: syz
[  540.098134][ T5943] usb 1-1: device descriptor read/64, error -71
[  540.115919][T13919] netlink: 'syz.7.2311': attribute type 39 has an invalid length.
[  540.225968][ T5943] usb usb1-port1: attempt power cycle
[  540.324423][ T5912] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  540.344820][ T5912] usb 9-1: unit 51 not found!
[  540.358883][ T5912] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5)
[  540.379577][ T5912] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5)
[  540.418001][ T5961] usb 7-1: new high-speed USB device number 126 using dummy_hcd
[  540.433158][ T5912] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5)
[  540.465260][ T5912] usb 9-1: USB disconnect, device number 61
[  540.581268][ T5961] usb 7-1: Using ep0 maxpacket: 32
[  540.587591][T13930] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  540.614306][T13930] qnx6: wrong signature (magic) in superblock #1.
[  540.620768][T13930] qnx6: unable to read the first superblock
[  540.620981][ T5943] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  540.675157][ T5943] usb 1-1: device descriptor read/8, error -71
[  540.692574][ T5961] usb 7-1: unable to get BOS descriptor or descriptor too short
[  540.705734][ T5961] usb 7-1: unable to read config index 0 descriptor/start: -71
[  540.728982][ T5961] usb 7-1: can't read configurations, error -71
[  540.819420][T13937] netlink: 'syz.7.2316': attribute type 2 has an invalid length.
[  540.828426][T13937] netlink: 'syz.7.2316': attribute type 2 has an invalid length.
[  540.931453][ T5943] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  540.988083][ T5943] usb 1-1: device descriptor read/8, error -71
[  541.098438][   T30] audit: type=1800 audit(1758581202.860:28): pid=13944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2318" name="bus" dev="tmpfs" ino=1168 res=0 errno=0
[  541.142465][ T5943] usb usb1-port1: unable to enumerate USB device
[  541.373949][ T1091] Bluetooth: hci3: Frame reassembly failed (-84)
[  541.652128][ T5961] usb 7-1: new high-speed USB device number 127 using dummy_hcd
[  541.819132][ T5961] usb 7-1: Using ep0 maxpacket: 32
[  541.827119][ T5961] usb 7-1: unable to get BOS descriptor or descriptor too short
[  541.836244][ T5961] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  541.846678][ T5961] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  541.855733][ T5961] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  541.881249][ T5961] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  541.891107][ T5961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.909674][ T5961] usb 7-1: Product: syz
[  541.914470][ T5961] usb 7-1: Manufacturer: syz
[  541.919230][ T5961] usb 7-1: SerialNumber: syz
[  542.172154][  T116] usb 9-1: new high-speed USB device number 62 using dummy_hcd
[  542.224743][ T5961] usb 7-1: 0:2 : does not exist
[  542.257024][ T5961] usb 7-1: USB disconnect, device number 127
[  542.353899][  T116] usb 9-1: Using ep0 maxpacket: 32
[  542.362099][  T116] usb 9-1: config 0 has an invalid interface number: 89 but max is 0
[  542.370497][  T116] usb 9-1: config 0 has no interface number 0
[  542.376638][  T116] usb 9-1: config 0 interface 89 has no altsetting 0
[  542.385362][  T116] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  542.394689][  T116] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.402906][  T116] usb 9-1: Product: syz
[  542.407079][  T116] usb 9-1: Manufacturer: syz
[  542.411826][  T116] usb 9-1: SerialNumber: syz
[  542.418447][  T116] usb 9-1: config 0 descriptor??
[  542.427298][  T116] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  542.437702][  T116] em28xx 9-1:0.89: Video interface 89 found: bulk
[  542.674984][ T5912] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  542.835516][ T5912] usb 1-1: Using ep0 maxpacket: 16
[  542.843181][ T5912] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  542.856572][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.868214][ T5912] usb 1-1: config 0 descriptor??
[  543.080316][  T116] em28xx 9-1:0.89: unknown em28xx chip ID (0)
[  543.102485][  T983] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  543.241546][  T983] usb 7-1: device descriptor read/64, error -71
[  543.309972][ T5912] koneplus 0003:1E7D:2E22.0042: unknown main item tag 0x0
[  543.317326][ T5912] koneplus 0003:1E7D:2E22.0042: unknown main item tag 0x0
[  543.324458][ T5912] koneplus 0003:1E7D:2E22.0042: unknown main item tag 0x0
[  543.332132][ T5912] koneplus 0003:1E7D:2E22.0042: unknown main item tag 0x0
[  543.339354][ T5912] koneplus 0003:1E7D:2E22.0042: unknown main item tag 0x0
[  543.350202][ T5912] koneplus 0003:1E7D:2E22.0042: hidraw0: USB HID v20.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0
[  543.498446][  T983] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  543.517677][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2321'.
[  543.537134][ T5867] Bluetooth: hci3: command 0x1003 tx timeout
[  543.539000][ T5861] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  543.579004][ T5912] usb 1-1: USB disconnect, device number 64
[  543.623236][T13968] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  543.635357][T13969] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  543.642281][  T983] usb 7-1: device descriptor read/64, error -71
[  543.766166][  T983] usb usb7-port1: attempt power cycle
[  544.019025][T13956] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2321'.
[  544.129242][  T983] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  544.153340][  T983] usb 7-1: device descriptor read/8, error -71
[  544.313268][  T116] em28xx 9-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[  544.323815][  T116] em28xx 9-1:0.89: board has no eeprom
[  544.386029][  T116] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67)
[  544.393326][  T116] em28xx 9-1:0.89: analog set to bulk mode.
[  544.399345][ T5912] em28xx 9-1:0.89: Registering V4L2 extension
[  544.407837][  T983] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  544.416991][  T116] usb 9-1: USB disconnect, device number 62
[  544.431759][  T116] em28xx 9-1:0.89: Disconnecting em28xx
[  544.451749][  T983] usb 7-1: device descriptor read/8, error -71
[  544.464863][ T5912] em28xx 9-1:0.89: Config register raw data: 0xffffffed
[  544.475267][ T5912] em28xx 9-1:0.89: AC97 chip type couldn't be determined
[  544.482450][ T5912] em28xx 9-1:0.89: No AC97 audio processor
[  544.490873][ T5912] usb 9-1: Decoder not found
[  544.496787][ T5912] em28xx 9-1:0.89: failed to create media graph
[  544.505229][ T5912] em28xx 9-1:0.89: V4L2 device video103 deregistered
[  544.521257][ T5912] em28xx 9-1:0.89: Registering snapshot button...
[  544.534853][ T5912] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input66
[  544.535633][ T5961] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  544.554265][ T5912] em28xx 9-1:0.89: Remote control support is not available for this card.
[  544.564283][  T116] em28xx 9-1:0.89: Closing input extension
[  544.574440][  T116] em28xx 9-1:0.89: Deregistering snapshot button
[  544.580038][  T983] usb usb7-port1: unable to enumerate USB device
[  544.599532][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2327'.
[  544.608220][  T116] em28xx 9-1:0.89: Freeing device
[  544.760963][ T5961] usb 1-1: Using ep0 maxpacket: 8
[  544.770426][ T5961] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  544.779690][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.788067][ T5961] usb 1-1: Product: syz
[  544.792299][ T5961] usb 1-1: Manufacturer: syz
[  544.796894][ T5961] usb 1-1: SerialNumber: syz
[  544.804301][ T5961] usb 1-1: config 0 descriptor??
[  544.933093][ T5912] usb 8-1: new high-speed USB device number 114 using dummy_hcd
[  544.944418][T13981] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0)
[  545.031352][ T5943] usb 1-1: USB disconnect, device number 65
[  545.113197][ T5912] usb 8-1: Using ep0 maxpacket: 32
[  545.412723][ T5961] usb 9-1: new high-speed USB device number 63 using dummy_hcd
[  545.573079][ T5961] usb 9-1: Using ep0 maxpacket: 16
[  545.587496][ T5961] usb 9-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa
[  545.605139][ T5961] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.613192][ T5961] usb 9-1: Product: syz
[  545.626585][ T5961] usb 9-1: Manufacturer: syz
[  545.631212][ T5961] usb 9-1: SerialNumber: syz
[  545.653393][ T5961] usb 9-1: config 0 descriptor??
[  545.890521][T13986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  545.899141][ T7212] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  545.908903][T13986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  545.965269][T13986] syzkaller1: entered promiscuous mode
[  545.971327][T13986] syzkaller1: entered allmulticast mode
[  546.088620][ T7212] usb 1-1: Using ep0 maxpacket: 32
[  546.101955][ T7212] usb 1-1: unable to get BOS descriptor or descriptor too short
[  546.121829][ T7212] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  546.143109][ T7212] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  546.156366][ T7212] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  546.173834][ T7212] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  546.206221][ T7212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.214286][ T7212] usb 1-1: Product: syz
[  546.236768][ T7212] usb 1-1: Manufacturer: syz
[  546.247160][ T7212] usb 1-1: SerialNumber: syz
[  546.379465][ T5961] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  546.397776][ T5961] dvb_usb_af9015 9-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  546.414877][ T5961] usb 9-1: USB disconnect, device number 63
[  546.514401][   T44] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  546.641809][ T7212] usb 1-1: 0:2 : does not exist
[  546.677983][ T7212] usb 1-1: USB disconnect, device number 66
[  546.720132][   T44] usb 7-1: Using ep0 maxpacket: 32
[  546.902361][   T44] usb 7-1: unable to get BOS descriptor or descriptor too short
[  546.912941][   T44] usb 7-1: unable to read config index 0 descriptor/start: -71
[  546.921293][   T44] usb 7-1: can't read configurations, error -71
[  547.509340][ T5926] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  547.573063][   T24] usb 9-1: new high-speed USB device number 64 using dummy_hcd
[  547.680315][ T5926] usb 1-1: Using ep0 maxpacket: 32
[  547.744161][   T24] usb 9-1: Using ep0 maxpacket: 8
[  547.761363][   T24] usb 9-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab
[  547.762082][T14001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  547.793631][   T24] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  547.808978][T14001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  547.813208][   T24] usb 9-1: Product: syz
[  547.831512][   T24] usb 9-1: Manufacturer: syz
[  547.849878][   T24] usb 9-1: SerialNumber: syz
[  547.868797][   T24] usb 9-1: config 0 descriptor??
[  548.008658][ T5912] usb 8-1: unable to get BOS descriptor or descriptor too short
[  548.042713][ T5926] usb 1-1: unable to get BOS descriptor or descriptor too short
[  548.049698][ T5912] usb 8-1: unable to read config index 0 descriptor/start: -71
[  548.066465][ T5912] usb 8-1: can't read configurations, error -71
[  548.067439][ T5926] usb 1-1: unable to read config index 0 descriptor/start: -71
[  548.085087][ T5926] usb 1-1: can't read configurations, error -71
[  548.107294][T14002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.116521][T14002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.261222][  T983] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  548.288546][   T24] usb 9-1: USB disconnect, device number 64
[  548.307378][ T6271] udevd[6271]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  548.430309][  T983] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  548.438646][  T983] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  548.447701][  T983] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  548.458084][  T983] usb 7-1: config 220 has no interface number 2
[  548.464742][  T983] usb 7-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64
[  548.474771][  T983] usb 7-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  548.487987][  T983] usb 7-1: config 220 interface 0 has no altsetting 0
[  548.495784][  T983] usb 7-1: config 220 interface 76 has no altsetting 0
[  548.502701][  T983] usb 7-1: config 220 interface 1 has no altsetting 0
[  548.512923][  T983] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  548.522094][  T983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.530169][  T983] usb 7-1: Product: syz
[  548.534328][  T983] usb 7-1: Manufacturer: syz
[  548.539030][  T983] usb 7-1: SerialNumber: syz
[  548.739031][ T5912] usb 8-1: new full-speed USB device number 115 using dummy_hcd
[  548.772293][  T983] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  548.779631][  T983] uvcvideo 7-1:220.0: No valid video chain found.
[  548.786229][  T983] usb 7-1: selecting invalid altsetting 0
[  548.807037][  T983] usb 7-1: selecting invalid altsetting 0
[  548.812780][  T983] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  548.825823][  T983] usb 7-1: USB disconnect, device number 8
[  548.903898][ T5912] usb 8-1: unable to get BOS descriptor or descriptor too short
[  548.912270][ T5912] usb 8-1: not running at top speed; connect to a high speed hub
[  548.922368][ T5912] usb 8-1: config 7 has an invalid interface number: 2 but max is 0
[  548.931204][ T5912] usb 8-1: config 7 has no interface number 0
[  548.938000][ T5912] usb 8-1: config 7 interface 2 has no altsetting 0
[  548.948312][ T5912] usb 8-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=15.2a
[  548.958195][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.967384][ T5912] usb 8-1: Product: syz
[  548.971543][ T5912] usb 8-1: Manufacturer: syz
[  548.976637][ T5912] usb 8-1: SerialNumber: syz
[  548.984937][ T5926] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  549.145263][ T5961] usb 9-1: new high-speed USB device number 65 using dummy_hcd
[  549.155954][ T5926] usb 1-1: Using ep0 maxpacket: 32
[  549.163325][ T5926] usb 1-1: unable to get BOS descriptor or descriptor too short
[  549.172997][ T5926] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  549.183327][ T5926] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  549.192380][ T5926] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  549.208037][ T5926] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  549.219526][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.230768][ T5926] usb 1-1: Product: syz
[  549.233919][ T5912] gspca_main: sunplus-2.14.0 probing 052b:1803
[  549.235630][ T5926] usb 1-1: Manufacturer: syz
[  549.246101][ T5926] usb 1-1: SerialNumber: syz
[  549.246671][ T5912] gspca_sunplus: reg_r err -71
[  549.259638][ T5912] sunplus 8-1:7.2: probe with driver sunplus failed with error -71
[  549.271154][ T5912] usb 8-1: USB disconnect, device number 115
[  549.305795][ T5961] usb 9-1: Using ep0 maxpacket: 16
[  549.314103][ T5961] usb 9-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  549.323505][ T5961] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.332128][ T5961] usb 9-1: Product: syz
[  549.336419][ T5961] usb 9-1: Manufacturer: syz
[  549.343407][ T5961] usb 9-1: SerialNumber: syz
[  549.352642][ T5961] usb 9-1: config 0 descriptor??
[  549.403392][T14028] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2344'.
[  549.552139][ T5926] usb 1-1: 0:2 : does not exist
[  549.575058][ T5926] usb 1-1: USB disconnect, device number 68
[  549.591328][T14026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  549.611867][T14026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  549.636833][ T5961] usb_8dev 9-1:0.0 can0: sending command message failed
[  549.655915][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  549.669274][ T5961] usb_8dev 9-1:0.0 can0: can't get firmware version
[  549.680515][  T116] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  549.745644][ T5961] usb_8dev 9-1:0.0: probe with driver usb_8dev failed with error -22
[  549.757789][ T5961] usb 9-1: USB disconnect, device number 65
[  549.828541][T14035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  549.843504][T14035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.075752][ T5926] usb 8-1: new high-speed USB device number 116 using dummy_hcd
[  550.238902][ T5926] usb 8-1: Using ep0 maxpacket: 8
[  550.247267][ T5926] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  550.257614][ T5926] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  550.266695][ T5926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.277396][ T5926] usb 8-1: config 0 descriptor??
[  550.286841][ T5926] gspca_main: vc032x-2.14.0 probing 046d:0892
[  550.428784][   T24] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  550.499826][ T5926] gspca_vc032x: reg_r err -71
[  550.506742][ T5926] vc032x 8-1:0.0: probe with driver vc032x failed with error -71
[  550.517549][ T5926] usb 8-1: USB disconnect, device number 116
[  550.590779][   T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  550.600021][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.609942][   T24] usb 1-1: config 0 descriptor??
[  550.674809][  T116] usb 7-1: device descriptor read/64, error -71
[  550.836335][T14040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.846725][T14040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.940692][  T116] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  551.061403][   T24] ath6kl: Failed to read usb control message: -71
[  551.075604][   T24] ath6kl: Unable to read the bmi data from the device: -71
[  551.083851][   T24] ath6kl: unable to read target info byte count: -71
[  551.106131][   T24] ath6kl: Failed to init ath6kl core: -71
[  551.117551][   T24] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  551.129136][T14062] input: syz0 as /devices/virtual/input/input67
[  551.130764][  T116] usb 7-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  551.159469][   T24] usb 1-1: USB disconnect, device number 69
[  551.167528][  T116] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.180517][  T116] usb 7-1: Product: syz
[  551.185144][  T116] usb 7-1: Manufacturer: syz
[  551.207863][  T116] usb 7-1: SerialNumber: syz
[  551.222987][  T116] usb 7-1: config 0 descriptor??
[  551.236663][  T116] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  551.541101][ T5961] usb 9-1: new high-speed USB device number 66 using dummy_hcd
[  551.683188][T14075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2357'.
[  551.702197][ T5961] usb 9-1: Using ep0 maxpacket: 32
[  551.710485][ T5961] usb 9-1: unable to get BOS descriptor or descriptor too short
[  551.720058][ T5961] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  551.730659][ T5961] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  551.740630][ T5961] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  551.758311][ T5961] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  551.791859][ T5961] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.800825][ T5961] usb 9-1: Product: syz
[  551.805370][ T5961] usb 9-1: Manufacturer: syz
[  551.811698][ T5961] usb 9-1: SerialNumber: syz
[  552.043878][ T7212] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  552.055725][  T116] sonixb 7-1:0.0: Error writing register 01: -110
[  552.062291][  T116] sonixb 7-1:0.0: probe with driver sonixb failed with error -110
[  552.202626][ T5961] usb 9-1: 0:2 : does not exist
[  552.219627][ T5961] usb 9-1: USB disconnect, device number 66
[  552.268703][ T7212] usb 1-1: Using ep0 maxpacket: 32
[  552.296605][ T7212] usb 1-1: unable to get BOS descriptor or descriptor too short
[  552.319786][ T7212] usb 1-1: unable to read config index 0 descriptor/start: -71
[  552.329495][ T7212] usb 1-1: can't read configurations, error -71
[  552.664115][ T5926] usb 8-1: new high-speed USB device number 117 using dummy_hcd
[  552.828614][ T5926] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  552.838114][ T5926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.847530][ T5926] usb 8-1: Product: syz
[  552.851740][ T5926] usb 8-1: Manufacturer: syz
[  552.856344][ T5926] usb 8-1: SerialNumber: syz
[  552.868239][ T5926] r8152-cfgselector 8-1: Unknown version 0x0000
[  552.877341][ T5926] r8152-cfgselector 8-1: config 0 descriptor??
[  553.027899][ T5955] usb 9-1: new low-speed USB device number 67 using dummy_hcd
[  553.104150][ T5926] r8152-cfgselector 8-1: Needed 1 retries to read version
[  553.111497][ T5926] r8152-cfgselector 8-1: Unknown version 0x0000
[  553.118412][ T5926] r8152-cfgselector 8-1: bad CDC descriptors
[  553.188093][ T5955] usb 9-1: Invalid ep0 maxpacket: 64
[  553.220170][ T7212] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[  553.320839][ T5926] r8152-cfgselector 8-1: USB disconnect, device number 117
[  553.329563][ T5955] usb 9-1: new low-speed USB device number 68 using dummy_hcd
[  553.394369][ T7212] usb 1-1: unable to get BOS descriptor or descriptor too short
[  553.402618][ T7212] usb 1-1: not running at top speed; connect to a high speed hub
[  553.411531][ T7212] usb 1-1: config 7 has an invalid interface number: 2 but max is 0
[  553.419807][ T7212] usb 1-1: config 7 has no interface number 0
[  553.426257][ T7212] usb 1-1: config 7 interface 2 has no altsetting 0
[  553.435225][ T7212] usb 1-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=15.2a
[  553.444310][ T7212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.452512][ T7212] usb 1-1: Product: syz
[  553.456767][ T7212] usb 1-1: Manufacturer: syz
[  553.461376][ T7212] usb 1-1: SerialNumber: syz
[  553.499308][ T5955] usb 9-1: Invalid ep0 maxpacket: 64
[  553.505793][ T5955] usb usb9-port1: attempt power cycle
[  553.590018][  T116] usb 7-1: USB disconnect, device number 10
[  553.695256][ T7212] gspca_main: sunplus-2.14.0 probing 052b:1803
[  553.710420][ T7212] gspca_sunplus: reg_r err -71
[  553.715829][ T7212] sunplus 1-1:7.2: probe with driver sunplus failed with error -71
[  553.731808][ T7212] usb 1-1: USB disconnect, device number 71
[  553.872758][ T5955] usb 9-1: new low-speed USB device number 69 using dummy_hcd
[  553.906024][ T5955] usb 9-1: Invalid ep0 maxpacket: 64
[  554.045186][ T5955] usb 9-1: new low-speed USB device number 70 using dummy_hcd
[  554.052831][ T5961] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  554.087159][ T5955] usb 9-1: Invalid ep0 maxpacket: 64
[  554.092737][ T5955] usb usb9-port1: unable to enumerate USB device
[  554.214920][ T5961] usb 7-1: Using ep0 maxpacket: 8
[  554.223418][ T5961] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab
[  554.232785][ T5961] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  554.241145][ T5961] usb 7-1: Product: syz
[  554.245349][ T5961] usb 7-1: Manufacturer: syz
[  554.250313][ T5961] usb 7-1: SerialNumber: syz
[  554.257885][ T5961] usb 7-1: config 0 descriptor??
[  554.418031][ T5955] usb 8-1: new high-speed USB device number 118 using dummy_hcd
[  554.480813][T14112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.490292][T14112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.549029][ T7212] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  554.579752][ T5955] usb 8-1: Using ep0 maxpacket: 32
[  554.604359][ T5955] usb 8-1: unable to get BOS descriptor or descriptor too short
[  554.613926][ T5955] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  554.629438][ T5955] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  554.645528][ T5955] usb 8-1: config 1 has no interface number 1
[  554.651654][ T5955] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  554.667846][ T5955] usb 8-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  554.684589][ T5961] usb 7-1: USB disconnect, device number 11
[  554.701577][ T5955] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  554.711695][ T5955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.721561][ T5955] usb 8-1: Product: syz
[  554.730178][ T7212] usb 1-1: Using ep0 maxpacket: 32
[  554.741531][ T7212] usb 1-1: config 0 has an invalid interface number: 111 but max is 1
[  554.760298][ T7212] usb 1-1: config 0 has no interface number 1
[  554.772098][ T7212] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  554.781488][ T7212] usb 1-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3
[  554.786256][ T5955] usb 8-1: Manufacturer: syz
[  554.794526][ T7212] usb 1-1: Product: syz
[  554.794548][ T7212] usb 1-1: Manufacturer: syz
[  554.794570][ T7212] usb 1-1: SerialNumber: syz
[  554.797252][ T7212] usb 1-1: config 0 descriptor??
[  554.799280][ T5955] usb 8-1: SerialNumber: syz
[  555.212750][ T7212] snd-usb-6fire 1-1:0.111: unable to receive device firmware state.
[  555.221003][ T7212] snd-usb-6fire 1-1:0.111: probe with driver snd-usb-6fire failed with error -71
[  555.235518][ T7212] usb 1-1: USB disconnect, device number 72
[  555.313088][ T5955] usb 8-1: USB disconnect, device number 118
[  555.602796][T14141] rtc_cmos 00:00: Alarms can be up to one day in the future
[  555.834744][T14143] input: syz0 as /devices/virtual/input/input68
[  556.299193][T14134] rtc_cmos 00:00: Alarms can be up to one day in the future
[  556.373418][T14157] binder: 14156:14157 ioctl c0306201 2000000003c0 returned -22
[  556.394326][   T30] audit: type=1804 audit(1758581217.156:29): pid=14157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2380" name="/newroot/239/cgroup.controllers" dev="tmpfs" ino=1274 res=1 errno=0
[  556.416771][    C1] vkms_vblank_simulate: vblank timer overrun
[  556.423376][ T5912] usb 9-1: new high-speed USB device number 71 using dummy_hcd
[  556.431909][   T30] audit: type=1800 audit(1758581217.184:30): pid=14157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2380" name="cgroup.controllers" dev="tmpfs" ino=1274 res=0 errno=0
[  556.454583][   T24] rtc_cmos 00:00: Alarms can be up to one day in the future
[  556.463418][   T24] rtc_cmos 00:00: Alarms can be up to one day in the future
[  556.470969][   T24] rtc_cmos 00:00: Alarms can be up to one day in the future
[  556.480018][   T24] rtc_cmos 00:00: Alarms can be up to one day in the future
[  556.487736][   T24] rtc rtc0: __rtc_set_alarm: err=-22
[  556.631916][ T5912] usb 9-1: Using ep0 maxpacket: 32
[  556.661224][T14153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.672393][T14153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.749106][ T5912] usb 9-1: unable to get BOS descriptor or descriptor too short
[  556.757748][ T5912] usb 9-1: unable to read config index 0 descriptor/start: -71
[  556.765426][ T5912] usb 9-1: can't read configurations, error -71
[  556.771418][ T5955] usb 8-1: new high-speed USB device number 119 using dummy_hcd
[  556.933887][ T5955] usb 8-1: config 114 has too many interfaces: 44, using maximum allowed: 32
[  556.942962][ T5955] usb 8-1: config 114 has an invalid descriptor of length 0, skipping remainder of the config
[  556.953521][ T5955] usb 8-1: config 114 has 0 interfaces, different from the descriptor's value: 44
[  556.965484][ T5955] usb 8-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[  556.976280][ T5955] usb 8-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0
[  556.984427][ T5955] usb 8-1: Manufacturer: syz
[  556.989192][ T5961] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  557.155962][ T5961] usb 1-1: Using ep0 maxpacket: 32
[  557.163400][ T5961] usb 1-1: unable to get BOS descriptor or descriptor too short
[  557.172989][ T5961] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  557.183300][ T5961] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  557.192558][ T5961] usb 1-1: config 1 has no interface number 1
[  557.199104][ T5961] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  557.216737][ T5961] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  557.232509][ T5961] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  557.241820][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.249835][ T5961] usb 1-1: Product: syz
[  557.254814][ T5961] usb 1-1: Manufacturer: syz
[  557.259423][ T5961] usb 1-1: SerialNumber: syz
[  557.452469][T14161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.463365][T14161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.480611][T14161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.491467][T14161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.520864][   T24] usb 8-1: USB disconnect, device number 119
[  557.592531][ T5961] usb 1-1: USB disconnect, device number 73
[  557.620976][ T6271] udevd[6271]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  557.904854][ T5912] usb 9-1: new full-speed USB device number 72 using dummy_hcd
[  558.001801][   T24] usb 8-1: new high-speed USB device number 120 using dummy_hcd
[  558.065272][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout
[  558.072298][  T116] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  558.079773][  T116] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  558.088892][ T5912] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  558.101723][ T5912] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  558.131416][ T5912] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  558.142747][ T5912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.152905][ T5912] usb 9-1: Product: syz
[  558.157095][ T5912] usb 9-1: Manufacturer: syz
[  558.163182][ T5912] usb 9-1: SerialNumber: syz
[  558.172487][   T24] usb 8-1: Using ep0 maxpacket: 32
[  558.270981][T14185] can: request_module (can-proto-4) failed.
[  558.367801][   T24] usb 8-1: unable to get BOS descriptor or descriptor too short
[  558.378456][   T24] usb 8-1: unable to read config index 0 descriptor/start: -71
[  558.386138][   T24] usb 8-1: can't read configurations, error -71
[  558.421234][T14177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.430074][T14177] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.439721][ T5961] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  558.579058][ T5961] usb 1-1: device descriptor read/64, error -71
[  558.655959][ T5912] usb 9-1: 0:2 : does not exist
[  558.845880][ T5961] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  558.995779][ T5961] usb 1-1: device descriptor read/64, error -71
[  559.092503][ T5912] usb 9-1: USB disconnect, device number 72
[  559.118946][ T5961] usb usb1-port1: attempt power cycle
[  559.487521][ T5961] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  559.509665][ T5961] usb 1-1: device descriptor read/8, error -71
[  559.530281][   T24] usb 8-1: new high-speed USB device number 121 using dummy_hcd
[  559.701542][   T24] usb 8-1: Using ep0 maxpacket: 32
[  559.729580][T14198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  559.740359][T14198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  559.765649][ T5961] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  559.790395][ T5961] usb 1-1: device descriptor read/8, error -71
[  559.812370][   T24] usb 8-1: unable to get BOS descriptor or descriptor too short
[  559.821880][   T24] usb 8-1: unable to read config index 0 descriptor/start: -71
[  559.829462][   T24] usb 8-1: can't read configurations, error -71
[  559.836284][   T24] usb usb8-port1: attempt power cycle
[  559.905018][ T5961] usb usb1-port1: unable to enumerate USB device
[  560.000901][ T5955] usb 9-1: new high-speed USB device number 73 using dummy_hcd
[  560.163933][ T5955] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  560.175342][ T5955] usb 9-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  560.184504][ T5955] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.195425][ T5955] usb 9-1: config 0 descriptor??
[  560.375405][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout
[  560.381568][  T116] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  560.388077][  T116] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  560.407720][T14205] comedi comedi0: Minor 33554435 is invalid!
[  560.419579][ T5926] hid-generic 0004:0200:FFFFFFF7.0043: reserved main item tag 0xd
[  560.427447][ T5926] hid-generic 0004:0200:FFFFFFF7.0043: item fetching failed at offset 1/2
[  560.455552][ T5926] hid-generic 0004:0200:FFFFFFF7.0043: probe with driver hid-generic failed with error -22
[  560.882582][ T5955] usbhid 9-1:0.0: can't add hid device: -71
[  560.890964][ T5955] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  560.909384][ T5955] usb 9-1: USB disconnect, device number 73
[  562.685727][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout
[  562.692018][  T116] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  562.698333][  T116] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  582.797403][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  648.508152][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  714.221261][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  721.744308][   T31] INFO: task kworker/1:2:116 blocked for more than 143 seconds.
[  721.752438][   T31]       Not tainted syzkaller #0
[  721.758291][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  721.767039][   T31] task:kworker/1:2     state:D stack:21576 pid:116   tgid:116   ppid:2      task_flags:0x4208060 flags:0x00080000
[  721.779385][   T31] Workqueue: events rfkill_op_handler
[  721.784871][   T31] Call Trace:
[  721.788275][   T31]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  721.791220][   T31]  __schedule+0x1798/0x4cc0
[  721.795727][   T31]  ? __pfx___schedule+0x10/0x10
[  721.801394][   T31]  ? schedule+0x91/0x360
[  721.805949][   T31]  schedule+0x165/0x360
[  721.810243][   T31]  schedule_preempt_disabled+0x13/0x30
[  721.815732][   T31]  __mutex_lock+0x7e6/0x1350
[  721.820449][   T31]  ? __mutex_lock+0x5bb/0x1350
[  721.825234][   T31]  ? nfc_rfkill_set_block+0x50/0x2e0
[  721.830750][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  721.835796][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  721.841291][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  721.847202][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  721.853652][   T31]  ? kobject_uevent_env+0x36b/0x8c0
[  721.858867][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  721.864960][   T31]  nfc_rfkill_set_block+0x50/0x2e0
[  721.870099][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  721.876296][   T31]  rfkill_set_block+0x1d2/0x440
[  721.901243][   T31]  rfkill_epo+0x7e/0x180
[  721.906523][   T31]  rfkill_op_handler+0x84/0x240
[  721.911406][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  721.918796][   T31]  process_scheduled_works+0xae1/0x17b0
[  721.924418][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  721.932282][   T31]  worker_thread+0x8a0/0xda0
[  721.937251][   T31]  kthread+0x711/0x8a0
[  721.941356][   T31]  ? __pfx_worker_thread+0x10/0x10
[  721.946484][   T31]  ? __pfx_kthread+0x10/0x10
[  721.951657][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  721.956887][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  721.962638][   T31]  ? __pfx_kthread+0x10/0x10
[  721.967262][   T31]  ret_from_fork+0x4bc/0x870
[  721.971947][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  721.977123][   T31]  ? __switch_to_asm+0x39/0x70
[  721.982195][   T31]  ? __switch_to_asm+0x33/0x70
[  721.986977][   T31]  ? __pfx_kthread+0x10/0x10
[  721.991708][   T31]  ret_from_fork_asm+0x1a/0x30
[  721.996484][   T31]  </TASK>
[  721.999602][   T31] INFO: task kworker/1:7:7212 blocked for more than 143 seconds.
[  722.007494][   T31]       Not tainted syzkaller #0
[  722.012507][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  722.021188][   T31] task:kworker/1:7     state:D stack:20408 pid:7212  tgid:7212  ppid:2      task_flags:0x4208060 flags:0x00080000
[  722.033280][   T31] Workqueue: events rfkill_global_led_trigger_worker
[  722.039975][   T31] Call Trace:
[  722.043249][   T31]  <TASK>
[  722.046560][   T31]  __schedule+0x1798/0x4cc0
[  722.051105][   T31]  ? __pfx___schedule+0x10/0x10
[  722.056028][   T31]  ? schedule+0x91/0x360
[  722.060279][   T31]  schedule+0x165/0x360
[  722.064439][   T31]  schedule_preempt_disabled+0x13/0x30
[  722.069924][   T31]  __mutex_lock+0x7e6/0x1350
[  722.074558][   T31]  ? __mutex_lock+0x5bb/0x1350
[  722.079385][   T31]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  722.085631][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  722.090917][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  722.096719][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  722.102873][   T31]  rfkill_global_led_trigger_worker+0x27/0xd0
[  722.109128][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  722.114866][   T31]  process_scheduled_works+0xae1/0x17b0
[  722.120520][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  722.126516][   T31]  worker_thread+0x8a0/0xda0
[  722.131314][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  722.137654][   T31]  ? __kthread_parkme+0x7b/0x200
[  722.142686][   T31]  kthread+0x711/0x8a0
[  722.146783][   T31]  ? __pfx_worker_thread+0x10/0x10
[  722.151974][   T31]  ? __pfx_kthread+0x10/0x10
[  722.156585][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  722.162137][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  722.167388][   T31]  ? __pfx_kthread+0x10/0x10
[  722.172187][   T31]  ret_from_fork+0x4bc/0x870
[  722.176971][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  722.182107][   T31]  ? __switch_to_asm+0x39/0x70
[  722.186949][   T31]  ? __switch_to_asm+0x33/0x70
[  722.191735][   T31]  ? __pfx_kthread+0x10/0x10
[  722.196598][   T31]  ret_from_fork_asm+0x1a/0x30
[  722.201398][   T31]  </TASK>
[  722.204525][   T31] INFO: task syz.6.2375:14134 blocked for more than 143 seconds.
[  722.212254][   T31]       Not tainted syzkaller #0
[  722.217433][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  722.226186][   T31] task:syz.6.2375      state:D stack:24840 pid:14134 tgid:14134 ppid:10413  task_flags:0x400040 flags:0x00080003
[  722.238162][   T31] Call Trace:
[  722.241442][   T31]  <TASK>
[  722.244368][   T31]  __schedule+0x1798/0x4cc0
[  722.248960][   T31]  ? __pfx___schedule+0x10/0x10
[  722.253828][   T31]  ? schedule+0x91/0x360
[  722.258224][   T31]  schedule+0x165/0x360
[  722.262411][   T31]  schedule_preempt_disabled+0x13/0x30
[  722.267879][   T31]  __mutex_lock+0x7e6/0x1350
[  722.272551][   T31]  ? __mutex_lock+0x5bb/0x1350
[  722.277327][   T31]  ? rfkill_unregister+0xc8/0x220
[  722.282715][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  722.287760][   T31]  ? __pfx_device_del+0x10/0x10
[  722.292700][   T31]  rfkill_unregister+0xc8/0x220
[  722.298038][   T31]  nfc_unregister_device+0x96/0x2a0
[  722.303388][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  722.309126][   T31]  virtual_ncidev_close+0x56/0x90
[  722.314240][   T31]  __fput+0x44c/0xa70
[  722.318319][   T31]  task_work_run+0x1d4/0x260
[  722.322991][   T31]  ? __pfx_task_work_run+0x10/0x10
[  722.328219][   T31]  ? exit_to_user_mode_loop+0x40/0x130
[  722.333764][   T31]  exit_to_user_mode_loop+0xe9/0x130
[  722.339091][   T31]  do_syscall_64+0x2bd/0xfa0
[  722.343805][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.349891][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  722.356154][   T31]  ? clear_bhb_loop+0x60/0xb0
[  722.360873][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.366804][   T31] RIP: 0033:0x7f2bba98eec9
[  722.371261][   T31] RSP: 002b:00007ffd6049a748 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  722.379746][   T31] RAX: 0000000000000000 RBX: 00007f2bbabe7da0 RCX: 00007f2bba98eec9
[  722.387857][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  722.395879][   T31] RBP: 00007f2bbabe7da0 R08: 000000000000021c R09: 0000001e6049aa3f
[  722.404264][   T31] R10: 00007f2bbabe7cb0 R11: 0000000000000246 R12: 00000000000837db
[  722.412282][   T31] R13: 00007f2bbabe6270 R14: ffffffffffffffff R15: 00007ffd6049a860
[  722.420382][   T31]  </TASK>
[  722.423447][   T31] INFO: task syz.8.2398:14213 blocked for more than 143 seconds.
[  722.436900][   T31]       Not tainted syzkaller #0
[  722.442034][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  722.450756][   T31] task:syz.8.2398      state:D stack:26504 pid:14213 tgid:14212 ppid:12692  task_flags:0x400140 flags:0x00080002
[  722.462806][   T31] Call Trace:
[  722.466091][   T31]  <TASK>
[  722.469043][   T31]  __schedule+0x1798/0x4cc0
[  722.473613][   T31]  ? __pfx___schedule+0x10/0x10
[  722.478484][   T31]  ? schedule+0x91/0x360
[  722.482794][   T31]  schedule+0x165/0x360
[  722.486976][   T31]  schedule_preempt_disabled+0x13/0x30
[  722.492456][   T31]  __mutex_lock+0x7e6/0x1350
[  722.497090][   T31]  ? __mutex_lock+0x5bb/0x1350
[  722.501854][   T31]  ? rfkill_register+0x37/0x8e0
[  722.506762][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  722.511801][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  722.517564][   T31]  ? device_initialize+0x24b/0x440
[  722.522694][   T31]  rfkill_register+0x37/0x8e0
[  722.527595][   T31]  nfc_register_device+0x14a/0x320
[  722.532724][   T31]  nci_register_device+0x87f/0x9d0
[  722.538168][   T31]  ? __pfx_nci_register_device+0x10/0x10
[  722.543826][   T31]  ? __raw_spin_lock_init+0x45/0x100
[  722.549231][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  722.554617][   T31]  virtual_ncidev_open+0x129/0x1a0
[  722.559799][   T31]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  722.565536][   T31]  misc_open+0x2d5/0x350
[  722.569884][   T31]  chrdev_open+0x4cc/0x5e0
[  722.574491][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  722.579485][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  722.585812][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  722.590805][   T31]  do_dentry_open+0x953/0x13f0
[  722.595596][   T31]  vfs_open+0x3b/0x340
[  722.599766][   T31]  ? path_openat+0x2ecd/0x3830
[  722.604541][   T31]  path_openat+0x2ee5/0x3830
[  722.609143][   T31]  ? __pfx_path_openat+0x10/0x10
[  722.614182][   T31]  do_filp_open+0x1fa/0x410
[  722.618687][   T31]  ? __lock_acquire+0xab9/0xd20
[  722.623597][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  722.628638][   T31]  ? _raw_spin_unlock+0x28/0x50
[  722.633781][   T31]  ? alloc_fd+0x64c/0x6c0
[  722.638124][   T31]  do_sys_openat2+0x121/0x1c0
[  722.642934][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  722.648155][   T31]  ? rcu_is_watching+0x15/0xb0
[  722.652911][   T31]  __x64_sys_openat+0x138/0x170
[  722.657826][   T31]  do_syscall_64+0xfa/0xfa0
[  722.662335][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  722.667588][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.673663][   T31]  ? clear_bhb_loop+0x60/0xb0
[  722.678422][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.684341][   T31] RIP: 0033:0x7ff84698eec9
[  722.689223][   T31] RSP: 002b:00007ff847881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  722.697741][   T31] RAX: ffffffffffffffda RBX: 00007ff846be5fa0 RCX: 00007ff84698eec9
[  722.705742][   T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  722.713820][   T31] RBP: 00007ff846a11f91 R08: 0000000000000000 R09: 0000000000000000
[  722.721864][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  722.729904][   T31] R13: 00007ff846be6038 R14: 00007ff846be5fa0 R15: 00007ffff4bae168
[  722.737900][   T31]  </TASK>
[  722.741007][   T31] INFO: task syz.0.2399:14219 blocked for more than 144 seconds.
[  722.748727][   T31]       Not tainted syzkaller #0
[  722.753708][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  722.762625][   T31] task:syz.0.2399      state:D stack:28296 pid:14219 tgid:14218 ppid:12291  task_flags:0x400040 flags:0x00080002
[  722.774719][   T31] Call Trace:
[  722.778171][   T31]  <TASK>
[  722.781117][   T31]  __schedule+0x1798/0x4cc0
[  722.785810][   T31]  ? security_file_open+0xb1/0x270
[  722.791143][   T31]  ? __pfx___schedule+0x10/0x10
[  722.796103][   T31]  ? schedule+0x91/0x360
[  722.800369][   T31]  schedule+0x165/0x360
[  722.804607][   T31]  schedule_preempt_disabled+0x13/0x30
[  722.810167][   T31]  __mutex_lock+0x7e6/0x1350
[  722.814830][   T31]  ? __mutex_lock+0x5bb/0x1350
[  722.819605][   T31]  ? misc_open+0x51/0x350
[  722.823950][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  722.829099][   T31]  misc_open+0x51/0x350
[  722.833443][   T31]  chrdev_open+0x4cc/0x5e0
[  722.837923][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  722.842875][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  722.849315][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  722.854272][   T31]  do_dentry_open+0x953/0x13f0
[  722.859163][   T31]  vfs_open+0x3b/0x340
[  722.863235][   T31]  ? path_openat+0x2ecd/0x3830
[  722.868088][   T31]  path_openat+0x2ee5/0x3830
[  722.872711][   T31]  ? __pfx_path_openat+0x10/0x10
[  722.877663][   T31]  do_filp_open+0x1fa/0x410
[  722.882558][   T31]  ? __lock_acquire+0xab9/0xd20
[  722.887425][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  722.892563][   T31]  ? _raw_spin_unlock+0x28/0x50
[  722.897443][   T31]  ? alloc_fd+0x64c/0x6c0
[  722.901848][   T31]  do_sys_openat2+0x121/0x1c0
[  722.906544][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  722.911823][   T31]  ? exc_page_fault+0x82/0x100
[  722.916636][   T31]  ? do_user_addr_fault+0xc85/0x1380
[  722.921993][   T31]  __x64_sys_openat+0x138/0x170
[  722.926867][   T31]  do_syscall_64+0xfa/0xfa0
[  722.931454][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  722.936673][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.943234][   T31]  ? clear_bhb_loop+0x60/0xb0
[  722.947936][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.954275][   T31] RIP: 0033:0x7f282018d710
[  722.958709][   T31] RSP: 002b:00007f2820fe7ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  722.967193][   T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f282018d710
[  722.975262][   T31] RDX: 0000000000000002 RSI: 00007f2820211c6c RDI: 00000000ffffff9c
[  722.983250][   T31] RBP: 00007f2820211c6c R08: 0000000000000000 R09: 0000000000000000
[  722.991631][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  723.000370][   T31] R13: 0000000000000097 R14: 0000200000000040 R15: 00007ffe98651df8
[  723.008443][   T31]  </TASK>
[  723.011489][   T31] INFO: task syz.7.2400:14221 blocked for more than 144 seconds.
[  723.019300][   T31]       Not tainted syzkaller #0
[  723.024234][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  723.033043][   T31] task:syz.7.2400      state:D stack:28296 pid:14221 tgid:14220 ppid:10810  task_flags:0x400040 flags:0x00080002
[  723.045189][   T31] Call Trace:
[  723.048487][   T31]  <TASK>
[  723.051498][   T31]  __schedule+0x1798/0x4cc0
[  723.056021][   T31]  ? security_file_open+0xb1/0x270
[  723.061207][   T31]  ? __pfx___schedule+0x10/0x10
[  723.066097][   T31]  ? schedule+0x91/0x360
[  723.070385][   T31]  schedule+0x165/0x360
[  723.074586][   T31]  schedule_preempt_disabled+0x13/0x30
[  723.080038][   T31]  __mutex_lock+0x7e6/0x1350
[  723.084708][   T31]  ? __mutex_lock+0x5bb/0x1350
[  723.089472][   T31]  ? misc_open+0x51/0x350
[  723.093870][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  723.098912][   T31]  misc_open+0x51/0x350
[  723.103156][   T31]  chrdev_open+0x4cc/0x5e0
[  723.107684][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  723.112623][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  723.119468][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  723.124862][   T31]  do_dentry_open+0x953/0x13f0
[  723.129761][   T31]  vfs_open+0x3b/0x340
[  723.133850][   T31]  ? path_openat+0x2ecd/0x3830
[  723.138785][   T31]  path_openat+0x2ee5/0x3830
[  723.143414][   T31]  ? __pfx_path_openat+0x10/0x10
[  723.148452][   T31]  do_filp_open+0x1fa/0x410
[  723.152973][   T31]  ? __lock_acquire+0xab9/0xd20
[  723.157959][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  723.163060][   T31]  ? _raw_spin_unlock+0x28/0x50
[  723.168099][   T31]  ? alloc_fd+0x64c/0x6c0
[  723.172536][   T31]  do_sys_openat2+0x121/0x1c0
[  723.177261][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  723.182504][   T31]  ? exc_page_fault+0x82/0x100
[  723.187276][   T31]  ? do_user_addr_fault+0xc85/0x1380
[  723.192748][   T31]  __x64_sys_openat+0x138/0x170
[  723.197790][   T31]  do_syscall_64+0xfa/0xfa0
[  723.202978][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  723.208214][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  723.214430][   T31]  ? clear_bhb_loop+0x60/0xb0
[  723.219133][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  723.225207][   T31] RIP: 0033:0x7f5fa2d8d710
[  723.229643][   T31] RSP: 002b:00007f5fa3cd1ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  723.238187][   T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5fa2d8d710
[  723.246265][   T31] RDX: 0000000000000002 RSI: 00007f5fa2e11c6c RDI: 00000000ffffff9c
[  723.254367][   T31] RBP: 00007f5fa2e11c6c R08: 0000000000000000 R09: 0000000000000000
[  723.262362][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  723.270426][   T31] R13: 0000000000000097 R14: 0000200000000040 R15: 00007ffd74c50db8
[  723.278626][   T31]  </TASK>
[  723.281714][   T31] 
[  723.281714][   T31] Showing all locks held in the system:
[  723.290310][   T31] 1 lock held by khungtaskd/31:
[  723.295219][   T31]  #0: ffffffff8e53d260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  723.305082][   T31] 4 locks held by kworker/1:2/116:
[  723.310281][   T31]  #0: ffff88813fe41548 ((wq_completion)events#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  723.321667][   T31]  #1: ffffc90002757ba0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  723.332730][   T31]  #2: ffffffff8fc27e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180
[  723.342284][   T31]  #3: ffff888025102100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  723.352011][   T31] 2 locks held by getty/5619:
[  723.356687][   T31]  #0: ffff888030d490a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  723.366480][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  723.376704][   T31] 3 locks held by kworker/1:7/7212:
[  723.381966][   T31]  #0: ffff88813fe41948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  723.393142][   T31]  #1: ffffc90003b7fba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  723.406743][   T31]  #2: ffffffff8fc27e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  723.418218][   T31] 2 locks held by syz.6.2375/14134:
[  723.423685][   T31]  #0: ffff888025102100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  723.433479][   T31]  #1: ffffffff8fc27e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  723.443829][   T31] 3 locks held by syz.8.2398/14213:
[  723.449281][   T31]  #0: ffffffff8eddcea8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  723.457777][   T31]  #1: ffff8880279a7100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320
[  723.467410][   T31]  #2: ffffffff8fc27e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  723.477466][   T31] 1 lock held by syz.0.2399/14219:
[  723.482573][   T31]  #0: ffffffff8eddcea8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  723.491085][   T31] 1 lock held by syz.7.2400/14221:
[  723.496202][   T31]  #0: ffffffff8eddcea8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  723.504718][   T31] 1 lock held by syz-executor/14223:
[  723.510092][   T31]  #0: ffffffff8eddcea8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  723.518538][   T31] 1 lock held by syz-executor/14227:
[  723.523935][   T31]  #0: ffffffff8eddcea8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  723.532452][   T31] 1 lock held by syz-executor/14228:
[  723.537737][   T31]  #0: ffffffff8eddcea8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  723.546274][   T31] 1 lock held by syz-executor/14229:
[  723.551694][   T31]  #0: ffffffff8eddcea8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  723.560177][   T31] 1 lock held by syz-executor/14235:
[  723.565548][   T31]  #0: ffffffff8eddcea8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  723.574045][   T31] 1 lock held by syz-executor/14239:
[  723.579312][   T31]  #0: ffffffff8eddcea8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  723.587793][   T31] 1 lock held by syz-executor/14240:
[  723.593072][   T31]  #0: ffffffff8eddcea8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  723.601596][   T31] 1 lock held by syz-executor/14241:
[  723.606950][   T31]  #0: ffffffff8eddcea8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  723.615612][   T31] 1 lock held by syz-executor/14247:
[  723.621071][   T31]  #0: ffffffff8eddcea8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  723.629583][   T31] 1 lock held by syz-executor/14251:
[  723.634874][   T31]  #0: ffffffff8eddcea8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  723.643350][   T31] 1 lock held by syz-executor/14252:
[  723.648668][   T31]  #0: ffffffff8eddcea8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  723.657098][   T31] 1 lock held by syz-executor/14253:
[  723.662421][   T31]  #0: ffffffff8eddcea8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  723.671006][   T31] 
[  723.673335][   T31] =============================================
[  723.673335][   T31] 
[  723.681985][   T31] NMI backtrace for cpu 0
[  723.682000][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  723.682019][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  723.682029][   T31] Call Trace:
[  723.682037][   T31]  <TASK>
[  723.682043][   T31]  dump_stack_lvl+0x189/0x250
[  723.682067][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  723.682083][   T31]  ? __pfx__printk+0x10/0x10
[  723.682110][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  723.682130][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  723.682148][   T31]  ? __pfx__printk+0x10/0x10
[  723.682168][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  723.682185][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  723.682204][   T31]  watchdog+0xf60/0xfa0
[  723.682222][   T31]  ? watchdog+0x1e2/0xfa0
[  723.682240][   T31]  kthread+0x711/0x8a0
[  723.682261][   T31]  ? __pfx_watchdog+0x10/0x10
[  723.682274][   T31]  ? __pfx_kthread+0x10/0x10
[  723.682293][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  723.682310][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  723.682327][   T31]  ? __pfx_kthread+0x10/0x10
[  723.682345][   T31]  ret_from_fork+0x4bc/0x870
[  723.682363][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  723.682384][   T31]  ? __switch_to_asm+0x39/0x70
[  723.682396][   T31]  ? __switch_to_asm+0x33/0x70
[  723.682409][   T31]  ? __pfx_kthread+0x10/0x10
[  723.682427][   T31]  ret_from_fork_asm+0x1a/0x30
[  723.682453][   T31]  </TASK>
[  723.682462][   T31] Sending NMI from CPU 0 to CPUs 1:
[  723.828286][    C1] NMI backtrace for cpu 1
[  723.828314][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  723.828333][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  723.828344][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  723.828372][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 8a 1a 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  723.828387][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
[  723.828402][    C1] RAX: 6e557a2273c83a00 RBX: ffffffff8196e2b7 RCX: 6e557a2273c83a00
[  723.828415][    C1] RDX: 0000000000000001 RSI: ffffffff8dc89575 RDI: ffffffff8c053d60
[  723.828427][    C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb
[  723.828440][    C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8fe4db70
[  723.828453][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003adcb58
[  723.828464][    C1] FS:  0000000000000000(0000) GS:ffff8881258a2000(0000) knlGS:0000000000000000
[  723.828478][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  723.828490][    C1] CR2: 000055fd7a89b000 CR3: 000000000e338000 CR4: 00000000003526f0
[  723.828505][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144
[  723.828515][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  723.828526][    C1] Call Trace:
[  723.828535][    C1]  <TASK>
[  723.828542][    C1]  default_idle+0x13/0x20
[  723.828560][    C1]  default_idle_call+0x73/0xb0
[  723.828578][    C1]  do_idle+0x1e7/0x510
[  723.828601][    C1]  ? __pfx_do_idle+0x10/0x10
[  723.828626][    C1]  cpu_startup_entry+0x44/0x60
[  723.828645][    C1]  start_secondary+0x101/0x110
[  723.828661][    C1]  common_startup_64+0x13e/0x147
[  723.828692][    C1]  </TASK>
[  724.007869][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  724.014740][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  724.023880][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  724.034015][   T31] Call Trace:
[  724.037287][   T31]  <TASK>
[  724.040215][   T31]  dump_stack_lvl+0x99/0x250
[  724.044856][   T31]  ? __asan_memcpy+0x40/0x70
[  724.049441][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  724.054628][   T31]  ? __pfx__printk+0x10/0x10
[  724.059224][   T31]  vpanic+0x237/0x6d0
[  724.063210][   T31]  ? __pfx_vpanic+0x10/0x10
[  724.067706][   T31]  ? preempt_schedule_common+0x83/0xd0
[  724.073169][   T31]  panic+0xb9/0xc0
[  724.076887][   T31]  ? __pfx_panic+0x10/0x10
[  724.081295][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  724.086662][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  724.092808][   T31]  watchdog+0xf9f/0xfa0
[  724.096956][   T31]  ? watchdog+0x1e2/0xfa0
[  724.101284][   T31]  kthread+0x711/0x8a0
[  724.105361][   T31]  ? __pfx_watchdog+0x10/0x10
[  724.110028][   T31]  ? __pfx_kthread+0x10/0x10
[  724.114609][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  724.119811][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  724.125003][   T31]  ? __pfx_kthread+0x10/0x10
[  724.129595][   T31]  ret_from_fork+0x4bc/0x870
[  724.134183][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  724.139291][   T31]  ? __switch_to_asm+0x39/0x70
[  724.144042][   T31]  ? __switch_to_asm+0x33/0x70
[  724.148790][   T31]  ? __pfx_kthread+0x10/0x10
[  724.153371][   T31]  ret_from_fork_asm+0x1a/0x30
[  724.158138][   T31]  </TASK>
[  724.161927][   T31] Kernel Offset: disabled
[  724.166237][   T31] Rebooting in 86400 seconds..